fix: user / network issues

element/.env

@@ -1,5 +1,2 @@
 BASE_URL=chat.
 EMAIL=
-
-PUID=1000
-PGID=1000

element/compose.yaml

@@ -15,7 +15,6 @@ services:
   element:
     build: .
     restart: unless-stopped
-    user: "$PUID:$PGID"
     networks:
       - nginx
 

gitea/compose.yaml

@@ -40,6 +40,7 @@ services:
       - GITEA__database__PASSWD=$POSTGRES_PASSWORD
     networks:
       - nginx
+      - default
     depends_on:
       - db
 

gitea/nginx.conf

@@ -14,14 +14,14 @@ server {
     ssl_certificate     /etc/letsencrypt/live/$BASE_URL/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/$BASE_URL/privkey.pem;
 
-    client_max_body_size 8G;
 
     location / {
         proxy_pass http://gitea:3000;
 
-        proxy_set_header Host              $host;
+        client_max_body_size 8G;
-        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header     Host              $host;
-        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header     X-Real-IP         $remote_addr;
-        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header     X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header     X-Forwarded-Proto $scheme;
     }
 }

nextcloud/compose.yaml

@@ -44,6 +44,7 @@ services:
       - OVERWRITEPROTOCOL=https
     networks:
       - nginx
+      - default
     depends_on:
       - db
       - redis

nextcloud/nginx.conf

@@ -14,16 +14,16 @@ server {
     ssl_certificate     /etc/letsencrypt/live/$BASE_URL/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/$BASE_URL/privkey.pem;
 
-    client_max_body_size 1024G;
 
     location / {
         proxy_pass       http://nextcloud;
 
-        proxy_set_header Host              $host;
+        client_max_body_size 1024G;
-        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header     Host              $host;
-        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header     X-Forwarded-For   $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Host  $http_host;
+        proxy_set_header     X-Forwarded-Proto $scheme;
-        proxy_redirect   off;
+        proxy_set_header     X-Forwarded-Host  $http_host;
+        proxy_redirect       off;
     }
 
     location /.well-known/carddav {

nginx/install_site/entrypoint.sh

@@ -9,9 +9,7 @@ certbot certonly -n      \
     -d "$BASE_URL"
 
 for f in *; do
-    envsubst "$(bash -c 'compgen -v' | xargs printf '$%s ')" \
+    envsubst "$(env | xargs printf '$%s ')" < "$f" > "/sites/$f"
-        < "$f"                                               \
-        > "/sites/$f"
 done
 
 printf "POST /containers/nginx/kill?signal=SIGHUP HTTP/1.0\r\n\n" \