mirror of
https://github.com/bensuperpc/infrastructure.git
synced 2026-05-29 20:26:44 +02:00
Compare commits
113 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 8e9e8f0a4e | |||
| 9f043ac4eb | |||
| 7ff08b937d | |||
| d7f684398e | |||
| bd1078d42e | |||
| 5f8acf4315 | |||
| 1abbb99b2f | |||
| bf80b3a405 | |||
| 5dea9bf9cf | |||
| 91ed7ef60f | |||
| 876e35b736 | |||
| dcdf02e3ce | |||
| ad3fb75871 | |||
| 6e447b865b | |||
| 897be921a6 | |||
| d8d00cbd24 | |||
| 6b39245125 | |||
| f48cbcc522 | |||
| 36e57c4a47 | |||
| 31596675b9 | |||
| 183c181c8f | |||
| 2b902e54be | |||
| fcd4dc85bc | |||
| 840c6fa5b5 | |||
| 628c6fe906 | |||
| 19a6c49949 | |||
| 045d142e27 | |||
| e5e13b11e8 | |||
| 736959c540 | |||
| e942d364fe | |||
| c7b7ce8585 | |||
| 2d268629b5 | |||
| ccc7f82f0a | |||
| 49af326783 | |||
| d6d8fedc11 | |||
| 22f4237b49 | |||
| 81c1188014 | |||
| ee2ed9273a | |||
| 14ca102a0f | |||
| 4fc62cb648 | |||
| e7e544e774 | |||
| e5472d4abb | |||
| f90b8301bd | |||
| 970aad479c | |||
| 81c81a5d83 | |||
| 7595072298 | |||
| ec5cb3c38c | |||
| 591eb61c40 | |||
| b486ac3d0d | |||
| d111652a1c | |||
| 18db276b49 | |||
| 4c910bdf2e | |||
| 2fbbba051f | |||
| 9a6ac97872 | |||
| 951d1130b0 | |||
| 3b4c3cb54c | |||
| 3bdcd4d459 | |||
| b8f69ed6e2 | |||
| 9700b8a379 | |||
| e0ce9cf191 | |||
| 9c9938bc55 | |||
| 33785901fc | |||
| ca1eaf9787 | |||
| f25a6fdb32 | |||
| fb8d683f9f | |||
| 8885463196 | |||
| 7d6d59a4ab | |||
| 68c23b1b0f | |||
| 6c9adab271 | |||
| 6c8f789e58 | |||
| b862f17417 | |||
| bc7167a1b7 | |||
| d53081cd35 | |||
| 5bada9c98b | |||
| ca42926acc | |||
| e5d8ced52d | |||
| b10dcf6603 | |||
| d6cfd4b229 | |||
| d1f13de09e | |||
| 4818e18842 | |||
| 811f6ac7bb | |||
| 540bf34947 | |||
| 6817b3deb0 | |||
| 860be99a4e | |||
| 1b9c6ad1ad | |||
| 35e54a598c | |||
| 018282f8bb | |||
| a265603ff6 | |||
| 6578de0ffa | |||
| 31220657c8 | |||
| 4676eb9cdc | |||
| 754c5ccb9c | |||
| 6ab1b3c486 | |||
| 4496211aa5 | |||
| e430fad46e | |||
| 55bf1ddf70 | |||
| b6d1b9f5a7 | |||
| 54e24022ce | |||
| a65975e840 | |||
| 62e7ec4650 | |||
| 41fe67ba58 | |||
| 0745869554 | |||
| 4dc0d9f56a | |||
| 96d4284d64 | |||
| 1b34b7f9f2 | |||
| b2a3b2623e | |||
| 162250b0d9 | |||
| b819c4398d | |||
| 5b48945835 | |||
| d7a36310ec | |||
| c0aa45026b | |||
| 71ab3026c6 | |||
| 2aaccc2458 |
@@ -1,15 +0,0 @@
|
||||
name: Build And Test
|
||||
run-name: ${{ gitea.actor }} is runs ci pipeline
|
||||
on: [ push ]
|
||||
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- run: ls
|
||||
publish:
|
||||
runs-on: cth-ubuntu-latest
|
||||
needs: build
|
||||
if: gitea.ref == 'refs/heads/main'
|
||||
steps:
|
||||
- run: ls
|
||||
@@ -22,12 +22,14 @@ jobs:
|
||||
timeout-minutes: 30
|
||||
steps:
|
||||
- name: "Checkout Code"
|
||||
uses: actions/checkout@v4
|
||||
uses: actions/checkout@v6
|
||||
with:
|
||||
submodules: "recursive"
|
||||
fetch-depth: 0
|
||||
- name: "Check compose"
|
||||
run: make check
|
||||
- name: "Update server image"
|
||||
run: make update-docker
|
||||
run: make image-update
|
||||
- name: "Build server"
|
||||
run: make build
|
||||
# - name: "Start server"
|
||||
|
||||
@@ -11,7 +11,7 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: "Checkout Code"
|
||||
uses: actions/checkout@v4
|
||||
uses: actions/checkout@v6
|
||||
with:
|
||||
token: ${{ secrets.CI_TOKEN }}
|
||||
repository: ${{ github.repository }}
|
||||
|
||||
@@ -1 +1,2 @@
|
||||
|
||||
/*.tar.gz
|
||||
|
||||
@@ -0,0 +1,77 @@
|
||||
#//////////////////////////////////////////////////////////////
|
||||
#// //
|
||||
#// docker-multimedia, 2024 //
|
||||
#// Created: 30, May, 2021 //
|
||||
#// Modified: 14 November, 2024 //
|
||||
#// file: - //
|
||||
#// - //
|
||||
#// Source: //
|
||||
#// OS: ALL //
|
||||
#// CPU: ALL //
|
||||
#// //
|
||||
#//////////////////////////////////////////////////////////////
|
||||
|
||||
PROJECT_DIRECTORY ?= infrastructure
|
||||
|
||||
DOCKER_EXEC ?= docker
|
||||
|
||||
CONFIG_DIRECTORY ?= presets
|
||||
CONFIG_FILES ?= $(addprefix $(CONFIG_DIRECTORY)/,$(addsuffix .conf,$(CONFIGS)))
|
||||
include $(CONFIG_FILES)
|
||||
|
||||
DOCKER_PROFILES ?=
|
||||
EXTRA_PROFILES ?=
|
||||
|
||||
PROFILE_CMD ?= $(addprefix --profile ,$(DOCKER_PROFILES) $(EXTRA_PROFILES))
|
||||
|
||||
COMPOSE_FILES ?= $(shell find ./$(PROJECT_DIRECTORY) -maxdepth 1 -name 'docker-compose*.yml' -type f | sed -e 's/^/--file /')
|
||||
COMPOSE_DIR ?= --project-directory ./$(PROJECT_DIRECTORY)
|
||||
|
||||
UID ?= 1000
|
||||
GID ?= 1000
|
||||
|
||||
ENV_ARG_VAR ?= PUID=$(UID) PGID=$(GID)
|
||||
|
||||
DOCKER_COMPOSE_COMMAND ?= $(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD)
|
||||
|
||||
.PHONY: build all
|
||||
all: start
|
||||
|
||||
GENERIC_TARGETS := build down up run config logs pull images start restart stop
|
||||
|
||||
.PHONY: $(GENERIC_TARGETS)
|
||||
$(GENERIC_TARGETS):
|
||||
$(DOCKER_COMPOSE_COMMAND) $@
|
||||
|
||||
.PHONY: start-detached
|
||||
start-detached:
|
||||
$(DOCKER_COMPOSE_COMMAND) up -d
|
||||
|
||||
.PHONY: no-start
|
||||
no-start:
|
||||
$(DOCKER_COMPOSE_COMMAND) up --no-start
|
||||
|
||||
.PHONY: state
|
||||
state:
|
||||
$(DOCKER_COMPOSE_COMMAND) ps
|
||||
$(DOCKER_COMPOSE_COMMAND) top
|
||||
|
||||
.PHONY: volumes
|
||||
volumes:
|
||||
$(DOCKER_COMPOSE_COMMAND) config --volumes
|
||||
|
||||
.PHONY: git-update
|
||||
git-update:
|
||||
# git submodule update --init --recursive --remote
|
||||
git pull --recurse-submodules --all --progress
|
||||
|
||||
.PHONY: update
|
||||
update: image-update git-update
|
||||
|
||||
.PHONY: clean
|
||||
clean:
|
||||
docker system prune -f
|
||||
|
||||
.PHONY: purge
|
||||
purge:
|
||||
$(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) down -v --rmi all
|
||||
@@ -1,8 +1,8 @@
|
||||
#//////////////////////////////////////////////////////////////
|
||||
#// //
|
||||
#// Infrastructure, 2024 //
|
||||
#// Script, 2022 //
|
||||
#// Created: 14, April, 2022 //
|
||||
#// Modified: 05, May, 2024 //
|
||||
#// Modified: 30, November, 2024 //
|
||||
#// file: - //
|
||||
#// - //
|
||||
#// Source: //
|
||||
@@ -11,68 +11,21 @@
|
||||
#// //
|
||||
#//////////////////////////////////////////////////////////////
|
||||
|
||||
DOCKER := docker
|
||||
#ADMIN_SERVICES := openssh
|
||||
# uptime-kuma
|
||||
#BLOG_SERVICES := wordpress
|
||||
#IA_SERVICES := open-webui
|
||||
#SHARING_SERVICES := privatebin
|
||||
# jellyfin
|
||||
# psitransfer picoshare projectsend dufs syncthing
|
||||
#UTILS_SERVICES := it-tools omni-tools cyberchef
|
||||
# homepage
|
||||
# stirlingpdf
|
||||
|
||||
PROFILES := caddy wordpress adminer syncthing uptime-kuma jellyfin qbittorrent psitransfer gitea it-tools privatebin homepage yacht
|
||||
PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
|
||||
PROJECT_DIRECTORY := infrastructure
|
||||
CONFIG_DIRECTORY := presets
|
||||
# 7dtd minecraft satisfactory
|
||||
CONFIGS := minecraft satisfactory
|
||||
#DOCKER_PROFILES :=
|
||||
|
||||
# gitea-runner transmission dozzle watchtower
|
||||
|
||||
COMPOSE_FILES := $(shell find . -name 'docker-compose*.yml' -type f | sed -e 's/^/--file /')
|
||||
|
||||
COMPOSE_DIR := --project-directory ./infrastructure
|
||||
|
||||
.PHONY: build all
|
||||
all: start
|
||||
|
||||
.PHONY: build
|
||||
build:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) build
|
||||
|
||||
.PHONY: start
|
||||
start:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) up -d
|
||||
|
||||
.PHONY: start-at
|
||||
start-at:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) up
|
||||
|
||||
.PHONY: docker-check
|
||||
docker-check:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) config
|
||||
|
||||
.PHONY: stop
|
||||
stop: down
|
||||
|
||||
.PHONY: down
|
||||
down:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) down
|
||||
|
||||
.PHONY: restart
|
||||
restart: stop start
|
||||
|
||||
.PHONY: logs
|
||||
logs:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) logs
|
||||
|
||||
.PHONY: state
|
||||
state:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) ps
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) top
|
||||
|
||||
.PHONY: update-docker
|
||||
update-docker:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) pull
|
||||
|
||||
.PHONY: update
|
||||
update: update-docker
|
||||
git submodule update --init --recursive --remote
|
||||
git pull --recurse-submodules --all --progress
|
||||
|
||||
.PHONY: clean
|
||||
clean:
|
||||
$(DOCKER) images --filter=reference='bensuperpc/*' --format='{{.Repository}}:{{.Tag}}' | xargs -r $(DOCKER) rmi -f
|
||||
|
||||
.PHONY: purge
|
||||
purge:
|
||||
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) down -v --rmi all
|
||||
include DockerCompose.mk
|
||||
|
||||
@@ -10,23 +10,32 @@ If you have any **questions** or **suggestions**, feel free to open an issue or
|
||||
|
||||
## Features
|
||||
|
||||
- [x] caddy 2 reverse proxy
|
||||
- [x] caddy 2 HTTP/S reverse proxy
|
||||
- [x] Docker / docker-compose
|
||||
- [x] Caddy
|
||||
- [x] Wordpress (Via FASTCGI/caddy)
|
||||
- [x] Adminer (MariaDB)
|
||||
- [x] Jellyfin (Media server)
|
||||
- [x] Gitea (Git server)
|
||||
- [x] Forgejo (Git server, fork of Gitea)
|
||||
- [x] Uptime Kuma (Monitoring)
|
||||
- [x] qbittorrent and transmission (Torrent client/server)
|
||||
- [x] SyncThing (File synchronization)
|
||||
- [x] PsiTransfer (File sharing)
|
||||
- [x] it-tools (Tools for IT)
|
||||
- [x] PsiTransfer, ProjectSend, Picoshare (File sharing)
|
||||
- [x] it-tools and omni-tools (Tools for IT)
|
||||
- [x] Open-WebUI (Local chatGPT)
|
||||
- [x] Privatebin (Pastebin)
|
||||
- [x] Yacht (Web interface for managing docker containers)
|
||||
- [X] [Satisfactory](https://github.com/bensuperpc/docker-satisfactory)
|
||||
- [x] [7 days to die](https://github.com/bensuperpc/docker-7daystodie)
|
||||
- [x] [minecraft](https://github.com/bensuperpc/docker-minecraft-server)
|
||||
|
||||
## Architecture
|
||||
|
||||

|
||||
|
||||
## Screenshots
|
||||
|
||||
The homepage is a dashboard with many widgets and services.
|
||||
|
||||

|
||||
|
||||
## Installation and configuration
|
||||
|
||||
### Requirements
|
||||
@@ -35,9 +44,25 @@ If you have any **questions** or **suggestions**, feel free to open an issue or
|
||||
- [Docker Compose](https://docs.docker.com/compose/install/)
|
||||
- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
|
||||
- [Web domain](https://www.ovh.com/world/domains/) (I use OVH)
|
||||
- [Open port 80, 443, 22 on your router](http://192.168.1.1/)
|
||||
- [Open port 80, 443, 22, 2222 and 5555 on your router](http://192.168.1.1/)
|
||||
- For games server, you need to open these ports (7777, 25565, 26900, 26901, 26903)
|
||||
|
||||
***To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...***
|
||||
List of ports used by the services in this infrastructure:
|
||||
|
||||
| Port number | Service | Description |
|
||||
| ----------- | ------------- | ----------------- |
|
||||
| 80 | Caddy | HTTP traffic |
|
||||
| 443 | Caddy | HTTPS traffic |
|
||||
| 22 | Forgejo | Git/SSH access |
|
||||
| 2222 | OpenSSH | Global SSH access |
|
||||
| 7777 | Satisfactory | Game server port |
|
||||
| 25565 | Minecraft | Game server port |
|
||||
| 26900 | 7 Days to Die | Game server port |
|
||||
| 26901 | 7 Days to Die | Game server port |
|
||||
| 26903 | 7 Days to Die | Game server port |
|
||||
|
||||
|
||||
**To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...**
|
||||
|
||||
### Clone
|
||||
|
||||
@@ -53,6 +78,8 @@ Go to the folder
|
||||
cd infrastructure
|
||||
```
|
||||
|
||||
Change services you want to enable in the [Makefile](Makefile) file, by default all services are enabled (games servers included).
|
||||
|
||||
### Configure the domain
|
||||
|
||||
For all **bensuperpc.org**, you need to replace it with your domain, example: **mydomain.com**, so the same for **bensuperpc.com** ect...
|
||||
@@ -61,30 +88,33 @@ For all **bensuperpc.org**, you need to replace it with your domain, example: **
|
||||
find . \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i 's/bensuperpc.org/mydomain.com/g'
|
||||
```
|
||||
|
||||
Check if all bensuperpc.* are replaced by your domain in [Caddyfile](caddy/wordpress/Caddyfile)
|
||||
Check if all bensuperpc.* are replaced by your domain in [Caddyfile](caddy/services/wordpress/Caddyfile)
|
||||
|
||||
And then, caddy will generate the certificate for you and renew it automatically :D
|
||||
|
||||
| Domain name | Type | Description |
|
||||
| --- | --- | --- |
|
||||
| [homepage.bensuperpc.org](https://homepage.bensuperpc.org) | Sub | Homepage |
|
||||
| [bensuperpc.org](https://bensuperpc.org) | Main | Main domain |
|
||||
| [adminer.bensuperpc.org](https://adminer.bensuperpc.org) | Sub | Adminer for MariaDB for wordpress only |
|
||||
| [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) | Sub | Uptime Kuma for monitoring |
|
||||
| [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) | Sub | Torrent client/server |
|
||||
| [transmission.bensuperpc.org](https://transmission.bensuperpc.org) | Sub | Torrent client/server |
|
||||
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Gitea for git |
|
||||
| [link.bensuperpc.org](https://link.bensuperpc.org) | Sub | For link shortener |
|
||||
| [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) | Sub | Jellyfin for media server |
|
||||
| [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) | Sub | SyncThing for file synchronization |
|
||||
| [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) | Sub | PsiTransfer for file sharing |
|
||||
| [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) | Sub | Tools for IT |
|
||||
| [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) | Sub | Pastebin |
|
||||
| [yacht.bensuperpc.org](https://yacht.bensuperpc.org) | Sub | Web interface for managing docker containers |
|
||||
| bensuperpc.com | Main | Redirect to bensuperpc.org |
|
||||
| bensuperpc.fr | Main | Redirect to bensuperpc.org |
|
||||
| bensuperpc.net | Main | Redirect to bensuperpc.org |
|
||||
| bensuperpc.ovh | Main | Redirect to bensuperpc.org |
|
||||
| Domain name | Type | Description |
|
||||
| ------------------------------------------------------------------ | ---- | ------------------------------------------------------------ |
|
||||
| [bensuperpc.org](https://bensuperpc.org) | Main | Redirect to [www.bensuperpc.org](https://www.bensuperpc.org) |
|
||||
| [www.bensuperpc.org](https://www.bensuperpc.org) | Main | Homepage |
|
||||
| [open-webui.bensuperpc.org](https://open-webui.bensuperpc.org) | Sub | For local chatGPT |
|
||||
| [wordpress.bensuperpc.org](https://wordpress.bensuperpc.org) | Sub | Wordpress website |
|
||||
| [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) | Sub | Uptime Kuma for monitoring |
|
||||
| [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) | Sub | Torrent client/server |
|
||||
| [transmission.bensuperpc.org](https://transmission.bensuperpc.org) | Sub | Torrent client/server |
|
||||
| [forgejo.bensuperpc.org](https://forgejo.bensuperpc.org/) | Sub | Fork of Gitea for git |
|
||||
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Fork of Gitea for git |
|
||||
| [link.bensuperpc.org](https://link.bensuperpc.org) | Sub | For link shortener |
|
||||
| [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) | Sub | Jellyfin for media server |
|
||||
| [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) | Sub | SyncThing for file synchronization |
|
||||
| [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) | Sub | PsiTransfer for file sharing |
|
||||
| [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) | Sub | Tools for IT |
|
||||
| [omni-tools.bensuperpc.org](https://omni-tools.bensuperpc.org) | Sub | Tools for IT |
|
||||
| [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) | Sub | Pastebin |
|
||||
| [projectsend.bensuperpc.org](https://projectsend.bensuperpc.org) | Sub | ProjectSend for file sharing |
|
||||
| [picoshare.bensuperpc.org](https://picoshare.bensuperpc.org) | Sub | Picoshare for file sharing |
|
||||
| [dufs.bensuperpc.org](https://dufs.bensuperpc.org) | Sub | Dufs for file sharing |
|
||||
| [memos.bensuperpc.org](https://memos.bensuperpc.org) | Sub | Caddy for file sharing |
|
||||
| [stirlingpdf.bensuperpc.org](https://stirlingpdf.bensuperpc.org) | Sub | Stirling PDF tools |
|
||||
|
||||
### Configure the infrastructure
|
||||
|
||||
@@ -96,68 +126,109 @@ You can generate a password with 32 characters:
|
||||
openssl rand -base64 32
|
||||
```
|
||||
|
||||
For the [wordpress.env](infrastructure/wordpress/env/wordpress.env) file, you need to change the password and user for the database.
|
||||
Or online: [passwordsgenerator.net](https://passwordsgenerator.net/)
|
||||
|
||||
#### Caddy
|
||||
|
||||
For [caddy_backup.env](infrastructure/services/caddy/env/caddy_backup.env) file, you need to change the password(s) for the restic backup.
|
||||
|
||||
```sh
|
||||
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
```
|
||||
|
||||
#### Wordpress
|
||||
|
||||
For the [wordpress.env](infrastructure/services/wordpress/env/wordpress.env) file, you need to change the password and user for the database.
|
||||
|
||||
```sh
|
||||
WORDPRESS_DB_USER=bensuperpc
|
||||
WORDPRESS_DB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||
WORDPRESS_DB_NAME=wordpress
|
||||
WORDPRESS_DB_HOST=wordpress_db:3306
|
||||
```
|
||||
|
||||
For [wordpress_db.env](infrastructure/wordpress/env/wordpress_db.env) file, you need to change the password(s) and user for the database.
|
||||
For [wordpress_db.env](infrastructure/services/wordpress/env/wordpress_db.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
MARIADB_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
MARIADB_USER=bensuperpc
|
||||
MARIADB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||
MARIADB_DATABASE=wordpress
|
||||
```
|
||||
|
||||
For [wordpress_backup.env](infrastructure/wordpress/env/wordpress_backup.env) file, you need to change the password(s) for the restic backup.
|
||||
For [wordpress_backup.env](infrastructure/services/wordpress/env/wordpress_backup.env) file, you need to change the password(s) for the restic backup.
|
||||
|
||||
```sh
|
||||
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
```
|
||||
|
||||
For [adminer.env](infrastructure/wordpress/env/adminer.env) file, you need to change the password(s) and user for the database.
|
||||
#### PsiTransfer
|
||||
|
||||
```sh
|
||||
MYSQL_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||
MYSQL_USER=bensuperpc
|
||||
MYSQL_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||
ADMINER_DEFAULT_SERVER=wordpress_db
|
||||
```
|
||||
|
||||
For [gitea.env](infrastructure/gitea/env/gitea.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
GITEA__database__DB_TYPE=mysql
|
||||
GITEA__database__HOST=database_gitea:3306
|
||||
GITEA__database__NAME=gitea
|
||||
GITEA__database__USER=bensuperpc
|
||||
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
GITEA__security__SECRET_KEY=ykcZt23an1E4lFHWvrCKdAyt16WAiK9c
|
||||
```
|
||||
|
||||
For [gitea_db.env](infrastructure/gitea/env/gitea_db.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
MYSQL_ROOT_PASSWORD=xpc4zIhHZzWKqVHcjBu4aW6aS7jG8d7X
|
||||
MYSQL_USER=bensuperpc
|
||||
MYSQL_PASSWORD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
MYSQL_DATABASE=gitea
|
||||
```
|
||||
|
||||
For [psitransfer.env](infrastructure/psitransfer/env/psitransfer.env) file, you need to change the password(s) and user for the database.
|
||||
For [psitransfer.env](infrastructure/services/psitransfer/env/psitransfer.env) file, you need to change the secret key.
|
||||
|
||||
```sh
|
||||
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
|
||||
```
|
||||
|
||||
For [yacht.env](infrastructure/yacht/env/yacht.env) file, you need to change the secret key.
|
||||
For [projectsend_db.env](infrastructure/services/projectsend/env/projectsend_db.env) file, you need to change the password(s) and user for the database.
|
||||
|
||||
```sh
|
||||
SECRET_KEY=UZvg9nbcGIJlPEB3uI39TAEWyFOz9nm8
|
||||
MARIADB_ROOT_PASSWORD=8O34297GrBfT3Ld34Lfg9mpotmZwbJtt
|
||||
MARIADB_USER=bensuperpc
|
||||
MARIADB_PASSWORD=wdSUa1JEZhXie5AJ5NcX1w73xmpO12EY
|
||||
```
|
||||
|
||||
#### Picoshare
|
||||
|
||||
For [picoshare.env](infrastructure/services/picoshare/env/picoshare.env) file, you need to change the secret key.
|
||||
|
||||
```sh
|
||||
PS_SHARED_SECRET=CBuS4DJLqIe93xF1KGYRrnhxUFBqLD2n
|
||||
```
|
||||
|
||||
#### Dufs
|
||||
|
||||
For [dufs.env](infrastructure/services/dufs/env/dufs.env) file, you need to change the secret key and if you want the user name.
|
||||
|
||||
```sh
|
||||
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/:ro"
|
||||
```
|
||||
|
||||
#### Stirling PDF
|
||||
|
||||
For [stirlingpdf.env](infrastructure/services/stirlingpdf/env/stirlingpdf.env) file, it's **completly optional**, you can change the password(s) and user.
|
||||
|
||||
```sh
|
||||
# Enable security, optional
|
||||
DOCKER_ENABLE_SECURITY=true
|
||||
SECURITY_ENABLE_LOGIN=true
|
||||
# Can be disabled after initial login, optional,
|
||||
# default it admin:stirling
|
||||
SECURITY_INITIALLOGIN_USERNAME=admin
|
||||
SECURITY_INITIALLOGIN_PASSWORD=Jw9U039f5xc2mFcacvGvPD9RjwIh4DzO
|
||||
```
|
||||
|
||||
#### OpenSSH
|
||||
|
||||
You can need to add/change the public ssh key [id_ed25519.pub](infrastructure/services/openssh/config/authorized_keys/id_ed25519.pub) (its my public key), also change the config/password in [openssh.env](infrastructure/services/openssh/env/openssh.env):
|
||||
|
||||
```sh
|
||||
SUDO_ACCESS=true
|
||||
#PUBLIC_KEY_URL=https://github.com/bensuperpc.keys
|
||||
PUBLIC_KEY_DIR=/authorized_ssh_keys
|
||||
USER_PASSWORD=rdUwf36C11PLmpU9Lvq7tP5pfFBKAuCh
|
||||
|
||||
#PUBLIC_KEY=yourpublickey
|
||||
#PUBLIC_KEY_FILE=/path/to/file
|
||||
#PUBLIC_KEY_DIR=/path/to/directory/containing/_only_/pubkeys
|
||||
#USER_PASSWORD_FILE=/path/to/file
|
||||
```
|
||||
|
||||
#### Open-WebUI
|
||||
|
||||
For [open-webui.env](infrastructure/services/open-webui/env/open-webui.env) file, entirely optional.
|
||||
|
||||
To download the model, you can use:
|
||||
|
||||
```sh
|
||||
docker exec -it ollama ollama run deepseek-r1:8b
|
||||
```
|
||||
|
||||
### Start the infrastructure
|
||||
@@ -180,29 +251,87 @@ Remove countainers with:
|
||||
make down
|
||||
```
|
||||
|
||||
### All services
|
||||
|
||||
You can find all service on this table:
|
||||
|
||||
| Service | Description | URL |
|
||||
| --- | --- | --- |
|
||||
| Homepage | Homepage | [homepage.bensuperpc.org](https://homepage.bensuperpc.org) |
|
||||
| Wordpress | Wordpress website | [bensuperpc.org](https://bensuperpc.org) and [www.bensuperpc.org](https://www.bensuperpc.org) |
|
||||
| Adminer | Adminer for MariaDB | [adminer.bensuperpc.org](https://adminer.bensuperpc.org) |
|
||||
| Uptime Kuma | Uptime Kuma for monitoring | [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) |
|
||||
| qbittorrent | qbittorrent server | [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) |
|
||||
| transmission | transmission server | [transmission.bensuperpc.org](https://transmission.bensuperpc.org) |
|
||||
| Gitea | Gitea for git | [git.bensuperpc.org](https://git.bensuperpc.org) |
|
||||
| Jellyfin | Jellyfin for media server | [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) |
|
||||
| SyncThing | SyncThing for file synchronization | [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) |
|
||||
| PsiTransfer | PsiTransfer for file sharing | [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) |
|
||||
| it-tools | Tools for IT | [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) |
|
||||
| Privatebin | Pastebin | [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) |
|
||||
| Yacht | Web interface for managing docker containers | [yacht.bensuperpc.org](https://yacht.bensuperpc.org) |
|
||||
|
||||
You can disable some services by removing the service name in PROFILES variable in the [Makefile](Makefile) file.
|
||||
|
||||
To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-containers-using-gitea-runners-600729555e07
|
||||
To enable the gitea CI: [how-to-build-docker-containers-using-gitea-runners](https://medium.com/@lokanx/how-to-build-docker-containers-using-gitea-runners-600729555e07)
|
||||
|
||||
### Homepage
|
||||
|
||||
You can change the homepage config in these files:
|
||||
|
||||
- [bookmarks.yaml](infrastructure/services/homepage/config/bookmarks.yaml)
|
||||
- [services.yaml](infrastructure/services/homepage/config/services.yaml)
|
||||
- [settings.yaml](infrastructure/services/homepage/config/settings.yaml)
|
||||
- [widgets.yaml](infrastructure/services/homepage/config/widgets.yaml)
|
||||
|
||||
### Forgejo
|
||||
|
||||
For Forgejo installation, you must change the password(s) and user in [forgejo_db.env](infrastructure/services/forgejo/env/forgejo_db.env) file and [forgejo.env](infrastructure/services/forgejo/env/forgejo.env) file.
|
||||
|
||||
Once the installation is complete, you need to set the installation lock:
|
||||
|
||||
```sh
|
||||
FORGEJO__security__INSTALL_LOCK=true
|
||||
```
|
||||
|
||||
### Forgejo Runner
|
||||
|
||||
```sh
|
||||
docker exec -it forgejo_runner /bin/bash
|
||||
```
|
||||
|
||||
```sh
|
||||
forgejo-runner generate-config > /data/config.yml
|
||||
```
|
||||
|
||||
Now update the config.yml file to support docker-in-docker:
|
||||
|
||||
```yml
|
||||
envs:
|
||||
DOCKER_TLS_VERIFY: 1
|
||||
DOCKER_CERT_PATH: /certs/client
|
||||
DOCKER_HOST: tcp://docker:2376
|
||||
labels: ["ubuntu-latest:docker://node:20-bookworm", "ubuntu-22.04:docker://node:20-bookworm"]
|
||||
network: host
|
||||
options: -v /certs/client:/certs/client
|
||||
valid_volumes:
|
||||
- /certs/client
|
||||
```
|
||||
|
||||
Register the runner with your Forgejo instance:
|
||||
|
||||
|
||||
```sh
|
||||
forgejo-runner register
|
||||
```
|
||||
|
||||
You will need to provide the following information:
|
||||
|
||||
```sh
|
||||
https://forgejo.bensuperpc.org/
|
||||
<Your Registration Token, in https://forgejo.bensuperpc.org/admin/actions/runners>
|
||||
ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04
|
||||
main
|
||||
```
|
||||
|
||||
### Docker volumes
|
||||
|
||||
This infrastructure uses docker volumes to store data, all configuration/data for each service are not shared between services for security and maintenance reasons, but **public_data** and **private_data** are shared between all services to store your data.
|
||||
|
||||
| Volume name | Description |
|
||||
| ------------ | ---------------------------------------------------------------------------------------------------------- |
|
||||
| public_data | Public data reachable on internet via [dufs.bensuperpc.org](https://dufs.bensuperpc.org), can be disabled. |
|
||||
| private_data | Private data |
|
||||
|
||||
### SSH access
|
||||
|
||||
The default port for ssh/rsync is is 2222.
|
||||
|
||||
You can access to the server with:
|
||||
|
||||
```sh
|
||||
ssh -p 2222 admin@bensuperpc.org
|
||||
```
|
||||
|
||||
## Sources
|
||||
|
||||
@@ -215,6 +344,7 @@ To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-container
|
||||
- [Docker Hub](https://hub.docker.com/)
|
||||
- [How To Start WordPress with Caddy using Docker Compose](https://minhcung.me/how-to-start-wordpress-with-caddy-using-docker-compose-3d31bb9ef88b)
|
||||
- [Digital Ocean - How To Install WordPress with Docker Compose (nginx)](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-docker-compose)
|
||||
- [Imagisphe](https://imagisphe.re/)
|
||||
- [Letsencrypt](https://letsencrypt.org/)
|
||||
- [Caddy](https://caddyserver.com/)
|
||||
- [Adminer](https://www.adminer.org/)
|
||||
@@ -226,11 +356,20 @@ To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-container
|
||||
- [SyncThing](https://syncthing.net/)
|
||||
- [PsiTransfer](https://psitransfer.com/)
|
||||
- [It-tools](https://github.com/CorentinTh/it-tools)
|
||||
- [Omni-tools](https://github.com/iib0011/omni-tools)
|
||||
- [Privatebin](https://github.com/PrivateBin/PrivateBin)
|
||||
- [ghost](https://ghost.org)
|
||||
- [Homepage Tuto](https://belginux.com/installer-homepage-avec-docker/)
|
||||
- [Yacht](https://yacht.sh/)
|
||||
- [Imagisphe](https://imagisphe.re/)
|
||||
- [ProjectSend](https://www.projectsend.org/)
|
||||
- [Picoshare](https://github.com/mtlynch/picoshare)
|
||||
- [Dufs](https://github.com/sigoden/dufs)
|
||||
- [demos](https://github.com/usememos/memos)
|
||||
- [Stirling PDF](https://github.com/Stirling-Tools/Stirling-PDF)
|
||||
- [open-webui](https://github.com/open-webui/open-webui)
|
||||
- [Fix docker volume](https://pratikpc.medium.com/use-docker-compose-named-volumes-as-non-root-within-your-containers-1911eb30f731)
|
||||
- [Forgejo-runner](https://code.forgejo.org/forgejo/runner)
|
||||
- [Forgejo-runner](https://huijzer.xyz/posts/55)
|
||||
- [Forgejo](https://nickcunningh.am/blog/how-to-setup-and-configure-forgejo-with-support-for-forgejo-actions-and-more)
|
||||
|
||||
## License
|
||||
|
||||
|
||||
@@ -1,15 +0,0 @@
|
||||
{
|
||||
email bensuperpc@gmail.com
|
||||
key_type p384
|
||||
|
||||
log {
|
||||
output file /data/logs/access.log
|
||||
format json
|
||||
}
|
||||
}
|
||||
|
||||
import bensuperpc.org/*
|
||||
import bensuperpc.com/*
|
||||
import bensuperpc.net/*
|
||||
import bensuperpc.ovh/*
|
||||
import bensuperpc.fr/*
|
||||
@@ -1,7 +0,0 @@
|
||||
bensuperpc.com {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
www.bensuperpc.com {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
@@ -1,7 +0,0 @@
|
||||
bensuperpc.fr {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
www.bensuperpc.fr {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
@@ -1,19 +0,0 @@
|
||||
bensuperpc.net {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
www.bensuperpc.net {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
git.bensuperpc.net {
|
||||
redir https://git.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
jellyfin.bensuperpc.net {
|
||||
redir https://jellyfin.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
uptimekuma.bensuperpc.net {
|
||||
redir https://uptimekuma.bensuperpc.org{uri} permanent
|
||||
}
|
||||
@@ -1,143 +0,0 @@
|
||||
www.bensuperpc.org {
|
||||
root * /var/www/html
|
||||
php_fastcgi wordpress:9000
|
||||
|
||||
file_server
|
||||
encode zstd gzip
|
||||
|
||||
# metrics /metrics
|
||||
|
||||
@disallowed {
|
||||
path /xmlrpc.php
|
||||
path *.sql
|
||||
path /wp-content/uploads/*.php
|
||||
}
|
||||
|
||||
rewrite @disallowed '/index.php'
|
||||
|
||||
respond /uploads/*.php 404
|
||||
|
||||
header {
|
||||
# disable FLoC tracking
|
||||
Permissions-Policy interest-cohort=()
|
||||
|
||||
# enable HSTS
|
||||
Strict-Transport-Security max-age=31536000;
|
||||
|
||||
# disable clients from sniffing the media type
|
||||
X-Content-Type-Options nosniff
|
||||
|
||||
# clickjacking protection
|
||||
# X-Frame-Options DENY
|
||||
|
||||
# Disable powerful features we don't need
|
||||
Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
|
||||
}
|
||||
}
|
||||
|
||||
bensuperpc.org {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
adminer.bensuperpc.org {
|
||||
reverse_proxy adminer:8080
|
||||
}
|
||||
|
||||
uptimekuma.bensuperpc.org {
|
||||
reverse_proxy uptime-kuma:3001
|
||||
}
|
||||
|
||||
torrent.bensuperpc.org {
|
||||
reverse_proxy qbittorrent:8080
|
||||
}
|
||||
|
||||
qbittorrent.bensuperpc.org {
|
||||
redir https://torrent.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
transmission.bensuperpc.org {
|
||||
reverse_proxy transmission:9091
|
||||
}
|
||||
|
||||
gitea.bensuperpc.org {
|
||||
redir https://git.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
git.bensuperpc.org {
|
||||
reverse_proxy gitea:3000
|
||||
}
|
||||
|
||||
jellyfin.bensuperpc.org {
|
||||
reverse_proxy jellyfin:8096
|
||||
}
|
||||
|
||||
transfer.bensuperpc.org {
|
||||
reverse_proxy psitransfer:3000
|
||||
}
|
||||
|
||||
psitransfer.bensuperpc.org {
|
||||
redir https://transfer.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
syncthing.bensuperpc.org {
|
||||
reverse_proxy syncthing:8384 {
|
||||
header_up Host {upstream_hostport}
|
||||
}
|
||||
}
|
||||
|
||||
it-tools.bensuperpc.org {
|
||||
reverse_proxy it-tools:80
|
||||
}
|
||||
|
||||
tools.bensuperpc.org {
|
||||
redir https://it-tools.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
privatebin.bensuperpc.org {
|
||||
reverse_proxy privatebin:8080
|
||||
}
|
||||
|
||||
pastebin.bensuperpc.org {
|
||||
redir https://privatebin.bensuperpc.org permanent
|
||||
}
|
||||
|
||||
homepage.bensuperpc.org {
|
||||
reverse_proxy homepage:3000
|
||||
}
|
||||
|
||||
dozzle.bensuperpc.org {
|
||||
reverse_proxy dozzle:8080
|
||||
}
|
||||
|
||||
yacht.bensuperpc.org {
|
||||
reverse_proxy yacht:8000
|
||||
}
|
||||
|
||||
link.bensuperpc.org {
|
||||
# TODO: Use service with database
|
||||
# Friendly links
|
||||
redir /gnous https://gnous.eu permanent
|
||||
redir /proxy https://imagisphe.re permanent
|
||||
redir /patch https://spaceint.fr permanent
|
||||
redir /greep https://greep.fr permanent
|
||||
|
||||
# Youtube links
|
||||
redir /rickroll https://www.youtube.com/watch?v=dQw4w9WgXcQ permanent
|
||||
redir /babyshark https://www.youtube.com/watch?v=XqZsoesa55w permanent
|
||||
redir /cowcowcow https://www.youtube.com/watch?v=FavUpD_IjVY permanent
|
||||
redir /badapple https://www.youtube.com/watch?v=FtutLA63Cp8 permanent
|
||||
redir /macdo https://www.youtube.com/watch?v=Q16KpquGsIc permanent
|
||||
redir /superiser https://www.youtube.com/watch?v=srnyVw-OR0g permanent
|
||||
redir /daicon https://youtu.be/-840keiiFDE?si=zIPIokytxcnGw5fJ&t=162 permanent
|
||||
redir /scp https://www.youtube.com/watch?v=FGCDndN20G8 permanent
|
||||
redir /scpfb https://youtu.be/9zrKk-1E8zM?si=8R_ZBVG3GzMUYOe8&t=36 permanent
|
||||
redir /mother https://youtu.be/w3NyycHR3fE?si=rNNSW9zYv0bcO2Eu permanent
|
||||
redir /cpu https://www.youtube.com/watch?v=y39D4529FM4 permanent
|
||||
redir /lechanteur https://youtu.be/HXdP15Ubu6M?si=N0qvhqo--3pmSGmb permanent
|
||||
redir /bna https://youtu.be/3T3ofoKfEoY?si=_7HkGQXMC7rBng8O permanent
|
||||
redir /jojo https://youtu.be/U0TXIXTzJEY?si=2acWJWX06ju2w4uj permanent
|
||||
redir /patapon https://youtu.be/H6CbNHLHkmk?si=ZvU8SzrOK-oCUXT5 permanent
|
||||
redir /darkwater https://youtu.be/Tr8ZgF4Dc0E?si=CEOmm2J6Jp5rdbbt permanent
|
||||
redir /train https://youtu.be/l8mScKWj3kQ?si=BV07uJ9eP3kzV9Kl permanent
|
||||
redir /jdg https://www.youtube.com/@joueurdugrenier permanent
|
||||
}
|
||||
@@ -1,7 +0,0 @@
|
||||
bensuperpc.ovh {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
www.bensuperpc.ovh {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
services:
|
||||
# Caddy
|
||||
caddy:
|
||||
image: caddy:latest
|
||||
container_name: caddy
|
||||
profiles:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
ports:
|
||||
- 80:80
|
||||
- 443:443
|
||||
volumes:
|
||||
- wordpress:/var/www/html:rw
|
||||
- caddy_data:/data:rw
|
||||
- caddy_config:/config:rw
|
||||
- ./caddy/config:/etc/caddy:ro
|
||||
networks:
|
||||
- infra-network
|
||||
env_file:
|
||||
- ./caddy/env/caddy.env
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
#cap_drop:
|
||||
# - ALL
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
healthcheck:
|
||||
test: pidof caddy || exit 1
|
||||
interval: 120s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
volumes:
|
||||
caddy_data:
|
||||
name: caddy_data
|
||||
caddy_config:
|
||||
name: caddy_config
|
||||
|
||||
networks:
|
||||
infra-network:
|
||||
driver: bridge
|
||||
name: infra-network
|
||||
@@ -0,0 +1,51 @@
|
||||
include:
|
||||
# Main
|
||||
- services/main/docker-compose.main.yml
|
||||
# WordPress
|
||||
- services/wordpress/docker-compose.wordpress.yml
|
||||
# Caddy
|
||||
- services/caddy/docker-compose.caddy.yml
|
||||
# Dufs
|
||||
- services/dufs/docker-compose.dufs.yml
|
||||
# Forgejo
|
||||
- services/forgejo/docker-compose.forgejo.yml
|
||||
# Homepage
|
||||
- services/homepage/docker-compose.homepage.yml
|
||||
# It-tools
|
||||
- services/it-tools/docker-compose.it-tools.yml
|
||||
# omni-tools
|
||||
- services/omni-tools/docker-compose.omni-tools.yml
|
||||
# cyberchef
|
||||
- services/cyberchef/docker-compose.cyberchef.yml
|
||||
# Jellyfin
|
||||
- services/jellyfin/docker-compose.jellyfin.yml
|
||||
# Openssh
|
||||
- services/openssh/docker-compose.openssh.yml
|
||||
# Picoshare
|
||||
- services/picoshare/docker-compose.picoshare.yml
|
||||
# Privatebin
|
||||
- services/privatebin/docker-compose.privatebin.yml
|
||||
# Projectsend
|
||||
- services/projectsend/docker-compose.projectsend.yml
|
||||
# Psitransfer
|
||||
- services/psitransfer/docker-compose.psitransfer.yml
|
||||
# Qbittorrent
|
||||
- services/qbittorrent/docker-compose.qbittorrent.yml
|
||||
# Stirlingpdf
|
||||
- services/stirlingpdf/docker-compose.stirlingpdf.yml
|
||||
# Syncthing
|
||||
- services/syncthing/docker-compose.syncthing.yml
|
||||
# Transmission
|
||||
- services/transmission/docker-compose.transmission.yml
|
||||
# Uptime-kuma
|
||||
- services/uptime-kuma/docker-compose.uptime-kuma.yml
|
||||
# open-webui
|
||||
- services/open-webui/docker-compose.open-webui.yml
|
||||
# Minecraft
|
||||
- services/minecraft-server/docker-compose.yml
|
||||
# 7daystodie
|
||||
- services/7daystodie-server/docker-compose.yml
|
||||
# Satisfactory
|
||||
- services/satisfactory-server/docker-compose.yml
|
||||
# Team Fortress 2
|
||||
- services/teamfortress2-server/docker-compose.yml
|
||||
@@ -1,18 +0,0 @@
|
||||
services:
|
||||
# dozzle
|
||||
dozzle:
|
||||
image: amir20/dozzle:latest
|
||||
container_name: dozzle
|
||||
profiles:
|
||||
- dozzle
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./dozzle/env/dozzle.env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
Vendored
-1
@@ -1 +0,0 @@
|
||||
DOZZLE_LEVEL=info
|
||||
@@ -1,98 +0,0 @@
|
||||
# Example configuration file, it's safe to copy this as the default config file without any modification.
|
||||
|
||||
# You don't have to copy this file to your instance,
|
||||
# just run `./act_runner generate-config > config.yaml` to generate a config file.
|
||||
|
||||
log:
|
||||
# The level of logging, can be trace, debug, info, warn, error, fatal
|
||||
level: info
|
||||
|
||||
runner:
|
||||
# Where to store the registration result.
|
||||
file: .runner
|
||||
# Execute how many tasks concurrently at the same time.
|
||||
capacity: 1
|
||||
# Extra environment variables to run jobs.
|
||||
envs:
|
||||
A_TEST_ENV_NAME_1: a_test_env_value_1
|
||||
A_TEST_ENV_NAME_2: a_test_env_value_2
|
||||
# Extra environment variables to run jobs from a file.
|
||||
# It will be ignored if it's empty or the file doesn't exist.
|
||||
env_file: .env
|
||||
# The timeout for a job to be finished.
|
||||
# Please note that the Gitea instance also has a timeout (3h by default) for the job.
|
||||
# So the job could be stopped by the Gitea instance if it's timeout is shorter than this.
|
||||
timeout: 3h
|
||||
# Whether skip verifying the TLS certificate of the Gitea instance.
|
||||
insecure: false
|
||||
# The timeout for fetching the job from the Gitea instance.
|
||||
fetch_timeout: 5s
|
||||
# The interval for fetching the job from the Gitea instance.
|
||||
fetch_interval: 2s
|
||||
# The labels of a runner are used to determine which jobs the runner can run, and how to run them.
|
||||
# Like: "macos-arm64:host" or "ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
|
||||
# Find more images provided by Gitea at https://gitea.com/gitea/runner-images .
|
||||
# If it's empty when registering, it will ask for inputting labels.
|
||||
# If it's empty when execute `daemon`, will use labels in `.runner` file.
|
||||
labels:
|
||||
- "ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
|
||||
- "ubuntu-22.04:docker://gitea/runner-images:ubuntu-22.04"
|
||||
- "ubuntu-20.04:docker://gitea/runner-images:ubuntu-20.04"
|
||||
|
||||
cache:
|
||||
# Enable cache server to use actions/cache.
|
||||
enabled: true
|
||||
# The directory to store the cache data.
|
||||
# If it's empty, the cache data will be stored in $HOME/.cache/actcache.
|
||||
dir: ""
|
||||
# The host of the cache server.
|
||||
# It's not for the address to listen, but the address to connect from job containers.
|
||||
# So 0.0.0.0 is a bad choice, leave it empty to detect automatically.
|
||||
host: ""
|
||||
# The port of the cache server.
|
||||
# 0 means to use a random available port.
|
||||
port: 0
|
||||
# The external cache server URL. Valid only when enable is true.
|
||||
# If it's specified, act_runner will use this URL as the ACTIONS_CACHE_URL rather than start a server by itself.
|
||||
# The URL should generally end with "/".
|
||||
external_server: ""
|
||||
|
||||
container:
|
||||
# Specifies the network to which the container will connect.
|
||||
# Could be host, bridge or the name of a custom network.
|
||||
# If it's empty, act_runner will create a network automatically.
|
||||
network: ""
|
||||
# Whether to use privileged mode or not when launching task containers (privileged mode is required for Docker-in-Docker).
|
||||
privileged: false
|
||||
# And other options to be used when the container is started (eg, --add-host=my.gitea.url:host-gateway).
|
||||
options:
|
||||
# The parent directory of a job's working directory.
|
||||
# NOTE: There is no need to add the first '/' of the path as act_runner will add it automatically.
|
||||
# If the path starts with '/', the '/' will be trimmed.
|
||||
# For example, if the parent directory is /path/to/my/dir, workdir_parent should be path/to/my/dir
|
||||
# If it's empty, /workspace will be used.
|
||||
workdir_parent:
|
||||
# Volumes (including bind mounts) can be mounted to containers. Glob syntax is supported, see https://github.com/gobwas/glob
|
||||
# You can specify multiple volumes. If the sequence is empty, no volumes can be mounted.
|
||||
# For example, if you only allow containers to mount the `data` volume and all the json files in `/src`, you should change the config to:
|
||||
# valid_volumes:
|
||||
# - data
|
||||
# - /src/*.json
|
||||
# If you want to allow any volume, please use the following configuration:
|
||||
# valid_volumes:
|
||||
# - '**'
|
||||
valid_volumes: []
|
||||
# overrides the docker client host with the specified one.
|
||||
# If it's empty, act_runner will find an available docker host automatically.
|
||||
# If it's "-", act_runner will find an available docker host automatically, but the docker host won't be mounted to the job containers and service containers.
|
||||
# If it's not empty or "-", the specified docker host will be used. An error will be returned if it doesn't work.
|
||||
docker_host: ""
|
||||
# Pull docker image(s) even if already present
|
||||
force_pull: true
|
||||
# Rebuild docker image(s) even if already present
|
||||
force_rebuild: false
|
||||
|
||||
host:
|
||||
# The parent directory of a job's working directory.
|
||||
# If it's empty, $HOME/.cache/act/ will be used.
|
||||
workdir_parent:
|
||||
@@ -1,72 +0,0 @@
|
||||
services:
|
||||
# Gitea
|
||||
gitea:
|
||||
image: gitea/gitea:latest-rootless
|
||||
container_name: gitea
|
||||
profiles:
|
||||
- gitea
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- database_gitea
|
||||
- caddy
|
||||
ports:
|
||||
- "22:22"
|
||||
env_file:
|
||||
- ./gitea/env/gitea.env
|
||||
volumes:
|
||||
- gitea_data:/var/lib/gitea
|
||||
- gitea_config:/etc/gitea
|
||||
# - /etc/timezone:/etc/timezone:ro
|
||||
# - /etc/localtime:/etc/localtime:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
# Database gitea
|
||||
database_gitea:
|
||||
image: mariadb:latest
|
||||
container_name: database_gitea
|
||||
profiles:
|
||||
- database
|
||||
- gitea
|
||||
restart: on-failure:5
|
||||
volumes:
|
||||
- gitea_db:/var/lib/mysql:rw
|
||||
env_file:
|
||||
- ./gitea/env/gitea_db.env
|
||||
command: '--default-authentication-plugin=mysql_native_password'
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
# Gitea-runner
|
||||
gitea-runner:
|
||||
image: gitea/act_runner:latest
|
||||
container_name: gitea-runner
|
||||
profiles:
|
||||
- gitea-runner
|
||||
depends_on:
|
||||
- gitea
|
||||
restart: on-failure:5
|
||||
env_file:
|
||||
- ./gitea/env/gitea-runner.env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- gitea_runner:/data
|
||||
- ./gitea/config/gitea_runner/config.yaml:/config.yaml:ro
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
gitea_data:
|
||||
name: gitea_data
|
||||
gitea_config:
|
||||
name: gitea_config
|
||||
gitea_db:
|
||||
name: gitea_db
|
||||
gitea_runner:
|
||||
name: gitea_runner
|
||||
-5
@@ -1,5 +0,0 @@
|
||||
GITEA_INSTANCE_URL=https://git.bensuperpc.org
|
||||
GITEA_RUNNER_REGISTRATION_TOKEN=TBGzS0m823Xk732zRqjrbcSWFTEPajj5V5OFzXWP
|
||||
GITEA_RUNNER_NAME=runner-1
|
||||
#GITEA_RUNNER_LABELS=
|
||||
CONFIG_FILE=/config.yaml
|
||||
Vendored
-15
@@ -1,15 +0,0 @@
|
||||
USER_UID=1000
|
||||
USER_GID=1000
|
||||
GITEA__database__DB_TYPE=mysql
|
||||
GITEA__database__HOST=database_gitea:3306
|
||||
GITEA__database__NAME=gitea
|
||||
GITEA__database__USER=bensuperpc
|
||||
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
GITEA__security__SECRET_KEY=ykcZt23an1E4lFHWvrCKdAyt16WAiK9c
|
||||
#GITEA__security__INTERNAL_TOKEN=
|
||||
GITEA__server__DOMAIN=git.bensuperpc.org
|
||||
GITEA__server__SSH_DOMAIN=git.bensuperpc.org
|
||||
GITEA__server__HTTP_PORT=3000
|
||||
GITEA__server__SSH_LISTEN_PORT=22
|
||||
GITEA__server__SSH_PORT=22
|
||||
GITEA__server__ROOT_URL=https://git.bensuperpc.org
|
||||
-4
@@ -1,4 +0,0 @@
|
||||
MYSQL_ROOT_PASSWORD=xpc4zIhHZzWKqVHcjBu4aW6aS7jG8d7X
|
||||
MYSQL_USER=bensuperpc
|
||||
MYSQL_PASSWORD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||
MYSQL_DATABASE=gitea
|
||||
@@ -1,18 +0,0 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/bookmarks
|
||||
|
||||
- Developer:
|
||||
- Github:
|
||||
- abbr: GH
|
||||
href: https://github.com/bensuperpc
|
||||
|
||||
- Social:
|
||||
- Reddit:
|
||||
- abbr: RE
|
||||
href: https://reddit.com/u/bensuperpc
|
||||
|
||||
- Entertainment:
|
||||
- YouTube:
|
||||
- abbr: YT
|
||||
href: https://youtube.com/c/bensuperpc
|
||||
@@ -1,19 +0,0 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/service-widgets
|
||||
|
||||
- resources:
|
||||
cpu: true
|
||||
memory: true
|
||||
disk: /
|
||||
|
||||
- search:
|
||||
provider: duckduckgo
|
||||
target: _blank
|
||||
|
||||
- datetime:
|
||||
text_size: xl
|
||||
locale: fr
|
||||
format:
|
||||
timeStyle: long
|
||||
dateStyle: long
|
||||
@@ -1,43 +0,0 @@
|
||||
services:
|
||||
# Jellyfin
|
||||
jellyfin:
|
||||
image: jellyfin/jellyfin:latest
|
||||
container_name: jellyfin
|
||||
profiles:
|
||||
- jellyfin
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./jellyfin/env/jellyfin.env
|
||||
volumes:
|
||||
- jellyfin_config:/config
|
||||
- jellyfin_data_movies:/movies:rw
|
||||
- jellyfin_data_series:/series:rw
|
||||
- jellyfin_data_documentaries:/documentaries:rw
|
||||
- jellyfin_data_musics:/musics:rw
|
||||
- jellyfin_data_personal:/personal:rw
|
||||
- jellyfin_cache:/cache
|
||||
# Hardware acceleration (For Intel and AMD GPUs)
|
||||
devices:
|
||||
- /dev/dri:/dev/dri
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
jellyfin_config:
|
||||
name: jellyfin_config
|
||||
jellyfin_data_movies:
|
||||
name: jellyfin_data_movies
|
||||
jellyfin_data_series:
|
||||
name: jellyfin_data_series
|
||||
jellyfin_data_documentaries:
|
||||
name: jellyfin_data_documentaries
|
||||
jellyfin_data_musics:
|
||||
name: jellyfin_data_musics
|
||||
jellyfin_data_personal:
|
||||
name: jellyfin_data_personal
|
||||
jellyfin_cache:
|
||||
name: jellyfin_cache
|
||||
@@ -1,5 +0,0 @@
|
||||
PUID=1000
|
||||
PGID=1000
|
||||
TZ=Etc/UTC
|
||||
WEBUI_PORT=8080
|
||||
TORRENTING_PORT=6881
|
||||
@@ -0,0 +1,54 @@
|
||||
services:
|
||||
# 7 days to die server
|
||||
7daystodie_server:
|
||||
image: vinanrra/7dtd-server:latest
|
||||
container_name: 7daystodie_server
|
||||
profiles:
|
||||
- 7daystodie_server
|
||||
restart: on-failure:5
|
||||
ports:
|
||||
- "26900:26900"
|
||||
- "26901:26901"
|
||||
- "26902:26902"
|
||||
# - "8080:8080" # WEBADMIN
|
||||
# - "8081:8081" # TELNET
|
||||
# - "8082:8082" # WEBSERVER
|
||||
volumes:
|
||||
- 7daystodie_server_save:/home/sdtdserver/.local/share/7DaysToDie # 7 Days To Die world saves
|
||||
- 7daystodie_server_config_lgsm:/home/sdtdserver/lgsm/config-lgsm/sdtdserver # LGSM config folder
|
||||
- 7daystodie_server_file:/home/sdtdserver/serverfiles # Optional - serverfiles folder
|
||||
- 7daystodie_server_log:/home/sdtdserver/log
|
||||
networks:
|
||||
- infra-network
|
||||
env_file:
|
||||
- ./env/7daystodie.env
|
||||
environment:
|
||||
- PUID=${PUID:-1000}
|
||||
- PGID=${PGID:-1000}
|
||||
# security_opt:
|
||||
# - no-new-privileges:true
|
||||
# cap_drop:
|
||||
# - SYS_ADMIN
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
memory: 16G
|
||||
reservations:
|
||||
memory: 4G
|
||||
|
||||
volumes:
|
||||
7daystodie_backup:
|
||||
name: 7daystodie_backup
|
||||
7daystodie_server_save:
|
||||
name: 7daystodie_server_save
|
||||
7daystodie_server_config_lgsm:
|
||||
name: 7daystodie_server_config_lgsm
|
||||
7daystodie_server_file:
|
||||
name: 7daystodie_server_file
|
||||
7daystodie_server_log:
|
||||
name: 7daystodie_server_log
|
||||
|
||||
networks:
|
||||
infra-network:
|
||||
driver: bridge
|
||||
name: infra-network
|
||||
@@ -0,0 +1,7 @@
|
||||
START_MODE=3
|
||||
VERSION=stable
|
||||
TimeZone=Europe/Paris
|
||||
BACKUP=NO
|
||||
BACKUP_HOUR=2
|
||||
BACKUP_MAX=7
|
||||
MONITOR=NO
|
||||
+14
@@ -0,0 +1,14 @@
|
||||
#RUN_ON_STARTUP=true
|
||||
RESTIC_REPOSITORY=/mnt/restic
|
||||
RESTIC_BACKUP_SOURCES=/data
|
||||
RESTIC_PASSWORD=SCY5cmu12Odca302EXabPA9jXYkCb2NN
|
||||
# Backup (exuclusive with Check and Prune)
|
||||
BACKUP_CRON=*/15 * * * *
|
||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
||||
# Check (exuclusive with Check and Prune)
|
||||
#CHECK_CRON=*/15 * * * *
|
||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
||||
# Prune (exuclusive with Check and Prune)
|
||||
#PRUNE_CRON=*/15 * * * *
|
||||
#RESTIC_PRUNE_ARGS=
|
||||
@@ -0,0 +1,33 @@
|
||||
services:
|
||||
7daystodie_backup:
|
||||
image: mazzolino/restic:latest
|
||||
container_name: 7daystodie_backup
|
||||
profiles:
|
||||
- 7daystodie_backup
|
||||
depends_on:
|
||||
- 7daystodie_server
|
||||
restart: on-failure:5
|
||||
env_file:
|
||||
- ./env/7daystodie_backup.env
|
||||
volumes:
|
||||
- 7daystodie_backup:/mnt/restic
|
||||
- 7daystodie_server_save:/data:ro
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
network_mode: none
|
||||
cap_drop:
|
||||
- NET_ADMIN
|
||||
- NET_RAW
|
||||
- SYS_ADMIN
|
||||
|
||||
volumes:
|
||||
7daystodie_backup:
|
||||
name: 7daystodie_backup
|
||||
7daystodie_server_save:
|
||||
name: 7daystodie_server_save
|
||||
7daystodie_server_config_lgsm:
|
||||
name: 7daystodie_server_config_lgsm
|
||||
7daystodie_server_file:
|
||||
name: 7daystodie_server_file
|
||||
7daystodie_server_log:
|
||||
name: 7daystodie_server_log
|
||||
@@ -0,0 +1,14 @@
|
||||
#RUN_ON_STARTUP=true
|
||||
RESTIC_REPOSITORY=/mnt/restic
|
||||
RESTIC_BACKUP_SOURCES=/data
|
||||
RESTIC_PASSWORD=SCY5cmu12Odca302EXabPA9jXYkCb2NN
|
||||
# Backup (exuclusive with Check and Prune)
|
||||
BACKUP_CRON=*/15 * * * *
|
||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
||||
# Check (exuclusive with Check and Prune)
|
||||
#CHECK_CRON=*/15 * * * *
|
||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
||||
# Prune (exuclusive with Check and Prune)
|
||||
#PRUNE_CRON=*/15 * * * *
|
||||
#RESTIC_PRUNE_ARGS=
|
||||
@@ -0,0 +1,5 @@
|
||||
include:
|
||||
# 7 days to die server
|
||||
- 7daystodie/docker-compose.7daystodie.yml
|
||||
# Backup server
|
||||
- backup/docker-compose.backup.yml
|
||||
@@ -0,0 +1,41 @@
|
||||
{
|
||||
email {$MAIL_DOMAIN}
|
||||
key_type p384
|
||||
|
||||
log {
|
||||
output file /data/logs/access.log {
|
||||
roll_size 1GiB
|
||||
roll_keep 20
|
||||
roll_keep_for 720h
|
||||
}
|
||||
format json
|
||||
}
|
||||
}
|
||||
|
||||
# import website/*
|
||||
|
||||
|
||||
# Common settings
|
||||
import website/header.caddy
|
||||
|
||||
# All website configurations
|
||||
import website/main.caddy
|
||||
import website/cyberchef.caddy
|
||||
import website/forgejo.caddy
|
||||
import website/homepage.caddy
|
||||
import website/jellyfin.caddy
|
||||
import website/memos.caddy
|
||||
import website/open-webui.caddy
|
||||
import website/privatebin.caddy
|
||||
import website/psitransfer.caddy
|
||||
import website/stirlingpdf.caddy
|
||||
import website/transmission.caddy
|
||||
import website/wordpress.caddy
|
||||
import website/dufs.caddy
|
||||
import website/it-tools.caddy
|
||||
import website/omni-tools.caddy
|
||||
import website/picoshare.caddy
|
||||
import website/projectsend.caddy
|
||||
import website/qbittorrent.caddy
|
||||
import website/syncthing.caddy
|
||||
import website/uptimekuma.caddy
|
||||
@@ -0,0 +1,9 @@
|
||||
cyberchef.{$MAIN_DOMAIN} {
|
||||
# Load balance between 2 instances
|
||||
reverse_proxy {
|
||||
to cyberchef0:8000 cyberchef1:8000
|
||||
lb_policy round_robin
|
||||
lb_retries 3
|
||||
lb_try_interval 1s
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
dufs.{$MAIN_DOMAIN} {
|
||||
reverse_proxy dufs:5000
|
||||
}
|
||||
@@ -0,0 +1,7 @@
|
||||
git.{$MAIN_DOMAIN} {
|
||||
reverse_proxy forgejo:3000
|
||||
}
|
||||
|
||||
forgejo.{$MAIN_DOMAIN} {
|
||||
redir https://git.{$MAIN_DOMAIN}{uri} permanent
|
||||
}
|
||||
@@ -0,0 +1,15 @@
|
||||
(header_common) {
|
||||
Permissions-Policy: geolocation=(), camera=(), microphone=(), clipboard-read=(), usb=()
|
||||
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: DENY
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
# Only useful for old browsers
|
||||
X-XSS-Protection: "1; mode=block"
|
||||
|
||||
# Can cause issues with external resources
|
||||
#Cross-Origin-Embedder-Policy: require-corp
|
||||
Cross-Origin-Opener-Policy: same-origin
|
||||
#Cross-Origin-Resource-Policy: same-origin
|
||||
#Content-Security-Policy: default-src 'self'; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
homepage.{$MAIN_DOMAIN} {
|
||||
reverse_proxy homepage:3000
|
||||
}
|
||||
@@ -0,0 +1,12 @@
|
||||
it-tools.{$MAIN_DOMAIN} {
|
||||
# Load balance between 2 instances
|
||||
reverse_proxy {
|
||||
to it-tools0:8080 it-tools1:8080
|
||||
lb_policy round_robin
|
||||
lb_retries 3
|
||||
lb_try_interval 1s
|
||||
}
|
||||
header {
|
||||
import header_common
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,6 @@
|
||||
jellyfin.{$MAIN_DOMAIN} {
|
||||
reverse_proxy jellyfin:8096
|
||||
header {
|
||||
import header_common
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,27 @@
|
||||
www.{$MAIN_DOMAIN} {
|
||||
header {
|
||||
Cache-Control "public, max-age=10"
|
||||
import header_common
|
||||
}
|
||||
|
||||
handle_errors {
|
||||
@notFound expression `{http.error.status_code} == 404`
|
||||
redir @notFound https://www.{$MAIN_DOMAIN} permanent
|
||||
}
|
||||
|
||||
reverse_proxy homepage:3000
|
||||
}
|
||||
|
||||
{$MAIN_DOMAIN} {
|
||||
redir https://www.{host}{uri} permanent
|
||||
}
|
||||
|
||||
public.{$MAIN_DOMAIN} {
|
||||
root * /public_data
|
||||
file_server browse
|
||||
|
||||
header / {
|
||||
Cache-Control "no-store"
|
||||
import header_common
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
memos.{$MAIN_DOMAIN} {
|
||||
reverse_proxy memos:5230
|
||||
}
|
||||
@@ -0,0 +1,9 @@
|
||||
omni-tools.{$MAIN_DOMAIN} {
|
||||
# Load balance between 2 instances
|
||||
reverse_proxy {
|
||||
to omni-tools0:80 omni-tools1:80
|
||||
lb_policy round_robin
|
||||
lb_retries 3
|
||||
lb_try_interval 1s
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
open-webui.{$MAIN_DOMAIN} {
|
||||
reverse_proxy open-webui:8080
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
picoshare.{$MAIN_DOMAIN} {
|
||||
reverse_proxy picoshare:4001
|
||||
}
|
||||
@@ -0,0 +1,7 @@
|
||||
privatebin.{$MAIN_DOMAIN} {
|
||||
reverse_proxy privatebin:8080
|
||||
}
|
||||
|
||||
pastebin.{$MAIN_DOMAIN} {
|
||||
redir https://privatebin.{$MAIN_DOMAIN} permanent
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
projectsend.{$MAIN_DOMAIN} {
|
||||
reverse_proxy projectsend:80
|
||||
}
|
||||
@@ -0,0 +1,7 @@
|
||||
transfer.{$MAIN_DOMAIN} {
|
||||
reverse_proxy psitransfer:3000
|
||||
}
|
||||
|
||||
psitransfer.{$MAIN_DOMAIN} {
|
||||
redir https://transfer.{$MAIN_DOMAIN}{uri} permanent
|
||||
}
|
||||
@@ -0,0 +1,11 @@
|
||||
torrent.{$MAIN_DOMAIN} {
|
||||
reverse_proxy qbittorrent:8080
|
||||
header {
|
||||
Cache-Control "no-store"
|
||||
import header_common
|
||||
}
|
||||
}
|
||||
|
||||
qbittorrent.{$MAIN_DOMAIN} {
|
||||
redir https://torrent.{$MAIN_DOMAIN} permanent
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
stirlingpdf.{$MAIN_DOMAIN} {
|
||||
reverse_proxy stirlingpdf:8080
|
||||
}
|
||||
@@ -0,0 +1,5 @@
|
||||
syncthing.{$MAIN_DOMAIN} {
|
||||
reverse_proxy syncthing:8384 {
|
||||
header_up Host {upstream_hostport}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
transmission.{$MAIN_DOMAIN} {
|
||||
reverse_proxy transmission:9091
|
||||
}
|
||||
@@ -0,0 +1,7 @@
|
||||
uptimekuma.{$MAIN_DOMAIN} {
|
||||
reverse_proxy uptime-kuma:3001
|
||||
header {
|
||||
Cache-Control "no-store"
|
||||
import header_common
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,34 @@
|
||||
wordpress.{$MAIN_DOMAIN} {
|
||||
root * /var/www/html
|
||||
php_fastcgi wordpress:9000
|
||||
|
||||
file_server
|
||||
encode zstd gzip
|
||||
|
||||
@disallowed {
|
||||
path /xmlrpc.php
|
||||
path *.sql
|
||||
path /wp-content/uploads/*.php
|
||||
}
|
||||
|
||||
rewrite @disallowed '/index.php'
|
||||
|
||||
respond /uploads/*.php 404
|
||||
|
||||
header {
|
||||
# disable FLoC tracking
|
||||
Permissions-Policy interest-cohort=()
|
||||
|
||||
# enable HSTS
|
||||
Strict-Transport-Security max-age=31536000;
|
||||
|
||||
# disable clients from sniffing the media type
|
||||
X-Content-Type-Options nosniff
|
||||
|
||||
# clickjacking protection
|
||||
# X-Frame-Options DENY
|
||||
|
||||
# Disable powerful features we don't need
|
||||
Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,65 @@
|
||||
services:
|
||||
# Caddy
|
||||
caddy:
|
||||
image: bensuperpc/caddy-l4:latest
|
||||
container_name: caddy
|
||||
profiles:
|
||||
- caddy
|
||||
depends_on:
|
||||
main_infrastructure:
|
||||
condition: service_completed_successfully
|
||||
restart: on-failure:5
|
||||
ports:
|
||||
- 80:80/tcp
|
||||
- 80:80/udp
|
||||
- 443:443/tcp
|
||||
- 443:443/udp
|
||||
volumes:
|
||||
- caddy_data:/data:rw
|
||||
- caddy_config:/config:rw
|
||||
- ./config:/etc/caddy:ro
|
||||
- wordpress:/var/www/html:rw
|
||||
- public_data:/public_data:ro
|
||||
|
||||
networks:
|
||||
- infra-network
|
||||
env_file:
|
||||
- ./env/caddy.env
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
healthcheck:
|
||||
test: pidof caddy || exit 1
|
||||
interval: 120s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
caddy_backup:
|
||||
image: mazzolino/restic:latest
|
||||
container_name: caddy_backup
|
||||
profiles:
|
||||
- caddy
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
env_file:
|
||||
- ./env/caddy_backup.env
|
||||
volumes:
|
||||
- caddy_backup:/mnt/restic
|
||||
- caddy_data:/data:ro
|
||||
network_mode: none
|
||||
cap_drop:
|
||||
- NET_ADMIN
|
||||
- NET_RAW
|
||||
- SYS_ADMIN
|
||||
|
||||
volumes:
|
||||
caddy_data:
|
||||
name: caddy_data
|
||||
caddy_config:
|
||||
name: caddy_config
|
||||
caddy_backup:
|
||||
name: caddy_backup
|
||||
wordpress:
|
||||
name: wordpress
|
||||
public_data:
|
||||
name: public_data
|
||||
+2
@@ -0,0 +1,2 @@
|
||||
MAIN_DOMAIN=bensuperpc.org
|
||||
MAIL_DOMAIN=bensuperpc@gmail.com
|
||||
@@ -0,0 +1,14 @@
|
||||
#RUN_ON_STARTUP=true
|
||||
RESTIC_REPOSITORY=/mnt/restic
|
||||
RESTIC_BACKUP_SOURCES=/data
|
||||
RESTIC_PASSWORD=YFQh8v3Wi95v0p6h88D4u8C8z4gLfdMw
|
||||
# Backup (exuclusive with Check and Prune)
|
||||
BACKUP_CRON=*/30 * * * *
|
||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
||||
# Check (exuclusive with Check and Prune)
|
||||
#CHECK_CRON=*/30 * * * *
|
||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
||||
# Prune (exuclusive with Check and Prune)
|
||||
#PRUNE_CRON=*/30 * * * *
|
||||
#RESTIC_PRUNE_ARGS=
|
||||
@@ -0,0 +1,51 @@
|
||||
services:
|
||||
# cyberchef
|
||||
cyberchef0:
|
||||
image: mpepping/cyberchef:latest
|
||||
container_name: cyberchef0
|
||||
profiles:
|
||||
- cyberchef
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
read_only: false
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- SYS_ADMIN
|
||||
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
|
||||
cyberchef1:
|
||||
image: mpepping/cyberchef:latest
|
||||
container_name: cyberchef1
|
||||
profiles:
|
||||
- cyberchef
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
read_only: false
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- SYS_ADMIN
|
||||
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
@@ -0,0 +1,25 @@
|
||||
services:
|
||||
# dufs
|
||||
dufs:
|
||||
image: sigoden/dufs:latest
|
||||
container_name: dufs
|
||||
profiles:
|
||||
- dufs
|
||||
# user: ${PUID:-1000}:${PGID:-1000}
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./env/dufs.env
|
||||
volumes:
|
||||
- public_data:/data
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
public_data:
|
||||
name: public_data
|
||||
private_data:
|
||||
name: private_data
|
||||
+7
@@ -0,0 +1,7 @@
|
||||
DUFS_BIND=0.0.0.0
|
||||
DUFS_PORT=5000
|
||||
DUFS_SERVE_PATH=/data
|
||||
DUFS_HIDDEN=tmp,*.log,*.lock
|
||||
DUFS_ALLOW_ALL=true
|
||||
DUFS_COMPRESS=medium
|
||||
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/:ro"
|
||||
@@ -0,0 +1,93 @@
|
||||
services:
|
||||
# forgejo
|
||||
forgejo:
|
||||
image: codeberg.org/forgejo/forgejo:13
|
||||
container_name: forgejo
|
||||
profiles:
|
||||
- forgejo
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- database_forgejo
|
||||
- caddy
|
||||
ports:
|
||||
- "22:2222"
|
||||
env_file:
|
||||
- ./env/forgejo.env
|
||||
volumes:
|
||||
- forgejo_data:/data
|
||||
- /etc/timezone:/etc/timezone:ro
|
||||
- /etc/localtime:/etc/localtime:ro
|
||||
networks:
|
||||
- infra-network
|
||||
# user: ${PUID:-1000}:${PGID:-1000}
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
# Database forgejo
|
||||
database_forgejo:
|
||||
image: mariadb:latest
|
||||
container_name: database_forgejo
|
||||
profiles:
|
||||
- forgejo
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
volumes:
|
||||
- forgejo_db:/var/lib/mysql:rw
|
||||
env_file:
|
||||
- ./env/forgejo_db.env
|
||||
command: '--default-authentication-plugin=mysql_native_password'
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
# forgejo-runner
|
||||
docker-in-docker:
|
||||
image: code.forgejo.org/oci/docker:dind
|
||||
container_name: 'docker_dind'
|
||||
hostname: docker
|
||||
networks:
|
||||
- infra-network
|
||||
profiles:
|
||||
- forgejo-runner
|
||||
privileged: true
|
||||
environment:
|
||||
DOCKER_TLS_CERTDIR: /certs
|
||||
DOCKER_HOST: docker-in-docker
|
||||
volumes:
|
||||
- forgejo_certs:/certs
|
||||
|
||||
forgejo_runner:
|
||||
image: data.forgejo.org/forgejo/runner:12
|
||||
networks:
|
||||
- infra-network
|
||||
profiles:
|
||||
- forgejo-runner
|
||||
links:
|
||||
- docker-in-docker
|
||||
depends_on:
|
||||
docker-in-docker:
|
||||
condition: service_started
|
||||
container_name: 'forgejo_runner'
|
||||
env_file:
|
||||
- ./env/forgejo_runner.env
|
||||
# user: ${PUID:-1000}:${PGID:-1000}
|
||||
volumes:
|
||||
# - ./config/forgejo_runner/config.yaml:/config.yaml:ro
|
||||
- forgejo_runner:/data
|
||||
- forgejo_certs:/certs
|
||||
restart: 'unless-stopped'
|
||||
|
||||
# command: '/bin/sh -c "while : ; do sleep 1 ; done ;"'
|
||||
command: '/bin/sh -c "sleep 5; forgejo-runner -c /data/config.yml daemon"'
|
||||
|
||||
volumes:
|
||||
forgejo_data:
|
||||
name: forgejo_data
|
||||
forgejo_db:
|
||||
name: forgejo_db
|
||||
forgejo_certs:
|
||||
name: forgejo_certs
|
||||
forgejo_runner:
|
||||
name: forgejo_runner
|
||||
+25
@@ -0,0 +1,25 @@
|
||||
USER_UID=1000
|
||||
USER_GID=1000
|
||||
FORGEJO__database__DB_TYPE=mysql
|
||||
FORGEJO__database__HOST=database_forgejo:3306
|
||||
FORGEJO__database__NAME=forgejo
|
||||
FORGEJO__database__USER=bensuperpc
|
||||
FORGEJO__database__PASSWD=ZcuHcM9tnIEM7EEO7R5jCpEt6v1d6r7s
|
||||
FORGEJO__APP_NAME=Bensuperpc's Forgejo
|
||||
FORGEJO__APP_SLOGAN=Personal Code, Mirrors, and More
|
||||
FORGEJO__server__DOMAIN=git.bensuperpc.org
|
||||
FORGEJO__server__SSH_DOMAIN=git.bensuperpc.org
|
||||
FORGEJO__server__HTTP_PORT=3000
|
||||
FORGEJO__server__SSH_LISTEN_PORT=2222
|
||||
FORGEJO__server__SSH_PORT=22
|
||||
FORGEJO__server__ROOT_URL=https://git.bensuperpc.org
|
||||
FORGEJO__security__SECRET_KEY=7IWrMh7mC7UMo1SowvUsAT2LOX49eU6P
|
||||
#FORGEJO__security__INTERNAL_TOKEN=
|
||||
FORGEJO__security__INSTALL_LOCK=true
|
||||
FORGEJO__security__MIN_PASSWORD_LENGTH=8
|
||||
FORGEJO__actions__ENABLED=true
|
||||
FORGEJO__actions__DEFAULT_ACTIONS_URL="https://git.bensuperpc.org"
|
||||
#FORGEJO__log__LEVEL: "debug"
|
||||
FORGEJO__repository__ENABLE_PUSH_CREATE_USER=true
|
||||
FORGEJO__repository__DEFAULT_PUSH_CREATE_PRIVATE=false
|
||||
FORGEJO__repository__DEFAULT_REPO_UNITS=repo.code,repo.actions
|
||||
@@ -0,0 +1,4 @@
|
||||
MARIADB_ROOT_PASSWORD=ZI8Trbot3b8WGqE5AKj1yphKMu4v9qQw
|
||||
MARIADB_USER=bensuperpc
|
||||
MARIADB_PASSWORD=ZcuHcM9tnIEM7EEO7R5jCpEt6v1d6r7s
|
||||
MARIADB_DATABASE=forgejo
|
||||
@@ -0,0 +1,3 @@
|
||||
DOCKER_HOST=tcp://docker:2376
|
||||
DOCKER_CERT_PATH=/certs/client
|
||||
DOCKER_TLS_VERIFY=1
|
||||
@@ -0,0 +1,51 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/configs/bookmarks
|
||||
|
||||
- Developer:
|
||||
- Github:
|
||||
- abbr: GH
|
||||
href: https://github.com/bensuperpc
|
||||
description: github.com
|
||||
|
||||
- Social:
|
||||
- Reddit:
|
||||
- abbr: RE
|
||||
href: https://reddit.com/u/bensuperpc
|
||||
description: reddit.com
|
||||
- Twitter:
|
||||
- abbr: TW
|
||||
href: https://twitter.com/bensuperpc
|
||||
description: twitter.com
|
||||
- Bluesky:
|
||||
- abbr: BS
|
||||
href: https://bsky.app/profile/bensuperpc.bsky.social
|
||||
description: bsky.app
|
||||
- Mastodon:
|
||||
- abbr: MA
|
||||
href: https://mastodon.social/@bensuperpc
|
||||
description: mastodon.social
|
||||
|
||||
- Entertainment:
|
||||
- YouTube:
|
||||
- abbr: YT
|
||||
href: https://youtube.com/c/bensuperpc
|
||||
description: youtube.com
|
||||
- Twitch:
|
||||
- abbr: TW
|
||||
href: https://twitch.tv/bensuperpc
|
||||
description: twitch.tv
|
||||
|
||||
- Friends:
|
||||
- Gnous:
|
||||
- abbr: Gn
|
||||
href: https://gnous.eu/
|
||||
description: gnous.eu
|
||||
- Imagisphe:
|
||||
- abbr: IM
|
||||
href: https://imagisphe.re/
|
||||
description: imagisphe.re
|
||||
- Greep:
|
||||
- abbr: GP
|
||||
href: https://greep.fr/#/
|
||||
description: greep.fr
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/docker/
|
||||
# https://gethomepage.dev/configs/docker
|
||||
|
||||
#jellyfin:
|
||||
# host: jellyfin
|
||||
@@ -0,0 +1,4 @@
|
||||
---
|
||||
# url: https://proxmox.host.or.ip:8006
|
||||
# token: username@pam!Token ID
|
||||
# secret: secret
|
||||
+73
-44
@@ -1,46 +1,39 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/services
|
||||
# https://gethomepage.dev/configs/services/
|
||||
|
||||
- Personal:
|
||||
- wordpress:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/wordpress.png
|
||||
href: https://www.bensuperpc.org/
|
||||
href: https://wordpress.bensuperpc.org/
|
||||
description: Wordpress
|
||||
ping: bensuperpc.org
|
||||
ping: wordpress.bensuperpc.org
|
||||
container: wordpress
|
||||
- uptime-kuma:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/uptime-kuma.png
|
||||
href: https://uptimekuma.bensuperpc.org/
|
||||
description: Uptime Kuma
|
||||
ping: uptimekuma.bensuperpc.org
|
||||
container: uptime-kuma
|
||||
- yacht:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/yacht.png
|
||||
href: https://yacht.bensuperpc.org/
|
||||
description: Yacht
|
||||
ping: yacht.bensuperpc.org
|
||||
container: yacht
|
||||
- dozzle:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dozzle.png
|
||||
href: https://dozzle.bensuperpc.org/
|
||||
description: Dozzle
|
||||
ping: dozzle.bensuperpc.org
|
||||
container: dozzle
|
||||
|
||||
- Sharing:
|
||||
- jellyfin:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/jellyfin.png
|
||||
href: https://jellyfin.bensuperpc.org/
|
||||
description: Jellyfin
|
||||
ping: jellyfin.bensuperpc.org
|
||||
container: jellyfin
|
||||
- projectsend:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/projectsend.png
|
||||
href: https://projectsend.bensuperpc.org/
|
||||
description: ProjectSend
|
||||
ping: projectsend.bensuperpc.org
|
||||
container: projectsend
|
||||
- Sharing:
|
||||
- psitransfer:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/psitransfer.png
|
||||
href: https://psitransfer.bensuperpc.org/
|
||||
description: PsiTransfer
|
||||
ping: psitransfer.bensuperpc.org
|
||||
container: psitransfer
|
||||
- picoshare:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/picoshare.png
|
||||
href: https://picoshare.bensuperpc.org/
|
||||
description: PicoShare
|
||||
ping: picoshare.bensuperpc.org
|
||||
container: picoshare
|
||||
- privatebin:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/privatebin.png
|
||||
href: https://privatebin.bensuperpc.org/
|
||||
@@ -65,6 +58,18 @@
|
||||
description: Transmission
|
||||
ping: transmission.bensuperpc.org
|
||||
container: transmission
|
||||
- dufs:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dufs.png
|
||||
href: https://dufs.bensuperpc.org/
|
||||
description: Dufs
|
||||
ping: dufs.bensuperpc.org
|
||||
container: dufs
|
||||
# - caddy:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/caddy.png
|
||||
# href: https://public.bensuperpc.org/
|
||||
# description: File browser
|
||||
# ping: public.bensuperpc.org
|
||||
# container: caddy
|
||||
|
||||
- Utils:
|
||||
- it-tools:
|
||||
@@ -72,14 +77,38 @@
|
||||
href: https://it-tools.bensuperpc.org/
|
||||
description: IT Tools
|
||||
ping: it-tools.bensuperpc.org
|
||||
container: it-tools
|
||||
container: it-tools0
|
||||
- omni-tools:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
|
||||
href: https://omni-tools.bensuperpc.org/
|
||||
description: Omni Tools
|
||||
ping: omni-tools.bensuperpc.org
|
||||
container: omni-tools0
|
||||
- cyberchef:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/cyberchef.png
|
||||
href: https://cyberchef.bensuperpc.org/
|
||||
description: CyberChef
|
||||
ping: cyberchef.bensuperpc.org
|
||||
container: cyberchef0
|
||||
- stirlingpdf:
|
||||
#icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/stirlingpdf.png
|
||||
href: https://stirlingpdf.bensuperpc.org/
|
||||
description: StirlingPDF
|
||||
ping: stirlingpdf.bensuperpc.org
|
||||
container: stirlingpdf
|
||||
- forgejo:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/forgejo.png
|
||||
href: https://forgejo.bensuperpc.org/
|
||||
description: Forgejo
|
||||
ping: forgejo.bensuperpc.org
|
||||
container: forgejo
|
||||
- open-webui:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/open-webui.png
|
||||
href: https://open-webui.bensuperpc.org/
|
||||
description: ChatGPT local
|
||||
ping: open-webui.bensuperpc.org
|
||||
container: open-webui
|
||||
|
||||
- gitea:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/gitea.png
|
||||
href: https://gitea.bensuperpc.org/
|
||||
description: Gitea
|
||||
ping: gitea.bensuperpc.org
|
||||
container: gitea
|
||||
- Games:
|
||||
- minecraft:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/minecraft.png
|
||||
@@ -92,19 +121,19 @@
|
||||
# href: https://7dtd.bensuperpc.org/
|
||||
description: 7 Days to Die server
|
||||
# ping: 7dtd.bensuperpc.org
|
||||
container: 7dtd-server
|
||||
- Others:
|
||||
- gitea-runner:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/gitea.png
|
||||
# href: https://gitea.bensuperpc.org/
|
||||
description: Gitea Runner
|
||||
ping: gitea.bensuperpc.org
|
||||
container: gitea-runner
|
||||
container: 7daystodie_server
|
||||
- satisfactory:
|
||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
|
||||
# href: https://7dtd.bensuperpc.org/
|
||||
description: Satisfactory server
|
||||
# ping: 7dtd.bensuperpc.org
|
||||
container: satisfactory_server
|
||||
|
||||
- watchtower:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/watchtower.png
|
||||
#href: https://watchtower.bensuperpc.org/
|
||||
description: Watchtower
|
||||
ping: watchtower.bensuperpc.org
|
||||
container: watchtower
|
||||
- Admin:
|
||||
- uptime-kuma:
|
||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/uptime-kuma.png
|
||||
href: https://uptimekuma.bensuperpc.org/
|
||||
description: Uptime Kuma
|
||||
ping: uptimekuma.bensuperpc.org
|
||||
container: uptime-kuma
|
||||
|
||||
+8
-10
@@ -1,17 +1,19 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/latest/configs/settings
|
||||
# https://gethomepage.dev/configs/settings/
|
||||
|
||||
title: Bensuperpc
|
||||
|
||||
base: https://homepage.bensuperpc.org
|
||||
description: Bensuperpc's homepage
|
||||
|
||||
favicon: /images/favicon.ico
|
||||
base: https://www.bensuperpc.org
|
||||
|
||||
favicon: /image/favicon.ico
|
||||
|
||||
logpath: /app/logs
|
||||
|
||||
background:
|
||||
image: /images/electronic.jpg
|
||||
image: /image/background.jpg
|
||||
blur: md
|
||||
opacity: 50
|
||||
brightness: 50
|
||||
@@ -25,17 +27,13 @@ layout:
|
||||
Personal:
|
||||
style: row
|
||||
columns: 6
|
||||
Media:
|
||||
style: row
|
||||
columns: 6
|
||||
Sharing:
|
||||
style: row
|
||||
columns: 6
|
||||
Utils:
|
||||
Admin:
|
||||
style: row
|
||||
columns: 6
|
||||
initiallyCollapsed: false
|
||||
Others:
|
||||
Utils:
|
||||
style: row
|
||||
columns: 6
|
||||
initiallyCollapsed: false
|
||||
@@ -0,0 +1,37 @@
|
||||
---
|
||||
# For configuration options and examples, please see:
|
||||
# https://gethomepage.dev/widgets/services/
|
||||
# https://gethomepage.dev/widgets/services/qbittorrent/
|
||||
|
||||
#- logo:
|
||||
# icon: /image/daisy.jpg
|
||||
|
||||
- resources:
|
||||
cpu: true
|
||||
cputemp: true
|
||||
memory: true
|
||||
disk: /
|
||||
uptime: true
|
||||
refresh: 3000
|
||||
|
||||
#- search:
|
||||
# provider: duckduckgo
|
||||
# target: _blank
|
||||
# showSearchSuggestions: true
|
||||
|
||||
- datetime:
|
||||
text_size: xl
|
||||
locale: fr
|
||||
format:
|
||||
timeStyle: short
|
||||
dateStyle: short
|
||||
|
||||
- openmeteo:
|
||||
label: Nantes # optional
|
||||
latitude: 47.216671
|
||||
longitude: -1.55
|
||||
timezone: Europe/Paris # optional
|
||||
units: metric # or imperial
|
||||
cache: 5 # Time in minutes to cache API responses, to stay within limits
|
||||
format: # optional, Intl.NumberFormat options
|
||||
maximumFractionDigits: 1
|
||||
+11
-3
@@ -6,15 +6,23 @@ services:
|
||||
profiles:
|
||||
- homepage
|
||||
restart: on-failure:5
|
||||
# environment:
|
||||
# - PUID=${PUID:-1000}
|
||||
# - PGID=${PGID:-1000}
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./homepage/env/homepage.env
|
||||
- ./env/homepage.env
|
||||
volumes:
|
||||
- homepage_log:/app/logs
|
||||
- ./homepage/config:/app/config:ro
|
||||
- ./homepage/image:/app/public/images:ro
|
||||
- ./config:/app/config
|
||||
- ./image:/app/public/image:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
# develop:
|
||||
# watch:
|
||||
# - action: sync+restart
|
||||
# path: ./homepage/image
|
||||
# target: /app/public/image
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
Vendored
+1
@@ -1,2 +1,3 @@
|
||||
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
|
||||
#PSITRANSFER_PORT=3000
|
||||
HOMEPAGE_ALLOWED_HOSTS=www.bensuperpc.org
|
||||
|
Before Width: | Height: | Size: 569 KiB After Width: | Height: | Size: 569 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 51 KiB |
|
Before Width: | Height: | Size: 295 KiB After Width: | Height: | Size: 295 KiB |
@@ -0,0 +1,51 @@
|
||||
services:
|
||||
# it-tools
|
||||
it-tools0:
|
||||
image: ghcr.io/sharevb/it-tools:latest
|
||||
container_name: it-tools0
|
||||
profiles:
|
||||
- it-tools
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
read_only: false
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- SYS_ADMIN
|
||||
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
|
||||
it-tools1:
|
||||
image: ghcr.io/sharevb/it-tools:latest
|
||||
container_name: it-tools1
|
||||
profiles:
|
||||
- it-tools
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
read_only: false
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- SYS_ADMIN
|
||||
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
@@ -0,0 +1,37 @@
|
||||
services:
|
||||
# Jellyfin
|
||||
jellyfin:
|
||||
image: lscr.io/linuxserver/jellyfin:latest
|
||||
container_name: jellyfin
|
||||
profiles:
|
||||
- jellyfin
|
||||
restart: on-failure:5
|
||||
environment:
|
||||
- PUID=${PUID:-1000}
|
||||
- PGID=${PGID:-1000}
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./env/jellyfin.env
|
||||
volumes:
|
||||
- jellyfin_config:/config
|
||||
- jellyfin_cache:/cache
|
||||
- public_data:/public
|
||||
- private_data:/private
|
||||
# Hardware acceleration (For Intel and AMD GPUs)
|
||||
devices:
|
||||
- /dev/dri:/dev/dri
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
jellyfin_config:
|
||||
name: jellyfin_config
|
||||
jellyfin_cache:
|
||||
name: jellyfin_cache
|
||||
public_data:
|
||||
name: public_data
|
||||
private_data:
|
||||
name: private_data
|
||||
@@ -0,0 +1,2 @@
|
||||
TZ=Etc/UTC
|
||||
DOCKER_MODS=linuxserver/mods:jellyfin-opencl-intel
|
||||
@@ -0,0 +1,30 @@
|
||||
services:
|
||||
main_infrastructure:
|
||||
container_name: main_infrastructure
|
||||
image: alpine:latest
|
||||
profiles:
|
||||
- main_infrastructure
|
||||
volumes:
|
||||
- public_data:/public_data:rw
|
||||
- private_data:/private_data:rw
|
||||
read_only: true
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- ALL
|
||||
cap_add:
|
||||
- CHOWN
|
||||
- DAC_OVERRIDE
|
||||
# Fix root permissions on mounted volumes
|
||||
command: chown -R ${PUID:-1000}:${PGID:-1000} /public_data /private_data
|
||||
|
||||
volumes:
|
||||
public_data:
|
||||
name: public_data
|
||||
private_data:
|
||||
name: private_data
|
||||
|
||||
networks:
|
||||
infra-network:
|
||||
driver: bridge
|
||||
name: infra-network
|
||||
@@ -0,0 +1,22 @@
|
||||
services:
|
||||
# memos
|
||||
memos:
|
||||
image: neosmemo/memos:latest
|
||||
container_name: memos
|
||||
profiles:
|
||||
- memos
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
env_file:
|
||||
- ./env/memos.env
|
||||
volumes:
|
||||
- memos_config:/var/opt/memos
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
memos_config:
|
||||
name: memos_config
|
||||
+1
@@ -0,0 +1 @@
|
||||
|
||||
@@ -0,0 +1,34 @@
|
||||
services:
|
||||
minecraft_backup:
|
||||
image: mazzolino/restic:latest
|
||||
container_name: minecraft_backup
|
||||
profiles:
|
||||
- minecraft_backup
|
||||
depends_on:
|
||||
- mc-server
|
||||
- minecraft_proxy
|
||||
restart: on-failure:3
|
||||
env_file:
|
||||
- ./env/backup.env
|
||||
volumes:
|
||||
- minecraft_server_backup:/mnt/restic
|
||||
- minecraft_server_data:/data/minecraft_server_data:ro
|
||||
- minecraft_proxy_data:/data/minecraft_proxy_data:ro
|
||||
- minecraft_rcon_data:/data/minecraft_rcon_data:ro
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
network_mode: none
|
||||
cap_drop:
|
||||
- NET_ADMIN
|
||||
- NET_RAW
|
||||
- SYS_ADMIN
|
||||
|
||||
volumes:
|
||||
minecraft_server_backup:
|
||||
name: minecraft_server_backup
|
||||
minecraft_server_data:
|
||||
name: minecraft_server_data
|
||||
minecraft_proxy_data:
|
||||
name: minecraft_proxy_data
|
||||
minecraft_rcon_data:
|
||||
name: minecraft_rcon_data
|
||||
@@ -0,0 +1,14 @@
|
||||
#RUN_ON_STARTUP=true
|
||||
RESTIC_REPOSITORY=/mnt/restic
|
||||
RESTIC_BACKUP_SOURCES=/data
|
||||
RESTIC_PASSWORD=7xymiWBH4c56rlBXPXbgkxF2zw3f2AGs
|
||||
# Backup (exuclusive with Check and Prune)
|
||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
||||
BACKUP_CRON=*/15 * * * *
|
||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
||||
# Check (exuclusive with Check and Prune)
|
||||
#CHECK_CRON=*/15 * * * *
|
||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
||||
# Prune (exuclusive with Check and Prune)
|
||||
#PRUNE_CRON=*/15 * * * *
|
||||
#RESTIC_PRUNE_ARGS=
|
||||
@@ -0,0 +1,5 @@
|
||||
include:
|
||||
# Minecraft server
|
||||
- minecraft-server/docker-compose.yml
|
||||
# Backup server
|
||||
- backup/docker-compose.backup.yml
|
||||
@@ -0,0 +1,4 @@
|
||||
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/better-stonecutter-v1-1.zip
|
||||
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/cuttable-wood-v2-2.zip
|
||||
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/easy-bone-blocks-v1-0-1.zip
|
||||
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/more-smeltable-items-v2-0-3.zip
|
||||
@@ -0,0 +1,152 @@
|
||||
# Dynmap
|
||||
https://dev.bukkit.org/projects/dynmap/files/4167109/download
|
||||
|
||||
# Dynmap-WorldGuard
|
||||
# https://dev.bukkit.org/projects/dynmap-worldguard/files/latest
|
||||
# v1.4-beta-1 (05-02-2022)
|
||||
https://dev.bukkit.org/projects/dynmap-worldguard/files/3635984/download
|
||||
|
||||
# Dynmap-EssentialsX
|
||||
# https://dev.bukkit.org/projects/dynmap-essentialsx/files/latest
|
||||
# v1.0-beta-1 (09-02-2022)
|
||||
https://dev.bukkit.org/projects/dynmap-essentialsx/files/3634752/download
|
||||
|
||||
# Dynmap-Structures
|
||||
https://dev.bukkit.org/projects/dynmap-structures/files/3845985/download
|
||||
|
||||
# EssentialsX
|
||||
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsX-2.19.7.jar
|
||||
|
||||
# EssentialsX Add-on
|
||||
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXChat-2.19.7.jar
|
||||
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXSpawn-2.19.7.jar
|
||||
# https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXDiscord-2.19.7.jar
|
||||
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXProtect-2.19.7.jar
|
||||
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXAntiBuild-2.19.7.jar
|
||||
# https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXGeoIP-2.19.7.jar
|
||||
|
||||
|
||||
# Serverutils
|
||||
# https://serverutils.fvdh.dev/api/v1/Bukkit/latest
|
||||
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/ServerUtils-Bukkit-3.5.3.jar
|
||||
|
||||
# WorldEdit, WorldGuard and FastAsyncWorldEdit
|
||||
# https://dev.bukkit.org/projects/worldedit/files/latest
|
||||
https://dev.bukkit.org/projects/worldguard/files/latest
|
||||
https://ci.athion.net/job/FastAsyncWorldEdit/339/artifact/artifacts/FastAsyncWorldEdit-Bukkit-2.5.1-SNAPSHOT-339.jar
|
||||
https://github.com/MrMicky-FR/WorldEditSelectionVisualizer/releases/download/v2.1.3/WorldEditSelectionVisualizer-2.1.3.jar
|
||||
|
||||
# LuckPerms
|
||||
# https://download.luckperms.net/1438/bukkit/loader/LuckPerms-Bukkit-5.4.30.jar
|
||||
|
||||
# Vault
|
||||
https://dev.bukkit.org/projects/vault/files/latest
|
||||
|
||||
# Advanced Portals
|
||||
# https://dev.bukkit.org/projects/advanced-portals/files/latest
|
||||
https://github.com/sekwah41/Advanced-Portals/releases/download/v0.9.2/Advanced-Portals-0.9.2.jar
|
||||
|
||||
# ProtocolLib
|
||||
# https://github.com/dmulloy2/ProtocolLib/releases/download/4.8.0/ProtocolLib.jar
|
||||
https://ci.dmulloy2.net/job/ProtocolLib/lastSuccessfulBuild/artifact/target/ProtocolLib.jar
|
||||
|
||||
# NBT-API
|
||||
https://dev.bukkit.org/projects/nbt-api/files/latest
|
||||
|
||||
# CoreProtect
|
||||
https://dev.bukkit.org/projects/coreprotect/files/latest
|
||||
|
||||
# Decent Holograms
|
||||
# https://www.spigotmc.org/resources/decent-holograms-1-8-1-18-papi-support-no-dependencies.96927/
|
||||
# https://github.com/DecentSoftware-eu/DecentHolograms/releases/download/2.7.2/DecentHolograms-2.7.2.jar
|
||||
|
||||
# DropHeads
|
||||
# https://dev.bukkit.org/projects/dropheads/files/latest
|
||||
|
||||
# OpenInv
|
||||
https://dev.bukkit.org/projects/openinv/files/latest
|
||||
|
||||
# Animated-TabList
|
||||
https://dev.bukkit.org/projects/animated-tab-tablist/files/latest
|
||||
|
||||
# DeadChest
|
||||
# https://dev.bukkit.org/projects/dead-chest/files/latest
|
||||
|
||||
# UberEnchant
|
||||
https://dev.bukkit.org/projects/uberenchant/files/latest
|
||||
|
||||
# TreeAssist
|
||||
# https://dev.bukkit.org/projects/tree-assist/files/latest
|
||||
# Beta TreeAssist v7.3.31 (18-07-2022)
|
||||
https://dev.bukkit.org/projects/tree-assist/files/3963990/download
|
||||
|
||||
# Shopkeepers
|
||||
https://dev.bukkit.org/projects/shopkeepers/files/latest
|
||||
|
||||
# EconomyShopGUI
|
||||
https://dev.bukkit.org/projects/economyshopgui/files/latest
|
||||
|
||||
# SignShop v3
|
||||
# https://dev.bukkit.org/projects/signshop/files/latest
|
||||
|
||||
# Quickshop-reremake
|
||||
# https://dev.bukkit.org/projects/quickshop-reremake/files/latest
|
||||
# https://ci.codemc.io/job/PotatoCraft-Studio/job/QuickShopDynmap/7/artifact/target/QuickShop-Dynmap-1.0.jar
|
||||
|
||||
# CustomCrafting Advanced Custom Recipes
|
||||
# https://dev.bukkit.org/projects/customcrafting-advanced-custom-recipes/files/latest
|
||||
# https://dev.bukkit.org/projects/wolfyutilities/files/latest
|
||||
|
||||
# Insta Mine Deepslate
|
||||
https://dev.bukkit.org/projects/insta-mine-deepslate/files/latest
|
||||
|
||||
# SkinsRestorerX
|
||||
https://github.com/SkinsRestorer/SkinsRestorerX/releases/download/14.2.5/SkinsRestorer.jar
|
||||
|
||||
# ImageOnMap
|
||||
https://dev.bukkit.org/projects/imageonmap/files/latest
|
||||
|
||||
# Geyser
|
||||
https://ci.opencollab.dev/job/GeyserMC/job/Geyser/job/master/lastSuccessfulBuild/artifact/bootstrap/spigot/target/Geyser-Spigot.jar
|
||||
|
||||
# Floodgate
|
||||
https://ci.opencollab.dev/job/GeyserMC/job/Floodgate/job/master/lastSuccessfulBuild/artifact/spigot/build/libs/floodgate-spigot.jar
|
||||
|
||||
# ViaVersion
|
||||
# https://github.com/ViaVersion/ViaVersion/releases/download/4.3.1/ViaVersion-4.3.1.jar
|
||||
|
||||
# ViaBackwards
|
||||
# https://github.com/ViaVersion/ViaBackwards/releases/download/4.3.0/ViaBackwards-4.3.0.jar
|
||||
|
||||
# PvPManager
|
||||
# https://dev.bukkit.org/projects/pvpmanager/files/latest
|
||||
|
||||
# AuthMe Reloaded
|
||||
# https://ci.codemc.io/job/AuthMe/job/AuthMeReloaded/lastSuccessfulBuild/artifact/target/AuthMe-5.6.0-SNAPSHOT.jar
|
||||
|
||||
# SignBoard
|
||||
# https://dev.bukkit.org/projects/signboard/files/latest
|
||||
|
||||
# plan-player-analytics
|
||||
https://github.com/plan-player-analytics/Plan/releases/download/5.5.2163/Plan-5.5-build-2163.jar
|
||||
|
||||
# MiniMOTD
|
||||
# https://github.com/jpenilla/MiniMOTD/releases/download/v2.0.9/minimotd-universal-2.0.9.jar
|
||||
|
||||
# Citizens2
|
||||
https://ci.citizensnpcs.co/job/Citizens2/2756/artifact/dist/target/Citizens-2.0.30-b2756.jar
|
||||
|
||||
# Simple voice chat [BUKKIT/SPIGOT/PAPER][1.19] Simple Voice Chat 1.19-2.2.45 (18-06-2022)
|
||||
https://dev.bukkit.org/projects/simple-voice-chat/files/latest
|
||||
|
||||
# BKCommonLib
|
||||
https://ci.mg-dev.eu/job/BKCommonLib/1454/artifact/target/BKCommonLib-1.19.3-v2-SNAPSHOT-1454.jar
|
||||
|
||||
# MyWorlds
|
||||
https://ci.mg-dev.eu/job/MyWorlds/lastSuccessfulBuild/artifact/target/MyWorlds-1.19.3-v2-SNAPSHOT-196.jar
|
||||
|
||||
# PurpurExtras
|
||||
https://cdn.modrinth.com/data/Hn8OHmqL/versions/w60JPGhg/PurpurExtras-1.23.0.jar
|
||||
|
||||
#FreedomChat
|
||||
https://cdn.modrinth.com/data/MubyTbnA/versions/qGaisS0d/FreedomChat-1.3.1.jar
|
||||
@@ -0,0 +1,106 @@
|
||||
services:
|
||||
minecraft_proxy:
|
||||
image: itzg/bungeecord:latest
|
||||
container_name: minecraft_proxy_server
|
||||
profiles:
|
||||
- minecraft_proxy
|
||||
- minecraft_server
|
||||
restart: on-failure:3
|
||||
env_file:
|
||||
- ./env/proxy.env
|
||||
environment:
|
||||
INIT_MEMORY: "512M"
|
||||
MAX_MEMORY: "2048M"
|
||||
ports:
|
||||
# Server Minecraft port
|
||||
- "25565:25577"
|
||||
# Server Minecraft Bedrock port (GeyserMC)
|
||||
#- "19132:19132/udp"
|
||||
# Rcon port
|
||||
#- "25576:25575"
|
||||
# Plan port
|
||||
# - "8806:8804"
|
||||
volumes:
|
||||
- minecraft_proxy_data:/server
|
||||
networks:
|
||||
- infra-network
|
||||
|
||||
mc-server:
|
||||
image: itzg/minecraft-server:latest
|
||||
container_name: minecraft_server
|
||||
profiles:
|
||||
- minecraft_server
|
||||
depends_on:
|
||||
- minecraft_proxy
|
||||
restart: on-failure:3
|
||||
ports:
|
||||
# Server Minecraft port (Disable if you use proxy)
|
||||
# - "25565:25565"
|
||||
# Rcon port
|
||||
# - "25575:25575"
|
||||
# Server Minecraft Bedrock port (GeyserMC)
|
||||
# - "19132:19132/udp"
|
||||
# Dynmap port
|
||||
# - "8123:8123"
|
||||
# BlueMap port
|
||||
- "8100:8100"
|
||||
# Plan port
|
||||
- "8804:8804"
|
||||
env_file:
|
||||
- ./env/server.env
|
||||
- ./env/world.env
|
||||
- ./env/mods_plugins.env
|
||||
environment:
|
||||
MAX_MEMORY: "${MAX_MEMORY:-24G}"
|
||||
volumes:
|
||||
- minecraft_server_data:/data
|
||||
# - ./asset_links/plugins.txt:/extras/plugins.txt:ro
|
||||
networks:
|
||||
- infra-network
|
||||
deploy:
|
||||
resources:
|
||||
# limits:
|
||||
# cpus: '8.0'
|
||||
# memory: 26G
|
||||
reservations:
|
||||
cpus: '0.01'
|
||||
memory: 20M
|
||||
|
||||
rcon-web:
|
||||
image: itzg/rcon:latest
|
||||
container_name: minecraft_rcon_web
|
||||
profiles:
|
||||
- mc-web
|
||||
restart: on-failure:3
|
||||
depends_on:
|
||||
- minecraft_server
|
||||
- minecraft_proxy
|
||||
environment:
|
||||
RWA_USERNAME: admin
|
||||
RWA_PASSWORD: admin
|
||||
RWA_ADMIN: "TRUE"
|
||||
# is referring to the hostname of 'minecraft_server' compose service below
|
||||
RWA_RCON_HOST: minecraft_server
|
||||
RWA_RCON_PASSWORD: 6hxU3Oxmh2Q8e6S9fjkdWJikRCON_PASSWORD
|
||||
ports:
|
||||
# web UI port
|
||||
- "4326:4326"
|
||||
# websocket access from UI
|
||||
- "4327:4327"
|
||||
volumes:
|
||||
- minecraft_rcon_data:/opt/rcon-web-admin/db
|
||||
networks:
|
||||
- infra-network
|
||||
|
||||
volumes:
|
||||
minecraft_server_data:
|
||||
name: minecraft_server_data
|
||||
minecraft_proxy_data:
|
||||
name: minecraft_proxy_data
|
||||
minecraft_rcon_data:
|
||||
name: minecraft_rcon_data
|
||||
|
||||
networks:
|
||||
infra-network:
|
||||
driver: bridge
|
||||
name: infra-network
|
||||
+34
@@ -0,0 +1,34 @@
|
||||
# Disable SignLink: 39593
|
||||
#KeepChunks,Chunky,Plasmo Voice Server,viaversion,viabackwards,LuckPerms,QuickShop-Reremake,KeepChunks, DecentHolograms
|
||||
#SPIGET_RESOURCES=23307,81534,91064,19254,27448,28140,62575,23307,96927
|
||||
# MODPACK= # MODPACK or MODS
|
||||
# MODS=https://dev.bukkit.org/projects/dynmap/files/3620010/download
|
||||
#MODS_FILE=/extras/plugins.txt
|
||||
REMOVE_OLD_MODS=false
|
||||
REMOVE_OLD_MODS_INCLUDE=*.jar,*-version.json
|
||||
REMOVE_OLD_MODS_EXCLUDE=
|
||||
REMOVE_OLD_MODS_DEPTH=16
|
||||
|
||||
# RESOURCE_PACK=
|
||||
# RESOURCE_PACK_SHA1=
|
||||
|
||||
# Minecraft Datapack
|
||||
# DATAPACKS=Terralith_v2.2_Seed_3820.zip
|
||||
#DATAPACKS_FILE=/extras/datapacks.txt
|
||||
#REMOVE_OLD_DATAPACKS=false
|
||||
#REMOVE_OLD_DATAPACKS_INCLUDE=*.zip
|
||||
# REMOVE_OLD_DATAPACKS_EXCLUDE=
|
||||
#REMOVE_OLD_DATAPACKS_DEPTH=1
|
||||
|
||||
#RESOURCE_PACK=
|
||||
#RESOURCE_PACK_SHA1=
|
||||
|
||||
# MODS_FORGEAPI_KEY
|
||||
# MODS_FORGEAPI_FILE
|
||||
# MODS_FORGEAPI_PROJECTIDS
|
||||
# MODS_FORGEAPI_RELEASES
|
||||
# MODS_FORGEAPI_DOWNLOAD_DEPENDENCIES
|
||||
# MODS_FORGEAPI_IGNORE_GAMETYPE
|
||||
# REMOVE_OLD_FORGEAPI_MODS
|
||||
# REMOVE_OLD_DATAPACKS_DEPTH
|
||||
# REMOVE_OLD_DATAPACKS_INCLUDE
|
||||
@@ -0,0 +1,14 @@
|
||||
TYPE=VELOCITY
|
||||
VELOCITY_VERSION=3.5.0-SNAPSHOT
|
||||
VELOCITY_BUILD_ID=594
|
||||
#PLUGINS=
|
||||
#SPIGET_PLUGINS=
|
||||
DEBUG=false
|
||||
DEBUG_HELPER=false
|
||||
ENABLE_RCON=false
|
||||
#RCON_PASSWORD=6hxU3Oxmh2Q8e6S9fjkdWJik
|
||||
#RCON_PORT=25576
|
||||
INIT_MEMORY=512M
|
||||
MAX_MEMORY=1536M
|
||||
#JVM_OPTS=
|
||||
JVM_XX_OPTS=-XX:+UseG1GC -XX:G1HeapRegionSize=4M -XX:+UnlockExperimentalVMOptions -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:MaxInlineLevel=15
|
||||
@@ -0,0 +1,81 @@
|
||||
# Base options
|
||||
EULA=true
|
||||
ONLINE_MODE=false
|
||||
SERVER_PORT=25565
|
||||
SERVER_NAME=MyServer
|
||||
ICON=https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_world/icon_64x64.png
|
||||
OVERRIDE_ICON=true
|
||||
MOTD=A §l§cMinecraft§r §nserver
|
||||
OVERRIDE_SERVER_PROPERTIES=true
|
||||
ENFORCE_SECURE_PROFILE=false
|
||||
|
||||
# Server jar options
|
||||
TYPE=PURPUR
|
||||
VERSION=1.21.11
|
||||
PURPUR_BUILD=2568
|
||||
FORCE_REDOWNLOAD=false
|
||||
BUILD_FROM_SOURCE=false
|
||||
|
||||
# Server options
|
||||
INIT_MEMORY=2G
|
||||
MAX_MEMORY=12G
|
||||
EXEC_DIRECTLY=false
|
||||
USE_AIKAR_FLAGS=true
|
||||
USE_SIMD_FLAGS=true
|
||||
# TUNE_VIRTUALIZED=true
|
||||
# ENABLE_JMX=true
|
||||
CONSOLE=false
|
||||
GUI=false
|
||||
TZ=Europe/Paris
|
||||
|
||||
# OPS options
|
||||
OPS=Bensuperpc
|
||||
# OPS_FILE=
|
||||
OVERRIDE_OPS=true
|
||||
#OP_PERMISSION_LEVEL=4
|
||||
#FUNCTION_PERMISSION_LEVEL
|
||||
|
||||
# WHITELIST options
|
||||
ENABLE_WHITELIST=false
|
||||
OVERRIDE_WHITELIST=true
|
||||
#WHITELIST=Bensuperpc
|
||||
# WHITELIST_FILE=
|
||||
ENFORCE_WHITELIST=false
|
||||
|
||||
# AUTOPAUSE options
|
||||
ENABLE_AUTOPAUSE=false
|
||||
AUTOPAUSE_TIMEOUT_EST=7200000
|
||||
AUTOPAUSE_TIMEOUT_INIT=3600000
|
||||
AUTOPAUSE_TIMEOUT_KN=480000
|
||||
|
||||
# AUTOSTOP options
|
||||
# ENABLE_AUTOSTOP=true
|
||||
# AUTOSTOP_TIMEOUT_EST
|
||||
# AUTOSTOP_TIMEOUT_INIT
|
||||
# AUTOSTOP_PERIOD
|
||||
|
||||
NETWORK_COMPRESSION_THRESHOLD=-1
|
||||
LOG_TIMESTAMP=true
|
||||
MAX_TICK_TIME=-1
|
||||
# Time (sec) before AFK player was disconnected
|
||||
PLAYER_IDLE_TIMEOUT=600
|
||||
MAX_PLAYERS=32
|
||||
ALLOW_FLIGHT=false
|
||||
|
||||
# RCON options
|
||||
ENABLE_RCON=false
|
||||
RCON_PASSWORD=6hxU3Oxmh2Q8e6S9fjkdWJik
|
||||
RCON_PORT=25575
|
||||
BROADCAST_CONSOLE_TO_OPS=true
|
||||
BROADCAST_RCON_TO_OPS=true
|
||||
|
||||
# QUERY options
|
||||
#ENABLE_QUERY=true
|
||||
#QUERY_PORT=25565
|
||||
|
||||
# Others options
|
||||
SNOOPER_ENABLED=true
|
||||
ENABLE_STATUS=true
|
||||
PREVIEWS_CHAT=false
|
||||
#SYNC_CHUNK_WRITES=true
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
LEVEL=world
|
||||
LEVEL_TYPE=default
|
||||
# MAX_WORLD_SIZE=10000
|
||||
# MAX_BUILD_HEIGHT=256
|
||||
ALLOW_NETHER=true
|
||||
GENERATE_STRUCTURES=true
|
||||
VIEW_DISTANCE=12
|
||||
SIMULATION_DISTANCE=10
|
||||
ENABLE_COMMAND_BLOCK=true
|
||||
ANNOUNCE_PLAYER_ACHIEVEMENTS=true
|
||||
PVP=true
|
||||
DIFFICULTY=hard
|
||||
FORCE_GAMEMODE=false
|
||||
MODE=survival
|
||||
HARDCORE=false
|
||||
SPAWN_PROTECTION=16
|
||||
SEED=3820
|
||||
|
||||
# Spawn Entities Options
|
||||
SPAWN_ANIMALS=true
|
||||
SPAWN_MONSTERS=true
|
||||
SPAWN_NPCS=true
|
||||
@@ -0,0 +1,51 @@
|
||||
services:
|
||||
# omni-tools
|
||||
omni-tools0:
|
||||
image: iib0011/omni-tools:latest
|
||||
container_name: omni-tools0
|
||||
profiles:
|
||||
- omni-tools
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
read_only: false
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- SYS_ADMIN
|
||||
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
|
||||
omni-tools1:
|
||||
image: iib0011/omni-tools:latest
|
||||
container_name: omni-tools1
|
||||
profiles:
|
||||
- omni-tools
|
||||
restart: on-failure:5
|
||||
depends_on:
|
||||
- caddy
|
||||
networks:
|
||||
- infra-network
|
||||
read_only: false
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- SYS_ADMIN
|
||||
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 512M
|
||||
reservations:
|
||||
cpus: '0.001'
|
||||
memory: 20M
|
||||
@@ -0,0 +1,42 @@
|
||||
services:
|
||||
ollama:
|
||||
image: ollama/ollama:latest
|
||||
#platform: linux/amd64
|
||||
container_name: ollama
|
||||
profiles:
|
||||
- open-webui
|
||||
depends_on:
|
||||
- caddy
|
||||
restart: on-failure:5
|
||||
tty: true
|
||||
volumes:
|
||||
- ollama:/root/.ollama
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
networks:
|
||||
- infra-network
|
||||
|
||||
open-webui:
|
||||
image: ghcr.io/open-webui/open-webui:main
|
||||
container_name: open-webui
|
||||
profiles:
|
||||
- open-webui
|
||||
volumes:
|
||||
- open-webui:/app/backend/data
|
||||
depends_on:
|
||||
- ollama
|
||||
- caddy
|
||||
env_file:
|
||||
- ./env/open-webui.env
|
||||
#environment:
|
||||
# - UID=${PUID:-1000}
|
||||
# - GID=${PGID:-1000}
|
||||
restart: on-failure:5
|
||||
networks:
|
||||
- infra-network
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
|
||||
volumes:
|
||||
ollama: {}
|
||||
open-webui: {}
|
||||
@@ -0,0 +1,16 @@
|
||||
OLLAMA_BASE_URL=http://ollama:11434
|
||||
#WEBUI_SECRET_KEY=
|
||||
#HF_HUB_OFFLINE=1
|
||||
# Disable analytics
|
||||
SCARF_NO_ANALYTICS=true
|
||||
DO_NOT_TRACK=true
|
||||
ANONYMIZED_TELEMETRY=false
|
||||
|
||||
#OPENAI_API_BASE_URL=
|
||||
#OPENAI_API_KEY=
|
||||
|
||||
# Only with stable-diffusion-webui
|
||||
#ENABLE_IMAGE_GENERATION=true
|
||||
#AUTOMATIC1111_BASE_URL=http://stable-diffusion-webui:7860
|
||||
#IMAGE_SIZE=64x64
|
||||
#IMAGE_STEPS=3
|
||||
@@ -0,0 +1 @@
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHVtzpnPr0Boy+bUbL+viOYfqeetDZF6Hu40EwNLXNb0 bensuperpc@gmail.com
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user