authorgravatar for git@paperclover.netclover caruso <git@paperclover.net> 2026-06-11 00:34:09-07:00
committergravatar for git@paperclover.netclover caruso <git@paperclover.net> 2026-06-11 01:38:21-07:00
log21c7642b347997f1c6d3400bdc766e16d190414f
tree9f0f69aef26cd7baba1d084bc9acf96e5d6d9a89
parentdb792ebc5ec23d7de27231d6584eeb01a89a5f78
signature Signed by SSH key SHA256:xbd+BjjhyBfwk7GVoURf9Yx0gzDerHbvYv7SddNWmAs

fix: revive dawarich, technitium, openspeedtest (broken since jan 16)

three services silently crash-looping for five months, all casualties of the jan 16 image/user changes: - dawarich: rails 8 requires SECRET_KEY_BASE; new DAWARICH_SECRET_KEY_BASE env var (added to generate-env.sh and the deployed .env) - technitium: new image writes blocklists to /etc/dns, which was root-owned in-container; mount a writable volume there - openspeedtest: the image entrypoint rewrites nginx config as root; drop the user override that broke it

2 files changed, 6 insertions(+), 1 deletions(-)

compose.yaml+3-1
......@@ -640,6 +640,7 @@ services:
640640 user: "$USER_ID:$GROUP_ID"
641641 environment:
642642 RAILS_ENV: production
643 SECRET_KEY_BASE: "${DAWARICH_SECRET_KEY_BASE:?}"
643644 REDIS_URL: "redis://redis:6379"
644645 DATABASE_HOST: postgres
645646 DATABASE_USERNAME: dawarich
......@@ -677,6 +678,7 @@ services:
677678 user: "$USER_ID:$GROUP_ID"
678679 environment:
679680 RAILS_ENV: production
681 SECRET_KEY_BASE: "${DAWARICH_SECRET_KEY_BASE:?}"
680682 REDIS_URL: "redis://redis:6379"
681683 DATABASE_HOST: postgres
682684 DATABASE_USERNAME: dawarich
......@@ -768,7 +770,6 @@ services:
768770 restart: unless-stopped
769771 container_name: openspeedtest
770772 image: openspeedtest/latest
771 user: "$USER_ID:$GROUP_ID"
772773 labels:
773774 net.paperclover.list.name: Open Speed Test
774775 net.paperclover.list.domain: speedtest
......@@ -785,6 +786,7 @@ services:
785786 - 8053:8053/tcp # dns over http
786787 volumes:
787788 - "${APP_ROOT}/technitium/config:/app/config"
789 - "${APP_ROOT}/technitium/dns:/etc/dns"
788790 - "${APP_ROOT}/technitium/ssl:/etc/ssl"
789791 - "${APP_ROOT}/technitium/logs:/app/config/logs"
790792 restart: unless-stopped
generate-env.sh+3
......@@ -39,6 +39,9 @@ template() {
3939 section "authentication"
4040 add "KEYCLOAK_ADMIN_PASSWORD" "$(secret 12)"
4141
42 section "dawarich"
43 add "DAWARICH_SECRET_KEY_BASE" "$(hex_secret 64)"
44
4245 section "postgres"
4346 add "POSTGRES_PASSWORD" "$(secret 32)"
4447 add "POSTGRES_PASSWORD_KEYCLOAK" "$(secret 32)"