Makefile

@@ -13,7 +13,7 @@
 
 DOCKER := docker
 
-PROFILES := webserver wordpress adminer uptime-kuma portainer qbittorrent gitea jellyfin watchtower backup syncthing openssh
+PROFILES := webserver wordpress adminer uptime-kuma portainer qbittorrent gitea jellyfin watchtower backup openssh
 PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
 
 COMPOSE_FILES :=  $(shell find docker-compose*.yml | sed -e 's/^/--file /')

README.md

@@ -70,12 +70,10 @@ And then, caddy will generate the certificate for you and renew it automatically
 | git.bensuperpc.org | Sub | Gitea for git |
 | link.bensuperpc.org | Sub | For link shortener |
 | jellyfin.bensuperpc.org | Sub | Jellyfin for media server |
-| syncthing.bensuperpc.org | Sub | SyncThing for file synchronization |
-| ssh.bensuperpc.org | Sub | Openssh for ssh |
 | bensuperpc.com | Main | Redirect to bensuperpc.org |
-| bensuperpc.fr | Main | Redirect to bensuperpc.org |
+| bensuperpc.fr | Sub | Redirect to bensuperpc.org |
-| bensuperpc.net | Main | Redirect to bensuperpc.org |
+| bensuperpc.net | Sub | Redirect to bensuperpc.org |
-| bensuperpc.ovh | Main | Redirect to bensuperpc.org |
+| bensuperpc.ovh | Sub | Redirect to bensuperpc.org |
 
 ### Configure the infrastructure
 
@@ -165,8 +163,6 @@ You can find all services on the [docker-compose.yml](docker-compose.yml) file o
 | Torrent | Torrent server | [torrent.bensuperpc.org](https://torrent.bensuperpc.org) |
 | Gitea | Gitea for git | [git.bensuperpc.org](https://git.bensuperpc.org) |
 | Jellyfin | Jellyfin for media server | [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) |
-| SyncThing | SyncThing for file synchronization | [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) |
-| Openssh | Openssh for ssh | [ssh.bensuperpc.org](https://ssh.bensuperpc.org) |
 
 ## URL
 

caddy/bensuperpc.org/Caddyfile

@@ -29,9 +29,6 @@ www.bensuperpc.org {
 
 		# clickjacking protection
 		X-Frame-Options DENY
-
-		# Disable powerful features we don't need
-        Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
 	}
 }
 
@@ -63,12 +60,6 @@ ssh.bensuperpc.org {
 	reverse_proxy openssh:2222
 }
 
-syncthing.bensuperpc.org {
-	reverse_proxy syncthing:8384 {
-		header_up Host {upstream_hostport}
-	}
-}
-
 link.bensuperpc.org {
 	redir /rickroll https://www.youtube.com/watch?v=dQw4w9WgXcQ permanent
 	redir /babyshark https://www.youtube.com/watch?v=XqZsoesa55w permanent

docker-compose.backup.yml

@@ -17,7 +17,7 @@ services:
       - caddy_config:/backup/caddy_config:ro
 #      - gitea_data:/backup/gitea_data:ro
 #      - gitea_config:/backup/gitea_config:ro
-#      - wordpress_db:/backup/wordpress_db:ro
+#      - database:/backup/database:ro
 #      - wordpress:/backup/wordpress:ro
 #      - jellyfin_config:/backup/jellyfin_config:ro
 #      - jellyfin_data:/backup/jellyfin_data:ro

docker-compose.caddy.yml

@@ -18,10 +18,6 @@ services:
       - ./caddy:/etc/caddy:ro
     networks:
       - infra-network
-    env_file:
-      - env/caddy.env
-    cap_add:
-      - NET_ADMIN
     security_opt:
       - no-new-privileges:true
 #    cap_drop:
@@ -33,11 +29,6 @@ services:
 #      - SETGID
 #      - SETUID
 #      - NET_BIND_SERVICE
-    healthcheck:
-      test: pidof caddy || exit 1
-      interval: 120s
-      timeout: 10s
-      retries: 3
 
 volumes:
   caddy_data:

docker-compose.syncthing.yml

@@ -1,25 +0,0 @@
-version: '3.9'
-
-services:
-  # syncthing
-  syncthing:
-    image: linuxserver/syncthing:latest
-    container_name: syncthing
-    profiles:
-      - syncthing
-    restart: on-failure
-    env_file:
-      - env/syncthing.env
-    volumes:
-      - syncthing_config:/config
-      - syncthing_data:/data1
-    networks:
-      - infra-network
-    security_opt:
-      - no-new-privileges:true
-
-volumes:
-  syncthing_config:
-    name: syncthing_config
-  syncthing_data:
-    name: syncthing_data

docker-compose.wordpress.yml

@@ -32,7 +32,7 @@ services:
       - caddy
     restart: on-failure
     volumes:
-      - wordpress_db:/var/lib/mysql:rw
+      - database:/var/lib/mysql:rw
     env_file:
       - env/wordpress_db.env
     command: '--default-authentication-plugin=mysql_native_password'
@@ -42,7 +42,7 @@ services:
       - no-new-privileges:true
 
 volumes:
-  wordpress_db:
+  database:
-    name: wordpress_db
+    name: database
   wordpress:
     name: wordpress

env/syncthing.env

@@ -1,2 +0,0 @@
-PUID=1000
-PGID=1000