mirror of
https://github.com/bensuperpc/infrastructure.git
synced 2025-06-24 19:33:34 +02:00
Compare commits
1 Commits
4496211aa5
...
dns
| Author | SHA1 | Date | |
|---|---|---|---|
| 6dd7a30b03 |
@ -1,15 +0,0 @@
|
||||
name: Build And Test
|
||||
run-name: ${{ gitea.actor }} is runs ci pipeline
|
||||
on: [ push ]
|
||||
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- run: ls
|
||||
publish:
|
||||
runs-on: cth-ubuntu-latest
|
||||
needs: build
|
||||
if: gitea.ref == 'refs/heads/main'
|
||||
steps:
|
||||
- run: ls
|
||||
20
.github/workflows/main.yml
vendored
20
.github/workflows/main.yml
vendored
@ -26,21 +26,7 @@ jobs:
|
||||
with:
|
||||
submodules: "recursive"
|
||||
fetch-depth: 0
|
||||
- name: "Update server image"
|
||||
run: make update-docker
|
||||
- name: "Update server"
|
||||
run: make update
|
||||
- name: "Build server"
|
||||
run: make build
|
||||
# - name: "Start server"
|
||||
# run: make start
|
||||
- name: "Logs server"
|
||||
run: make logs
|
||||
- name: "State server"
|
||||
run: make state
|
||||
- name: "Stop server"
|
||||
run: make stop
|
||||
- name: "Down server"
|
||||
run: make down
|
||||
- name: "Clean server"
|
||||
run: make clean
|
||||
- name: "Purge server"
|
||||
run: make purge
|
||||
run: make build
|
||||
37
Makefile
37
Makefile
@ -13,66 +13,57 @@
|
||||
|
||||
DOCKER := docker
|
||||
|
||||
TORRENTS_SERVICES := qbittorrent transmission
|
||||
SHARING_SERVICES := psitransfer picoshare privatebin projectsend jellyfin dufs
|
||||
ADMIN_SERVICES := yacht uptime-kuma adminer
|
||||
UTILS_SERVICES := it-tools stirlingpdf
|
||||
|
||||
PROFILES := caddy wordpress syncthing gitea homepage $(SHARING_SERVICES) $(TORRENTS_SERVICES) $(ADMIN_SERVICES) $(UTILS_SERVICES)
|
||||
PROFILES := caddy wordpress adminer uptime-kuma qbittorrent gitea jellyfin watchtower backup openssh dns-server syncthing
|
||||
PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
|
||||
|
||||
# gitea-runner dozzle watchtower
|
||||
|
||||
COMPOSE_FILES := $(shell find . -name 'docker-compose*.yml' -type f | sed -e 's/^/--file /')
|
||||
|
||||
COMPOSE_DIR := --project-directory ./infrastructure
|
||||
COMPOSE_FILES := $(shell find docker-compose*.yml | sed -e 's/^/--file /')
|
||||
|
||||
.PHONY: build all
|
||||
all: start
|
||||
|
||||
.PHONY: build
|
||||
build:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) build
|
||||
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) build
|
||||
|
||||
.PHONY: start
|
||||
start:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) up -d
|
||||
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) up -d
|
||||
|
||||
.PHONY: start-at
|
||||
start-at:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) up
|
||||
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) up
|
||||
|
||||
.PHONY: docker-check
|
||||
docker-check:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) config
|
||||
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) config
|
||||
|
||||
.PHONY: stop
|
||||
stop: down
|
||||
|
||||
.PHONY: down
|
||||
down:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) down
|
||||
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) down
|
||||
|
||||
.PHONY: restart
|
||||
restart: stop start
|
||||
|
||||
.PHONY: logs
|
||||
logs:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) logs
|
||||
docker compose $(COMPOSE_FILES) logs
|
||||
|
||||
.PHONY: state
|
||||
state:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) ps
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) top
|
||||
docker compose $(COMPOSE_FILES) ps
|
||||
docker compose $(COMPOSE_FILES) top
|
||||
|
||||
.PHONY: update-docker
|
||||
update-docker:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) pull
|
||||
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) pull
|
||||
|
||||
.PHONY: update
|
||||
update: update-docker
|
||||
git submodule update --init --recursive --remote
|
||||
git pull --recurse-submodules --all --progress
|
||||
# git submodule update --init --recursive --remote
|
||||
# git pull --recurse-submodules --all --progress
|
||||
|
||||
.PHONY: clean
|
||||
clean:
|
||||
@ -80,4 +71,4 @@ clean:
|
||||
|
||||
.PHONY: purge
|
||||
purge:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) down -v --rmi all
|
||||
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) down -v --rmi all
|
||||
125
README.md
125
README.md
@ -1,9 +1,10 @@
|
||||
# Infrastructure
|
||||
|
||||
_Open source, decentralized and self-hosted infrastructure for many services._
|
||||
_My personal infrastructure for my servers and services._
|
||||
|
||||
## About
|
||||
|
||||
This is my infrastructure. It's a collection of scripts and configuration files that I use to manage my servers and services.
|
||||
It uses caddy and docker-compose to run my services (And many other things).
|
||||
It's a **work in progress**, and I'm still learning a lot about it.
|
||||
If you have any **questions** or **suggestions**, feel free to open an issue or a pull request.
|
||||
@ -18,12 +19,7 @@ If you have any **questions** or **suggestions**, feel free to open an issue or
|
||||
- [x] Jellyfin (Media server)
|
||||
- [x] Gitea (Git server)
|
||||
- [x] Uptime Kuma (Monitoring)
|
||||
- [x] qbittorrent and transmission (Torrent client/server)
|
||||
- [x] SyncThing (File synchronization)
|
||||
- [x] PsiTransfer (File sharing)
|
||||
- [x] it-tools (Tools for IT)
|
||||
- [x] Privatebin (Pastebin)
|
||||
- [x] Yacht (Web interface for managing docker containers)
|
||||
- [x] Torrent server
|
||||
|
||||
## Screenshots
|
||||
|
||||
@ -35,7 +31,7 @@ If you have any **questions** or **suggestions**, feel free to open an issue or
|
||||
- [Docker Compose](https://docs.docker.com/compose/install/)
|
||||
- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
|
||||
- [Web domain](https://www.ovh.com/world/domains/) (I use OVH)
|
||||
- [Open port 80, 443, 22 on your router](http://192.168.1.1/)
|
||||
- [Open port 80 and 443 on your router](http://192.168.0.1/) (I use a SFR box with default IP)
|
||||
|
||||
***To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...***
|
||||
|
||||
@ -67,23 +63,15 @@ And then, caddy will generate the certificate for you and renew it automatically
|
||||
|
||||
| Domain name | Type | Description |
|
||||
| --- | --- | --- |
|
||||
| [www.bensuperpc.org](https://www.bensuperpc.org) | Main | Homepage |
|
||||
| [wordpress.bensuperpc.org](https://wordpress.bensuperpc.org) | Sub | Wordpress website |
|
||||
| [bensuperpc.org](https://bensuperpc.org) | Main | Main domain |
|
||||
| [adminer.bensuperpc.org](https://adminer.bensuperpc.org) | Sub | Adminer for MariaDB for wordpress only |
|
||||
| [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) | Sub | Uptime Kuma for monitoring |
|
||||
| [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) | Sub | Torrent client/server |
|
||||
| [transmission.bensuperpc.org](https://transmission.bensuperpc.org) | Sub | Torrent client/server |
|
||||
| [torrent.bensuperpc.org](https://torrent.bensuperpc.org) | Sub | Torrent server |
|
||||
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Gitea for git |
|
||||
| [link.bensuperpc.org](https://link.bensuperpc.org) | Sub | For link shortener |
|
||||
| [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) | Sub | Jellyfin for media server |
|
||||
| [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) | Sub | SyncThing for file synchronization |
|
||||
| [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) | Sub | PsiTransfer for file sharing |
|
||||
| [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) | Sub | Tools for IT |
|
||||
| [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) | Sub | Pastebin |
|
||||
| [yacht.bensuperpc.org](https://yacht.bensuperpc.org) | Sub | Web interface for managing docker containers |
|
||||
| [projectsend.bensuperpc.org](https://projectsend.bensuperpc.org) | Sub | ProjectSend for file sharing |
|
||||
| [picoshare.bensuperpc.org](https://picoshare.bensuperpc.org) | Sub | Picoshare for file sharing |
|
||||
| [dufs.bensuperpc.org](https://dufs.bensuperpc.org) | Sub | Dufs for file sharing |
|
||||
| [ssh.bensuperpc.org](https://ssh.bensuperpc.org) | Sub | Openssh for ssh |
|
||||
| bensuperpc.com | Main | Redirect to bensuperpc.org |
|
||||
| bensuperpc.fr | Main | Redirect to bensuperpc.org |
|
||||
| bensuperpc.net | Main | Redirect to bensuperpc.org |
|
||||
@ -99,7 +87,7 @@ You can generate a password with 32 characters:
|
||||
openssl rand -base64 32
|
||||
```
|
||||
|
||||
For the [wordpress.env](infrastructure/wordpress/env/wordpress.env) file, you need to change the password and user for the database.
|
||||
For the [wordpress.env](env/wordpress.env) file, you need to change the password and user for the database.
|
||||
|
||||
```sh
|
||||
WORDPRESS_DB_USER=bensuperpc
|
||||
@ -108,7 +96,7 @@ WORDPRESS_DB_NAME=wordpress
|
||||
WORDPRESS_DB_HOST=wordpress_db:3306
|
||||
```
|
||||
|
||||
For [wordpress_db.env](infrastructure/wordpress/env/wordpress_db.env) file, you need to change the password(s) and user for the database.
|
||||
For [wordpress_db.env](env/wordpress_db.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
MARIADB_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
@ -117,12 +105,7 @@ MARIADB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||
MARIADB_DATABASE=wordpress
|
||||
```
|
||||
|
||||
For [wordpress_backup.env](infrastructure/wordpress/env/wordpress_backup.env) file, you need to change the password(s) for the restic backup.
|
||||
```sh
|
||||
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
```
|
||||
|
||||
For [adminer.env](infrastructure/wordpress/env/adminer.env) file, you need to change the password(s) and user for the database.
|
||||
For [adminer.env](env/adminer.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
MYSQL_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
@ -131,7 +114,7 @@ MYSQL_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||
ADMINER_DEFAULT_SERVER=wordpress_db
|
||||
```
|
||||
|
||||
For [gitea.env](infrastructure/gitea/env/gitea.env) file, you need to change the password(s) and user for the database.
|
||||
For [gitea.env](env/gitea.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
GITEA__database__DB_TYPE=mysql
|
||||
@ -139,10 +122,9 @@ GITEA__database__HOST=database_gitea:3306
|
||||
GITEA__database__NAME=gitea
|
||||
GITEA__database__USER=bensuperpc
|
||||
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
GITEA__security__SECRET_KEY=ykcZt23an1E4lFHWvrCKdAyt16WAiK9c
|
||||
```
|
||||
|
||||
For [gitea_db.env](infrastructure/gitea/env/gitea_db.env) file, you need to change the password(s) and user for the database.
|
||||
For [gitea_db.env](env/gitea_db.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
MYSQL_ROOT_PASSWORD=xpc4zIhHZzWKqVHcjBu4aW6aS7jG8d7X
|
||||
@ -151,52 +133,6 @@ MYSQL_PASSWORD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
MYSQL_DATABASE=gitea
|
||||
```
|
||||
|
||||
For [psitransfer.env](infrastructure/psitransfer/env/psitransfer.env) file, you need to change the secret key.
|
||||
|
||||
```sh
|
||||
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
|
||||
```
|
||||
|
||||
For [yacht.env](infrastructure/yacht/env/yacht.env) file, you need to change the secret key.
|
||||
|
||||
```sh
|
||||
SECRET_KEY=UZvg9nbcGIJlPEB3uI39TAEWyFOz9nm8
|
||||
```
|
||||
|
||||
For [projectsend_db.env](infrastructure/projectsend/env/projectsend_db.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
MARIADB_ROOT_PASSWORD=8O34297GrBfT3Ld34Lfg9mpotmZwbJtt
|
||||
MARIADB_USER=bensuperpc
|
||||
MARIADB_PASSWORD=wdSUa1JEZhXie5AJ5NcX1w73xmpO12EY
|
||||
MARIADB_DATABASE=projectsend
|
||||
```
|
||||
|
||||
For [picoshare.env](infrastructure/picoshare/env/picoshare.env) file, you need to change the secret key.
|
||||
|
||||
```sh
|
||||
PS_SHARED_SECRET=CBuS4DJLqIe93xF1KGYRrnhxUFBqLD2n
|
||||
```
|
||||
|
||||
For [dufs.env](infrastructure/dufs/env/dufs.env) file, you need to change the secret key and if you want the user name.
|
||||
|
||||
```sh
|
||||
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/"
|
||||
```
|
||||
|
||||
|
||||
For [stirlingpdf.env](infrastructure/stirlingpdf/env/stirlingpdf.env) file, it's **completly optional**, you can change the password(s) and user.
|
||||
|
||||
```sh
|
||||
# Enable security, optional
|
||||
DOCKER_ENABLE_SECURITY=true
|
||||
SECURITY_ENABLE_LOGIN=true
|
||||
# Can be disabled after initial login, optional,
|
||||
# default it admin:stirling
|
||||
SECURITY_INITIALLOGIN_USERNAME=admin
|
||||
SECURITY_INITIALLOGIN_PASSWORD=Jw9U039f5xc2mFcacvGvPD9RjwIh4DzO
|
||||
```
|
||||
|
||||
### Start the infrastructure
|
||||
|
||||
Start the website with:
|
||||
@ -219,32 +155,22 @@ make down
|
||||
|
||||
### All services
|
||||
|
||||
You can find all service on this table:
|
||||
You can find all services on the [docker-compose.yml](docker-compose.yml) file or on this table:
|
||||
|
||||
| Service | Description | URL |
|
||||
| --- | --- | --- |
|
||||
| Homepage | Homepage | [www.bensuperpc.org](https://www.bensuperpc.org) |
|
||||
| Wordpress | Wordpress website | [wordpress.bensuperpc.org](https://bensuperpc.org) |
|
||||
| Wordpress | Wordpress website | [bensuperpc.org](https://bensuperpc.org) and [www.bensuperpc.org](https://www.bensuperpc.org) |
|
||||
| Adminer | Adminer for MariaDB | [adminer.bensuperpc.org](https://adminer.bensuperpc.org) |
|
||||
| Uptime Kuma | Uptime Kuma for monitoring | [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) |
|
||||
| qbittorrent | qbittorrent server | [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) |
|
||||
| transmission | transmission server | [transmission.bensuperpc.org](https://transmission.bensuperpc.org) |
|
||||
| Torrent | Torrent server | [torrent.bensuperpc.org](https://torrent.bensuperpc.org) |
|
||||
| Gitea | Gitea for git | [git.bensuperpc.org](https://git.bensuperpc.org) |
|
||||
| Jellyfin | Jellyfin for media server | [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) |
|
||||
| SyncThing | SyncThing for file synchronization | [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) |
|
||||
| PsiTransfer | PsiTransfer for file sharing | [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) |
|
||||
| it-tools | Tools for IT | [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) |
|
||||
| Privatebin | Pastebin | [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) |
|
||||
| Yacht | Web interface for managing docker containers | [yacht.bensuperpc.org](https://yacht.bensuperpc.org) |
|
||||
| ProjectSend | ProjectSend for file sharing | [projectsend.bensuperpc.org](https://projectsend.bensuperpc.org) |
|
||||
| Picoshare | Picoshare for file sharing | [picoshare.bensuperpc.org](https://picoshare.bensuperpc.org) |
|
||||
| Dufs | Dufs for file sharing | [dufs.bensuperpc.org](https://dufs.bensuperpc.org) |
|
||||
| Openssh | Openssh for ssh | [ssh.bensuperpc.org](https://ssh.bensuperpc.org) |
|
||||
|
||||
You can disable some services by removing the service name in PROFILES variable in the [Makefile](Makefile) file.
|
||||
|
||||
To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-containers-using-gitea-runners-600729555e07
|
||||
|
||||
## Sources
|
||||
## Build with
|
||||
|
||||
- [Wordpress](https://wordpress.org/)
|
||||
- [Gnu Make](https://www.gnu.org/software/make/)
|
||||
@ -255,25 +181,8 @@ To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-container
|
||||
- [Docker Hub](https://hub.docker.com/)
|
||||
- [How To Start WordPress with Caddy using Docker Compose](https://minhcung.me/how-to-start-wordpress-with-caddy-using-docker-compose-3d31bb9ef88b)
|
||||
- [Digital Ocean - How To Install WordPress with Docker Compose (nginx)](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-docker-compose)
|
||||
- [Imagisphe](https://imagisphe.re/)
|
||||
- [Letsencrypt](https://letsencrypt.org/)
|
||||
- [Caddy](https://caddyserver.com/)
|
||||
- [Adminer](https://www.adminer.org/)
|
||||
- [Uptime Kuma](https://uptime-kuma.com/)
|
||||
- [qbittorrent](https://www.qbittorrent.org/)
|
||||
- [Transmission](https://transmissionbt.com/)
|
||||
- [Gitea](https://gitea.io/)
|
||||
- [Jellyfin](https://jellyfin.org/)
|
||||
- [SyncThing](https://syncthing.net/)
|
||||
- [PsiTransfer](https://psitransfer.com/)
|
||||
- [It-tools](https://github.com/CorentinTh/it-tools)
|
||||
- [Privatebin](https://github.com/PrivateBin/PrivateBin)
|
||||
- [ghost](https://ghost.org)
|
||||
- [Homepage Tuto](https://belginux.com/installer-homepage-avec-docker/)
|
||||
- [Yacht](https://yacht.sh/)
|
||||
- [ProjectSend](https://www.projectsend.org/)
|
||||
- [Picoshare](https://github.com/mtlynch/picoshare)
|
||||
- [Dufs](https://github.com/sigoden/dufs)
|
||||
|
||||
## License
|
||||
|
||||
|
||||
15
caddy/Caddyfile
Normal file
15
caddy/Caddyfile
Normal file
@ -0,0 +1,15 @@
|
||||
{
|
||||
email bensuperpc@gmail.com
|
||||
key_type p384
|
||||
|
||||
log {
|
||||
output file /data/logs/access.log
|
||||
format console
|
||||
}
|
||||
}
|
||||
|
||||
import bensuperpc.org/Caddyfile
|
||||
import bensuperpc.com/Caddyfile
|
||||
import bensuperpc.net/Caddyfile
|
||||
import bensuperpc.ovh/Caddyfile
|
||||
import bensuperpc.fr/Caddyfile
|
||||
7
caddy/bensuperpc.net/Caddyfile
Normal file
7
caddy/bensuperpc.net/Caddyfile
Normal file
@ -0,0 +1,7 @@
|
||||
bensuperpc.net {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
www.bensuperpc.net {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
@ -1,22 +1,12 @@
|
||||
www.bensuperpc.org {
|
||||
reverse_proxy homepage:3000
|
||||
}
|
||||
|
||||
bensuperpc.org {
|
||||
redir https://www.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
homepage.bensuperpc.org {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
wordpress.bensuperpc.org {
|
||||
root * /var/www/html
|
||||
php_fastcgi wordpress:9000
|
||||
|
||||
file_server
|
||||
encode zstd gzip
|
||||
|
||||
# metrics /metrics
|
||||
|
||||
@disallowed {
|
||||
path /xmlrpc.php
|
||||
path *.sql
|
||||
@ -38,21 +28,15 @@ wordpress.bensuperpc.org {
|
||||
X-Content-Type-Options nosniff
|
||||
|
||||
# clickjacking protection
|
||||
# X-Frame-Options DENY
|
||||
X-Frame-Options DENY
|
||||
|
||||
# Disable powerful features we don't need
|
||||
Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
|
||||
}
|
||||
}
|
||||
|
||||
it-tools.bensuperpc.org {
|
||||
# Load balance between 2 instances
|
||||
reverse_proxy {
|
||||
to it-tools0:80 it-tools1:80
|
||||
lb_policy round_robin
|
||||
lb_retries 3
|
||||
lb_try_interval 1s
|
||||
}
|
||||
bensuperpc.org {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
adminer.bensuperpc.org {
|
||||
@ -67,18 +51,6 @@ torrent.bensuperpc.org {
|
||||
reverse_proxy qbittorrent:8080
|
||||
}
|
||||
|
||||
qbittorrent.bensuperpc.org {
|
||||
redir https://torrent.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
transmission.bensuperpc.org {
|
||||
reverse_proxy transmission:9091
|
||||
}
|
||||
|
||||
gitea.bensuperpc.org {
|
||||
redir https://git.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
git.bensuperpc.org {
|
||||
reverse_proxy gitea:3000
|
||||
}
|
||||
@ -87,16 +59,8 @@ jellyfin.bensuperpc.org {
|
||||
reverse_proxy jellyfin:8096
|
||||
}
|
||||
|
||||
transfer.bensuperpc.org {
|
||||
reverse_proxy psitransfer:3000
|
||||
}
|
||||
|
||||
psitransfer.bensuperpc.org {
|
||||
redir https://transfer.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
picoshare.bensuperpc.org {
|
||||
reverse_proxy picoshare:4001
|
||||
ssh.bensuperpc.org {
|
||||
reverse_proxy openssh:2222
|
||||
}
|
||||
|
||||
syncthing.bensuperpc.org {
|
||||
@ -105,36 +69,8 @@ syncthing.bensuperpc.org {
|
||||
}
|
||||
}
|
||||
|
||||
tools.bensuperpc.org {
|
||||
redir https://it-tools.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
privatebin.bensuperpc.org {
|
||||
reverse_proxy privatebin:8080
|
||||
}
|
||||
|
||||
pastebin.bensuperpc.org {
|
||||
redir https://privatebin.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
dozzle.bensuperpc.org {
|
||||
reverse_proxy dozzle:8080
|
||||
}
|
||||
|
||||
yacht.bensuperpc.org {
|
||||
reverse_proxy yacht:8000
|
||||
}
|
||||
|
||||
projectsend.bensuperpc.org {
|
||||
reverse_proxy projectsend:80
|
||||
}
|
||||
|
||||
dufs.bensuperpc.org {
|
||||
reverse_proxy dufs:5000
|
||||
}
|
||||
|
||||
stirlingpdf.bensuperpc.org {
|
||||
reverse_proxy stirlingpdf:8080
|
||||
dns.bensuperpc.org {
|
||||
reverse_proxy dns-server:5380
|
||||
}
|
||||
|
||||
link.bensuperpc.org {
|
||||
@ -157,13 +93,9 @@ link.bensuperpc.org {
|
||||
redir /scpfb https://youtu.be/9zrKk-1E8zM?si=8R_ZBVG3GzMUYOe8&t=36 permanent
|
||||
redir /mother https://youtu.be/w3NyycHR3fE?si=rNNSW9zYv0bcO2Eu permanent
|
||||
redir /cpu https://www.youtube.com/watch?v=y39D4529FM4 permanent
|
||||
redir /lechanteur https://youtu.be/HXdP15Ubu6M?si=N0qvhqo--3pmSGmb permanent
|
||||
redir /nohero https://youtu.be/4DuUejBkMqE?si=bkB8G6PHwCp56jxb permanent
|
||||
redir /indochine https://youtu.be/M7X6oYg6iro?si=ZRarm3qamTJ8vIJ0 permanent
|
||||
redir /chanteur https://youtu.be/HXdP15Ubu6M?si=N0qvhqo--3pmSGmb permanent
|
||||
redir /bna https://youtu.be/3T3ofoKfEoY?si=_7HkGQXMC7rBng8O permanent
|
||||
redir /jojo https://youtu.be/U0TXIXTzJEY?si=2acWJWX06ju2w4uj permanent
|
||||
redir /patapon https://youtu.be/H6CbNHLHkmk?si=ZvU8SzrOK-oCUXT5 permanent
|
||||
redir /darkwater https://youtu.be/Tr8ZgF4Dc0E?si=CEOmm2J6Jp5rdbbt permanent
|
||||
redir /train https://youtu.be/l8mScKWj3kQ?si=BV07uJ9eP3kzV9Kl permanent
|
||||
redir /jdg https://www.youtube.com/@joueurdugrenier permanent
|
||||
}
|
||||
@ -1,3 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Adminer
|
||||
adminer:
|
||||
@ -5,9 +7,9 @@ services:
|
||||
container_name: adminer
|
||||
profiles:
|
||||
- adminer
|
||||
restart: on-failure:5
|
||||
restart: on-failure
|
||||
env_file:
|
||||
- ./wordpress/env/adminer.env
|
||||
- env/adminer.env
|
||||
depends_on:
|
||||
- wordpress_db
|
||||
- caddy
|
||||
35
docker-compose.backup.yml
Normal file
35
docker-compose.backup.yml
Normal file
@ -0,0 +1,35 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Backup
|
||||
backup:
|
||||
image: offen/docker-volume-backup:latest
|
||||
container_name: backup
|
||||
profiles:
|
||||
- backup
|
||||
restart: on-failure
|
||||
env_file:
|
||||
- env/backup.env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
- backup:/archive
|
||||
- caddy_data:/backup/caddy_data:ro
|
||||
- caddy_config:/backup/caddy_config:ro
|
||||
# - gitea_data:/backup/gitea_data:ro
|
||||
# - gitea_config:/backup/gitea_config:ro
|
||||
# - wordpress_db:/backup/wordpress_db:ro
|
||||
# - wordpress:/backup/wordpress:ro
|
||||
# - jellyfin_config:/backup/jellyfin_config:ro
|
||||
# - jellyfin_data:/backup/jellyfin_data:ro
|
||||
# - jellyfin_cache:/backup/jellyfin_cache:ro
|
||||
# - qbittorrent_config:/backup/qbittorrent_config:ro
|
||||
# - qbittorrent_data:/backup/qbittorrent_data:ro
|
||||
# - uptimekuma_data:/backup/uptimekuma_data:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
backup:
|
||||
name: backup
|
||||
46
docker-compose.caddy.yml
Normal file
46
docker-compose.caddy.yml
Normal file
@ -0,0 +1,46 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Caddy
|
||||
caddy:
|
||||
image: caddy:latest
|
||||
container_name: caddy
|
||||
profiles:
|
||||
- caddy
|
||||
restart: on-failure
|
||||
ports:
|
||||
- 80:80
|
||||
- 443:443
|
||||
volumes:
|
||||
- wordpress:/var/www/html:rw
|
||||
- caddy_data:/data:rw
|
||||
- caddy_config:/config:rw
|
||||
- ./caddy:/etc/caddy:ro
|
||||
networks:
|
||||
- infra-network
|
||||
env_file:
|
||||
- env/caddy.env
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
# cap_drop:
|
||||
# - ALL
|
||||
# cap_add:
|
||||
# - CHOWN
|
||||
# - FOWNER
|
||||
# - DAC_OVERRIDE
|
||||
# - SETGID
|
||||
# - SETUID
|
||||
# - NET_BIND_SERVICE
|
||||
healthcheck:
|
||||
test: pidof caddy || exit 1
|
||||
interval: 120s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
volumes:
|
||||
caddy_data:
|
||||
name: caddy_data
|
||||
caddy_config:
|
||||
name: caddy_config
|
||||
23
docker-compose.dns.yml
Normal file
23
docker-compose.dns.yml
Normal file
@ -0,0 +1,23 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
dns-server:
|
||||
container_name: dns-server
|
||||
hostname: dns-server
|
||||
profiles:
|
||||
- dns-server
|
||||
image: technitium/dns-server:latest
|
||||
restart: on-failure
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
volumes:
|
||||
- dns-config:/etc/dns
|
||||
env_file:
|
||||
- env/technitium.env
|
||||
|
||||
volumes:
|
||||
dns-config:
|
||||
name: dns-config
|
||||
|
||||
@ -1,3 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Gitea
|
||||
gitea:
|
||||
@ -5,14 +7,11 @@ services:
|
||||
container_name: gitea
|
||||
profiles:
|
||||
- gitea
|
||||
restart: on-failure:5
|
||||
restart: on-failure
|
||||
depends_on:
|
||||
- database_gitea
|
||||
- caddy
|
||||
ports:
|
||||
- "22:22"
|
||||
env_file:
|
||||
- ./gitea/env/gitea.env
|
||||
- env/gitea.env
|
||||
volumes:
|
||||
- gitea_data:/var/lib/gitea
|
||||
- gitea_config:/etc/gitea
|
||||
@ -30,37 +29,19 @@ services:
|
||||
profiles:
|
||||
- database
|
||||
- gitea
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- gitea
|
||||
restart: on-failure
|
||||
volumes:
|
||||
- gitea_db:/var/lib/mysql:rw
|
||||
env_file:
|
||||
- ./gitea/env/gitea_db.env
|
||||
- env/gitea_db.env
|
||||
command: '--default-authentication-plugin=mysql_native_password'
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
# Gitea-runner
|
||||
gitea-runner:
|
||||
image: gitea/act_runner:latest
|
||||
container_name: gitea-runner
|
||||
profiles:
|
||||
- gitea-runner
|
||||
depends_on:
|
||||
- gitea
|
||||
restart: on-failure:5
|
||||
env_file:
|
||||
- ./gitea/env/gitea-runner.env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- gitea_runner:/data
|
||||
- ./gitea/config/gitea_runner/config.yaml:/config.yaml:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
gitea_data:
|
||||
name: gitea_data
|
||||
@ -68,5 +49,3 @@ volumes:
|
||||
name: gitea_config
|
||||
gitea_db:
|
||||
name: gitea_db
|
||||
gitea_runner:
|
||||
name: gitea_runner
|
||||
28
docker-compose.jellyfin.yml
Normal file
28
docker-compose.jellyfin.yml
Normal file
@ -0,0 +1,28 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Jellyfin
|
||||
jellyfin:
|
||||
image: jellyfin/jellyfin:latest
|
||||
container_name: jellyfin
|
||||
profiles:
|
||||
- jellyfin
|
||||
restart: on-failure
|
||||
depends_on:
|
||||
- caddy
|
||||
volumes:
|
||||
- jellyfin_config:/config
|
||||
- jellyfin_data:/movies:ro
|
||||
- jellyfin_cache:/cache
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
jellyfin_config:
|
||||
name: jellyfin_config
|
||||
jellyfin_data:
|
||||
name: jellyfin_data
|
||||
jellyfin_cache:
|
||||
name: jellyfin_cache
|
||||
6
docker-compose.networks.yml
Normal file
6
docker-compose.networks.yml
Normal file
@ -0,0 +1,6 @@
|
||||
version: '3.9'
|
||||
|
||||
networks:
|
||||
infra-network:
|
||||
driver: bridge
|
||||
name: infra-network
|
||||
25
docker-compose.openssh.yml
Normal file
25
docker-compose.openssh.yml
Normal file
@ -0,0 +1,25 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Openssh
|
||||
openssh:
|
||||
image: linuxserver/openssh-server:latest
|
||||
container_name: openssh
|
||||
profiles:
|
||||
- openssh
|
||||
restart: on-failure
|
||||
env_file:
|
||||
- env/openssh.env
|
||||
volumes:
|
||||
- openssh_config:/config
|
||||
- openssh_data:/data
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
openssh_config:
|
||||
name: openssh_config
|
||||
openssh_data:
|
||||
name: openssh_data
|
||||
@ -1,3 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# qBittorrent
|
||||
qbittorrent:
|
||||
@ -5,11 +7,11 @@ services:
|
||||
container_name: qbittorrent
|
||||
profiles:
|
||||
- qbittorrent
|
||||
restart: on-failure:5
|
||||
restart: on-failure
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./qbittorrent/env/qbittorrent.env
|
||||
- env/qbittorrent.env
|
||||
volumes:
|
||||
- qbittorrent_config:/config
|
||||
- qbittorrent_data:/downloads
|
||||
@ -1,3 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# syncthing
|
||||
syncthing:
|
||||
@ -5,11 +7,9 @@ services:
|
||||
container_name: syncthing
|
||||
profiles:
|
||||
- syncthing
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
restart: on-failure
|
||||
env_file:
|
||||
- ./syncthing/env/syncthing.env
|
||||
- env/syncthing.env
|
||||
volumes:
|
||||
- syncthing_config:/config
|
||||
- syncthing_data:/data1
|
||||
@ -1,3 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Uptime Kuma
|
||||
uptime-kuma:
|
||||
@ -7,14 +9,8 @@ services:
|
||||
- uptime-kuma
|
||||
volumes:
|
||||
- uptimekuma_data:/app/data
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
uptimekuma_data:
|
||||
name: uptimekuma_data
|
||||
5
docker-compose.volumes.yml
Normal file
5
docker-compose.volumes.yml
Normal file
@ -0,0 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
volumes:
|
||||
uptimekuma_data:
|
||||
name: uptimekuma_data
|
||||
@ -1,3 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Watchtower
|
||||
watchtower:
|
||||
@ -5,9 +7,7 @@ services:
|
||||
container_name: watchtower
|
||||
profiles:
|
||||
- watchtower
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
restart: on-failure
|
||||
networks:
|
||||
- infra-network
|
||||
volumes:
|
||||
@ -1,3 +1,5 @@
|
||||
version: '3.9'
|
||||
|
||||
services:
|
||||
# Wordpress
|
||||
wordpress:
|
||||
@ -5,14 +7,14 @@ services:
|
||||
container_name: wordpress
|
||||
profiles:
|
||||
- wordpress
|
||||
restart: on-failure:5
|
||||
restart: on-failure
|
||||
depends_on:
|
||||
- wordpress_db
|
||||
- caddy
|
||||
env_file:
|
||||
- ./wordpress/env/wordpress.env
|
||||
- env/wordpress.env
|
||||
volumes:
|
||||
- ./wordpress/config/wordpress/php.ini:/usr/local/etc/php/conf.d/custom.ini:ro
|
||||
- ./config/wordpress/php.ini:/usr/local/etc/php/conf.d/custom.ini:ro
|
||||
- wordpress:/var/www/html:rw
|
||||
networks:
|
||||
- infra-network
|
||||
@ -28,40 +30,19 @@ services:
|
||||
- wordpress
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
restart: on-failure
|
||||
volumes:
|
||||
- wordpress_db:/var/lib/mysql:rw
|
||||
env_file:
|
||||
- ./wordpress/env/wordpress_db.env
|
||||
- env/wordpress_db.env
|
||||
command: '--default-authentication-plugin=mysql_native_password'
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
wordpress_backup:
|
||||
image: mazzolino/restic:latest
|
||||
container_name: wordpress_backup
|
||||
profiles:
|
||||
- wordpress
|
||||
depends_on:
|
||||
- wordpress
|
||||
restart: on-failure:5
|
||||
env_file:
|
||||
- ./wordpress/env/wordpress_backup.env
|
||||
volumes:
|
||||
- wordpress_backup:/mnt/restic
|
||||
- wordpress_db:/data/wordpress_db:ro
|
||||
- wordpress:/data/wordpress:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
wordpress_db:
|
||||
name: wordpress_db
|
||||
wordpress:
|
||||
name: wordpress
|
||||
wordpress_backup:
|
||||
name: wordpress_backup
|
||||
name: wordpress
|
||||
4
env/backup.env
vendored
Normal file
4
env/backup.env
vendored
Normal file
@ -0,0 +1,4 @@
|
||||
BACKUP_COMPRESSION="zst"
|
||||
BACKUP_CRON_EXPRESSION="0 2 * * *"
|
||||
# BACKUP_RETENTION_DAYS: '7'
|
||||
# BACKUP_FILENAME="backup-%Y-%m-%dT%H-%M-%S.{{ .Extension }}"
|
||||
7
env/gitea.env
vendored
Normal file
7
env/gitea.env
vendored
Normal file
@ -0,0 +1,7 @@
|
||||
USER_UID=1000
|
||||
USER_GID=1000
|
||||
GITEA__database__DB_TYPE=mysql
|
||||
GITEA__database__HOST=database_gitea:3306
|
||||
GITEA__database__NAME=gitea
|
||||
GITEA__database__USER=bensuperpc
|
||||
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
11
env/openssh.env
vendored
Normal file
11
env/openssh.env
vendored
Normal file
@ -0,0 +1,11 @@
|
||||
PUID=1000
|
||||
PGID=1000
|
||||
PUBLIC_KEY=
|
||||
# PUBLIC_KEY_FILE=
|
||||
# PUBLIC_KEY_DIR=
|
||||
# PUBLIC_KEY_URL=
|
||||
SUDO_ACCESS=false
|
||||
PASSWORD_ACCESS=false
|
||||
# USER_PASSWORD=
|
||||
# USER_PASSWORD_FILE=
|
||||
# USER_NAME=
|
||||
18
env/technitium.env
vendored
Normal file
18
env/technitium.env
vendored
Normal file
@ -0,0 +1,18 @@
|
||||
DNS_SERVER_DOMAIN=dns-server
|
||||
DNS_SERVER_ADMIN_PASSWORD=fddsdfF548TjSNbi490fzZspmLSDf
|
||||
# DNS_SERVER_ADMIN_PASSWORD_FILE=password.txt
|
||||
# DNS_SERVER_PREFER_IPV6=false
|
||||
# DNS_SERVER_WEB_SERVICE_HTTP_PORT=5380
|
||||
# DNS_SERVER_WEB_SERVICE_HTTPS_PORT=53443
|
||||
# DNS_SERVER_WEB_SERVICE_ENABLE_HTTPS=true
|
||||
# DNS_SERVER_WEB_SERVICE_USE_SELF_SIGNED_CERT=false
|
||||
# DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP=true
|
||||
# DNS_SERVER_RECURSION=AllowOnlyForPrivateNetworks
|
||||
# DNS_SERVER_RECURSION_DENIED_NETWORKS=1.1.1.0/24
|
||||
# DNS_SERVER_RECURSION_ALLOWED_NETWORKS=127.0.0.1, 192.168.1.0/24
|
||||
# DNS_SERVER_ENABLE_BLOCKING=false
|
||||
# DNS_SERVER_ALLOW_TXT_BLOCKING_REPORT=false
|
||||
# DNS_SERVER_BLOCK_LIST_URLS=
|
||||
# DNS_SERVER_FORWARDERS=1.1.1.1, 8.8.8.8
|
||||
# DNS_SERVER_FORWARDER_PROTOCOL=Tcp
|
||||
# DNS_SERVER_LOG_USING_LOCAL_TIME=true
|
||||
@ -1,15 +0,0 @@
|
||||
{
|
||||
email bensuperpc@gmail.com
|
||||
key_type p384
|
||||
|
||||
log {
|
||||
output file /data/logs/access.log
|
||||
format json
|
||||
}
|
||||
}
|
||||
|
||||
import bensuperpc.org/*
|
||||
import bensuperpc.com/*
|
||||
import bensuperpc.net/*
|
||||
import bensuperpc.ovh/*
|
||||
import bensuperpc.fr/*
|
||||
@ -1,19 +0,0 @@
|
||||
bensuperpc.net {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
www.bensuperpc.net {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
git.bensuperpc.net {
|
||||
redir https://git.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
jellyfin.bensuperpc.net {
|
||||
redir https://jellyfin.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
uptimekuma.bensuperpc.net {
|
||||
redir https://uptimekuma.bensuperpc.org{uri} permanent
|
||||
}
|
||||
@ -1,62 +0,0 @@
|
||||
services:
|
||||
# Caddy
|
||||
caddy:
|
||||
image: caddy:latest
|
||||
container_name: caddy
|
||||
profiles:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
ports:
|
||||
- 80:80
|
||||
- 443:443
|
||||
volumes:
|
||||
- wordpress:/var/www/html:rw
|
||||
- caddy_data:/data:rw
|
||||
- caddy_config:/config:rw
|
||||
- ./caddy/config:/etc/caddy:ro
|
||||
networks:
|
||||
- infra-network
|
||||
env_file:
|
||||
- ./caddy/env/caddy.env
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
#cap_drop:
|
||||
# - ALL
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
healthcheck:
|
||||
test: pidof caddy || exit 1
|
||||
interval: 120s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
caddy_backup:
|
||||
image: mazzolino/restic:latest
|
||||
container_name: caddy_backup
|
||||
profiles:
|
||||
- caddy
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
env_file:
|
||||
- ./caddy/env/caddy_backup.env
|
||||
volumes:
|
||||
- caddy_backup:/mnt/restic
|
||||
- caddy_data:/data:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
caddy_data:
|
||||
name: caddy_data
|
||||
caddy_config:
|
||||
name: caddy_config
|
||||
caddy_backup:
|
||||
name: caddy_backup
|
||||
|
||||
networks:
|
||||
infra-network:
|
||||
driver: bridge
|
||||
name: infra-network
|
||||
9
infrastructure/caddy/env/caddy_backup.env
vendored
9
infrastructure/caddy/env/caddy_backup.env
vendored
@ -1,9 +0,0 @@
|
||||
#RUN_ON_STARTUP=true
|
||||
BACKUP_CRON=*/30 * * * *
|
||||
RESTIC_REPOSITORY=/mnt/restic
|
||||
RESTIC_BACKUP_SOURCES=/data
|
||||
RESTIC_PASSWORD=YFQh8v3Wi95v0p6h88D4u8C8z4gLfdMw
|
||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
||||
#RESTIC_PRUNE_ARGS=
|
||||
RESTIC_CHECK_ARGS=--read-data-subset=20%
|
||||
@ -1,18 +0,0 @@
|
||||
services:
|
||||
# dozzle
|
||||
dozzle:
|
||||
image: amir20/dozzle:latest
|
||||
container_name: dozzle
|
||||
profiles:
|
||||
- dozzle
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./dozzle/env/dozzle.env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
1
infrastructure/dozzle/env/dozzle.env
vendored
1
infrastructure/dozzle/env/dozzle.env
vendored
@ -1 +0,0 @@
|
||||
DOZZLE_LEVEL=info
|
||||
@ -1,22 +0,0 @@
|
||||
services:
|
||||
# dufs
|
||||
dufs:
|
||||
image: sigoden/dufs:latest
|
||||
container_name: dufs
|
||||
profiles:
|
||||
- dufs
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./dufs/env/dufs.env
|
||||
volumes:
|
||||
- dufs_data:/data
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
dufs_data:
|
||||
name: dufs_data
|
||||
7
infrastructure/dufs/env/dufs.env
vendored
7
infrastructure/dufs/env/dufs.env
vendored
@ -1,7 +0,0 @@
|
||||
DUFS_BIND=0.0.0.0
|
||||
DUFS_PORT=5000
|
||||
DUFS_SERVE_PATH=/data
|
||||
DUFS_HIDDEN=tmp,*.log,*.lock
|
||||
DUFS_ALLOW_ALL=true
|
||||
DUFS_COMPRESS=medium
|
||||
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/"
|
||||
@ -1,98 +0,0 @@
|
||||
# Example configuration file, it's safe to copy this as the default config file without any modification.
|
||||
|
||||
# You don't have to copy this file to your instance,
|
||||
# just run `./act_runner generate-config > config.yaml` to generate a config file.
|
||||
|
||||
log:
|
||||
# The level of logging, can be trace, debug, info, warn, error, fatal
|
||||
level: info
|
||||
|
||||
runner:
|
||||
# Where to store the registration result.
|
||||
file: .runner
|
||||
# Execute how many tasks concurrently at the same time.
|
||||
capacity: 1
|
||||
# Extra environment variables to run jobs.
|
||||
envs:
|
||||
A_TEST_ENV_NAME_1: a_test_env_value_1
|
||||
A_TEST_ENV_NAME_2: a_test_env_value_2
|
||||
# Extra environment variables to run jobs from a file.
|
||||
# It will be ignored if it's empty or the file doesn't exist.
|
||||
env_file: .env
|
||||
# The timeout for a job to be finished.
|
||||
# Please note that the Gitea instance also has a timeout (3h by default) for the job.
|
||||
# So the job could be stopped by the Gitea instance if it's timeout is shorter than this.
|
||||
timeout: 3h
|
||||
# Whether skip verifying the TLS certificate of the Gitea instance.
|
||||
insecure: false
|
||||
# The timeout for fetching the job from the Gitea instance.
|
||||
fetch_timeout: 5s
|
||||
# The interval for fetching the job from the Gitea instance.
|
||||
fetch_interval: 2s
|
||||
# The labels of a runner are used to determine which jobs the runner can run, and how to run them.
|
||||
# Like: "macos-arm64:host" or "ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
|
||||
# Find more images provided by Gitea at https://gitea.com/gitea/runner-images .
|
||||
# If it's empty when registering, it will ask for inputting labels.
|
||||
# If it's empty when execute `daemon`, will use labels in `.runner` file.
|
||||
labels:
|
||||
- "ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
|
||||
- "ubuntu-22.04:docker://gitea/runner-images:ubuntu-22.04"
|
||||
- "ubuntu-20.04:docker://gitea/runner-images:ubuntu-20.04"
|
||||
|
||||
cache:
|
||||
# Enable cache server to use actions/cache.
|
||||
enabled: true
|
||||
# The directory to store the cache data.
|
||||
# If it's empty, the cache data will be stored in $HOME/.cache/actcache.
|
||||
dir: ""
|
||||
# The host of the cache server.
|
||||
# It's not for the address to listen, but the address to connect from job containers.
|
||||
# So 0.0.0.0 is a bad choice, leave it empty to detect automatically.
|
||||
host: ""
|
||||
# The port of the cache server.
|
||||
# 0 means to use a random available port.
|
||||
port: 0
|
||||
# The external cache server URL. Valid only when enable is true.
|
||||
# If it's specified, act_runner will use this URL as the ACTIONS_CACHE_URL rather than start a server by itself.
|
||||
# The URL should generally end with "/".
|
||||
external_server: ""
|
||||
|
||||
container:
|
||||
# Specifies the network to which the container will connect.
|
||||
# Could be host, bridge or the name of a custom network.
|
||||
# If it's empty, act_runner will create a network automatically.
|
||||
network: ""
|
||||
# Whether to use privileged mode or not when launching task containers (privileged mode is required for Docker-in-Docker).
|
||||
privileged: false
|
||||
# And other options to be used when the container is started (eg, --add-host=my.gitea.url:host-gateway).
|
||||
options:
|
||||
# The parent directory of a job's working directory.
|
||||
# NOTE: There is no need to add the first '/' of the path as act_runner will add it automatically.
|
||||
# If the path starts with '/', the '/' will be trimmed.
|
||||
# For example, if the parent directory is /path/to/my/dir, workdir_parent should be path/to/my/dir
|
||||
# If it's empty, /workspace will be used.
|
||||
workdir_parent:
|
||||
# Volumes (including bind mounts) can be mounted to containers. Glob syntax is supported, see https://github.com/gobwas/glob
|
||||
# You can specify multiple volumes. If the sequence is empty, no volumes can be mounted.
|
||||
# For example, if you only allow containers to mount the `data` volume and all the json files in `/src`, you should change the config to:
|
||||
# valid_volumes:
|
||||
# - data
|
||||
# - /src/*.json
|
||||
# If you want to allow any volume, please use the following configuration:
|
||||
# valid_volumes:
|
||||
# - '**'
|
||||
valid_volumes: []
|
||||
# overrides the docker client host with the specified one.
|
||||
# If it's empty, act_runner will find an available docker host automatically.
|
||||
# If it's "-", act_runner will find an available docker host automatically, but the docker host won't be mounted to the job containers and service containers.
|
||||
# If it's not empty or "-", the specified docker host will be used. An error will be returned if it doesn't work.
|
||||
docker_host: ""
|
||||
# Pull docker image(s) even if already present
|
||||
force_pull: true
|
||||
# Rebuild docker image(s) even if already present
|
||||
force_rebuild: false
|
||||
|
||||
host:
|
||||
# The parent directory of a job's working directory.
|
||||
# If it's empty, $HOME/.cache/act/ will be used.
|
||||
workdir_parent:
|
||||
5
infrastructure/gitea/env/gitea-runner.env
vendored
5
infrastructure/gitea/env/gitea-runner.env
vendored
@ -1,5 +0,0 @@
|
||||
GITEA_INSTANCE_URL=https://git.bensuperpc.org
|
||||
GITEA_RUNNER_REGISTRATION_TOKEN=TBGzS0m823Xk732zRqjrbcSWFTEPajj5V5OFzXWP
|
||||
GITEA_RUNNER_NAME=runner-1
|
||||
#GITEA_RUNNER_LABELS=
|
||||
CONFIG_FILE=/config.yaml
|
||||
15
infrastructure/gitea/env/gitea.env
vendored
15
infrastructure/gitea/env/gitea.env
vendored
@ -1,15 +0,0 @@
|
||||
USER_UID=1000
|
||||
USER_GID=1000
|
||||
GITEA__database__DB_TYPE=mysql
|
||||
GITEA__database__HOST=database_gitea:3306
|
||||
GITEA__database__NAME=gitea
|
||||
GITEA__database__USER=bensuperpc
|
||||
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
GITEA__security__SECRET_KEY=ykcZt23an1E4lFHWvrCKdAyt16WAiK9c
|
||||
#GITEA__security__INTERNAL_TOKEN=
|
||||
GITEA__server__DOMAIN=git.bensuperpc.org
|
||||
GITEA__server__SSH_DOMAIN=git.bensuperpc.org
|
||||
GITEA__server__HTTP_PORT=3000
|
||||
GITEA__server__SSH_LISTEN_PORT=22
|
||||
GITEA__server__SSH_PORT=22
|
||||
GITEA__server__ROOT_URL=https://git.bensuperpc.org
|
||||
@ -1,47 +0,0 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/bookmarks
|
||||
|
||||
- Developer:
|
||||
- Github:
|
||||
- abbr: GH
|
||||
href: https://github.com/bensuperpc
|
||||
description: github.com
|
||||
|
||||
- Social:
|
||||
- Reddit:
|
||||
- abbr: RE
|
||||
href: https://reddit.com/u/bensuperpc
|
||||
description: reddit.com
|
||||
- Twitter:
|
||||
- abbr: TW
|
||||
href: https://twitter.com/bensuperpc
|
||||
description: twitter.com
|
||||
- Bluesky:
|
||||
- abbr: BS
|
||||
href: https://bsky.app/profile/bensuperpc.bsky.social
|
||||
description: bsky.app
|
||||
|
||||
- Entertainment:
|
||||
- YouTube:
|
||||
- abbr: YT
|
||||
href: https://youtube.com/c/bensuperpc
|
||||
description: youtube.com
|
||||
- Twitch:
|
||||
- abbr: TW
|
||||
href: https://twitch.tv/bensuperpc
|
||||
description: twitch.tv
|
||||
|
||||
- Friends:
|
||||
- Gnous:
|
||||
- abbr: Gn
|
||||
href: https://gnous.eu/
|
||||
description: gnous.eu
|
||||
- Imagisphe:
|
||||
- abbr: IM
|
||||
href: https://imagisphe.re/
|
||||
description: imagisphe.re
|
||||
- Greep:
|
||||
- abbr: GP
|
||||
href: https://greep.fr/#/
|
||||
description: greep.fr
|
||||
@ -1,10 +0,0 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/docker/
|
||||
|
||||
#jellyfin:
|
||||
# host: jellyfin
|
||||
# port: 8096
|
||||
|
||||
#my-docker:
|
||||
# socket: /var/run/docker.sock
|
||||
@ -1,2 +0,0 @@
|
||||
---
|
||||
# sample kubernetes config
|
||||
@ -1,135 +0,0 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/services
|
||||
|
||||
- Personal:
|
||||
- wordpress:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/wordpress.png
|
||||
href: https://wordpress.bensuperpc.org/
|
||||
description: Wordpress
|
||||
ping: wordpress.bensuperpc.org
|
||||
container: wordpress
|
||||
- uptime-kuma:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/uptime-kuma.png
|
||||
href: https://uptimekuma.bensuperpc.org/
|
||||
description: Uptime Kuma
|
||||
ping: uptimekuma.bensuperpc.org
|
||||
container: uptime-kuma
|
||||
- yacht:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/yacht.png
|
||||
href: https://yacht.bensuperpc.org/
|
||||
description: Yacht
|
||||
ping: yacht.bensuperpc.org
|
||||
container: yacht
|
||||
- dozzle:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dozzle.png
|
||||
href: https://dozzle.bensuperpc.org/
|
||||
description: Dozzle
|
||||
ping: dozzle.bensuperpc.org
|
||||
container: dozzle
|
||||
|
||||
- Sharing:
|
||||
- jellyfin:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/jellyfin.png
|
||||
href: https://jellyfin.bensuperpc.org/
|
||||
description: Jellyfin
|
||||
ping: jellyfin.bensuperpc.org
|
||||
container: jellyfin
|
||||
- psitransfer:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/psitransfer.png
|
||||
href: https://psitransfer.bensuperpc.org/
|
||||
description: PsiTransfer
|
||||
ping: psitransfer.bensuperpc.org
|
||||
container: psitransfer
|
||||
- picoshare:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/picoshare.png
|
||||
href: https://picoshare.bensuperpc.org/
|
||||
description: PicoShare
|
||||
ping: picoshare.bensuperpc.org
|
||||
container: picoshare
|
||||
- privatebin:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/privatebin.png
|
||||
href: https://privatebin.bensuperpc.org/
|
||||
description: PrivateBin
|
||||
ping: privatebin.bensuperpc.org
|
||||
container: privatebin
|
||||
- qbittorrent:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/qbittorrent.png
|
||||
href: https://qbittorrent.bensuperpc.org/
|
||||
description: qBittorrent
|
||||
ping: qbittorrent.bensuperpc.org
|
||||
container: qbittorrent
|
||||
- syncthing:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/syncthing.png
|
||||
href: https://syncthing.bensuperpc.org/
|
||||
description: Syncthing
|
||||
ping: syncthing.bensuperpc.org
|
||||
container: syncthing
|
||||
- transmission:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/transmission.png
|
||||
href: https://transmission.bensuperpc.org/
|
||||
description: Transmission
|
||||
ping: transmission.bensuperpc.org
|
||||
container: transmission
|
||||
- projectsend:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/projectsend.png
|
||||
href: https://projectsend.bensuperpc.org/
|
||||
description: ProjectSend
|
||||
ping: projectsend.bensuperpc.org
|
||||
container: projectsend
|
||||
- dufs:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dufs.png
|
||||
href: https://dufs.bensuperpc.org/
|
||||
description: Dufs
|
||||
ping: dufs.bensuperpc.org
|
||||
container: dufs
|
||||
|
||||
- Utils:
|
||||
- it-tools:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
|
||||
href: https://it-tools.bensuperpc.org/
|
||||
description: IT Tools
|
||||
ping: it-tools.bensuperpc.org
|
||||
container: it-tools0
|
||||
- stirlingpdf:
|
||||
#icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/stirlingpdf.png
|
||||
href: https://stirlingpdf.bensuperpc.org/
|
||||
description: StirlingPDF
|
||||
ping: stirlingpdf.bensuperpc.org
|
||||
container: stirlingpdf
|
||||
|
||||
- gitea:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/gitea.png
|
||||
href: https://gitea.bensuperpc.org/
|
||||
description: Gitea
|
||||
ping: gitea.bensuperpc.org
|
||||
container: gitea
|
||||
|
||||
- Games:
|
||||
- minecraft:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/minecraft.png
|
||||
# href: https://minecraft.bensuperpc.org/
|
||||
description: Minecraft server
|
||||
# ping: minecraft.bensuperpc.org
|
||||
container: minecraft-server
|
||||
- 7dtd:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
|
||||
# href: https://7dtd.bensuperpc.org/
|
||||
description: 7 Days to Die server
|
||||
# ping: 7dtd.bensuperpc.org
|
||||
container: 7dtd-server
|
||||
- Others:
|
||||
- gitea-runner:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/gitea.png
|
||||
# href: https://gitea.bensuperpc.org/
|
||||
description: Gitea Runner
|
||||
ping: gitea.bensuperpc.org
|
||||
container: gitea-runner
|
||||
|
||||
- watchtower:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/watchtower.png
|
||||
#href: https://watchtower.bensuperpc.org/
|
||||
description: Watchtower
|
||||
ping: watchtower.bensuperpc.org
|
||||
container: watchtower
|
||||
|
||||
@ -1,60 +0,0 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/settings
|
||||
|
||||
title: Bensuperpc
|
||||
|
||||
base: https://www.bensuperpc.org
|
||||
|
||||
favicon: /images/favicon.ico
|
||||
|
||||
logpath: /app/logs
|
||||
|
||||
background:
|
||||
image: /images/electronic.jpg
|
||||
blur: md
|
||||
opacity: 50
|
||||
brightness: 50
|
||||
|
||||
theme: dark
|
||||
color: slate
|
||||
|
||||
language: en
|
||||
|
||||
layout:
|
||||
Personal:
|
||||
style: row
|
||||
columns: 6
|
||||
Media:
|
||||
style: row
|
||||
columns: 6
|
||||
Sharing:
|
||||
style: row
|
||||
columns: 6
|
||||
Utils:
|
||||
style: row
|
||||
columns: 6
|
||||
initiallyCollapsed: false
|
||||
Others:
|
||||
style: row
|
||||
columns: 6
|
||||
initiallyCollapsed: false
|
||||
Games:
|
||||
style: row
|
||||
columns: 6
|
||||
initiallyCollapsed: false
|
||||
|
||||
quicklaunch:
|
||||
searchDescriptions: true
|
||||
hideInternetSearch: false
|
||||
hideVisitURL: false
|
||||
|
||||
hideVersion: true
|
||||
|
||||
headerStyle: boxed
|
||||
|
||||
useEqualHeights: true
|
||||
|
||||
#providers:
|
||||
# openweathermap: openweathermapapikey
|
||||
# weatherapi: weatherapiapikey
|
||||
@ -1,19 +0,0 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/service-widgets
|
||||
|
||||
- resources:
|
||||
cpu: true
|
||||
memory: true
|
||||
disk: /
|
||||
|
||||
- search:
|
||||
provider: duckduckgo
|
||||
target: _blank
|
||||
|
||||
- datetime:
|
||||
text_size: xl
|
||||
locale: fr
|
||||
format:
|
||||
timeStyle: long
|
||||
dateStyle: long
|
||||
@ -1,25 +0,0 @@
|
||||
services:
|
||||
# homepage
|
||||
homepage:
|
||||
image: ghcr.io/gethomepage/homepage:latest
|
||||
container_name: homepage
|
||||
profiles:
|
||||
- homepage
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./homepage/env/homepage.env
|
||||
volumes:
|
||||
- homepage_log:/app/logs
|
||||
- ./homepage/config:/app/config:ro
|
||||
- ./homepage/image:/app/public/images:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
homepage_log:
|
||||
name: homepage_log
|
||||
2
infrastructure/homepage/env/homepage.env
vendored
2
infrastructure/homepage/env/homepage.env
vendored
@ -1,2 +0,0 @@
|
||||
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
|
||||
#PSITRANSFER_PORT=3000
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 569 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 295 KiB |
@ -1,44 +0,0 @@
|
||||
services:
|
||||
# it-tools
|
||||
it-tools0:
|
||||
image: corentinth/it-tools:latest
|
||||
container_name: it-tools0
|
||||
profiles:
|
||||
- it-tools
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
read_only: false
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
it-tools1:
|
||||
image: corentinth/it-tools:latest
|
||||
container_name: it-tools1
|
||||
profiles:
|
||||
- it-tools
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
read_only: false
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
@ -1,43 +0,0 @@
|
||||
services:
|
||||
# Jellyfin
|
||||
jellyfin:
|
||||
image: jellyfin/jellyfin:latest
|
||||
container_name: jellyfin
|
||||
profiles:
|
||||
- jellyfin
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./jellyfin/env/jellyfin.env
|
||||
volumes:
|
||||
- jellyfin_config:/config
|
||||
- jellyfin_data_movies:/movies:rw
|
||||
- jellyfin_data_series:/series:rw
|
||||
- jellyfin_data_documentaries:/documentaries:rw
|
||||
- jellyfin_data_musics:/musics:rw
|
||||
- jellyfin_data_personal:/personal:rw
|
||||
- jellyfin_cache:/cache
|
||||
# Hardware acceleration (For Intel and AMD GPUs)
|
||||
devices:
|
||||
- /dev/dri:/dev/dri
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
jellyfin_config:
|
||||
name: jellyfin_config
|
||||
jellyfin_data_movies:
|
||||
name: jellyfin_data_movies
|
||||
jellyfin_data_series:
|
||||
name: jellyfin_data_series
|
||||
jellyfin_data_documentaries:
|
||||
name: jellyfin_data_documentaries
|
||||
jellyfin_data_musics:
|
||||
name: jellyfin_data_musics
|
||||
jellyfin_data_personal:
|
||||
name: jellyfin_data_personal
|
||||
jellyfin_cache:
|
||||
name: jellyfin_cache
|
||||
@ -1,39 +0,0 @@
|
||||
services:
|
||||
# picoshare
|
||||
picoshare:
|
||||
image: mtlynch/picoshare:latest
|
||||
container_name: picoshare
|
||||
profiles:
|
||||
- picoshare
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./picoshare/env/picoshare.env
|
||||
volumes:
|
||||
- picoshare_data:/data
|
||||
- picoshare_tmpfs:/tmp
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
read_only: true
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
|
||||
volumes:
|
||||
picoshare_data:
|
||||
name: picoshare_data
|
||||
picoshare_tmpfs:
|
||||
name: picoshare_tmpfs
|
||||
driver: local
|
||||
driver_opts:
|
||||
type: tmpfs
|
||||
device: tmpfs
|
||||
o: size=1g
|
||||
3
infrastructure/picoshare/env/picoshare.env
vendored
3
infrastructure/picoshare/env/picoshare.env
vendored
@ -1,3 +0,0 @@
|
||||
PS_SHARED_SECRET=CBuS4DJLqIe93xF1KGYRrnhxUFBqLD2n
|
||||
PORT=4001
|
||||
PS_BEHIND_PROXY=true
|
||||
@ -1,283 +0,0 @@
|
||||
;<?php http_response_code(403); /*
|
||||
; config file for PrivateBin
|
||||
;
|
||||
; An explanation of each setting can be find online at https://github.com/PrivateBin/PrivateBin/wiki/Configuration.
|
||||
|
||||
[main]
|
||||
; (optional) set a project name to be displayed on the website
|
||||
; name = "PrivateBin"
|
||||
|
||||
; The full URL, with the domain name and directories that point to the
|
||||
; PrivateBin files, including an ending slash (/). This URL is essential to
|
||||
; allow Opengraph images to be displayed on social networks.
|
||||
; basepath = "https://privatebin.example.com/"
|
||||
|
||||
; enable or disable the discussion feature, defaults to true
|
||||
discussion = true
|
||||
|
||||
; preselect the discussion feature, defaults to false
|
||||
opendiscussion = false
|
||||
|
||||
; enable or disable the display of dates & times in the comments, defaults to true
|
||||
; Note that internally the creation time will still get tracked in order to sort
|
||||
; the comments by creation time, but you can choose not to display them.
|
||||
; discussiondatedisplay = false
|
||||
|
||||
; enable or disable the password feature, defaults to true
|
||||
password = true
|
||||
|
||||
; enable or disable the file upload feature, defaults to false
|
||||
fileupload = false
|
||||
|
||||
; preselect the burn-after-reading feature, defaults to false
|
||||
burnafterreadingselected = false
|
||||
|
||||
; which display mode to preselect by default, defaults to "plaintext"
|
||||
; make sure the value exists in [formatter_options]
|
||||
defaultformatter = "plaintext"
|
||||
|
||||
; (optional) set a syntax highlighting theme, as found in css/prettify/
|
||||
; syntaxhighlightingtheme = "sons-of-obsidian"
|
||||
|
||||
; size limit per paste or comment in bytes, defaults to 10 Mebibytes
|
||||
sizelimit = 10485760
|
||||
|
||||
; template to include, default is "bootstrap" (tpl/bootstrap.php), also
|
||||
; available are "page" (tpl/page.php), the classic ZeroBin style and several
|
||||
; bootstrap variants: "bootstrap-dark", "bootstrap-compact", "bootstrap-page",
|
||||
; which can be combined with "-dark" and "-compact" for "bootstrap-dark-page"
|
||||
; and finally "bootstrap-compact-page" - previews at:
|
||||
; https://privatebin.info/screenshots.html
|
||||
template = "bootstrap-dark"
|
||||
|
||||
; (optional) info text to display
|
||||
; use single, instead of double quotes for HTML attributes
|
||||
;info = "More information on the <a href='https://privatebin.info/'>project page</a>."
|
||||
|
||||
; (optional) notice to display
|
||||
; notice = "Note: This is a test service: Data may be deleted anytime. Kittens will die if you abuse this service."
|
||||
|
||||
; by default PrivateBin will guess the visitors language based on the browsers
|
||||
; settings. Optionally you can enable the language selection menu, which uses
|
||||
; a session cookie to store the choice until the browser is closed.
|
||||
languageselection = false
|
||||
|
||||
; set the language your installs defaults to, defaults to English
|
||||
; if this is set and language selection is disabled, this will be the only language
|
||||
; languagedefault = "en"
|
||||
|
||||
; (optional) URL shortener address to offer after a new paste is created.
|
||||
; It is suggested to only use this with self-hosted shorteners as this will leak
|
||||
; the pastes encryption key.
|
||||
; urlshortener = "https://shortener.example.com/api?link="
|
||||
|
||||
; (optional) Let users create a QR code for sharing the paste URL with one click.
|
||||
; It works both when a new paste is created and when you view a paste.
|
||||
; qrcode = true
|
||||
|
||||
; (optional) Let users send an email sharing the paste URL with one click.
|
||||
; It works both when a new paste is created and when you view a paste.
|
||||
; email = true
|
||||
|
||||
; (optional) IP based icons are a weak mechanism to detect if a comment was from
|
||||
; a different user when the same username was used in a comment. It might get
|
||||
; used to get the IP of a comment poster if the server salt is leaked and a
|
||||
; SHA512 HMAC rainbow table is generated for all (relevant) IPs.
|
||||
; Can be set to one these values:
|
||||
; "none" / "identicon" (default) / "jdenticon" / "vizhash".
|
||||
; icon = "none"
|
||||
|
||||
; Content Security Policy headers allow a website to restrict what sources are
|
||||
; allowed to be accessed in its context. You need to change this if you added
|
||||
; custom scripts from third-party domains to your templates, e.g. tracking
|
||||
; scripts or run your site behind certain DDoS-protection services.
|
||||
; Check the documentation at https://content-security-policy.com/
|
||||
; Notes:
|
||||
; - If you use any bootstrap theme, you can remove the allow-popups from the
|
||||
; sandbox restrictions.
|
||||
; - If you use the bootstrap5 theme, you must change default-src to 'self' to
|
||||
; enable display of the svg icons
|
||||
; - By default this disallows to load images from third-party servers, e.g. when
|
||||
; they are embedded in pastes. If you wish to allow that, you can adjust the
|
||||
; policy here. See https://github.com/PrivateBin/PrivateBin/wiki/FAQ#why-does-not-it-load-embedded-images
|
||||
; for details.
|
||||
; - The 'unsafe-eval' is used in two cases; to check if the browser supports
|
||||
; async functions and display an error if not and for Chrome to enable
|
||||
; webassembly support (used for zlib compression). You can remove it if Chrome
|
||||
; doesn't need to be supported and old browsers don't need to be warned.
|
||||
; cspheader = "default-src 'none'; base-uri 'self'; form-action 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval'; style-src 'self'; font-src 'self'; frame-ancestors 'none'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals allow-downloads"
|
||||
|
||||
; stay compatible with PrivateBin Alpha 0.19, less secure
|
||||
; if enabled will use base64.js version 1.7 instead of 2.1.9 and sha1 instead of
|
||||
; sha256 in HMAC for the deletion token
|
||||
; zerobincompatibility = false
|
||||
|
||||
; Enable or disable the warning message when the site is served over an insecure
|
||||
; connection (insecure HTTP instead of HTTPS), defaults to true.
|
||||
; Secure transport methods like Tor and I2P domains are automatically whitelisted.
|
||||
; It is **strongly discouraged** to disable this.
|
||||
; See https://github.com/PrivateBin/PrivateBin/wiki/FAQ#why-does-it-show-me-an-error-about-an-insecure-connection for more information.
|
||||
; httpwarning = true
|
||||
|
||||
; Pick compression algorithm or disable it. Only applies to pastes/comments
|
||||
; created after changing the setting.
|
||||
; Can be set to one these values: "none" / "zlib" (default).
|
||||
; compression = "zlib"
|
||||
|
||||
[expire]
|
||||
; expire value that is selected per default
|
||||
; make sure the value exists in [expire_options]
|
||||
default = "1week"
|
||||
|
||||
[expire_options]
|
||||
; Set each one of these to the number of seconds in the expiration period,
|
||||
; or 0 if it should never expire
|
||||
5min = 300
|
||||
10min = 600
|
||||
1hour = 3600
|
||||
1day = 86400
|
||||
1week = 604800
|
||||
; Well this is not *exactly* one month, it's 30 days:
|
||||
1month = 2592000
|
||||
1year = 31536000
|
||||
never = 0
|
||||
|
||||
[formatter_options]
|
||||
; Set available formatters, their order and their labels
|
||||
plaintext = "Plain Text"
|
||||
syntaxhighlighting = "Source Code"
|
||||
markdown = "Markdown"
|
||||
|
||||
[traffic]
|
||||
; time limit between calls from the same IP address in seconds
|
||||
; Set this to 0 to disable rate limiting.
|
||||
limit = 10
|
||||
|
||||
; (optional) Set IPs addresses (v4 or v6) or subnets (CIDR) which are exempted
|
||||
; from the rate-limit. Invalid IPs will be ignored. If multiple values are to
|
||||
; be exempted, the list needs to be comma separated. Leave unset to disable
|
||||
; exemptions.
|
||||
; exempted = "1.2.3.4,10.10.10/24"
|
||||
|
||||
; (optional) If you want only some source IP addresses (v4 or v6) or subnets
|
||||
; (CIDR) to be allowed to create pastes, set these here. Invalid IPs will be
|
||||
; ignored. If multiple values are to be exempted, the list needs to be comma
|
||||
; separated. Leave unset to allow anyone to create pastes.
|
||||
; creators = "1.2.3.4,10.10.10/24"
|
||||
|
||||
; (optional) if your website runs behind a reverse proxy or load balancer,
|
||||
; set the HTTP header containing the visitors IP address, i.e. X_FORWARDED_FOR
|
||||
; header = "X_FORWARDED_FOR"
|
||||
|
||||
[purge]
|
||||
; minimum time limit between two purgings of expired pastes, it is only
|
||||
; triggered when pastes are created
|
||||
; Set this to 0 to run a purge every time a paste is created.
|
||||
limit = 300
|
||||
|
||||
; maximum amount of expired pastes to delete in one purge
|
||||
; Set this to 0 to disable purging. Set it higher, if you are running a large
|
||||
; site
|
||||
batchsize = 10
|
||||
|
||||
[model]
|
||||
; name of data model class to load and directory for storage
|
||||
; the default model "Filesystem" stores everything in the filesystem
|
||||
class = Filesystem
|
||||
[model_options]
|
||||
dir = PATH "data"
|
||||
|
||||
;[model]
|
||||
; example of a Google Cloud Storage configuration
|
||||
;class = GoogleCloudStorage
|
||||
;[model_options]
|
||||
;bucket = "my-private-bin"
|
||||
;prefix = "pastes"
|
||||
;uniformacl = false
|
||||
|
||||
;[model]
|
||||
; example of DB configuration for MySQL
|
||||
;class = Database
|
||||
;[model_options]
|
||||
;dsn = "mysql:host=localhost;dbname=privatebin;charset=UTF8"
|
||||
;tbl = "privatebin_" ; table prefix
|
||||
;usr = "privatebin"
|
||||
;pwd = "Z3r0P4ss"
|
||||
;opt[12] = true ; PDO::ATTR_PERSISTENT
|
||||
|
||||
;[model]
|
||||
; example of DB configuration for SQLite
|
||||
;class = Database
|
||||
;[model_options]
|
||||
;dsn = "sqlite:" PATH "data/db.sq3"
|
||||
;usr = null
|
||||
;pwd = null
|
||||
;opt[12] = true ; PDO::ATTR_PERSISTENT
|
||||
|
||||
;[model]
|
||||
; example of DB configuration for PostgreSQL
|
||||
;class = Database
|
||||
;[model_options]
|
||||
;dsn = "pgsql:host=localhost;dbname=privatebin"
|
||||
;tbl = "privatebin_" ; table prefix
|
||||
;usr = "privatebin"
|
||||
;pwd = "Z3r0P4ss"
|
||||
;opt[12] = true ; PDO::ATTR_PERSISTENT
|
||||
|
||||
;[model]
|
||||
; example of S3 configuration for Rados gateway / CEPH
|
||||
;class = S3Storage
|
||||
;[model_options]
|
||||
;region = ""
|
||||
;version = "2006-03-01"
|
||||
;endpoint = "https://s3.my-ceph.invalid"
|
||||
;use_path_style_endpoint = true
|
||||
;bucket = "my-bucket"
|
||||
;accesskey = "my-rados-user"
|
||||
;secretkey = "my-rados-pass"
|
||||
|
||||
;[model]
|
||||
; example of S3 configuration for AWS
|
||||
;class = S3Storage
|
||||
;[model_options]
|
||||
;region = "eu-central-1"
|
||||
;version = "latest"
|
||||
;bucket = "my-bucket"
|
||||
;accesskey = "access key id"
|
||||
;secretkey = "secret access key"
|
||||
|
||||
;[model]
|
||||
; example of S3 configuration for AWS using its SDK default credential provider chain
|
||||
; if relying on environment variables, the AWS SDK will look for the following:
|
||||
; - AWS_ACCESS_KEY_ID
|
||||
; - AWS_SECRET_ACCESS_KEY
|
||||
; - AWS_SESSION_TOKEN (if needed)
|
||||
; for more details, see https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/guide_credentials.html#default-credential-chain
|
||||
;class = S3Storage
|
||||
;[model_options]
|
||||
;region = "eu-central-1"
|
||||
;version = "latest"
|
||||
;bucket = "my-bucket"
|
||||
|
||||
[yourls]
|
||||
; When using YOURLS as a "urlshortener" config item:
|
||||
; - By default, "urlshortener" will point to the YOURLS API URL, with or without
|
||||
; credentials, and will be visible in public on the PrivateBin web page.
|
||||
; Only use this if you allow short URL creation without credentials.
|
||||
; - Alternatively, using the parameters in this section ("signature" and
|
||||
; "apiurl"), "urlshortener" needs to point to the base URL of your PrivateBin
|
||||
; instance with "?shortenviayourls&link=" appended. For example:
|
||||
; urlshortener = "${basepath}?shortenviayourls&link="
|
||||
; This URL will in turn call YOURLS on the server side, using the URL from
|
||||
; "apiurl" and the "access signature" from the "signature" parameters below.
|
||||
|
||||
; (optional) the "signature" (access key) issued by YOURLS for the using account
|
||||
; signature = ""
|
||||
; (optional) the URL of the YOURLS API, called to shorten a PrivateBin URL
|
||||
; apiurl = "https://yourls.example.com/yourls-api.php"
|
||||
|
||||
;[sri]
|
||||
; Subresource integrity (SRI) hashes used in template files. Uncomment and set
|
||||
; these for all js files used. See:
|
||||
; https://github.com/PrivateBin/PrivateBin/wiki/FAQ#user-content-how-to-make-privatebin-work-when-i-have-changed-some-javascript-files
|
||||
;privatebin.js = sha512-[…]
|
||||
@ -1,30 +0,0 @@
|
||||
services:
|
||||
# privatebin
|
||||
privatebin:
|
||||
image: privatebin/nginx-fpm-alpine:latest
|
||||
container_name: privatebin
|
||||
profiles:
|
||||
- privatebin
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
volumes:
|
||||
- privatebin_data:/srv/data
|
||||
- ./privatebin/config/conf.php:/srv/cfg/conf.php:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
read_only: true
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
|
||||
volumes:
|
||||
privatebin_data:
|
||||
name: privatebin_data
|
||||
@ -1,47 +0,0 @@
|
||||
services:
|
||||
# projectsend
|
||||
projectsend:
|
||||
image: linuxserver/projectsend:latest
|
||||
container_name: projectsend
|
||||
profiles:
|
||||
- projectsend
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./projectsend/env/projectsend.env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- projectsend_config:/config
|
||||
- projectsend_share:/data
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
# Database projectsend
|
||||
projectsend_db:
|
||||
image: mariadb:latest
|
||||
container_name: projectsend_db
|
||||
profiles:
|
||||
- database
|
||||
- projectsend
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
volumes:
|
||||
- projectsend_db:/var/lib/mysql:rw
|
||||
env_file:
|
||||
- ./projectsend/env/projectsend_db.env
|
||||
command: '--default-authentication-plugin=mysql_native_password'
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
projectsend_db:
|
||||
name: projectsend_db
|
||||
projectsend_config:
|
||||
name: projectsend_config
|
||||
projectsend_share:
|
||||
name: projectsend_share
|
||||
@ -1 +0,0 @@
|
||||
MAX_UPLOAD=50000
|
||||
@ -1,4 +0,0 @@
|
||||
MARIADB_ROOT_PASSWORD=8O34297GrBfT3Ld34Lfg9mpotmZwbJtt
|
||||
MARIADB_USER=bensuperpc
|
||||
MARIADB_PASSWORD=wdSUa1JEZhXie5AJ5NcX1w73xmpO12EY
|
||||
MARIADB_DATABASE=projectsend
|
||||
@ -1,31 +0,0 @@
|
||||
services:
|
||||
# psitransfer
|
||||
psitransfer:
|
||||
image: psitrax/psitransfer:latest
|
||||
container_name: psitransfer
|
||||
profiles:
|
||||
- psitransfer
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./psitransfer/env/psitransfer.env
|
||||
volumes:
|
||||
- psitransfer_data:/data
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
read_only: true
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
|
||||
volumes:
|
||||
psitransfer_data:
|
||||
name: psitransfer_data
|
||||
@ -1,2 +0,0 @@
|
||||
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
|
||||
#PSITRANSFER_PORT=3000
|
||||
@ -1,26 +0,0 @@
|
||||
services:
|
||||
# stirlingpdf
|
||||
stirlingpdf:
|
||||
image: frooodle/s-pdf:latest
|
||||
container_name: stirlingpdf
|
||||
profiles:
|
||||
- stirlingpdf
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./stirlingpdf/env/stirlingpdf.env
|
||||
volumes:
|
||||
- stirlingpdf_config:/configs
|
||||
- stirlingpdf_tessdata:/usr/share/tessdata
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
read_only: false
|
||||
|
||||
volumes:
|
||||
stirlingpdf_config:
|
||||
name: stirlingpdf_config
|
||||
stirlingpdf_tessdata:
|
||||
name: stirlingpdf_tessdata
|
||||
@ -1,9 +0,0 @@
|
||||
LANGS=en_GB
|
||||
#SYSTEM_ROOTURIPATH=/
|
||||
# Enable security, optional
|
||||
#DOCKER_ENABLE_SECURITY=true
|
||||
#SECURITY_ENABLE_LOGIN=true
|
||||
# Can be disabled after initial login, optional,
|
||||
# default it admin:stirling
|
||||
#SECURITY_INITIALLOGIN_USERNAME=admin
|
||||
#SECURITY_INITIALLOGIN_PASSWORD=Jw9U039f5xc2mFcacvGvPD9RjwIh4DzO
|
||||
@ -1,28 +0,0 @@
|
||||
services:
|
||||
# transmission
|
||||
transmission:
|
||||
image: lscr.io/linuxserver/transmission:latest
|
||||
container_name: transmission
|
||||
profiles:
|
||||
- transmission
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./transmission/env/transmission.env
|
||||
volumes:
|
||||
- transmission_config:/config
|
||||
- transmission_data:/downloads
|
||||
- transmission_watch:/watch
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
transmission_config:
|
||||
name: transmission_config
|
||||
transmission_data:
|
||||
name: transmission_data
|
||||
transmission_watch:
|
||||
name: transmission_watch
|
||||
@ -1,5 +0,0 @@
|
||||
PUID=1000
|
||||
PGID=1000
|
||||
TZ=Etc/UTC
|
||||
USER=admin
|
||||
PASS=4vqXCNGG09JUBe7rXkuQS8MG7ovE6Vxj
|
||||
@ -1,9 +0,0 @@
|
||||
#RUN_ON_STARTUP=true
|
||||
BACKUP_CRON=*/30 * * * *
|
||||
RESTIC_REPOSITORY=/mnt/restic
|
||||
RESTIC_BACKUP_SOURCES=/data
|
||||
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
||||
RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
||||
#RESTIC_PRUNE_ARGS=
|
||||
RESTIC_CHECK_ARGS=--read-data-subset=20%
|
||||
@ -1,23 +0,0 @@
|
||||
services:
|
||||
# yacht
|
||||
yacht:
|
||||
image: selfhostedpro/yacht:latest
|
||||
container_name: yacht
|
||||
profiles:
|
||||
- yacht
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./yacht/env/yacht.env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- yacht_config:/config
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
yacht_config:
|
||||
name: yacht_config
|
||||
3
infrastructure/yacht/env/yacht.env
vendored
3
infrastructure/yacht/env/yacht.env
vendored
@ -1,3 +0,0 @@
|
||||
ADMIN_EMAIL=bensuperpc@gmail.com
|
||||
SECRET_KEY=UZvg9nbcGIJlPEB3uI39TAEWyFOz9nm8
|
||||
#DATABASE_URL=postgresql://user:password@postgresserver/db
|
||||
Reference in New Issue
Block a user