Adds ubooquity

README.md

@@ -31,3 +31,6 @@ The following security headers are applied using traefik on all traefik frontend
 - X-Powered-By: Allomancy
 - X-Server: BlackBox
 - X-Clacks-Overhead "GNU Terry Pratchett"
+
+
+Currently waiting on traefik 1.5.0-rc2 to fix security specific headers issue.

docker/conf/ubooquity.json

@@ -0,0 +1,53 @@
+{
+  "filesPaths": [
+    {
+      "pathString": "/files",
+      "userName": []
+    }
+  ],
+  "comicsPaths": [
+    {
+      "pathString": "/comics",
+      "userName": []
+    }
+  ],
+  "booksPaths": [
+    {
+      "pathString": "/books",
+      "userName": []
+    }
+  ],
+  "users": [],
+  "isFilesProviderEnabled": true,
+  "isComicsProviderEnabled": true,
+  "isBooksProviderEnabled": true,
+  "isUserManagementEnabled": true,
+  "libraryPortNumber": 2202,
+  "adminPortNumber": 2203,
+  "comicWidth": 160,
+  "comicHeight": 230,
+  "comicsPaginationNumber": 30,
+  "bookWidth": 160,
+  "bookHeight": 230,
+  "booksPaginationNumber": 30,
+  "minimizeToTray": false,
+  "minimizeOnStartup": false,
+  "autoscanPeriod": 0,
+  "isRemoteAdminEnabled": true,
+  "theme": "default",
+  "isShrinkingCacheEnabled": false,
+  "shrunkPageWidth": 1536,
+  "shrunkPageHeight": 2500,
+  "shrinkingCachePath": "",
+  "autoScanAtLaunch": false,
+  "reverseProxyPrefix": "",
+  "keystorePath": "",
+  "keystorePassword": "",
+  "isOpdsProviderEnabled": true,
+  "folderExclusionPattern": "",
+  "bypassSingleRootFolder": false,
+  "enableFolderMetadataDisplay": false,
+  "bookmarkUsingCookies": false,
+  "displayTitleInsteadOfFileName": true,
+  "keepUnreachableSharedFolders": false
+}

docker/data.tf

@@ -56,3 +56,7 @@ data "docker_registry_image" "headphones" {
 data "docker_registry_image" "muximux" {
   name = "linuxserver/muximux:latest"
 }
+
+data "docker_registry_image" "ubooquity" {
+  name = "linuxserver/ubooquity:latest"
+}

docker/images.tf

@@ -61,4 +61,9 @@ resource "docker_image" "headphones" {
 resource "docker_image" "muximux" {
   name          = "${data.docker_registry_image.muximux.name}"
   pull_triggers = ["${data.docker_registry_image.muximux.sha256_digest}"]
-}
+}
+
+resource "docker_image" "ubooquity" {
+  name          = "${data.docker_registry_image.ubooquity.name}"
+  pull_triggers = ["${data.docker_registry_image.ubooquity.sha256_digest}"]
+}

docker/main.tf

@@ -460,6 +460,67 @@ resource "docker_container" "headphones" {
   ]
 }
 
+resource "docker_container" "ubooquity" {
+  name  = "ubooquity"
+  image = "${docker_image.ubooquity.latest}"
+
+  restart = "unless-stopped"
+  destroy_grace_seconds = 30
+  must_run = true
+  memory = 256
+
+  volumes {
+    host_path      = "/mnt/xwing/config/ubooquity"
+    container_path = "/config"
+  }
+
+  volumes {
+    host_path      = "/mnt/xwing/media/EBooks"
+    container_path = "/books"
+  }
+
+  volumes {
+    host_path      = "/mnt/xwing/media/EBooks"
+    container_path = "/files"
+  }
+
+  volumes {
+    host_path      = "/mnt/xwing/media/EBooks/Comics"
+    container_path = "/comics"
+  }
+
+  labels {
+    "traefik.enable" = "true"
+
+    "traefik.admin.port" =  2203
+    "traefik.admin.frontend.rule" = "Host:library.in.bb8.fun"
+    "traefik.admin.frontend.auth.basic" = "${var.basic_auth}"
+
+    "traefik.read.port" = 2202
+    "traefik.read.frontend.rule" = "Host:read.in.bb8.fun"
+
+    "traefik.read.frontend.headers.SSLTemporaryRedirect" = "true"
+    "traefik.read.frontend.headers.STSSeconds" = "2592000"
+    "traefik.read.frontend.headers.STSIncludeSubdomains" = "false"
+    "traefik.read.frontend.headers.contentTypeNosniff" = "true"
+    "traefik.read.frontend.headers.browserXSSFilter" = "true"
+    # "traefik.read.frontend.headers.referrerPolicy" = "no-referrer"
+    "traefik.read.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
+  }
+
+  upload {
+    content = "${file("${path.module}/conf/ubooquity.json")}"
+    file    = "/config/preferences.json"
+  }
+
+  # lounge:tatooine
+  env = [
+    "PUID=1004",
+    "PGID=1003",
+    "MAXMEM=512"
+  ]
+}
+
 resource "docker_container" "wiki" {
   name  = "wiki"
   image = "${docker_image.wikijs.latest}"