Add syncthing to nextcloud aio

nexcloud-aio/.env.example

@@ -1,4 +1,6 @@
 TAILSCALE_OAUTH_KEY_NC=
 TAILSCALE_OAUTH_KEY_NCAIO=
+TAILSCALE_OAUTH_KEY_SYNCTNCAIO=
 TAILSCALE_TAGS_NC=
-TAILSCALE_TAGS_NCAIO=
+TAILSCALE_TAGS_NCAIO=
+TAILSCALE_TAGS_SYNCTNCAIO=

nexcloud-aio/docker-compose.yml

@@ -46,7 +46,33 @@ services:
       - 8080:8080
     environment:
       APACHE_PORT: 11000 
-      NEXTCLOUD_DATADIR: /mnt/ncdata 
+      NEXTCLOUD_DATADIR: /mnt/ncdata
+      NEXTCLOUD_MOUNT: /mnt/external_data
+
+  ts-syncthing:
+    image: tailscale/tailscale:latest
+    hostname: syncthing-ncaio
+    environment:
+      - TS_AUTHKEY=${TAILSCALE_OAUTH_KEY_SYNCTNCAIO}
+      - TS_EXTRA_ARGS=--advertise-tags=${TAILSCALE_TAGS_SYNCTNCAIO}
+      - TS_SERVE_CONFIG=/config/syncthing-ncaio.json
+      - TS_STATE_DIR=/var/lib/tailscale
+    volumes:
+      - ts-syncthing-ncaio-state:/var/lib/tailscale
+      - ${PWD}/ts-syncthing-ncaio/config:/config
+      - /dev/net/tun:/dev/net/tun
+    cap_add:
+      - net_admin
+      - sys_module
+    restart: unless-stopped
+
+  syncthing:
+    image: syncthing/syncthing
+    container_name: syncthing
+    hostname: syncthing
+    volumes:
+      - /mnt/external_data/syncthing:/var/syncthing
+    restart: unless-stopped
 
 volumes: # If you want to store the data on a different drive, see https://github.com/nextcloud/all-in-one#how-to-store-the-filesinstallation-on-a-separate-drive
   nextcloud_aio_mastercontainer:
@@ -55,6 +81,8 @@ volumes: # If you want to store the data on a different drive, see https://githu
     driver: local
   ts-nextcloud-state:
     driver: local
+  ts-syncthing-ncaio-state:
+    driver: local
   caddy_data:
     driver: local
   caddy_config:

nexcloud-aio/ts-syncthing-ncaio/config/syncthing-ncaio.json

@@ -0,0 +1,19 @@
+{
+    "TCP": {
+      "443": {
+        "HTTPS": true
+      }
+    },
+    "Web": {
+      "${TS_CERT_DOMAIN}:443": {
+        "Handlers": {
+          "/": {
+            "Proxy": "http://syncthing:8384"
+          }
+        }
+      }
+    },
+    "AllowFunnel": {
+      "${TS_CERT_DOMAIN}:443": true
+    }
+  }