Bensuperpc/infrastructure
1
0
Fork 0
mirror of https://github.com/bensuperpc/infrastructure.git synced 2026-09-11 19:53:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add authelia

Browse Source
This commit is contained in:
Bensuperpc
2026-06-29 23:46:32 +02:00
parent d1d5a9de29
commit 6c21e5fd5e
95 changed files with 1047 additions and 610 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infrastructure/docker-compose.yml
+4
View File
@@ -49,6 +49,10 @@ include:
- services/dependency-track/docker-compose.dependency-track.yml
# Searxng
- services/searxng/docker-compose.searxng.yml
# Authelia
- services/authelia/docker-compose.authelia.yml
# Dozzle
- services/dozzle/docker-compose.dozzle.yml
# Minecraft
- services/minecraft-server/docker-compose.yml
# 7daystodie
infrastructure/services/7daystodie-server/7daystodie/docker-compose.7daystodie.yml
+2 -1
View File
@@ -5,7 +5,7 @@ services:
container_name: 7daystodie_server
profiles:
- 7daystodie_server
restart: on-failure:5
restart: on-failure:7
ports:
- "26900:26900"
- "26901:26901"
@@ -25,6 +25,7 @@ services:
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
- TZ=${TZ:-Europe/Paris}
# security_opt:
# - no-new-privileges:true
# cap_drop:
infrastructure/services/7daystodie-server/backup/docker-compose.backup.yml
+1 -1
View File
@@ -6,7 +6,7 @@ services:
- 7daystodie_backup
depends_on:
- 7daystodie_server
restart: on-failure:5
restart: on-failure:7
env_file:
- ./env/7daystodie_backup.env
volumes:
infrastructure/services/argus/docker-compose.argus.yml
+7 -6
View File
@@ -6,13 +6,14 @@ services:
profiles:
- argus
environment:
ARGUS_UID: ${PUID:-1000}
ARGUS_GID: ${PGID:-1000}
restart: on-failure:5
- ARGUS_UID=${PUID:-1000}
- ARGUS_GID=${PGID:-1000}
- TZ=${TZ:-Europe/Paris}
restart: on-failure:7
depends_on:
- caddy
networks:
- argus-network
- caddy-infra
volumes:
- argus_data:/app/data/
- ./config/config.yml:/app/config.yml
@@ -28,6 +29,6 @@ volumes:
name: argus_data
networks:
argus-network:
caddy-infra:
driver: bridge
name: argus-network
name: caddy-infra
infrastructure/services/authelia/config/configuration.yml
+64
View File
@@ -0,0 +1,64 @@
theme: auto
server:
address: "tcp://0.0.0.0:9091"
log:
level: info
authentication_backend:
file:
path: /config/users_database.yml
access_control:
default_policy: deny
rules:
- domain:
- "authelia.bensuperpc.org"
- "www.bensuperpc.org"
- "public.bensuperpc.org"
- "it-tools.bensuperpc.org"
- "omni-tools.bensuperpc.org"
- "cyberchef.bensuperpc.org"
- "wordpress.bensuperpc.org"
- "homepage.bensuperpc.org"
policy: bypass
- domain:
- "jellyfin.bensuperpc.org"
- "openwebui.bensuperpc.org"
- "searxng.bensuperpc.org"
subject:
- 'group:admins'
- 'group:users'
policy: one_factor
- domain:
- "*.bensuperpc.org"
subject:
- 'group:admins'
policy: one_factor
# - domain: "dependency-track.bensuperpc.org"
# resources:
# - "^/api/.*"
# policy: bypass
# - domain: "*.bensuperpc.org"
# policy: two_factor
session:
expiration: 72h
inactivity: 60m
remember_me: 1M
cookies:
- domain: "bensuperpc.org"
authelia_url: "https://authelia.bensuperpc.org"
regulation:
max_retries: 5
find_time: 3m
ban_time: 15m
storage:
postgres: {}
notifier:
filesystem:
filename: /config/notification.txt
infrastructure/services/authelia/config/users_database.yml
+8
View File
@@ -0,0 +1,8 @@
users:
bensuperpc:
displayname: "Bensuperpc"
password: "$argon2id$v=19$m=65536,t=3,p=4$1T+CwoeP6hcoddG8l1iilg$omcB+SICmNQzmZIXhE54S5+J68AU32f60a5ctYoEObU"
email: "bensuperpc@gmail.com"
groups:
- admins
- users
infrastructure/services/authelia/docker-compose.authelia.yml
+56
View File
@@ -0,0 +1,56 @@
services:
authelia:
container_name: authelia
image: authelia/authelia:latest
profiles:
- authelia
- caddy
depends_on:
authelia-postgres:
condition: service_healthy
# environment:
# - TZ=America/New_York
# - PUID=${PUID:-1000}
# - PGID=${PGID:-1000}
env_file:
- ./env/authelia.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- ./config:/config
networks:
- caddy-infra
- authelia-internal
restart: on-failure:7
authelia-postgres:
image: postgres:17-alpine
container_name: authelia-postgres
restart: on-failure:7
volumes:
- authelia_db_data:/var/lib/postgresql/data
env_file:
- ./env/authelia_postgres.env
profiles:
- authelia
- caddy
environment:
- TZ=${TZ:-Europe/Paris}
healthcheck:
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
interval: 5s
timeout: 3s
retries: 5
networks:
- authelia-internal
networks:
caddy-infra:
driver: bridge
name: caddy-infra
authelia-internal:
driver: bridge
name: authelia-internal
volumes:
authelia_db_data: {}
infrastructure/services/authelia/env/authelia.env
Vendored
+8
View File
@@ -0,0 +1,8 @@
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET=ht87MVnXkXhBpDkMUHqKDqdg8UGBJt+Fx5jNIqXnN2k=
AUTHELIA_SESSION_SECRET=nsvbXKGRXVZUCUkOapntlq/Zh+d75WacTK5Jgyh8zYk=
AUTHELIA_STORAGE_ENCRYPTION_KEY=aWeIT74xIhGVd9nUOr4YTToTl5rpBEbzc/fv4jemuos=
AUTHELIA_STORAGE_POSTGRES_HOST=authelia-postgres
AUTHELIA_STORAGE_POSTGRES_PORT=5432
AUTHELIA_STORAGE_POSTGRES_DATABASE=authelia_db
AUTHELIA_STORAGE_POSTGRES_USERNAME=authelia
AUTHELIA_STORAGE_POSTGRES_PASSWORD=sAdkxFW6k3GiMOrlBpl6OV76eb9cQz/uk95jmA2UpI8=
infrastructure/services/authelia/env/authelia_postgres.env
Vendored
+3
View File
@@ -0,0 +1,3 @@
POSTGRES_USER=authelia
POSTGRES_PASSWORD=sAdkxFW6k3GiMOrlBpl6OV76eb9cQz/uk95jmA2UpI8=
POSTGRES_DB=authelia_db
infrastructure/services/caddy/config/Caddyfile
+6 -4
View File
@@ -10,13 +10,13 @@
}
format json
}
auto_https {$AUTO_HTTPS_OPTIONS}
}
# import website/*
# Common settings
import website/header.caddy
import website/authelia_middleware.caddy
# All website configurations
import website/main.caddy
@@ -25,7 +25,7 @@ import website/forgejo.caddy
import website/homepage.caddy
import website/jellyfin.caddy
import website/memos.caddy
import website/open-webui.caddy
import website/openwebui.caddy
import website/privatebin.caddy
import website/psitransfer.caddy
import website/stirlingpdf.caddy
@@ -42,3 +42,5 @@ import website/uptimekuma.caddy
import website/argus.caddy
import website/dependency-track.caddy
import website/searxng.caddy
import website/authelia.caddy
import website/dozzle.caddy
infrastructure/services/caddy/config/website/argus.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
argus.{$MAIN_DOMAIN} {
{$SCHEME}://argus.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$ARGUS_ADDRESS}
}
infrastructure/services/caddy/config/website/authelia.caddy
+3
View File
@@ -0,0 +1,3 @@
{$SCHEME}://authelia.{$MAIN_DOMAIN} {
reverse_proxy {$AUTHELIA_ADDRESS}
}
infrastructure/services/caddy/config/website/authelia_middleware.caddy
+6
View File
@@ -0,0 +1,6 @@
(authelia_middleware) {
forward_auth authelia:9091 {
uri /api/authz/forward-auth
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
}
}
infrastructure/services/caddy/config/website/cyberchef.caddy
+2 -1
View File
@@ -1,4 +1,5 @@
cyberchef.{$MAIN_DOMAIN} {
{$SCHEME}://cyberchef.{$MAIN_DOMAIN} {
import authelia_middleware
# Load balance between 2 instances
reverse_proxy {
to cyberchef0:8000 cyberchef1:8000
infrastructure/services/caddy/config/website/dependency-track.caddy
+2 -1
View File
@@ -1,4 +1,5 @@
dependency-track.{$MAIN_DOMAIN} {
{$SCHEME}://dependency-track.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy /api/* {$DEPENDENCY_TRACK_APISERVER_ADDRESS}
reverse_proxy {$DEPENDENCY_TRACK_FRONTEND_ADDRESS}
}
infrastructure/services/caddy/config/website/dozzle.caddy
+4
View File
@@ -0,0 +1,4 @@
{$SCHEME}://dozzle.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$DOZZLE_ADDRESS}
}
infrastructure/services/caddy/config/website/dufs.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
dufs.{$MAIN_DOMAIN} {
{$SCHEME}://dufs.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy dufs:5000
}
infrastructure/services/caddy/config/website/forgejo.caddy
+4 -2
View File
@@ -1,7 +1,9 @@
git.{$MAIN_DOMAIN} {
{$SCHEME}://git.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$FORGEJO_ADDRESS}
}
forgejo.{$MAIN_DOMAIN} {
{$SCHEME}://forgejo.{$MAIN_DOMAIN} {
import authelia_middleware
redir https://git.{$MAIN_DOMAIN}{uri} permanent
}
infrastructure/services/caddy/config/website/homepage.caddy
+3 -2
View File
@@ -1,3 +1,4 @@
homepage.{$MAIN_DOMAIN} {
reverse_proxy {$HOMEPAGE_ADDRESS}
{$SCHEME}://homepage.{$MAIN_DOMAIN} {
import authelia_middleware
redir https://www.{$MAIN_DOMAIN}{uri} permanent
}
infrastructure/services/caddy/config/website/it-tools.caddy
+2 -1
View File
@@ -1,4 +1,5 @@
it-tools.{$MAIN_DOMAIN} {
{$SCHEME}://it-tools.{$MAIN_DOMAIN} {
import authelia_middleware
# Load balance between 2 instances
reverse_proxy {
to it-tools0:8080 it-tools1:8080
infrastructure/services/caddy/config/website/jellyfin.caddy
+2 -1
View File
@@ -1,4 +1,5 @@
jellyfin.{$MAIN_DOMAIN} {
{$SCHEME}://jellyfin.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$JELLYFIN_ADDRESS}
header {
import header_common
infrastructure/services/caddy/config/website/main.caddy
+5 -4
View File
@@ -1,4 +1,5 @@
www.{$MAIN_DOMAIN} {
{$SCHEME}://www.{$MAIN_DOMAIN} {
import authelia_middleware
header {
Cache-Control "public, max-age=10"
import header_common
@@ -12,11 +13,11 @@ www.{$MAIN_DOMAIN} {
reverse_proxy homepage:3000
}
{$MAIN_DOMAIN} {
redir https://www.{host}{uri} permanent
{$SCHEME}://{$MAIN_DOMAIN} {
redir https://www.{$MAIN_DOMAIN}{uri} permanent
}
public.{$MAIN_DOMAIN} {
{$SCHEME}://public.{$MAIN_DOMAIN} {
root * /public_data
file_server browse
infrastructure/services/caddy/config/website/memos.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
memos.{$MAIN_DOMAIN} {
{$SCHEME}://memos.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$MEMOS_ADDRESS}
}
infrastructure/services/caddy/config/website/omni-tools.caddy
+2 -1
View File
@@ -1,4 +1,5 @@
omni-tools.{$MAIN_DOMAIN} {
{$SCHEME}://omni-tools.{$MAIN_DOMAIN} {
import authelia_middleware
# Load balance between 2 instances
reverse_proxy {
to omni-tools0:80 omni-tools1:80
infrastructure/services/caddy/config/website/open-webui.caddy
-3
View File
@@ -1,3 +0,0 @@
open-webui.{$MAIN_DOMAIN} {
reverse_proxy {$OPEN_WEBUI_ADDRESS}
}
infrastructure/services/caddy/config/website/openwebui.caddy
+4
View File
@@ -0,0 +1,4 @@
{$SCHEME}://openwebui.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$OPEN_WEBUI_ADDRESS}
}
infrastructure/services/caddy/config/website/picoshare.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
picoshare.{$MAIN_DOMAIN} {
{$SCHEME}://picoshare.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$PICOSHARE_ADDRESS}
}
infrastructure/services/caddy/config/website/privatebin.caddy
+2 -5
View File
@@ -1,7 +1,4 @@
privatebin.{$MAIN_DOMAIN} {
{$SCHEME}://privatebin.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$PRIVATEBIN_ADDRESS}
}
pastebin.{$MAIN_DOMAIN} {
redir https://privatebin.{$MAIN_DOMAIN} permanent
}
infrastructure/services/caddy/config/website/projectsend.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
projectsend.{$MAIN_DOMAIN} {
{$SCHEME}://projectsend.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$PROJECTSEND_ADDRESS}
}
infrastructure/services/caddy/config/website/psitransfer.caddy
+4 -2
View File
@@ -1,7 +1,9 @@
transfer.{$MAIN_DOMAIN} {
{$SCHEME}://transfer.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$PSITRANSFER_ADDRESS}
}
psitransfer.{$MAIN_DOMAIN} {
{$SCHEME}://psitransfer.{$MAIN_DOMAIN} {
import authelia_middleware
redir https://transfer.{$MAIN_DOMAIN}{uri} permanent
}
infrastructure/services/caddy/config/website/qbittorrent.caddy
+7 -3
View File
@@ -1,11 +1,15 @@
torrent.{$MAIN_DOMAIN} {
reverse_proxy {$QBITTORRENT_ADDRESS}
{$SCHEME}://torrent.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$QBITTORRENT_ADDRESS} {
header_up Referer "{$SCHEME}://torrent.{$MAIN_DOMAIN}"
}
header {
Cache-Control "no-store"
import header_common
}
}
qbittorrent.{$MAIN_DOMAIN} {
{$SCHEME}://qbittorrent.{$MAIN_DOMAIN} {
import authelia_middleware
redir https://torrent.{$MAIN_DOMAIN} permanent
}
infrastructure/services/caddy/config/website/searxng.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
searxng.{$MAIN_DOMAIN} {
{$SCHEME}://searxng.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$SEARXNG_ADDRESS}
}
infrastructure/services/caddy/config/website/stirlingpdf.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
stirlingpdf.{$MAIN_DOMAIN} {
{$SCHEME}://stirlingpdf.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$STIRLINGPDF_ADDRESS}
}
infrastructure/services/caddy/config/website/syncthing.caddy
+2 -1
View File
@@ -1,4 +1,5 @@
syncthing.{$MAIN_DOMAIN} {
{$SCHEME}://syncthing.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$SYNCTHING_ADDRESS} {
header_up Host {upstream_hostport}
}
infrastructure/services/caddy/config/website/transmission.caddy
+2 -1
View File
@@ -1,3 +1,4 @@
transmission.{$MAIN_DOMAIN} {
{$SCHEME}://transmission.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$TRANSMISSION_ADDRESS}
}
infrastructure/services/caddy/config/website/uptimekuma.caddy
+2 -1
View File
@@ -1,4 +1,5 @@
uptimekuma.{$MAIN_DOMAIN} {
{$SCHEME}://uptimekuma.{$MAIN_DOMAIN} {
import authelia_middleware
reverse_proxy {$UPTIMEKUMA_ADDRESS}
header {
Cache-Control "no-store"
infrastructure/services/caddy/config/website/wordpress.caddy
+3 -5
View File
@@ -1,4 +1,5 @@
wordpress.{$MAIN_DOMAIN} {
{$SCHEME}://wordpress.{$MAIN_DOMAIN} {
import authelia_middleware
root * /var/www/html
php_fastcgi {$WORDPRESS_ADDRESS}
@@ -16,9 +17,6 @@ wordpress.{$MAIN_DOMAIN} {
respond /uploads/*.php 404
header {
# disable FLoC tracking
Permissions-Policy interest-cohort=()
# enable HSTS
Strict-Transport-Security max-age=31536000;
@@ -29,6 +27,6 @@ wordpress.{$MAIN_DOMAIN} {
# X-Frame-Options DENY
# Disable powerful features we don't need
Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
Permissions-Policy "geolocation=(), camera=(), microphone=()"
}
}
infrastructure/services/caddy/docker-compose.caddy.yml
+36 -29
View File
@@ -9,7 +9,7 @@ services:
depends_on:
main_infrastructure:
condition: service_completed_successfully
restart: on-failure:5
restart: on-failure:7
ports:
- 80:80/tcp
- 80:80/udp
@@ -23,35 +23,17 @@ services:
- public_data:/public_data:ro
networks:
- qbittorrent-network
- syncthing-network
- jellyfin-network
- forgejo-network
- argus-network
- it-tools-network
- homepage-network
- dufs-network
- cyberchef-network
- open-webui-network
- uptimekuma-network
- stirlingpdf-network
- psitransfer-network
- transmission-network
- projectsend-network
- omni-tools-network
- privatebin-network
- picoshare-network
- memos-network
- dependency-track-network
- searxng-network
- wordpress-network
# - satisfactory-network
# - teamfortress2-network
# - minecraft-network
# - 7daystodie-network
# - openssh-network
- caddy-infra
- caddy-media
- caddy-tools
- caddy-files
- caddy-dev
- caddy-ai
- caddy-web
env_file:
- ./env/caddy.env
environment:
- TZ=${TZ:-Europe/Paris}
security_opt:
- no-new-privileges:true
healthcheck:
@@ -67,9 +49,11 @@ services:
- caddy
depends_on:
- caddy
restart: on-failure:5
restart: on-failure:7
env_file:
- ./env/caddy_backup.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- caddy_backup:/mnt/restic
- caddy_data:/data:ro
@@ -90,3 +74,26 @@ volumes:
name: wordpress
public_data:
name: public_data
networks:
caddy-infra:
driver: bridge
name: caddy-infra
caddy-media:
driver: bridge
name: caddy-media
caddy-tools:
driver: bridge
name: caddy-tools
caddy-files:
driver: bridge
name: caddy-files
caddy-dev:
driver: bridge
name: caddy-dev
caddy-ai:
driver: bridge
name: caddy-ai
caddy-web:
driver: bridge
name: caddy-web
infrastructure/services/caddy/env/caddy.env
Vendored
+7 -1
View File
@@ -8,7 +8,7 @@ FORGEJO_ADDRESS=forgejo:3000
UPTIMEKUMA_ADDRESS=uptime-kuma:3001
MEMOS_ADDRESS=memos:5230
HOMEPAGE_ADDRESS=homepage:3000
OPEN_WEBUI_ADDRESS=open-webui:8080
OPEN_WEBUI_ADDRESS=openwebui:8080
PICOSHARE_ADDRESS=picoshare:4001
PRIVATEBIN_ADDRESS=privatebin:8080
PROJECTSEND_ADDRESS=projectsend:80
@@ -20,3 +20,9 @@ WORDPRESS_ADDRESS=wordpress:9000
DEPENDENCY_TRACK_FRONTEND_ADDRESS=dependency-track-frontend:8080
DEPENDENCY_TRACK_APISERVER_ADDRESS=dependency-track-apiserver:8080
SEARXNG_ADDRESS=searxng:8080
AUTHELIA_ADDRESS=authelia:9091
DOZZLE_ADDRESS=dozzle:8080
# Scheme
SCHEME=https
# ignore_loaded_certs off
AUTO_HTTPS_OPTIONS=ignore_loaded_certs
infrastructure/services/cyberchef/docker-compose.cyberchef.yml
+6 -6
View File
@@ -5,11 +5,11 @@ services:
container_name: cyberchef0
profiles:
- cyberchef
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
networks:
- cyberchef-network
- caddy-tools
read_only: false
security_opt:
- no-new-privileges:true
@@ -30,11 +30,11 @@ services:
container_name: cyberchef1
profiles:
- cyberchef
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
networks:
- cyberchef-network
- caddy-tools
read_only: false
security_opt:
- no-new-privileges:true
@@ -51,6 +51,6 @@ services:
memory: 20M
networks:
cyberchef-network:
caddy-tools:
driver: bridge
name: cyberchef-network
name: caddy-tools
infrastructure/services/dependency-track/docker-compose.dependency-track.yml
+15 -10
View File
@@ -9,9 +9,10 @@ services:
condition: service_healthy
env_file:
- ./env/dependency-track.env
restart: on-failure:5
restart: on-failure:7
networks:
- dependency-track-network
- caddy-web
- dependency-track-internal
deploy:
resources:
limits:
@@ -26,9 +27,10 @@ services:
container_name: dependency-track-frontend
profiles:
- dependency-track
restart: on-failure:5
restart: on-failure:7
networks:
- dependency-track-network
- caddy-web
- dependency-track-internal
depends_on:
dependency-track-apiserver:
condition: service_healthy
@@ -45,15 +47,15 @@ services:
profiles:
- dependency-track
env_file:
- ./env/dependency-track.env
restart: on-failure:5
- ./env/postgres.env
restart: on-failure:7
networks:
- dependency-track-network
- dependency-track-internal
healthcheck:
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
interval: 5s
timeout: 3s
retries: 3
retries: 5
volumes:
- "dtrack-postgres-data:/var/lib/postgresql/data"
@@ -64,6 +66,9 @@ volumes:
name: dtrack-postgres-data
networks:
dependency-track-network:
caddy-web:
driver: bridge
name: dependency-track-network
name: caddy-web
dependency-track-internal:
driver: bridge
name: dependency-track-internal
infrastructure/services/dependency-track/env/dependency-track.env
Vendored
-107
View File
@@ -1,114 +1,7 @@
# apiserver
# The Dependency-Track container can be configured using any of the
# available configuration properties defined in:
# https://docs.dependencytrack.org/getting-started/configuration/
# All properties are upper case with periods replaced by underscores.
#
# Database Properties
# ALPINE_DATABASE_MODE: "external"
# ALPINE_DATABASE_URL: "jdbc:postgresql://postgres10:5432/dtrack"
# ALPINE_DATABASE_DRIVER: "org.postgresql.Driver"
# ALPINE_DATABASE_USERNAME: "dtrack"
# ALPINE_DATABASE_PASSWORD: "changeme"
# ALPINE_DATABASE_POOL_ENABLED: "true"
# ALPINE_DATABASE_POOL_MAX_SIZE: "20"
# ALPINE_DATABASE_POOL_MIN_IDLE: "10"
# ALPINE_DATABASE_POOL_IDLE_TIMEOUT: "300000"
# ALPINE_DATABASE_POOL_MAX_LIFETIME: "600000"
#
# Optional LDAP Properties
# ALPINE_LDAP_ENABLED: "true"
# ALPINE_LDAP_SERVER_URL: "ldap://ldap.example.com:389"
# ALPINE_LDAP_BASEDN: "dc=example,dc=com"
# ALPINE_LDAP_SECURITY_AUTH: "simple"
# ALPINE_LDAP_BIND_USERNAME: ""
# ALPINE_LDAP_BIND_PASSWORD: ""
# ALPINE_LDAP_AUTH_USERNAME_FORMAT: "%s@example.com"
# ALPINE_LDAP_ATTRIBUTE_NAME: "userPrincipalName"
# ALPINE_LDAP_ATTRIBUTE_MAIL: "mail"
# ALPINE_LDAP_GROUPS_FILTER: "(&(objectClass=group)(objectCategory=Group))"
# ALPINE_LDAP_USER_GROUPS_FILTER: "(member:1.2.840.113556.1.4.1941:={USER_DN})"
# ALPINE_LDAP_GROUPS_SEARCH_FILTER: "(&(objectClass=group)(objectCategory=Group)(cn=*{SEARCH_TERM}*))"
# ALPINE_LDAP_USERS_SEARCH_FILTER: "(&(objectClass=user)(objectCategory=Person)(cn=*{SEARCH_TERM}*))"
# ALPINE_LDAP_USER_PROVISIONING: "false"
# ALPINE_LDAP_TEAM_SYNCHRONIZATION: "false"
#
# Optional OpenID Connect (OIDC) Properties
# ALPINE_OIDC_ENABLED: "true"
# ALPINE_OIDC_ISSUER: "https://auth.example.com/auth/realms/example"
# ALPINE_OIDC_CLIENT_ID: ""
# ALPINE_OIDC_USERNAME_CLAIM: "preferred_username"
# ALPINE_OIDC_TEAMS_CLAIM: "groups"
# ALPINE_OIDC_USER_PROVISIONING: "true"
# ALPINE_OIDC_TEAM_SYNCHRONIZATION: "true"
#
# Optional HTTP Proxy Settings
# ALPINE_HTTP_PROXY_ADDRESS: "proxy.example.com"
# ALPINE_HTTP_PROXY_PORT: "8888"
# ALPINE_HTTP_PROXY_USERNAME: ""
# ALPINE_HTTP_PROXY_PASSWORD: ""
# ALPINE_NO_PROXY: ""
#
# Optional HTTP Outbound Connection Timeout Settings. All values are in seconds.
# ALPINE_HTTP_TIMEOUT_CONNECTION: "30"
# ALPINE_HTTP_TIMEOUT_SOCKET: "30"
# ALPINE_HTTP_TIMEOUT_POOL: "60"
#
# Optional Cross-Origin Resource Sharing (CORS) Headers
# ALPINE_CORS_ENABLED: "true"
# ALPINE_CORS_ALLOW_ORIGIN: "*"
# ALPINE_CORS_ALLOW_METHODS: "GET, POST, PUT, DELETE, OPTIONS"
# ALPINE_CORS_ALLOW_HEADERS: "Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count, *"
# ALPINE_CORS_EXPOSE_HEADERS: "Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count"
# ALPINE_CORS_ALLOW_CREDENTIALS: "true"
# ALPINE_CORS_MAX_AGE: "3600"
#
# Optional logging configuration
# LOGGING_LEVEL: "INFO"
# LOGGING_CONFIG_PATH: "logback.xml"
#
# Optional metrics properties
# ALPINE_METRICS_ENABLED: "true"
# ALPINE_METRICS_AUTH_USERNAME: ""
# ALPINE_METRICS_AUTH_PASSWORD: ""
#
# Optional environmental variables to enable default notification publisher templates override and set the base directory to search for templates
# DEFAULT_TEMPLATES_OVERRIDE_ENABLED: "false"
# DEFAULT_TEMPLATES_OVERRIDE_BASE_DIRECTORY: "/data"
#
# Optional configuration for the Snyk analyzer
# SNYK_THREAD_BATCH_SIZE: "10"
#
# Optional environmental variables to provide more JVM arguments to the API Server JVM, i.e. "-XX:ActiveProcessorCount=8"
# EXTRA_JAVA_OPTIONS: ""
ALPINE_DATABASE_MODE="external"
ALPINE_DATABASE_URL="jdbc:postgresql://dependency-track-postgres:5432/dtrack"
ALPINE_DATABASE_DRIVER="org.postgresql.Driver"
ALPINE_DATABASE_USERNAME="dtrack"
ALPINE_DATABASE_PASSWORD="dtrack"
# frontend
# The base URL of the API server.
# NOTE:
# * This URL must be reachable by the browsers of your users.
# * The frontend container itself does NOT communicate with the API server directly, it just serves static files.
# * When deploying to dedicated servers, please use the external IP or domain of the API server.
# OIDC_ISSUER: ""
# OIDC_CLIENT_ID: ""
# OIDC_SCOPE: ""
# OIDC_FLOW: ""
# OIDC_LOGIN_BUTTON_TEXT: ""
# volumes:
# - "/host/path/to/config.json:/app/static/config.json"
API_BASE_URL="https://dependency-track.bensuperpc.org"
# postgres
POSTGRES_DB="dtrack"
POSTGRES_USER="dtrack"
POSTGRES_PASSWORD="dtrack"
infrastructure/services/dependency-track/env/postgres.env
Vendored
+3
View File
@@ -0,0 +1,3 @@
POSTGRES_DB="dtrack"
POSTGRES_USER="dtrack"
POSTGRES_PASSWORD="dtrack"
infrastructure/services/dozzle/config/users.yml
+7
View File
@@ -0,0 +1,7 @@
users:
bensuperpc:
email: bensuperpc@gmail.com
name: bensuperpc
password: $2a$11$w56N4NICh5xD5Bbq6Z2Z2ef9/QUaa/YKleMiawn/Bru9hYsQOJyrm
filter: ""
roles: ""
infrastructure/services/dozzle/docker-compose.dozzle.yml
+56
View File
@@ -0,0 +1,56 @@
services:
dozzle:
image: amir20/dozzle:latest
container_name: dozzle
profiles:
- dozzle
restart: on-failure:7
depends_on:
- caddy
- dozzle-dockerproxy
env_file:
- ./env/dozzle.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- dozzle_data:/data
secrets:
- source: dozzle_users
target: /data/users.yml
networks:
- caddy-infra
- dozzle-internal
dozzle-dockerproxy:
image: tecnativa/docker-socket-proxy:latest
container_name: dozzle-dockerproxy
profiles:
- dozzle
restart: on-failure:7
environment:
- CONTAINERS=1
- POST=0
- PING=1
- VERSION=1
- EVENTS=1
- INFO=1
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
networks:
- dozzle-internal
networks:
caddy-infra:
driver: bridge
name: caddy-infra
dozzle-internal:
driver: bridge
name: dozzle-internal
volumes:
dozzle_data:
name: dozzle_data
secrets:
dozzle_users:
file: ./config/users.yml
infrastructure/services/dozzle/env/dozzle.env
Vendored
+2
View File
@@ -0,0 +1,2 @@
DOZZLE_AUTH_PROVIDER=simple
DOZZLE_REMOTE_HOST=tcp://dozzle-dockerproxy:2375
infrastructure/services/dufs/docker-compose.dufs.yml
+4 -4
View File
@@ -6,7 +6,7 @@ services:
profiles:
- dufs
# user: ${PUID:-1000}:${PGID:-1000}
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
env_file:
@@ -14,7 +14,7 @@ services:
volumes:
- public_data:/data
networks:
- dufs-network
- caddy-files
security_opt:
- no-new-privileges:true
@@ -25,6 +25,6 @@ volumes:
name: private_data
networks:
dufs-network:
caddy-files:
driver: bridge
name: dufs-network
name: caddy-files
infrastructure/services/forgejo/docker-compose.forgejo.yml
+12 -8
View File
@@ -5,7 +5,7 @@ services:
container_name: forgejo
profiles:
- forgejo
restart: on-failure:5
restart: on-failure:7
depends_on:
- database_forgejo
- caddy
@@ -18,7 +18,8 @@ services:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
networks:
- forgejo-network
- caddy-dev
- forgejo-internal
# user: ${PUID:-1000}:${PGID:-1000}
security_opt:
- no-new-privileges:true
@@ -31,14 +32,14 @@ services:
- forgejo
depends_on:
- caddy
restart: on-failure:5
restart: on-failure:7
volumes:
- forgejo_db:/var/lib/mysql:rw
env_file:
- ./env/forgejo_db.env
command: '--default-authentication-plugin=mysql_native_password'
networks:
- forgejo-network
- forgejo-internal
security_opt:
- no-new-privileges:true
@@ -48,7 +49,7 @@ services:
container_name: 'docker_dind'
hostname: docker
networks:
- forgejo-network
- forgejo-internal
profiles:
- forgejo-runner
privileged: true
@@ -61,7 +62,7 @@ services:
forgejo_runner:
image: data.forgejo.org/forgejo/runner:12
networks:
- forgejo-network
- forgejo-internal
profiles:
- forgejo-runner
depends_on:
@@ -91,6 +92,9 @@ volumes:
name: forgejo_runner
networks:
forgejo-network:
caddy-dev:
driver: bridge
name: forgejo-network
name: caddy-dev
forgejo-internal:
driver: bridge
name: forgejo-internal
infrastructure/services/homepage/config/docker.yaml
+3 -6
View File
@@ -2,9 +2,6 @@
# For configuration options and examples, please see:
# https://gethomepage.dev/configs/docker
#jellyfin:
# host: jellyfin
# port: 8096
#my-docker:
# socket: /var/run/docker.sock
my-docker:
host: homepage-dockerproxy
port: 2375
infrastructure/services/homepage/config/services.yaml
+125 -85
View File
@@ -2,112 +2,135 @@
# For configuration options and examples, please see:
# https://gethomepage.dev/configs/services/
- Personal:
- wordpress:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/wordpress.png
href: https://wordpress.bensuperpc.org/
description: Wordpress
ping: wordpress.bensuperpc.org
# container: wordpress
- jellyfin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/jellyfin.png
href: https://jellyfin.bensuperpc.org/
description: Jellyfin
ping: jellyfin.bensuperpc.org
# container: jellyfin
- projectsend:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/projectsend.png
href: https://projectsend.bensuperpc.org/
description: ProjectSend
ping: projectsend.bensuperpc.org
# container: projectsend
- Sharing:
- psitransfer:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/psitransfer.png
href: https://psitransfer.bensuperpc.org/
description: PsiTransfer
ping: psitransfer.bensuperpc.org
# container: psitransfer
- picoshare:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/picoshare.png
href: https://picoshare.bensuperpc.org/
description: PicoShare
ping: picoshare.bensuperpc.org
# container: picoshare
- privatebin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/privatebin.png
href: https://privatebin.bensuperpc.org/
description: PrivateBin
ping: privatebin.bensuperpc.org
# container: privatebin
- qbittorrent:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/qbittorrent.png
href: https://qbittorrent.bensuperpc.org/
description: qBittorrent
ping: qbittorrent.bensuperpc.org
# container: qbittorrent
- syncthing:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/syncthing.png
href: https://syncthing.bensuperpc.org/
description: Syncthing
ping: syncthing.bensuperpc.org
# container: syncthing
- transmission:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/transmission.png
href: https://transmission.bensuperpc.org/
description: Transmission
ping: transmission.bensuperpc.org
# container: transmission
- dufs:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dufs.png
href: https://dufs.bensuperpc.org/
description: Dufs
ping: dufs.bensuperpc.org
# container: dufs
# - caddy:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/caddy.png
# href: https://public.bensuperpc.org/
# description: File browser
# ping: public.bensuperpc.org
# # container: caddy
- Utils:
- Public:
- it-tools:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
href: https://it-tools.bensuperpc.org/
description: IT Tools
ping: it-tools.bensuperpc.org
# container: it-tools0
# ping: it-tools.bensuperpc.org
container: it-tools0
server: my-docker
- omni-tools:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
href: https://omni-tools.bensuperpc.org/
description: Omni Tools
ping: omni-tools.bensuperpc.org
# container: omni-tools0
# ping: omni-tools.bensuperpc.org
container: omni-tools0
server: my-docker
- cyberchef:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/cyberchef.png
href: https://cyberchef.bensuperpc.org/
description: CyberChef
ping: cyberchef.bensuperpc.org
# container: cyberchef0
# ping: cyberchef.bensuperpc.org
container: cyberchef0
server: my-docker
- caddy:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/caddy.png
href: https://public.bensuperpc.org/
description: File browser
# ping: public.bensuperpc.org
container: caddy
server: my-docker
- psitransfer:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/psitransfer.png
href: https://psitransfer.bensuperpc.org/
description: PsiTransfer
# ping: psitransfer.bensuperpc.org
container: psitransfer
server: my-docker
- stirlingpdf:
#icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/stirlingpdf.png
href: https://stirlingpdf.bensuperpc.org/
description: StirlingPDF
ping: stirlingpdf.bensuperpc.org
# container: stirlingpdf
# ping: stirlingpdf.bensuperpc.org
container: stirlingpdf
server: my-docker
- privatebin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/privatebin.png
href: https://privatebin.bensuperpc.org/
description: PrivateBin
# ping: privatebin.bensuperpc.org
container: privatebin
server: my-docker
- forgejo:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/forgejo.png
href: https://forgejo.bensuperpc.org/
description: Forgejo
ping: forgejo.bensuperpc.org
# container: forgejo
# ping: forgejo.bensuperpc.org
container: forgejo
server: my-docker
- wordpress:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/wordpress.png
href: https://wordpress.bensuperpc.org/
description: Wordpress
# ping: wordpress.bensuperpc.org
container: wordpress
server: my-docker
- dufs:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dufs.png
href: https://dufs.bensuperpc.org/
description: Dufs
# ping: dufs.bensuperpc.org
container: dufs
server: my-docker
- Personal:
- jellyfin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/jellyfin.png
href: https://jellyfin.bensuperpc.org/
description: Jellyfin
# ping: jellyfin.bensuperpc.org
container: jellyfin
server: my-docker
- projectsend:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/projectsend.png
href: https://projectsend.bensuperpc.org/
description: ProjectSend
# ping: projectsend.bensuperpc.org
container: projectsend
server: my-docker
- searxng:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/searxng.png
href: https://searxng.bensuperpc.org/
description: SearXNG
# ping: searxng.bensuperpc.org
container: searxng
server: my-docker
- open-webui:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/open-webui.png
href: https://open-webui.bensuperpc.org/
href: https://openwebui.bensuperpc.org/
description: ChatGPT local
ping: open-webui.bensuperpc.org
# container: open-webui
# ping: openwebui.bensuperpc.org
container: openwebui
server: my-docker
- picoshare:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/picoshare.png
href: https://picoshare.bensuperpc.org/
description: PicoShare
# ping: picoshare.bensuperpc.org
container: picoshare
server: my-docker
- qbittorrent:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/qbittorrent.png
href: https://qbittorrent.bensuperpc.org/
description: qBittorrent
# ping: qbittorrent.bensuperpc.org
container: qbittorrent
server: my-docker
- syncthing:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/syncthing.png
href: https://syncthing.bensuperpc.org/
description: Syncthing
# ping: syncthing.bensuperpc.org
container: syncthing
server: my-docker
- transmission:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/transmission.png
href: https://transmission.bensuperpc.org/
description: Transmission
# ping: transmission.bensuperpc.org
container: transmission
server: my-docker
- Games:
- minecraft:
@@ -116,18 +139,21 @@
description: Minecraft server
# ping: minecraft.bensuperpc.org
# container: minecraft-server
#server: my-docker
- 7dtd:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
# href: https://7dtd.bensuperpc.org/
description: 7 Days to Die server
# ping: 7dtd.bensuperpc.org
# container: 7daystodie_server
#server: my-docker
- satisfactory:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
# href: https://7dtd.bensuperpc.org/
description: Satisfactory server
# ping: 7dtd.bensuperpc.org
# container: satisfactory_server
#server: my-docker
- Admin:
- uptime-kuma:
@@ -135,5 +161,19 @@
href: https://uptimekuma.bensuperpc.org/
description: Uptime Kuma
ping: uptimekuma.bensuperpc.org
# container: uptime-kuma
container: uptime-kuma
server: my-docker
- authelia:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/authelia.png
href: https://authelia.bensuperpc.org/
description: Authelia
# ping: authelia.bensuperpc.org
container: authelia
server: my-docker
- dozzle:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dozzle.png
href: https://dozzle.bensuperpc.org/
description: Dozzle
# ping: dozzle.bensuperpc.org
container: dozzle
server: my-docker
infrastructure/services/homepage/config/settings.yaml
+2 -6
View File
@@ -24,19 +24,15 @@ color: slate
language: en
layout:
Personal:
Public:
style: row
columns: 6
Sharing:
Personal:
style: row
columns: 6
Admin:
style: row
columns: 6
Utils:
style: row
columns: 6
initiallyCollapsed: false
Games:
style: row
columns: 6
infrastructure/services/homepage/config/widgets.yaml
-1
View File
@@ -1,7 +1,6 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/widgets/services/
# https://gethomepage.dev/widgets/services/qbittorrent/
#- logo:
# icon: /image/daisy.jpg
infrastructure/services/homepage/docker-compose.homepage.yml
+25 -10
View File
@@ -5,34 +5,49 @@ services:
container_name: homepage
profiles:
- homepage
restart: on-failure:5
restart: on-failure:7
# environment:
# - PUID=${PUID:-1000}
# - PGID=${PGID:-1000}
depends_on:
- caddy
- homepage-dockerproxy
env_file:
- ./env/homepage.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- homepage_log:/app/logs
- ./config:/app/config
- ./image:/app/public/image:ro
# - /var/run/docker.sock:/var/run/docker.sock:ro
# develop:
# watch:
# - action: sync+restart
# path: ./homepage/image
# target: /app/public/image
networks:
- homepage-network
- caddy-infra
- homepage-internal
security_opt:
- no-new-privileges:true
homepage-dockerproxy:
image: tecnativa/docker-socket-proxy:latest
container_name: homepage-dockerproxy
profiles:
- homepage
restart: on-failure:7
environment:
- CONTAINERS=1
- POST=0
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
networks:
- homepage-internal
volumes:
homepage_log:
name: homepage_log
networks:
homepage-network:
caddy-infra:
driver: bridge
name: homepage-network
name: caddy-infra
homepage-internal:
driver: bridge
name: homepage-internal
infrastructure/services/homepage/env/homepage.env
Vendored
+1 -3
View File
@@ -1,3 +1 @@
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
#PSITRANSFER_PORT=3000
HOMEPAGE_ALLOWED_HOSTS=www.bensuperpc.org
HOMEPAGE_ALLOWED_HOSTS=www.bensuperpc.org,homepage.bensuperpc.org
infrastructure/services/it-tools/docker-compose.it-tools.yml
+10 -6
View File
@@ -5,16 +5,18 @@ services:
container_name: it-tools0
profiles:
- it-tools
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
networks:
- it-tools-network
- caddy-tools
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
environment:
- TZ=${TZ:-Europe/Paris}
deploy:
resources:
@@ -30,16 +32,18 @@ services:
container_name: it-tools1
profiles:
- it-tools
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
networks:
- it-tools-network
- caddy-tools
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
environment:
- TZ=${TZ:-Europe/Paris}
deploy:
resources:
@@ -51,6 +55,6 @@ services:
memory: 20M
networks:
it-tools-network:
caddy-tools:
driver: bridge
name: it-tools-network
name: caddy-tools
infrastructure/services/jellyfin/docker-compose.jellyfin.yml
+5 -4
View File
@@ -5,10 +5,11 @@ services:
container_name: jellyfin
profiles:
- jellyfin
restart: on-failure:5
restart: on-failure:7
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
- TZ=${TZ:-Europe/Paris}
depends_on:
- caddy
env_file:
@@ -22,7 +23,7 @@ services:
devices:
- /dev/dri:/dev/dri
networks:
- jellyfin-network
- caddy-media
security_opt:
- no-new-privileges:true
@@ -37,6 +38,6 @@ volumes:
name: private_data
networks:
jellyfin-network:
caddy-media:
driver: bridge
name: jellyfin-network
name: caddy-media
infrastructure/services/jellyfin/env/jellyfin.env
Vendored
+1 -2
View File
@@ -1,2 +1 @@
TZ=Etc/UTC
DOCKER_MODS=linuxserver/mods:jellyfin-opencl-intel
DOCKER_MODS=linuxserver/mods:jellyfin-opencl-intel
infrastructure/services/main/docker-compose.main.yml
+31 -1
View File
@@ -23,12 +23,42 @@ services:
profiles:
- main_infrastructure
image: nickfedor/watchtower:latest
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- /var/run/docker.sock:/var/run/docker.sock
restart: unless-stopped
restart: on-failure:7
networks:
- watchtower-network
volumes:
public_data:
name: public_data
private_data:
name: private_data
networks:
watchtower-network:
driver: bridge
name: watchtower-network
caddy-infra:
driver: bridge
name: caddy-infra
caddy-media:
driver: bridge
name: caddy-media
caddy-tools:
driver: bridge
name: caddy-tools
caddy-files:
driver: bridge
name: caddy-files
caddy-dev:
driver: bridge
name: caddy-dev
caddy-ai:
driver: bridge
name: caddy-ai
caddy-web:
driver: bridge
name: caddy-web
infrastructure/services/memos/docker-compose.memos.yml
+4 -4
View File
@@ -5,7 +5,7 @@ services:
container_name: memos
profiles:
- memos
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
env_file:
@@ -13,7 +13,7 @@ services:
volumes:
- memos_config:/var/opt/memos
networks:
- memos-network
- caddy-tools
security_opt:
- no-new-privileges:true
@@ -22,6 +22,6 @@ volumes:
name: memos_config
networks:
memos-network:
caddy-tools:
driver: bridge
name: memos-network
name: caddy-tools
infrastructure/services/minecraft-server/backup/docker-compose.backup.yml
+1 -4
View File
@@ -7,14 +7,13 @@ services:
depends_on:
- mc-server
- minecraft_proxy
restart: on-failure:3
restart: on-failure:7
env_file:
- ./env/backup.env
volumes:
- minecraft_server_backup:/mnt/restic
- minecraft_server_data:/data/minecraft_server_data:ro
- minecraft_proxy_data:/data/minecraft_proxy_data:ro
- minecraft_rcon_data:/data/minecraft_rcon_data:ro
security_opt:
- no-new-privileges:true
network_mode: none
@@ -30,5 +29,3 @@ volumes:
name: minecraft_server_data
minecraft_proxy_data:
name: minecraft_proxy_data
minecraft_rcon_data:
name: minecraft_rcon_data
infrastructure/services/minecraft-server/minecraft-server/docker-compose.minecraft.yml
+2 -31
View File
@@ -5,7 +5,7 @@ services:
profiles:
- minecraft_proxy
- minecraft_server
restart: on-failure:3
restart: on-failure:7
env_file:
- ./env/proxy.env
environment:
@@ -32,7 +32,7 @@ services:
- minecraft_server
depends_on:
- minecraft_proxy
restart: on-failure:3
restart: on-failure:7
ports:
# Server Minecraft port (Disable if you use proxy)
# - "25565:25565"
@@ -65,40 +65,11 @@ services:
reservations:
cpus: '0.01'
memory: 20M
rcon-web:
image: itzg/rcon:latest
container_name: minecraft_rcon_web
profiles:
- mc-web
restart: on-failure:3
depends_on:
- minecraft_server
- minecraft_proxy
environment:
RWA_USERNAME: admin
RWA_PASSWORD: admin
RWA_ADMIN: "TRUE"
# is referring to the hostname of 'minecraft_server' compose service below
RWA_RCON_HOST: minecraft_server
RWA_RCON_PASSWORD: 6hxU3Oxmh2Q8e6S9fjkdWJikRCON_PASSWORD
ports:
# web UI port
- "4326:4326"
# websocket access from UI
- "4327:4327"
volumes:
- minecraft_rcon_data:/opt/rcon-web-admin/db
networks:
- minecraft-network
volumes:
minecraft_server_data:
name: minecraft_server_data
minecraft_proxy_data:
name: minecraft_proxy_data
minecraft_rcon_data:
name: minecraft_rcon_data
networks:
minecraft-network:
infrastructure/services/omni-tools/docker-compose.omni-tools.yml
+10 -6
View File
@@ -5,16 +5,18 @@ services:
container_name: omni-tools0
profiles:
- omni-tools
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
networks:
- omni-tools-network
- caddy-tools
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
environment:
- TZ=${TZ:-Europe/Paris}
deploy:
resources:
@@ -30,16 +32,18 @@ services:
container_name: omni-tools1
profiles:
- omni-tools
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
networks:
- omni-tools-network
- caddy-tools
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
environment:
- TZ=${TZ:-Europe/Paris}
deploy:
resources:
@@ -51,6 +55,6 @@ services:
memory: 20M
networks:
omni-tools-network:
caddy-tools:
driver: bridge
name: omni-tools-network
name: caddy-tools
infrastructure/services/open-webui/docker-compose.open-webui.yml
+67 -19
View File
@@ -1,14 +1,15 @@
name: openwebui
services:
ollama:
image: ollama/ollama:${OLLAMA_DOCKER_TAG-latest}
#platform: linux/amd64
container_name: ollama
profiles:
- open-webui
- openwebui
- ollama
depends_on:
- caddy
restart: on-failure:5
restart: on-failure:7
tty: true
volumes:
- ollama:/root/.ollama
@@ -16,42 +17,89 @@ services:
# - ${OLLAMA_PORT-11434}:11434
env_file:
- ./env/ollama.env
environment:
- TZ=${TZ:-Europe/Paris}
security_opt:
- no-new-privileges:true
networks:
- open-webui-network
devices:
- /dev/dri
- /dev/kfd
- openwebui-internal
# devices:
# - /dev/dri
# - /dev/kfd
open-webui:
image: ghcr.io/open-webui/open-webui:${WEBUI_DOCKER_TAG-main}
container_name: open-webui
openwebui-postgres:
image: postgres:17-alpine
container_name: openwebui-postgres
profiles:
- open-webui
- openwebui
env_file:
- ./env/openwebui-postgres.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- open-webui:/app/backend/data
- openwebui-postgres:/var/lib/postgresql/data
restart: on-failure:7
networks:
- openwebui-internal
healthcheck:
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
interval: 5s
timeout: 3s
retries: 5
# pgadmin:
# image: dpage/pgadmin4:latest
# container_name: pgadmin
# profiles:
# - openwebui
# env_file:
# - ./env/openwebui-pgadmin.env
# volumes:
# - openwebui-pgadmin:/var/lib/pgadmin
# restart: on-failure:7
# depends_on:
# openwebui-postgres:
# condition: service_healthy
# networks:
# - openwebui-network
openwebui:
image: ghcr.io/open-webui/open-webui:${WEBUI_DOCKER_TAG-main}
container_name: openwebui
profiles:
- openwebui
volumes:
- openwebui:/app/backend/data
depends_on:
- ollama
- caddy
- openwebui-postgres
env_file:
- ./env/open-webui.env
#environment:
- ./env/openwebui.env
environment:
- TZ=${TZ:-Europe/Paris}
# - UID=${PUID:-1000}
# - GID=${PGID:-1000}
# ports:
# - ${OPEN_WEBUI_PORT-3000}:8080
restart: on-failure:5
restart: on-failure:7
networks:
- open-webui-network
- caddy-ai
- openwebui-internal
security_opt:
- no-new-privileges:true
volumes:
ollama: {}
open-webui: {}
openwebui: {}
openwebui-postgres: {}
openwebui-pgadmin: {}
networks:
open-webui-network:
caddy-ai:
driver: bridge
name: open-webui-network
name: caddy-ai
openwebui-internal:
driver: bridge
name: openwebui-internal
infrastructure/services/open-webui/env/openwebui-pgadmin.env
Vendored
+4
View File
@@ -0,0 +1,4 @@
PGADMIN_DEFAULT_EMAIL=admin@local.ai
PGADMIN_DEFAULT_PASSWORD=admin123
PGADMIN_CONFIG_SERVER_MODE=False
PGADMIN_CONFIG_MASTER_PASSWORD_REQUIRED=False
infrastructure/services/open-webui/env/openwebui-postgres.env
Vendored
+3
View File
@@ -0,0 +1,3 @@
POSTGRES_DB=openwebui
POSTGRES_USER=postgres
POSTGRES_PASSWORD=securepassword123
infrastructure/services/open-webui/env/open-webui.env → infrastructure/services/open-webui/env/openwebui.env
Vendored
+3
View File
@@ -10,6 +10,9 @@ ANONYMIZED_TELEMETRY=false
#OPENAI_API_BASE_URL=
#OPENAI_API_KEY=
# Database configuration
DATABASE_URL=postgresql://postgres:securepassword123@openwebui-postgres:5432/openwebui
# Only with stable-diffusion-webui
#ENABLE_IMAGE_GENERATION=true
#AUTOMATIC1111_BASE_URL=http://stable-diffusion-webui:7860
infrastructure/services/openssh/docker-compose.openssh.yml
+2 -4
View File
@@ -5,12 +5,13 @@ services:
container_name: openssh
profiles:
- openssh
restart: on-failure:5
restart: on-failure:7
env_file:
- ./env/openssh.env
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
- TZ=${TZ:-Europe/Paris}
volumes:
- openssh_config:/config:rw
- ./config/authorized_keys:/authorized_ssh_keys:ro
@@ -29,7 +30,6 @@ services:
- minecraft_server_backup:/minecraft_server_backup:rw
- minecraft_server_data:/minecraft_server_data:rw
- minecraft_proxy_data:/minecraft_proxy_data:rw
- minecraft_rcon_data:/minecraft_rcon_data:rw
- forgejo_data:/forgejo_data:rw
- forgejo_db:/forgejo_db:rw
- teamfortress2_backup:/teamfortress2_backup:rw
@@ -78,8 +78,6 @@ volumes:
name: minecraft_server_data
minecraft_proxy_data:
name: minecraft_proxy_data
minecraft_rcon_data:
name: minecraft_rcon_data
# teamfortress2
teamfortress2_backup:
name: teamfortress2_backup
infrastructure/services/openssh/env/openssh.env
Vendored
-1
View File
@@ -1,4 +1,3 @@
TZ=Etc/UTC
SUDO_ACCESS=true
PASSWORD_ACCESS=false
DOCKER_MODS=linuxserver/mods:openssh-server-rsync
infrastructure/services/picoshare/docker-compose.picoshare.yml
+6 -4
View File
@@ -5,15 +5,17 @@ services:
container_name: picoshare
profiles:
- picoshare
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
env_file:
- ./env/picoshare.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- picoshare_data:/data
networks:
- picoshare-network
- caddy-files
security_opt:
- no-new-privileges:true
read_only: false
@@ -35,6 +37,6 @@ volumes:
name: picoshare_data
networks:
picoshare-network:
caddy-files:
driver: bridge
name: picoshare-network
name: caddy-files
infrastructure/services/privatebin/config/conf.php
+11
View File
@@ -274,6 +274,17 @@ dir = PATH "data"
;version = "latest"
;bucket = "my-bucket"
;[shlink]
; - Shlink requires you to make a post call with a generated API key.
; use this section to setup the API key and URL. In order to use this section,
; "urlshortener" needs to point to the base URL of your PrivateBin
; instance with "?shortenviashlink&link=" appended. For example:
; urlshortener = "${basepath}?shortenviashlink&link="
; This URL will in turn call Shlink on the server side, using the URL from
; "apiurl" and the API Key from the "apikey" parameters below.
; apiurl = "https://shlink.example.com/rest/v3/short-urls"
; apikey = "your_api_key"
;[yourls]
; When using YOURLS as a "urlshortener" config item:
; - By default, "urlshortener" will point to the YOURLS API URL, with or without
infrastructure/services/privatebin/docker-compose.privatebin.yml
+6 -4
View File
@@ -5,14 +5,16 @@ services:
container_name: privatebin
profiles:
- privatebin
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
volumes:
- privatebin_data:/srv/data
- ./config/conf.php:/srv/cfg/conf.php:ro
environment:
- TZ=${TZ:-Europe/Paris}
networks:
- privatebin-network
- caddy-tools
security_opt:
- no-new-privileges:true
read_only: true
@@ -30,6 +32,6 @@ volumes:
name: privatebin_data
networks:
privatebin-network:
caddy-tools:
driver: bridge
name: privatebin-network
name: caddy-tools
infrastructure/services/projectsend/docker-compose.projectsend.yml
+12 -6
View File
@@ -5,7 +5,7 @@ services:
container_name: projectsend
profiles:
- projectsend
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
env_file:
@@ -14,7 +14,8 @@ services:
- projectsend_config:/config
- projectsend_share:/data
networks:
- projectsend-network
- caddy-files
- projectsend-internal
security_opt:
- no-new-privileges:true
cap_drop:
@@ -29,14 +30,16 @@ services:
- projectsend
depends_on:
- caddy
restart: on-failure:5
restart: on-failure:7
volumes:
- projectsend_db:/var/lib/mysql:rw
env_file:
- ./env/projectsend_db.env
environment:
- TZ=${TZ:-Europe/Paris}
command: '--default-authentication-plugin=mysql_native_password'
networks:
- projectsend-network
- projectsend-internal
security_opt:
- no-new-privileges:true
@@ -50,6 +53,9 @@ volumes:
networks:
projectsend-network:
caddy-files:
driver: bridge
name: projectsend-network
name: caddy-files
projectsend-internal:
driver: bridge
name: projectsend-internal
infrastructure/services/psitransfer/docker-compose.psitransfer.yml
+6 -4
View File
@@ -5,16 +5,18 @@ services:
container_name: psitransfer
profiles:
- psitransfer
restart: on-failure:5
restart: on-failure:7
# user: ${PUID:-1000}:${PGID:-1000}
depends_on:
- caddy
env_file:
- ./env/psitransfer.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- psitransfer_data:/data
networks:
- psitransfer-network
- caddy-files
security_opt:
- no-new-privileges:true
read_only: true
@@ -32,6 +34,6 @@ volumes:
name: psitransfer_data
networks:
psitransfer-network:
caddy-files:
driver: bridge
name: psitransfer-network
name: caddy-files
infrastructure/services/qbittorrent/docker-compose.qbittorrent.yml
+5 -4
View File
@@ -5,7 +5,7 @@ services:
container_name: qbittorrent
profiles:
- qbittorrent
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
env_file:
@@ -13,6 +13,7 @@ services:
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
- TZ=${TZ:-Europe/Paris}
ports:
- 6881:6881
- 6881:6881/udp
@@ -21,7 +22,7 @@ services:
- public_data:/downloads
- private_data:/private_downloads
networks:
- qbittorrent-network
- caddy-media
security_opt:
- no-new-privileges:true
@@ -34,6 +35,6 @@ volumes:
name: private_data
networks:
qbittorrent-network:
caddy-media:
driver: bridge
name: qbittorrent-network
name: caddy-media
infrastructure/services/qbittorrent/env/qbittorrent.env
Vendored
-1
View File
@@ -1,4 +1,3 @@
TZ=Etc/UTC
WEBUI_PORT=8080
TORRENTING_PORT=6881
# Use alternative WebUI: /vuetorrent
infrastructure/services/satisfactory-server/backup/docker-compose.backup.yml
+1 -1
View File
@@ -6,7 +6,7 @@ services:
- satisfactory_backup
depends_on:
- satisfactory_server
restart: on-failure:5
restart: on-failure:7
env_file:
- ./env/satisfactory_backup.env
volumes:
infrastructure/services/satisfactory-server/satisfactory/docker-compose.satisfactory.yml
+2 -1
View File
@@ -5,7 +5,7 @@ services:
container_name: satisfactory_server
profiles:
- satisfactory_server
restart: on-failure:5
restart: on-failure:7
ports:
- 7777:7777/udp
- 7777:7777/tcp
@@ -19,6 +19,7 @@ services:
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
- TZ=${TZ:-Europe/Paris}
security_opt:
- no-new-privileges:true
healthcheck:
infrastructure/services/searxng/docker-compose.searxng.yml
+16 -8
View File
@@ -1,17 +1,20 @@
name: searxng
services:
searxng:
container_name: searxng
image: docker.io/searxng/searxng:${SEARXNG_VERSION:-latest}
restart: always
restart: on-failure:7
depends_on:
- caddy
profiles:
- searxng
# ports:
# - ${SEARXNG_PORT-8080}:8080
env_file: ./config/searxng.env
environment:
- TZ=${TZ:-Europe/Paris}
networks:
- searxng-network
- caddy-tools
- searxng-internal
volumes:
- searxng-config:/etc/searxng/
- searxng-data:/var/cache/searxng/
@@ -25,16 +28,21 @@ services:
- searxng
image: docker.io/valkey/valkey:9-alpine
command: valkey-server --save 30 1 --loglevel warning
restart: always
restart: on-failure:7
environment:
- TZ=${TZ:-Europe/Paris}
networks:
- searxng-network
- searxng-internal
volumes:
- valkey-data:/data/
networks:
searxng-network:
caddy-tools:
driver: bridge
name: searxng-network
name: caddy-tools
searxng-internal:
driver: bridge
name: searxng-internal
volumes:
searxng-data: {}
infrastructure/services/stirlingpdf/docker-compose.stirlingpdf.yml
+6 -4
View File
@@ -5,16 +5,18 @@ services:
container_name: stirlingpdf
profiles:
- stirlingpdf
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
env_file:
- ./env/stirlingpdf.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- stirlingpdf_config:/configs
- stirlingpdf_tessdata:/usr/share/tessdata
networks:
- stirlingpdf-network
- caddy-tools
security_opt:
- no-new-privileges:true
read_only: false
@@ -26,6 +28,6 @@ volumes:
name: stirlingpdf_tessdata
networks:
stirlingpdf-network:
caddy-tools:
driver: bridge
name: stirlingpdf-network
name: caddy-tools
infrastructure/services/syncthing/docker-compose.syncthing.yml
+5 -4
View File
@@ -7,18 +7,19 @@ services:
- syncthing
depends_on:
- caddy
restart: on-failure:5
restart: on-failure:7
env_file:
- ./env/syncthing.env
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
- TZ=${TZ:-Europe/Paris}
volumes:
- syncthing_config:/config
- public_data:/data1
- private_data:/data2
networks:
- syncthing-network
- caddy-media
security_opt:
- no-new-privileges:true
@@ -31,6 +32,6 @@ volumes:
name: private_data
networks:
syncthing-network:
caddy-media:
driver: bridge
name: syncthing-network
name: caddy-media
infrastructure/services/syncthing/env/syncthing.env
Vendored
-1
View File
@@ -1 +0,0 @@
TZ=Etc/UTC
infrastructure/services/teamfortress2-server/backup/docker-compose.backup.yml
+1 -1
View File
@@ -6,7 +6,7 @@ services:
- teamfortress2_backup
depends_on:
- teamfortress2_server
restart: on-failure:5
restart: on-failure:7
env_file:
- ./env/teamfortress2_backup.env
volumes:
infrastructure/services/teamfortress2-server/teamfortress2/docker-compose.teamfortress2.yml
+4 -2
View File
@@ -5,7 +5,7 @@ services:
container_name: teamfortress2_server
profiles:
- teamfortress2_server
restart: on-failure:5
restart: on-failure:7
ports:
- "27015:27015/tcp"
- "27015:27015/udp"
@@ -15,9 +15,11 @@ services:
- teamfortress2-network
env_file:
- ./env/teamfortress2.env
# environment:
environment:
- TZ=${TZ:-Europe/Paris}
# - PUID=${PUID:-1000}
# - PGID=${PGID:-1000}
security_opt:
- no-new-privileges:true
cap_drop:
infrastructure/services/transmission/docker-compose.transmission.yml
+4 -4
View File
@@ -5,7 +5,7 @@ services:
container_name: transmission
profiles:
- transmission
restart: on-failure:5
restart: on-failure:7
depends_on:
- caddy
env_file:
@@ -18,7 +18,7 @@ services:
- public_data:/downloads
- transmission_watch:/watch
networks:
- transmission-network
- caddy-media
security_opt:
- no-new-privileges:true
@@ -33,6 +33,6 @@ volumes:
name: private_data
networks:
transmission-network:
caddy-media:
driver: bridge
name: transmission-network
name: caddy-media
infrastructure/services/uptime-kuma/docker-compose.uptime-kuma.yml
+6 -5
View File
@@ -7,12 +7,13 @@ services:
- uptime-kuma
volumes:
- uptimekuma_data:/app/data
# - /var/run/docker.sock:/var/run/docker.sock:ro
restart: on-failure:5
environment:
- TZ=${TZ:-Europe/Paris}
restart: on-failure:7
depends_on:
- caddy
networks:
- uptimekuma-network
- caddy-infra
security_opt:
- no-new-privileges:true
cap_drop:
@@ -23,6 +24,6 @@ volumes:
name: uptimekuma_data
networks:
uptimekuma-network:
caddy-infra:
driver: bridge
name: uptimekuma-network
name: caddy-infra
infrastructure/services/wordpress/docker-compose.wordpress.yml
+17 -7
View File
@@ -5,17 +5,20 @@ services:
container_name: wordpress
profiles:
- wordpress
restart: on-failure:5
restart: on-failure:7
depends_on:
- wordpress_db
- caddy
env_file:
- ./env/wordpress.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- ./config/wordpress/php.ini:/usr/local/etc/php/conf.d/custom.ini:ro
- wordpress:/var/www/html:rw
networks:
- wordpress-network
- caddy-web
- wordpress-internal
security_opt:
- no-new-privileges:true
@@ -28,14 +31,16 @@ services:
- wordpress
depends_on:
- caddy
restart: on-failure:5
restart: on-failure:7
volumes:
- wordpress_db:/var/lib/mysql:rw
env_file:
- ./env/wordpress_db.env
environment:
- TZ=${TZ:-Europe/Paris}
command: '--default-authentication-plugin=mysql_native_password'
networks:
- wordpress-network
- wordpress-internal
security_opt:
- no-new-privileges:true
@@ -46,9 +51,11 @@ services:
- wordpress
depends_on:
- wordpress
restart: on-failure:5
restart: on-failure:7
env_file:
- ./env/wordpress_backup.env
environment:
- TZ=${TZ:-Europe/Paris}
volumes:
- wordpress_backup:/mnt/restic
- wordpress_db:/data/wordpress_db:ro
@@ -68,6 +75,9 @@ volumes:
name: wordpress_backup
networks:
wordpress-network:
caddy-web:
driver: bridge
name: wordpress-network
name: caddy-web
wordpress-internal:
driver: bridge
name: wordpress-internal