feat: replace fresh rss for miniflux

files/docker/rss/docker-stack.yaml

@@ -1,39 +1,34 @@
 networks:
   reverse-proxy:
     external: true
+  miniflux:
 
 volumes:
-  fresh_rss_data:
-  fresh_rss_extensions:
   linkding_data:
+  miniflux_db:
 
 services:
-  freshrss:
-    image: freshrss/freshrss:latest
-    container_name: freshrss
-    hostname: freshrss
+  miniflux:
+    image: miniflux/miniflux:latest
     restart: unless-stopped
+    depends_on:
+      - miniflux_db
     networks:
-        - reverse-proxy
-    logging:
-      options:
-        max-size: 10m
-    volumes:
-      - fresh_rss_data:/var/www/FreshRSS/data
-      - fresh_rss_extensions:/var/www/FreshRSS/extensions
+      - miniflux
+      - reverse-proxy
     environment:
-      TZ: America/Santiago
-      CRON_MIN: '3,33'
-      TRUSTED_PROXY: 10.0.10.0/24
+      DATABASE_URL: postgres://${MF_DB_USER}:${MF_DB_PASS}@miniflux_db/miniflux?sslmode=disable
+      RUN_MIGRATIONS: 1
+      BASE_URL: https://rss.alecodes.page
 
       OIDC_ENABLED: 1
-      OIDC_PROVIDER_METADATA_URL: https://auth.alecodes.page/.well-known/openid-configuration
-      OIDC_CLIENT_ID: ${FR_OIDC_CLIENT_ID}
-      OIDC_CLIENT_SECRET: ${FR_OIDC_CLIENT_SECRET}
-      OIDC_CLIENT_CRYPTO_KEY: ${FR_OIDC_CLIENT_CRYPTO_KEY}
-      OIDC_REMOTE_USER_CLAIM: preferred_username
-      OIDC_SCOPES: openid groups email profile
-      OIDC_X_FORWARDED_HEADERS: X-Forwarded-Host X-Forwarded-Port X-Forwarded-Proto
+      DISABLE_LOCAL_AUTH: 1
+      OAUTH2_USER_CREATION: 1
+      OAUTH2_PROVIDER: oidc
+      OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://auth.alecodes.page
+      OAUTH2_REDIRECT_URL: https://rss.alecodes.page/oauth2/oidc/callback
+      OAUTH2_CLIENT_ID: ${MF_OIDC_CLIENT_ID}
+      OAUTH2_CLIENT_SECRET: ${MF_OIDC_CLIENT_SECRET}
 
     deploy:
       rollback_config:
@@ -48,7 +43,33 @@ services:
       labels:
         - traefik.enable=true
         - traefik.http.routers.freshrss.rule=Host(`rss.alecodes.page`)
-        - traefik.http.services.freshrss.loadbalancer.server.port=80
+        - traefik.http.services.freshrss.loadbalancer.server.port=8080
+
+  miniflux_db:
+    image: postgres:15
+    networks:
+      - miniflux
+    environment:
+      - POSTGRES_USER=${MF_DB_USER}
+      - POSTGRES_PASSWORD=${MF_DB_PASS}
+      - POSTGRES_DB=miniflux
+    volumes:
+      - miniflux_db:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD", "pg_isready", "-U", "miniflux"]
+      interval: 10s
+      start_period: 30s
+    deploy:
+      rollback_config:
+        failure_action: continue
+      update_config:
+        delay: 2s
+        failure_action: rollback
+        order: start-first
+      placement:
+        constraints:
+          - node.labels.services_kind==${SERVICE_KIND:-common}
+
   linkding:
     image: sissbruecker/linkding:latest
     restart: unless-stopped