[peertube] add secrets example ; updates

pica-peertube/README.md

+## Peertube
+
+This is a WIP Peertube at picasoft.
+For now, it is based on the upstream docker image.
+Problem is, there are no recent version tags. The only up-to-date tag is a rolling tag.
+

pica-peertube/docker-compose.yml

 version: "3.3"
 
+volumes:
+  peertube_psql:
+  peertube_data:
+  peertube_config:
+  peertube_postfix_keys:
+  peertube_redis_data:
+
 networks:
   peertube:
     ipam:
@@ -16,9 +23,9 @@ services:
     #   context: .
     #   dockerfile: ./support/docker/production/Dockerfile.buster
     image: chocobozzz/peertube:production-buster
+    container_name: peertube
     env_file:
-      - .env.secrets
-      - .env
+      - ./secrets/peertube.secrets
     # Traefik labels are suggested as an example for people using Traefik,
     # remove them if you are using another reverse proxy.
     labels:
@@ -33,8 +40,8 @@ services:
     # ports:
       # - "80:9000"
     volumes:
-      - ./docker-volume/data:/data
-      - ./docker-volume/config:/config
+      - peertube_data:/data
+      - peertube_config:/config
     networks:
       - peertube
       - proxy
@@ -46,10 +53,11 @@ services:
 
   postgres:
     image: postgres:10-alpine
+    container_name: peertube
     env_file:
-      - .env
+      - ./secrets/peertube.secrets
     volumes:
-      - ./docker-volume/db:/var/lib/postgresql/data
+      - peertube_psql:/var/lib/postgresql/data
     networks:
       - peertube
     restart: "always"
@@ -59,7 +67,7 @@ services:
   redis:
     image: redis:4-alpine
     volumes:
-      - ./docker-volume/redis:/data
+      - peertube_redis_data:/data
     networks:
       - peertube
     restart: "always"
@@ -69,9 +77,9 @@ services:
   postfix:
     image: mwader/postfix-relay
     env_file:
-      - .env
+      - ./secrets/peertube.secrets
     volumes:
-      - ./docker-volume/opendkim/keys:/etc/opendkim/keys
+      - peertube_postfix_keys:/etc/opendkim/keys
     networks:
       - peertube
     labels:

pica-peertube/secrets/peertube.secrets.example

+# Database / Postgres service configuration
+POSTGRES_USER=peertube
+POSTGRES_PASSWORD=peertube
+# Postgres database name "peertube"
+POSTGRES_DB=peertube
+# Editable only with a suffix :
+#POSTGRES_DB=peertube_prod
+#PEERTUBE_DB_SUFFIX=_prod
+PEERTUBE_DB_USERNAME=peertube
+PEERTUBE_DB_PASSWORD=peertube
+# Default to Postgres service name "postgres" in docker-compose.yml
+PEERTUBE_DB_HOSTNAME=postgres
+
+# Server configuration
+PEERTUBE_WEBSERVER_HOSTNAME=peertube.test.picasoft.net
+# If you do not use https and a reverse-proxy in docker-compose.yml
+#PEERTUBE_WEBSERVER_PORT=80
+#PEERTUBE_WEBSERVER_HTTPS=false
+# If you need more than one IP as trust_proxy
+# pass them as a comma separated array:
+PEERTUBE_TRUST_PROXY=["127.0.0.1", "loopback", "172.18.0.0/16"]
+
+# E-mail configuration
+# If you use a Custom SMTP server
+#PEERTUBE_SMTP_USERNAME=
+#PEERTUBE_SMTP_PASSWORD=
+# Default to Postfix service name "postfix" in docker-compose.yml
+# May be the hostname of your Custom SMTP server
+PEERTUBE_SMTP_HOSTNAME=postfix
+PEERTUBE_SMTP_PORT=25
+PEERTUBE_SMTP_FROM=noreply@peertube.test.picasoft.net
+PEERTUBE_SMTP_TLS=false
+PEERTUBE_SMTP_DISABLE_STARTTLS=false
+PEERTUBE_ADMIN_EMAIL=peertube@picasoft.net
+
+# Postfix service configuration
+POSTFIX_myhostname=picasoft.net
+# If you need to generate a list of sub/DOMAIN keys
+# pass them as a whitespace separated string <DOMAIN>=<selector>
+OPENDKIM_DOMAINS=<MY DOMAIN>=peertube
+# see https://github.com/wader/postfix-relay/pull/18
+OPENDKIM_RequireSafeKeys=no
+
+# /!\ Prefer to use the PeerTube admin interface to set the following configurations /!\
+#PEERTUBE_SIGNUP_ENABLED=true
+#PEERTUBE_TRANSCODING_ENABLED=true
+#PEERTUBE_CONTACT_FORM_ENABLED=true