Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?xml version="1.0"?>
- <Container version="2">
- <Name>swag</Name>
- <Repository>lscr.io/linuxserver/swag</Repository>
- <Registry>https://github.com/orgs/linuxserver/packages/container/package/swag</Registry>
- <Network>dockersocket</Network>
- <MyIP/>
- <Shell>bash</Shell>
- <Privileged>false</Privileged>
- <Support>https://github.com/linuxserver/docker-swag/issues/new/choose</Support>
- <Project>https://linuxserver.io</Project>
- <Overview>SWAG - Secure Web Application Gateway (formerly known as letsencrypt, no relation to Let's Encrypt™) sets up an Nginx webserver and reverse proxy with php support and a built-in certbot client that automates free SSL server certificate generation and renewal processes (Let's Encrypt and ZeroSSL). It also contains fail2ban for intrusion prevention.</Overview>
- <Category>Tools:Utilities Network:Web</Category>
- <WebUI>http://[IP]:[PORT:81]</WebUI>
- <TemplateURL>https://raw.githubusercontent.com/linuxserver/templates/master/unraid/swag.xml</TemplateURL>
- <Icon>https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/linuxserver-ls-logo.png</Icon>
- <ExtraParams>--cap-add=NET_ADMIN</ExtraParams>
- <PostArgs/>
- <CPUset/>
- <DateInstalled>1693960111</DateInstalled>
- <DonateText>Donations</DonateText>
- <DonateLink>https://www.linuxserver.io/donate</DonateLink>
- <Requires/>
- <Config Name="WebUI" Target="443" Default="443" Mode="tcp" Description="Https port" Type="Port" Display="always" Required="true" Mask="false">4430</Config>
- <Config Name="Port: 80" Target="80" Default="80" Mode="tcp" Description="Http port (required for http validation and http - https redirect)" Type="Port" Display="always" Required="false" Mask="false">8800</Config>
- <Config Name="URL" Target="URL" Default="yourdomain.url" Mode="{3}" Description="Top url you have control over (`customdomain.com` if you own it, or `customsubdomain.ddnsprovider.com` if dynamic dns)." Type="Variable" Display="always" Required="true" Mask="false">----------------</Config>
- <Config Name="VALIDATION" Target="VALIDATION" Default="http" Mode="{3}" Description="Certbot validation method to use, options are `http` or `dns` (`dns` method also requires `DNSPLUGIN` variable set)." Type="Variable" Display="always" Required="true" Mask="false">dns</Config>
- <Config Name="SUBDOMAINS" Target="SUBDOMAINS" Default="www," Mode="{3}" Description="Subdomains you'd like the cert to cover (comma separated, no spaces) ie. `www,ftp,cloud`. For a wildcard cert, set this *exactly* to `wildcard` (wildcard cert is available via `dns` validation only)" Type="Variable" Display="always" Required="false" Mask="false">wildcard</Config>
- <Config Name="CERTPROVIDER" Target="CERTPROVIDER" Default="" Mode="{3}" Description="Optionally define the cert provider. Set to `zerossl` for ZeroSSL certs (requires existing ZeroSSL account(https://app.zerossl.com/signup) and the e-mail address entered in `EMAIL` env var). Otherwise defaults to Let's Encrypt." Type="Variable" Display="always" Required="false" Mask="false"/>
- <Config Name="DNSPLUGIN" Target="DNSPLUGIN" Default="cloudflare" Mode="{3}" Description="Required if `VALIDATION` is set to `dns`. Options are `acmedns`, `aliyun`, `azure`, `cloudflare`, `cpanel`, `desec`, `digitalocean`, `directadmin`, `dnsimple`, `dnsmadeeasy`, `dnspod`, `do`, `domeneshop`, `duckdns`, `dynu`, `gandi`, `gehirn`, `godaddy`, `google`, `google-domains`, `he`, `hetzner`, `infomaniak`, `inwx`, `ionos`, `linode`, `loopia`, `luadns`, `netcup`, `njalla`, `nsone`, `ovh`, `porkbun`, `rfc2136`, `route53`, `sakuracloud`, `standalone`, `transip`, and `vultr`. Also need to enter the credentials into the corresponding ini (or json for some plugins) file under `/config/dns-conf`." Type="Variable" Display="always" Required="false" Mask="false">cloudflare</Config>
- <Config Name="PROPAGATION" Target="PROPAGATION" Default="" Mode="{3}" Description="Optionally override (in seconds) the default propagation time for the dns plugins." Type="Variable" Display="always" Required="false" Mask="false"/>
- <Config Name="EMAIL" Target="EMAIL" Default="" Mode="{3}" Description="Optional e-mail address used for cert expiration notifications (Required for ZeroSSL)." Type="Variable" Display="always" Required="false" Mask="false">------------</Config>
- <Config Name="ONLY_SUBDOMAINS" Target="ONLY_SUBDOMAINS" Default="false" Mode="{3}" Description="If you wish to get certs only for certain subdomains, but not the main domain (main domain may be hosted on another machine and cannot be validated), set this to `true`" Type="Variable" Display="always" Required="false" Mask="false">false</Config>
- <Config Name="EXTRA_DOMAINS" Target="EXTRA_DOMAINS" Default="" Mode="{3}" Description="Additional fully qualified domain names (comma separated, no spaces) ie. `extradomain.com,subdomain.anotherdomain.org,*.anotherdomain.org`" Type="Variable" Display="always" Required="false" Mask="false"/>
- <Config Name="STAGING" Target="STAGING" Default="false" Mode="{3}" Description="Set to `true` to retrieve certs in staging mode. Rate limits will be much higher, but the resulting cert will not pass the browser's security test. Only to be used for testing purposes." Type="Variable" Display="always" Required="false" Mask="false">false</Config>
- <Config Name="DUCKDNSTOKEN" Target="DUCKDNSTOKEN" Default="" Mode="" Description="" Type="Variable" Display="always" Required="false" Mask="false"/>
- <Config Name="DOCKER_MODS" Target="DOCKER_MODS" Default="" Mode="" Description="DOCKER_MODS" Type="Variable" Display="always" Required="false" Mask="false">linuxserver/mods:universal-docker|linuxserver/mods:swag-auto-reload|linuxserver/mods:swag-auto-proxy|linuxserver/mods:swag-maxmind|linuxserver/mods:swag-dashboard|linuxserver/mods:swag-crowdsec|linuxserver/mods:swag-cloudflare-real-ip</Config>
- <Config Name="Docker Socket Proxy" Target="DOCKER_HOST" Default="dockersocket" Mode="" Description="The SWAG container will now be able to retrieve info on other containers (read-only access), but will not be able to spin up other containers or run any commands via the docker API." Type="Variable" Display="always" Required="false" Mask="false">dockersocket</Config>
- <Config Name="Dashboard" Target="81" Default="81" Mode="tcp" Description="" Type="Port" Display="always" Required="false" Mask="false">81</Config>
- <Config Name="fail2ban db" Target="/dashboard/fail2ban.sqlite3" Default="" Mode="rw" Description="" Type="Path" Display="always" Required="false" Mask="false">/mnt/user/appdata/swag/fail2ban/fail2ban.sqlite3</Config>
- <Config Name="CROWDSEC_API_KEY" Target="CROWDSEC_API_KEY" Default="" Mode="" Description="" Type="Variable" Display="always" Required="false" Mask="false">-----------------</Config>
- <Config Name="CROWDSEC_LAPI_URL" Target="CROWDSEC_LAPI_URL" Default="" Mode="" Description="CrowdSec Local API Address" Type="Variable" Display="always" Required="false" Mask="false">http://192.168.1.104:8081</Config>
- <Config Name="Emby Logs" Target="/remotelogs/emby" Default="" Mode="ro" Description="" Type="Path" Display="always" Required="false" Mask="false">/mnt/user/appdata/EmbyServer/logs/</Config>
- <Config Name="jellyseerr logs" Target="/remotelogs/jellyseerr" Default="" Mode="ro" Description="" Type="Path" Display="always" Required="false" Mask="false">/mnt/user/appdata/jellyseerr/logs/</Config>
- <Config Name="Appdata" Target="/config" Default="/mnt/user/appdata/swag" Mode="rw" Description="All the config files including the webroot reside here." Type="Path" Display="advanced" Required="true" Mask="false">/mnt/user/appdata/swag</Config>
- <Config Name="PUID" Target="PUID" Default="99" Mode="{3}" Description="" Type="Variable" Display="advanced" Required="true" Mask="false">99</Config>
- <Config Name="PGID" Target="PGID" Default="100" Mode="{3}" Description="" Type="Variable" Display="advanced" Required="true" Mask="false">100</Config>
- <Config Name="UMASK" Target="UMASK" Default="022" Mode="{3}" Description="" Type="Variable" Display="advanced" Required="false" Mask="false">022</Config>
- <Config Name="MAXMINDDB_LICENSE_KEY" Target="MAXMINDDB_LICENSE_KEY" Default="" Mode="" Description="GeoIP licence Key" Type="Variable" Display="advanced" Required="false" Mask="false">----------------</Config>
- </Container>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement