OVHserver/opt/postiz-config/docker-compose.yml
SamoilenkoVadym a90ccb8c51 fix: exclude Postiz API from SSO protection
API endpoints at /api/* on social.ai-impress.com no longer require Authentik authentication. Frontend routes remain protected. This allows external integrations and webhooks to function properly without SSO.

- Added postiz-api router in dynamic.yml for /api path without Authentik
- Updated postiz frontend router to exclude /api routes
- Simplified docker-compose.yml labels to avoid routing conflicts

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-02 11:28:08 +00:00

77 lines
1.8 KiB
YAML

version: '3.8'
services:
postiz:
image: ghcr.io/gitroomhq/postiz-app:latest
container_name: postiz
restart: unless-stopped
env_file: .env
depends_on:
postiz-postgres:
condition: service_healthy
postiz-redis:
condition: service_healthy
networks:
- traefik-public
- postiz-internal
volumes:
- postiz-uploads:/uploads
labels:
- "traefik.enable=true"
- "traefik.docker.network=traefik-public"
# Service port
- "traefik.http.services.postiz.loadbalancer.server.port=5000"
# Routing configured in /opt/00-infrastructure/traefik/config/dynamic.yml
# - postiz-api: /api routes (no SSO)
# - postiz: frontend routes (with Authentik)
postiz-postgres:
image: postgres:16-alpine
container_name: postiz-postgres
restart: unless-stopped
environment:
POSTGRES_DB: postiz
POSTGRES_USER: postiz
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
networks:
- postiz-internal
volumes:
- postiz-postgres-data:/var/lib/postgresql/data
healthcheck:
test: ["CMD-SHELL", "pg_isready -U postiz -d postiz"]
interval: 10s
timeout: 5s
retries: 5
postiz-redis:
image: redis:7-alpine
container_name: postiz-redis
restart: unless-stopped
networks:
- postiz-internal
volumes:
- postiz-redis-data:/data
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 10s
timeout: 5s
retries: 5
volumes:
postiz-uploads:
external: true
name: postiz_postiz-uploads
postiz-postgres-data:
external: true
name: postiz_postiz-postgres-data
postiz-redis-data:
external: true
name: postiz_postiz-redis-data
networks:
traefik-public:
external: true
postiz-internal:
driver: bridge