feat: ajout du service olhar-api

Docker Compose calqué sur bonsai-api : PostgreSQL 16 + Spring Boot exposé
sur olhar.goutailler-olivier.com/api via Traefik, avec Watchtower activé.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitignore

@@ -0,0 +1,2 @@
+traefik-letsencrypt/
+.env

gitea/README.md

@@ -7,7 +7,13 @@ docker compose -f gitea-compose.yml pull gitea
 docker compose -f gitea-compose.yml up -d
 docker exec gitea gitea --version
 ```
+
+Build le runner
+```bash
+docker compose up -d --build act_runner
+```
+
 Relancer le runner
 ```bash
-docker compose -f gitea-compose.yml restart act_runner
+docker compose restart act_runner
 ```

gitea/docker-compose.yml

@@ -88,7 +88,7 @@ services:
       - gitea
     environment:
       GITEA_INSTANCE_URL: http://gitea:3000
-      GITEA_RUNNER_REGISTRATION_TOKEN: Rvi31evVGlyH8o1h2lw200uMjOJyCrBQJXLKQqJk
+      GITEA_RUNNER_REGISTRATION_TOKEN: VBV30irSexdiyvHyzlX0HAmb1iV3XGiDm37raumU
       GITEA_RUNNER_NAME: docker-runner
       GITEA_RUNNER_LABELS: ubuntu-latest:host
       CONFIG_FILE: /config.yaml
@@ -96,7 +96,7 @@ services:
       GITEA__actions__DEFAULT_ACTIONS_URL: http://gitea:3000
     volumes:
       - ~/Applications/data/gitea/runner_data:/data
-      - ~/Applications/data/gitea/runner_data/config.yaml:/config.yaml
+      - ./runner-config.yaml:/config.yaml:ro
       - /var/run/docker.sock:/var/run/docker.sock
     networks:
       - gitea-net

gitea/runner-config.yaml

@@ -0,0 +1,16 @@
+log:
+  level: info
+
+runner:
+  file: .runner
+  capacity: 2
+  timeout: 3h
+  insecure: false
+  fetch_timeout: 5s
+  fetch_interval: 2s
+
+cache:
+  enabled: false
+
+host:
+  workdir_parent:

olhar-api/docker-compose.yml

@@ -0,0 +1,54 @@
+name: olhar-api-stack
+
+services:
+  db:
+    image: postgres:16-alpine
+    container_name: olhar-api-db
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: olhar
+      POSTGRES_USER: olhar
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      TZ: Europe/Paris
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U olhar -d olhar"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    volumes:
+      - ~/Applications/data/olhar-api/db_data:/var/lib/postgresql/data
+    networks:
+      - olhar-api-net
+
+  api:
+    image: git.goutailler-olivier.com/gato/olhar-api:latest
+    container_name: olhar-api
+    restart: unless-stopped
+    depends_on:
+      db:
+        condition: service_healthy
+    environment:
+      DATASOURCE_URL: jdbc:postgresql://db:5432/olhar
+      DATASOURCE_USERNAME: olhar
+      DATASOURCE_PASSWORD: ${POSTGRES_PASSWORD}
+      KEYCLOAK_JWKS_URI: https://auth.goutailler-olivier.com/realms/olhar/protocol/openid-connect/certs
+      CORS_ALLOWED_ORIGIN_PROD: https://olhar.goutailler-olivier.com
+      TZ: Europe/Paris
+    networks:
+      - olhar-api-net
+      - proxy
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.olhar-api.rule=Host(`olhar.goutailler-olivier.com`) && PathPrefix(`/api`)
+      - traefik.http.routers.olhar-api.entrypoints=websecure
+      - traefik.http.routers.olhar-api.tls.certresolver=le
+      - traefik.http.services.olhar-api.loadbalancer.server.port=8080
+      - traefik.docker.network=proxy
+      - com.centurylinklabs.watchtower.enable=true
+
+networks:
+  olhar-api-net:
+    driver: bridge
+  proxy:
+    external: true
+    name: proxy

olhar/docker-compose.yml

@@ -0,0 +1,27 @@
+name: olhar
+
+services:
+  oalhar:
+    image: git.goutailler-olivier.com/gato/olhar-pwa:latest
+    container_name: olhar
+    restart: unless-stopped
+
+    environment:
+      TZ: Europe/Paris
+
+    networks:
+      - proxy
+
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.olhar.rule=Host(`olhar.goutailler-olivier.com`)
+      - traefik.http.routers.olhar.entrypoints=websecure
+      - traefik.http.routers.olhar.tls.certresolver=le
+      - traefik.http.services.olhar.loadbalancer.server.port=80
+      - traefik.docker.network=proxy
+      - com.centurylinklabs.watchtower.enable=true
+
+networks:
+  proxy:
+    external: true
+    name: proxy

trilium/docker-compose.yml

@@ -9,7 +9,7 @@ services:
       TZ: Europe/Paris
 
     volumes:
-      - /home/gato/Applications/Trilium/data:/home/node/trilium-data
+      - ~/Applications/data/trilium:/home/node/trilium-data
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro