add breezewiki

.github/workflows/breezewiki.yml

@@ -0,0 +1,38 @@
+name: deploy-breezewiki
+
+on:
+  push:
+    paths:
+      - '.github/workflows/breezewiki.yml'
+      - 'breezewiki/**'
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment:
+      name: breezewiki
+      url: https://breezewiki.aosus.link
+    steps:
+      - name: checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Tailscale
+        uses: tailscale/github-action@ce41a99162202a647a4b24c30c558a567b926709
+        with:
+          authkey: ${{ secrets.TAILSCALE_AUTHKEY }}
+          hostname: Github-actions
+          version: ${{ vars.TAILSCALE_VERSION }}
+
+      - name: Start Deployment
+        uses: FarisZR/docker-compose-gitops-action@v1
+        env:
+          SECRET_KEY_BASE: ${{ secrets.breezewiki_secret_key_base }}
+        with:
+          remote_docker_host: ${{ secrets.server_address }}
+          tailscale_ssh: true # no need for manual private and public keys
+          compose_file_path: breezewiki/docker-compose.yml
+          args: -p breezewiki up -d --remove-orphans

README.md

@@ -6,4 +6,5 @@ Server used for monitoring Aosus infrastructure
 ## Services
 - Uptime-kuma
 - Caddy
+- breezewiki
 - scribe

breezewiki/docker-compose.yml

@@ -0,0 +1,15 @@
+networks:
+  web:
+    external: true
+
+services:
+  breezewiki:
+    container_name: breezewiki
+    image: oci.fariszr.com/fariszr/breezewiki:latest@sha256:c364dea59ad54eeb84bd6257f52125e8d280be1f179fa789f9aedb679d00a463
+    restart: always
+    environment:
+      - bw_canonical_origin=breezewiki.aosus.link
+      - bw_feature_search_suggestions=true
+      - bw_port=8000
+    networks:
+      web:

caddy/Caddyfile

@@ -17,3 +17,16 @@ Disallow: /"
 	}
 	encode zstd gzip
 }
+
+breezewiki.aosus.link {
+	reverse_proxy breezewiki:8000
+	respond /robots.txt 200 {
+		body "User-agent: *
+Disallow: /"
+	}
+	header {
+		X-Robots-Tag "noindex, noarchive, nofollow, nosnippet"
+		X-XSS-Protection "1; mode=block"
+	}
+	encode zstd gzip
+}