add garage service with env-based secret injection

docker/garage/.env.keys

@@ -0,0 +1,2 @@
+RPC_SECRET=hantim-garage-rpc-secret
+ARGENTO_NODE_ID=hantim-garage-argento-node-id

docker/garage/Dockerfile

@@ -0,0 +1,7 @@
+FROM dxflrs/garage:v1.0.1
+
+RUN apk add --no-cache gettext
+
+COPY garage.toml /etc/garage.toml.tpl
+
+CMD envsubst < /etc/garage.toml.tpl > /etc/garage.toml && exec /garage server

docker/garage/compose.yml

@@ -0,0 +1,19 @@
+services:
+  garage:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    restart: unless-stopped
+    container_name: garage
+    env_file: .env
+    networks:
+      - shared
+    ports:
+      - '3901:3901'
+    volumes:
+      - ./data:/var/lib/garage/data
+      - ./meta:/var/lib/garage/meta
+
+networks:
+  shared:
+    external: true

docker/garage/garage.toml

@@ -0,0 +1,24 @@
+metadata_dir = "/var/lib/garage/meta"
+data_dir = "/var/lib/garage/data"
+
+db_engine = "sqlite"
+replication_factor = 2
+compression_level = 1
+
+rpc_bind_addr = "[::]:3901"
+rpc_public_addr = "hantim.net:3901"
+rpc_secret = "${RPC_SECRET}"
+
+bootstrap_peers = ["${ARGENTO_NODE_ID}"]
+
+[s3_api]
+s3_region = "garage"
+api_bind_addr = "[::]:3900"
+
+[s3_web]
+bind_addr = "[::]:3902"
+root_domain = ".web.garage"
+index = "index.html"
+
+[admin]
+api_bind_addr = "[::]:3903"