feat: Refactor services: add Companion, disable personal watchtower

instance

```
- Add new track "5 Seconds of Summer - Social Casualty" to Daily playlist.
- Disable personal watchtower service by commenting out its configuration in `watchtower/compose.yml`.
- Replace `inv_sig_helper` service with `companion` service in `invidious/compose.yml`, introducing new configurations, networks, and volumes to support the change.
- Update `invidious` service configuration for integration with the `companion` service, including adding new environment variables and modifying network and volume references.
- Enhance security settings in `invidious/compose.yml` by updating `security_opt`, `cap_drop`, and maintaining `read_only` configuration for the `companion` service.
```
This commit is contained in:
MSWS
2025-10-02 22:05:38 -07:00
parent a358d3aafa
commit cfa3460605
3 changed files with 34 additions and 21 deletions

View File

@@ -18,12 +18,11 @@ services:
external_port: 443 external_port: 443
domain: yt.msws.xyz domain: yt.msws.xyz
https_only: true https_only: true
# statistics_enabled: true
signature_server: inv_sig_helper:12999
visitor_data: ${VISITOR_DATA}
po_token: ${PO_TOKEN} po_token: ${PO_TOKEN}
# external_port:
hmac_key: ${HMAC_KEY} hmac_key: ${HMAC_KEY}
invidious_companion:
- private_url: "http://invidious-companion-1:8282/companion"
invidious_companion_key: ${COMPANION_KEY}
healthcheck: healthcheck:
test: wget -nv --tries=1 --spider http://invidious:3000/api/v1/trending || exit 1 test: wget -nv --tries=1 --spider http://invidious:3000/api/v1/trending || exit 1
interval: 30s interval: 30s
@@ -36,24 +35,35 @@ services:
depends_on: depends_on:
- invidious-db - invidious-db
networks: networks:
- sig-helper - companion
- invidious-db - invidious-db
- cloudflared - cloudflared
inv_sig_helper: companion:
# image: quay.io/invidious/inv-sig-helper:latest image: quay.io/invidious/invidious-companion:latest
image: inv_sig_helper:local
command: ["--tcp", "0.0.0.0:12999"]
environment: environment:
- RUST_LOG=info # Use the key generated in the 2nd step
- SERVER_SECRET_KEY=${COMPANION_KEY}
restart: unless-stopped restart: unless-stopped
# Uncomment only if you have configured "public_url" for Invidious companion
# Or if you want to use Invidious companion as an API in your program.
# Remove "127.0.0.1:" if used from an external IP
#ports:
# - "127.0.0.1:8282:8282"
logging:
options:
max-size: "1G"
max-file: "4"
cap_drop: cap_drop:
- ALL - ALL
read_only: true read_only: true
# cache for youtube library
volumes:
- companioncache:/var/tmp/youtubei.js:rw
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
networks: networks:
- sig-helper - companion
invidious-db: invidious-db:
image: docker.io/library/postgres:14 image: docker.io/library/postgres:14
@@ -74,9 +84,10 @@ services:
volumes: volumes:
postgresdata: postgresdata:
companioncache:
networks: networks:
invidious-db: invidious-db:
sig-helper: companion:
cloudflared: cloudflared:
external: true external: true

View File

@@ -1,5 +1,7 @@
#EXTM3U #EXTM3U
#PLAYLIST:Daily Music #PLAYLIST:Daily Music
#EXTINF:181,5 Seconds of Summer - Social Casualty
/music/5 Seconds of Summer/13 - Social Casualty.mp3
#EXTINF:190,Maroon 5 - Memories #EXTINF:190,Maroon 5 - Memories
/music/Maroon 5/11 - Memories .mp3 /music/Maroon 5/11 - Memories .mp3
#EXTINF:196,Tom Walker - Head Underwater #EXTINF:196,Tom Walker - Head Underwater

View File

@@ -7,12 +7,12 @@ services:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
environment: environment:
WATCHTOWER_SCHEDULE: "0 0 18 * * *" WATCHTOWER_SCHEDULE: "0 0 18 * * *"
watchtower-kboaz: # watchtower-kboaz:
image: containrrr/watchtower # image: containrrr/watchtower
restart: always # restart: always
container_name: watchtower-kboaz # container_name: watchtower-kboaz
volumes: # volumes:
- /var/run/docker.sock:/var/run/docker.sock # - /var/run/docker.sock:/var/run/docker.sock
environment: # environment:
WATCHTOWER_SCHEDULE: "0 * * * * *" # WATCHTOWER_SCHEDULE: "0 * * * * *"
command: "kboaz-site-1" # command: "kboaz-site-1"