mirror of
https://github.com/bensuperpc/infrastructure.git
synced 2026-07-26 21:08:10 +02:00
Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 Bensuperpc
|
6dd7a30b03 |
@@ -22,25 +22,11 @@ jobs:
|
|||||||
timeout-minutes: 30
|
timeout-minutes: 30
|
||||||
steps:
|
steps:
|
||||||
- name: "Checkout Code"
|
- name: "Checkout Code"
|
||||||
uses: actions/checkout@v5
|
uses: actions/checkout@v4
|
||||||
with:
|
with:
|
||||||
submodules: "recursive"
|
submodules: "recursive"
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
- name: "Update server image"
|
- name: "Update server"
|
||||||
run: make pull
|
run: make update
|
||||||
- name: "Build server"
|
- name: "Build server"
|
||||||
run: make build
|
run: make build
|
||||||
# - name: "Start server"
|
|
||||||
# run: make start
|
|
||||||
- name: "Logs server"
|
|
||||||
run: make logs
|
|
||||||
- name: "State server"
|
|
||||||
run: make state
|
|
||||||
- name: "Stop server"
|
|
||||||
run: make stop
|
|
||||||
- name: "Down server"
|
|
||||||
run: make down
|
|
||||||
- name: "Clean server"
|
|
||||||
run: make clean
|
|
||||||
- name: "Purge server"
|
|
||||||
run: make purge
|
|
||||||
@@ -0,0 +1,31 @@
|
|||||||
|
name: submodule-update
|
||||||
|
|
||||||
|
on:
|
||||||
|
schedule:
|
||||||
|
- cron: '0 */8 * * *'
|
||||||
|
workflow_dispatch:
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
image:
|
||||||
|
name: submodule-update
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: "Checkout Code"
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
with:
|
||||||
|
token: ${{ secrets.CI_TOKEN }}
|
||||||
|
repository: ${{ github.repository }}
|
||||||
|
submodules: 'recursive'
|
||||||
|
fetch-depth: 1
|
||||||
|
# Update references
|
||||||
|
- name: Git Sumbodule Update
|
||||||
|
run: |
|
||||||
|
git pull --recurse-submodules
|
||||||
|
git submodule update --remote --recursive
|
||||||
|
# Commit and push
|
||||||
|
- name: Commit update
|
||||||
|
run: |
|
||||||
|
git config --global user.name 'Bensuperpc'
|
||||||
|
git config --global user.email 'bensuperpc@gmail.com'
|
||||||
|
git remote set-url origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}
|
||||||
|
git commit -am "Auto updated submodule references" && git push || echo "No changes to commit"
|
||||||
@@ -1,7 +1 @@
|
|||||||
|
|
||||||
/*.tar.gz
|
|
||||||
|
|
||||||
infrastructure/services/**/env/*.env
|
|
||||||
infrastructure/services/**/config/*.env
|
|
||||||
!infrastructure/services/**/env/*.env.example
|
|
||||||
!infrastructure/services/**/config/*.env.example
|
|
||||||
|
|||||||
@@ -1,78 +0,0 @@
|
|||||||
#//////////////////////////////////////////////////////////////
|
|
||||||
#// //
|
|
||||||
#// docker-multimedia, 2024 //
|
|
||||||
#// Created: 30, May, 2021 //
|
|
||||||
#// Modified: 14 November, 2024 //
|
|
||||||
#// file: - //
|
|
||||||
#// - //
|
|
||||||
#// Source: //
|
|
||||||
#// OS: ALL //
|
|
||||||
#// CPU: ALL //
|
|
||||||
#// //
|
|
||||||
#//////////////////////////////////////////////////////////////
|
|
||||||
|
|
||||||
PROJECT_DIRECTORY ?= infrastructure
|
|
||||||
|
|
||||||
DOCKER_EXEC ?= docker
|
|
||||||
|
|
||||||
CONFIG_DIRECTORY ?= presets
|
|
||||||
CONFIG_FILES ?= $(addprefix $(CONFIG_DIRECTORY)/,$(addsuffix .conf,$(CONFIGS)))
|
|
||||||
include $(CONFIG_FILES)
|
|
||||||
|
|
||||||
DOCKER_PROFILES ?=
|
|
||||||
EXTRA_PROFILES ?=
|
|
||||||
|
|
||||||
PROFILE_CMD ?= $(addprefix --profile ,$(DOCKER_PROFILES) $(EXTRA_PROFILES))
|
|
||||||
|
|
||||||
COMPOSE_FILES ?= $(shell find ./$(PROJECT_DIRECTORY) -maxdepth 1 -name 'docker-compose*.yml' -type f | sed -e 's/^/--file /')
|
|
||||||
COMPOSE_DIR ?= --project-directory ./$(PROJECT_DIRECTORY)
|
|
||||||
|
|
||||||
UID ?= 1000
|
|
||||||
GID ?= 1000
|
|
||||||
TZ ?= Europe/Paris
|
|
||||||
|
|
||||||
ENV_ARG_VAR ?= PUID=$(UID) PGID=$(GID) TZ=$(TZ)
|
|
||||||
|
|
||||||
DOCKER_COMPOSE_COMMAND ?= $(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD)
|
|
||||||
|
|
||||||
.PHONY: build all
|
|
||||||
all: start
|
|
||||||
|
|
||||||
GENERIC_TARGETS := build down up run config logs pull images start restart stop
|
|
||||||
|
|
||||||
.PHONY: $(GENERIC_TARGETS)
|
|
||||||
$(GENERIC_TARGETS):
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) $@
|
|
||||||
|
|
||||||
.PHONY: start-detached
|
|
||||||
start-detached:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) up -d
|
|
||||||
|
|
||||||
.PHONY: no-start
|
|
||||||
no-start:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) up --no-start
|
|
||||||
|
|
||||||
.PHONY: state
|
|
||||||
state:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) ps
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) top
|
|
||||||
|
|
||||||
.PHONY: volumes
|
|
||||||
volumes:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) config --volumes
|
|
||||||
|
|
||||||
.PHONY: git-update
|
|
||||||
git-update:
|
|
||||||
# git submodule update --init --recursive --remote
|
|
||||||
git pull --recurse-submodules --all --progress
|
|
||||||
|
|
||||||
.PHONY: update
|
|
||||||
update: git-update
|
|
||||||
|
|
||||||
.PHONY: clean
|
|
||||||
clean:
|
|
||||||
$(ENV_ARG_VAR) $(DOCKER_EXEC) system prune -f
|
|
||||||
|
|
||||||
.PHONY: purge
|
|
||||||
purge:
|
|
||||||
$(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) down -v --rmi all
|
|
||||||
@@ -1,8 +1,8 @@
|
|||||||
#//////////////////////////////////////////////////////////////
|
#//////////////////////////////////////////////////////////////
|
||||||
#// //
|
#// //
|
||||||
#// Script, 2022 //
|
#// Infrastructure, 2024 //
|
||||||
#// Created: 14, April, 2022 //
|
#// Created: 14, April, 2022 //
|
||||||
#// Modified: 30, November, 2024 //
|
#// Modified: 05, May, 2024 //
|
||||||
#// file: - //
|
#// file: - //
|
||||||
#// - //
|
#// - //
|
||||||
#// Source: //
|
#// Source: //
|
||||||
@@ -11,29 +11,64 @@
|
|||||||
#// //
|
#// //
|
||||||
#//////////////////////////////////////////////////////////////
|
#//////////////////////////////////////////////////////////////
|
||||||
|
|
||||||
#ADMIN_SERVICES := openssh
|
DOCKER := docker
|
||||||
# uptime-kuma
|
|
||||||
#BLOG_SERVICES := wordpress
|
|
||||||
#IA_SERVICES := open-webui
|
|
||||||
#SHARING_SERVICES := privatebin
|
|
||||||
# jellyfin
|
|
||||||
# psitransfer picoshare projectsend dufs syncthing
|
|
||||||
#UTILS_SERVICES := it-tools omni-tools cyberchef
|
|
||||||
# homepage
|
|
||||||
# stirlingpdf
|
|
||||||
|
|
||||||
PROJECT_DIRECTORY := infrastructure
|
PROFILES := caddy wordpress adminer uptime-kuma qbittorrent gitea jellyfin watchtower backup openssh dns-server syncthing
|
||||||
CONFIG_DIRECTORY := presets
|
PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
|
||||||
# 7dtd minecraft satisfactory torrent
|
|
||||||
CONFIGS := ia torrent tools
|
|
||||||
#DOCKER_PROFILES :=
|
|
||||||
|
|
||||||
include DockerCompose.mk
|
COMPOSE_FILES := $(shell find docker-compose*.yml | sed -e 's/^/--file /')
|
||||||
|
|
||||||
.PHONY: init
|
.PHONY: build all
|
||||||
init:
|
all: start
|
||||||
@bash tools/init_secrets.sh
|
|
||||||
|
|
||||||
.PHONY: clean-secrets
|
.PHONY: build
|
||||||
clean-secrets:
|
build:
|
||||||
@bash tools/clean_secrets.sh
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) build
|
||||||
|
|
||||||
|
.PHONY: start
|
||||||
|
start:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) up -d
|
||||||
|
|
||||||
|
.PHONY: start-at
|
||||||
|
start-at:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) up
|
||||||
|
|
||||||
|
.PHONY: docker-check
|
||||||
|
docker-check:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) config
|
||||||
|
|
||||||
|
.PHONY: stop
|
||||||
|
stop: down
|
||||||
|
|
||||||
|
.PHONY: down
|
||||||
|
down:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) down
|
||||||
|
|
||||||
|
.PHONY: restart
|
||||||
|
restart: stop start
|
||||||
|
|
||||||
|
.PHONY: logs
|
||||||
|
logs:
|
||||||
|
docker compose $(COMPOSE_FILES) logs
|
||||||
|
|
||||||
|
.PHONY: state
|
||||||
|
state:
|
||||||
|
docker compose $(COMPOSE_FILES) ps
|
||||||
|
docker compose $(COMPOSE_FILES) top
|
||||||
|
|
||||||
|
.PHONY: update-docker
|
||||||
|
update-docker:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) pull
|
||||||
|
|
||||||
|
.PHONY: update
|
||||||
|
update: update-docker
|
||||||
|
# git submodule update --init --recursive --remote
|
||||||
|
# git pull --recurse-submodules --all --progress
|
||||||
|
|
||||||
|
.PHONY: clean
|
||||||
|
clean:
|
||||||
|
$(DOCKER) images --filter=reference='bensuperpc/*' --format='{{.Repository}}:{{.Tag}}' | xargs -r $(DOCKER) rmi -f
|
||||||
|
|
||||||
|
.PHONY: purge
|
||||||
|
purge:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) down -v --rmi all
|
||||||
@@ -1,41 +1,28 @@
|
|||||||
# Infrastructure
|
# Infrastructure
|
||||||
|
|
||||||
_Open source, decentralized and self-hosted infrastructure for many local services and authentication with Authelia._
|
_My personal infrastructure for my servers and services._
|
||||||
|
|
||||||
|
## About
|
||||||
|
|
||||||
|
This is my infrastructure. It's a collection of scripts and configuration files that I use to manage my servers and services.
|
||||||
|
It uses caddy and docker-compose to run my services (And many other things).
|
||||||
|
It's a **work in progress**, and I'm still learning a lot about it.
|
||||||
|
If you have any **questions** or **suggestions**, feel free to open an issue or a pull request.
|
||||||
|
|
||||||
## Features
|
## Features
|
||||||
|
|
||||||
- [x] caddy 2 HTTP/S reverse proxy
|
- [x] caddy 2 reverse proxy
|
||||||
- [x] Authelia (SSO / authentication middleware)
|
|
||||||
- [x] Open-WebUI + Ollama (Local chatGPT)
|
|
||||||
- [x] qbittorrent and transmission (Torrent client/server)
|
|
||||||
- [x] Docker / docker-compose
|
- [x] Docker / docker-compose
|
||||||
- [x] Homepage (Dashboard)
|
- [x] Caddy
|
||||||
- [x] SearXNG (Self-hosted search engine)
|
|
||||||
- [x] Jellyfin (Eg Netflix, Disney+)
|
|
||||||
- [x] Forgejo (Git server, fork of Gitea)
|
|
||||||
- [x] Uptime Kuma (Monitoring)
|
|
||||||
- [x] Argus (Application update monitoring)
|
|
||||||
- [x] SyncThing (File synchronization)
|
|
||||||
- [x] Dufs (File server)
|
|
||||||
- [x] PsiTransfer, ProjectSend, Picoshare (File sharing)
|
|
||||||
- [x] it-tools, omni-tools and cyberchef (Tools for IT)
|
|
||||||
- [x] Privatebin
|
|
||||||
- [x] Memos (Note-taking)
|
|
||||||
- [x] Stirling PDF (PDF tools)
|
|
||||||
- [x] Wordpress (Via FASTCGI/caddy)
|
- [x] Wordpress (Via FASTCGI/caddy)
|
||||||
- [x] Dependency-Track (SBOM / vulnerability tracking)
|
- [x] Adminer (MariaDB)
|
||||||
- [X] Game (Satisfactory, Minecraft, 7 Days to Die, Team Fortress 2 etc...)
|
- [x] Jellyfin (Media server)
|
||||||
|
- [x] Gitea (Git server)
|
||||||
## Architecture
|
- [x] Uptime Kuma (Monitoring)
|
||||||
|
- [x] Torrent server
|
||||||
|
|
||||||
|
|
||||||
## Screenshots
|
## Screenshots
|
||||||
|
|
||||||
The homepage is a dashboard with many widgets and services.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Installation and configuration
|
## Installation and configuration
|
||||||
|
|
||||||
### Requirements
|
### Requirements
|
||||||
@@ -44,28 +31,9 @@ The homepage is a dashboard with many widgets and services.
|
|||||||
- [Docker Compose](https://docs.docker.com/compose/install/)
|
- [Docker Compose](https://docs.docker.com/compose/install/)
|
||||||
- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
|
- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
|
||||||
- [Web domain](https://www.ovh.com/world/domains/) (I use OVH)
|
- [Web domain](https://www.ovh.com/world/domains/) (I use OVH)
|
||||||
- [Open port 80, 443, 22 and 2222 on your router](http://192.168.1.1/)
|
- [Open port 80 and 443 on your router](http://192.168.0.1/) (I use a SFR box with default IP)
|
||||||
- For games server, you need to open these ports (7777, 8888, 25565, 26900, 26901, 26903)
|
|
||||||
|
|
||||||
List of ports used by the services in this infrastructure:
|
***To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...***
|
||||||
|
|
||||||
| Port number | Service | Description |
|
|
||||||
| ----------- | ------------- | ----------------- |
|
|
||||||
| 80 | Caddy | HTTP traffic |
|
|
||||||
| 443 | Caddy | HTTPS traffic |
|
|
||||||
| 22 | Forgejo | Git/SSH access |
|
|
||||||
| 2222 | OpenSSH | Global SSH access |
|
|
||||||
| 7777 | Satisfactory | Game server port |
|
|
||||||
| 8888 | Satisfactory | Game server port |
|
|
||||||
| 25565 | Minecraft | Game server port |
|
|
||||||
| 8100 | Bluemap Minecraft | Web map port |
|
|
||||||
| 26900 | 7 Days to Die | Game server port |
|
|
||||||
| 26901 | 7 Days to Die | Game server port |
|
|
||||||
| 26903 | 7 Days to Die | Game server port |
|
|
||||||
| 27015 | Team Fortress 2 | Game server port |
|
|
||||||
|
|
||||||
|
|
||||||
**To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...**
|
|
||||||
|
|
||||||
### Clone
|
### Clone
|
||||||
|
|
||||||
@@ -81,30 +49,6 @@ Go to the folder
|
|||||||
cd infrastructure
|
cd infrastructure
|
||||||
```
|
```
|
||||||
|
|
||||||
### Start the infrastructure
|
|
||||||
|
|
||||||
Start the website with:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
make up
|
|
||||||
```
|
|
||||||
|
|
||||||
Stop the website with:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
make stop
|
|
||||||
```
|
|
||||||
|
|
||||||
Remove containers with:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
make down
|
|
||||||
```
|
|
||||||
|
|
||||||
Services are enabled via **preset configuration files** in the [`presets/`](presets/) directory.
|
|
||||||
|
|
||||||
The active presets are declared in the [`Makefile`](Makefile) via the `CONFIGS` variable, for example, `CONFIGS := chatgpt` loads `presets/chatgpt.conf` which activates the `main_infrastructure`, `caddy`, `openssh`, and `openwebui` profiles.
|
|
||||||
|
|
||||||
### Configure the domain
|
### Configure the domain
|
||||||
|
|
||||||
For all **bensuperpc.org**, you need to replace it with your domain, example: **mydomain.com**, so the same for **bensuperpc.com** ect...
|
For all **bensuperpc.org**, you need to replace it with your domain, example: **mydomain.com**, so the same for **bensuperpc.com** ect...
|
||||||
@@ -113,228 +57,120 @@ For all **bensuperpc.org**, you need to replace it with your domain, example: **
|
|||||||
find . \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i 's/bensuperpc.org/mydomain.com/g'
|
find . \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i 's/bensuperpc.org/mydomain.com/g'
|
||||||
```
|
```
|
||||||
|
|
||||||
Check if all bensuperpc.* are replaced by your domain in [Caddyfile](infrastructure/services/caddy/config/Caddyfile)
|
Check if all bensuperpc.* are replaced by your domain in [Caddyfile](caddy/wordpress/Caddyfile)
|
||||||
|
|
||||||
And then, caddy will generate the certificate for you and renew it automatically :D
|
And then, caddy will generate the certificate for you and renew it automatically :D
|
||||||
|
|
||||||
| Domain name | Type | Description |
|
| Domain name | Type | Description |
|
||||||
| ------------------------------------------------------------------ | ---- | ------------------------------------------------------------ |
|
| --- | --- | --- |
|
||||||
| [bensuperpc.org](https://bensuperpc.org) | Main | Redirect to [www.bensuperpc.org](https://www.bensuperpc.org) |
|
| [bensuperpc.org](https://bensuperpc.org) | Main | Main domain |
|
||||||
| [www.bensuperpc.org](https://www.bensuperpc.org) | Main | Homepage |
|
| [adminer.bensuperpc.org](https://adminer.bensuperpc.org) | Sub | Adminer for MariaDB for wordpress only |
|
||||||
| [openwebui.bensuperpc.org](https://openwebui.bensuperpc.org) | Sub | For local chatGPT with ollama and openweb-ui |
|
| [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) | Sub | Uptime Kuma for monitoring |
|
||||||
| [authelia.bensuperpc.org](https://authelia.bensuperpc.org) | Sub | Authelia for authentication |
|
| [torrent.bensuperpc.org](https://torrent.bensuperpc.org) | Sub | Torrent server |
|
||||||
| [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) | Sub | Uptime Kuma for monitoring |
|
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Gitea for git |
|
||||||
| [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) | Sub | Torrent client/server |
|
| [link.bensuperpc.org](https://link.bensuperpc.org) | Sub | For link shortener |
|
||||||
| [dozzle.bensuperpc.org](https://dozzle.bensuperpc.org) | Sub | Dozzle for docker logs |
|
| [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) | Sub | Jellyfin for media server |
|
||||||
| [transmission.bensuperpc.org](https://transmission.bensuperpc.org) | Sub | Torrent client/server |
|
| [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) | Sub | SyncThing for file synchronization |
|
||||||
| [forgejo.bensuperpc.org](https://forgejo.bensuperpc.org/) | Sub | Fork of Gitea for git |
|
| [ssh.bensuperpc.org](https://ssh.bensuperpc.org) | Sub | Openssh for ssh |
|
||||||
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Fork of Gitea for git |
|
| bensuperpc.com | Main | Redirect to bensuperpc.org |
|
||||||
| [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) | Sub | Jellyfin for media server |
|
| bensuperpc.fr | Main | Redirect to bensuperpc.org |
|
||||||
| [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) | Sub | SyncThing for file synchronization |
|
| bensuperpc.net | Main | Redirect to bensuperpc.org |
|
||||||
| [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) | Sub | PsiTransfer for file sharing |
|
| bensuperpc.ovh | Main | Redirect to bensuperpc.org |
|
||||||
| [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) | Sub | Tools for IT |
|
|
||||||
| [omni-tools.bensuperpc.org](https://omni-tools.bensuperpc.org) | Sub | Tools for IT |
|
|
||||||
| [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) | Sub | Privatebin |
|
|
||||||
| [projectsend.bensuperpc.org](https://projectsend.bensuperpc.org) | Sub | ProjectSend for file sharing |
|
|
||||||
| [picoshare.bensuperpc.org](https://picoshare.bensuperpc.org) | Sub | Picoshare for file sharing |
|
|
||||||
| [dufs.bensuperpc.org](https://dufs.bensuperpc.org) | Sub | Dufs for file sharing |
|
|
||||||
| [memos.bensuperpc.org](https://memos.bensuperpc.org) | Sub | Memos note-taking app |
|
|
||||||
| [stirlingpdf.bensuperpc.org](https://stirlingpdf.bensuperpc.org) | Sub | Stirling PDF tools |
|
|
||||||
| [argus.bensuperpc.org](https://argus.bensuperpc.org) | Sub | Argus for monitoring application updates |
|
|
||||||
| [searxng.bensuperpc.org](https://searxng.bensuperpc.org) | Sub | SearXNG self-hosted search engine |
|
|
||||||
| [dependency-track.bensuperpc.org](https://dependency-track.bensuperpc.org) | Sub | SBOM / vulnerability analysis |
|
|
||||||
| [litellm.bensuperpc.org](https://litellm.bensuperpc.org) | Sub | LiteLLM llm proxy for open-webui |
|
|
||||||
| [localai.bensuperpc.org](https://localai.bensuperpc.org) | Sub | For local chatGPT with multi-backend |
|
|
||||||
[wordpress.bensuperpc.org](https://wordpress.bensuperpc.org) | Sub | Wordpress website |
|
|
||||||
[bentopdf.bensuperpc.org](https://bentopdf.bensuperpc.org) | Sub | BentoPDF |
|
|
||||||
|
|
||||||
|
|
||||||
### Configure the infrastructure
|
### Configure the infrastructure
|
||||||
|
|
||||||
Every service ships a `*.env.example` file. Real `*.env` files are gitignored and never committed - generate them locally with:
|
You need to configure the infrastructure with your own configuration.
|
||||||
|
|
||||||
|
You can generate a password with 32 characters:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
make init
|
openssl rand -base64 32
|
||||||
```
|
```
|
||||||
|
|
||||||
This copies every `*.env.example` → `*.env` and fills in randomly generated passwords, keys and tokens (including shared values that must match across services, e.g. a service and its database). Existing `.env` files are never overwritten, so re-running it later is always safe.
|
For the [wordpress.env](env/wordpress.env) file, you need to change the password and user for the database.
|
||||||
|
|
||||||
After `make init`, a few things still need manual attention:
|
|
||||||
|
|
||||||
#### Caddy
|
|
||||||
|
|
||||||
Edit [caddy.env](infrastructure/services/caddy/env/caddy.env.example) to set your domain and mail address:
|
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
MAIN_DOMAIN=bensuperpc.org
|
WORDPRESS_DB_USER=bensuperpc
|
||||||
MAIL_DOMAIN=bensuperpc@gmail.com
|
WORDPRESS_DB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||||
SCHEME=https
|
WORDPRESS_DB_NAME=wordpress
|
||||||
AUTO_HTTPS_OPTIONS=ignore_loaded_certs
|
WORDPRESS_DB_HOST=wordpress_db:3306
|
||||||
```
|
```
|
||||||
|
|
||||||
#### Authelia - user database
|
For [wordpress_db.env](env/wordpress_db.env) file, you need to change the password(s) and user for the database.
|
||||||
|
|
||||||
|
```sh
|
||||||
|
MARIADB_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||||
|
MARIADB_USER=bensuperpc
|
||||||
|
MARIADB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||||
|
MARIADB_DATABASE=wordpress
|
||||||
|
```
|
||||||
|
|
||||||
`make init` generates all Authelia secrets automatically. [users_database.yml](infrastructure/services/authelia/config/users_database.yml) ships with a **placeholder example user** (`bensuperpc`) - replace it with your own before starting the stack, don't just add a user next to it. Generate an argon2 hash for your password:
|
For [adminer.env](env/adminer.env) file, you need to change the password(s) and user for the database.
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
docker run --rm authelia/authelia:latest authelia crypto hash generate argon2 --password 'MyPassword'
|
MYSQL_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||||
|
MYSQL_USER=bensuperpc
|
||||||
|
MYSQL_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||||
|
ADMINER_DEFAULT_SERVER=wordpress_db
|
||||||
```
|
```
|
||||||
|
|
||||||
Then edit the `username`, `displayname`, `password` hash and `email` fields to match.
|
For [gitea.env](env/gitea.env) file, you need to change the password(s) and user for the database.
|
||||||
|
|
||||||
#### Dozzle - user account
|
|
||||||
|
|
||||||
Generate a user entry for [users.yml](infrastructure/services/dozzle/config/users.yml):
|
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
docker run -it --rm amir20/dozzle generate bensuperpc --password mypassword --email bensuperpc@gmail.com --name "bensuperpc"
|
GITEA__database__DB_TYPE=mysql
|
||||||
|
GITEA__database__HOST=database_gitea:3306
|
||||||
|
GITEA__database__NAME=gitea
|
||||||
|
GITEA__database__USER=bensuperpc
|
||||||
|
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||||
```
|
```
|
||||||
|
|
||||||
#### OpenSSH - public key
|
For [gitea_db.env](env/gitea_db.env) file, you need to change the password(s) and user for the database.
|
||||||
|
|
||||||
Replace [id_ed25519.pub](infrastructure/services/openssh/config/authorized_keys/id_ed25519.pub) with your own public SSH key.
|
|
||||||
|
|
||||||
#### Open-WebUI - Ollama model
|
|
||||||
|
|
||||||
After starting the stack, pull a model via the Open-WebUI GUI or with:
|
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
docker exec -it ollama ollama run deepseek-r1:8b
|
MYSQL_ROOT_PASSWORD=xpc4zIhHZzWKqVHcjBu4aW6aS7jG8d7X
|
||||||
|
MYSQL_USER=bensuperpc
|
||||||
|
MYSQL_PASSWORD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||||
|
MYSQL_DATABASE=gitea
|
||||||
```
|
```
|
||||||
|
|
||||||
#### Team Fortress 2 - Steam GSLT
|
### Start the infrastructure
|
||||||
|
|
||||||
`make init` will remind you: set `SRCDS_TOKEN` in [teamfortress2.env](infrastructure/services/teamfortress2-server/teamfortress2/env/teamfortress2.env) with your token from [steamcommunity.com/dev/managegameservers](https://steamcommunity.com/dev/managegameservers).
|
Start the website with:
|
||||||
|
|
||||||
#### Dependency-Track - first login
|
|
||||||
|
|
||||||
Default credentials are `admin` / `admin` - **change them on first login**.
|
|
||||||
|
|
||||||
#### Forgejo - installation lock
|
|
||||||
|
|
||||||
After the first-run installation wizard completes, set in [forgejo.env](infrastructure/services/forgejo/env/forgejo.env.example):
|
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
FORGEJO__security__INSTALL_LOCK=true
|
make start-at
|
||||||
```
|
```
|
||||||
|
|
||||||
### Homepage
|
Stop the website with (or CTRL+C with the previous command):
|
||||||
|
|
||||||
You can change the homepage config in these files:
|
|
||||||
|
|
||||||
- [bookmarks.yaml](infrastructure/services/homepage/config/bookmarks.yaml)
|
|
||||||
- [services.yaml](infrastructure/services/homepage/config/services.yaml)
|
|
||||||
- [settings.yaml](infrastructure/services/homepage/config/settings.yaml)
|
|
||||||
- [widgets.yaml](infrastructure/services/homepage/config/widgets.yaml)
|
|
||||||
|
|
||||||
### Forgejo Runner (Out of date)
|
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
docker exec -it forgejo_runner /bin/bash
|
make stop
|
||||||
```
|
```
|
||||||
|
|
||||||
|
Remove countainers with:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
forgejo-runner generate-config > /data/config.yml
|
make down
|
||||||
```
|
```
|
||||||
|
|
||||||
Now update the config.yml file to support docker-in-docker:
|
### All services
|
||||||
|
|
||||||
```yml
|
You can find all services on the [docker-compose.yml](docker-compose.yml) file or on this table:
|
||||||
envs:
|
|
||||||
DOCKER_TLS_VERIFY: 1
|
|
||||||
DOCKER_CERT_PATH: /certs/client
|
|
||||||
DOCKER_HOST: tcp://docker:2376
|
|
||||||
labels: ["ubuntu-latest:docker://node:20-bookworm", "ubuntu-22.04:docker://node:20-bookworm"]
|
|
||||||
network: host
|
|
||||||
options: -v /certs/client:/certs/client
|
|
||||||
valid_volumes:
|
|
||||||
- /certs/client
|
|
||||||
```
|
|
||||||
|
|
||||||
Register the runner with your Forgejo instance:
|
| Service | Description | URL |
|
||||||
|
| --- | --- | --- |
|
||||||
|
| Wordpress | Wordpress website | [bensuperpc.org](https://bensuperpc.org) and [www.bensuperpc.org](https://www.bensuperpc.org) |
|
||||||
|
| Adminer | Adminer for MariaDB | [adminer.bensuperpc.org](https://adminer.bensuperpc.org) |
|
||||||
|
| Uptime Kuma | Uptime Kuma for monitoring | [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) |
|
||||||
|
| Torrent | Torrent server | [torrent.bensuperpc.org](https://torrent.bensuperpc.org) |
|
||||||
|
| Gitea | Gitea for git | [git.bensuperpc.org](https://git.bensuperpc.org) |
|
||||||
|
| Jellyfin | Jellyfin for media server | [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) |
|
||||||
|
| SyncThing | SyncThing for file synchronization | [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) |
|
||||||
|
| Openssh | Openssh for ssh | [ssh.bensuperpc.org](https://ssh.bensuperpc.org) |
|
||||||
|
|
||||||
|
You can disable some services by removing the service name in PROFILES variable in the [Makefile](Makefile) file.
|
||||||
|
|
||||||
```sh
|
## Build with
|
||||||
forgejo-runner register
|
|
||||||
```
|
|
||||||
|
|
||||||
You will need to provide the following information:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
https://forgejo.bensuperpc.org/
|
|
||||||
<Your Registration Token, in https://forgejo.bensuperpc.org/admin/actions/runners>
|
|
||||||
ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04
|
|
||||||
main
|
|
||||||
```
|
|
||||||
|
|
||||||
### Docker volumes
|
|
||||||
|
|
||||||
This infrastructure uses docker volumes to store data, all configuration/data for each service are not shared between services for security and maintenance reasons, but **public_data** and **private_data** are shared between all services to store your data.
|
|
||||||
|
|
||||||
| Volume name | Description |
|
|
||||||
| ------------ | ---------------------------------------------------------------------------------------------------------- |
|
|
||||||
| public_data | Public data reachable on internet via [dufs.bensuperpc.org](https://dufs.bensuperpc.org), can be disabled. |
|
|
||||||
| private_data | Private data |
|
|
||||||
|
|
||||||
### SSH access
|
|
||||||
|
|
||||||
The default port for SSH/rsync is 2222.
|
|
||||||
|
|
||||||
You can access to the server with:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
ssh -p 2222 admin@bensuperpc.org
|
|
||||||
```
|
|
||||||
|
|
||||||
### Qbittorrent
|
|
||||||
|
|
||||||
To activate the alternative webui theme (VueTorrent), you need to go in the qbittorrent settings, then in the `webui` section, check the `Use alternative webui` and add `/vuetorrent` to text field.
|
|
||||||
|
|
||||||
|
|
||||||
### Local testing
|
|
||||||
|
|
||||||
If you want to test the infrastructure locally, you can add these lines in your `/etc/hosts` file:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
127.0.0.1 openwebui.bensuperpc.org
|
|
||||||
127.0.0.1 authelia.bensuperpc.org
|
|
||||||
127.0.0.1 memos.bensuperpc.org
|
|
||||||
127.0.0.1 stirlingpdf.bensuperpc.org
|
|
||||||
127.0.0.1 public.bensuperpc.org
|
|
||||||
127.0.0.1 private.bensuperpc.org
|
|
||||||
127.0.0.1 jellyfin.bensuperpc.org
|
|
||||||
127.0.0.1 syncthing.bensuperpc.org
|
|
||||||
127.0.0.1 psitransfer.bensuperpc.org
|
|
||||||
127.0.0.1 projectsend.bensuperpc.org
|
|
||||||
127.0.0.1 picoshare.bensuperpc.org
|
|
||||||
127.0.0.1 dufs.bensuperpc.org
|
|
||||||
127.0.0.1 it-tools.bensuperpc.org
|
|
||||||
127.0.0.1 omni-tools.bensuperpc.org
|
|
||||||
127.0.0.1 privatebin.bensuperpc.org
|
|
||||||
127.0.0.1 forgejo.bensuperpc.org
|
|
||||||
127.0.0.1 git.bensuperpc.org
|
|
||||||
127.0.0.1 qbittorrent.bensuperpc.org
|
|
||||||
127.0.0.1 transmission.bensuperpc.org
|
|
||||||
127.0.0.1 uptimekuma.bensuperpc.org
|
|
||||||
127.0.0.1 wordpress.bensuperpc.org
|
|
||||||
127.0.0.1 searxng.bensuperpc.org
|
|
||||||
127.0.0.1 dependency-track.bensuperpc.org
|
|
||||||
127.0.0.1 homepage.bensuperpc.org
|
|
||||||
```
|
|
||||||
|
|
||||||
Then update the [caddy.env](infrastructure/services/caddy/env/caddy.env) file with your local domain to disable the letsencrypt certificate generation and auto redirect to https:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
MAIN_DOMAIN=bensuperpc.org
|
|
||||||
# Scheme
|
|
||||||
SCHEME=https
|
|
||||||
# ignore_loaded_certs off
|
|
||||||
AUTO_HTTPS_OPTIONS=ignore_loaded_certs
|
|
||||||
```
|
|
||||||
|
|
||||||
And remove all the `import authelia_middleware` in the caddyfiles, authelia need https to work.
|
|
||||||
|
|
||||||
## Sources
|
|
||||||
|
|
||||||
- [Wordpress](https://wordpress.org/)
|
- [Wordpress](https://wordpress.org/)
|
||||||
- [Gnu Make](https://www.gnu.org/software/make/)
|
- [Gnu Make](https://www.gnu.org/software/make/)
|
||||||
@@ -345,38 +181,8 @@ And remove all the `import authelia_middleware` in the caddyfiles, authelia need
|
|||||||
- [Docker Hub](https://hub.docker.com/)
|
- [Docker Hub](https://hub.docker.com/)
|
||||||
- [How To Start WordPress with Caddy using Docker Compose](https://minhcung.me/how-to-start-wordpress-with-caddy-using-docker-compose-3d31bb9ef88b)
|
- [How To Start WordPress with Caddy using Docker Compose](https://minhcung.me/how-to-start-wordpress-with-caddy-using-docker-compose-3d31bb9ef88b)
|
||||||
- [Digital Ocean - How To Install WordPress with Docker Compose (nginx)](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-docker-compose)
|
- [Digital Ocean - How To Install WordPress with Docker Compose (nginx)](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-docker-compose)
|
||||||
- [Imagisphe](https://imagisphe.re/)
|
|
||||||
- [Letsencrypt](https://letsencrypt.org/)
|
- [Letsencrypt](https://letsencrypt.org/)
|
||||||
- [Caddy](https://caddyserver.com/)
|
- [Caddy](https://caddyserver.com/)
|
||||||
- [Adminer](https://www.adminer.org/)
|
|
||||||
- [self-hosted-ai-stack](https://triedandtestedbuilds.com/self-hosted-ai-stack-part-1)
|
|
||||||
- [Uptime Kuma](https://uptime-kuma.com/)
|
|
||||||
- [qbittorrent](https://www.qbittorrent.org/)
|
|
||||||
- [Transmission](https://transmissionbt.com/)
|
|
||||||
- [Gitea](https://gitea.io/)
|
|
||||||
- [Jellyfin](https://jellyfin.org/)
|
|
||||||
- [SyncThing](https://syncthing.net/)
|
|
||||||
- [PsiTransfer](https://psitransfer.com/)
|
|
||||||
- [It-tools](https://github.com/CorentinTh/it-tools)
|
|
||||||
- [Omni-tools](https://github.com/iib0011/omni-tools)
|
|
||||||
- [Privatebin](https://github.com/PrivateBin/PrivateBin)
|
|
||||||
- [ghost](https://ghost.org)
|
|
||||||
- [Homepage Tuto](https://belginux.com/installer-homepage-avec-docker/)
|
|
||||||
- [ProjectSend](https://www.projectsend.org/)
|
|
||||||
- [Picoshare](https://github.com/mtlynch/picoshare)
|
|
||||||
- [Dufs](https://github.com/sigoden/dufs)
|
|
||||||
- [demos](https://github.com/usememos/memos)
|
|
||||||
- [Stirling PDF](https://github.com/Stirling-Tools/Stirling-PDF)
|
|
||||||
- [open-webui](https://github.com/open-webui/open-webui)
|
|
||||||
- [Fix docker volume](https://pratikpc.medium.com/use-docker-compose-named-volumes-as-non-root-within-your-containers-1911eb30f731)
|
|
||||||
- [Forgejo-runner](https://code.forgejo.org/forgejo/runner)
|
|
||||||
- [Forgejo-runner](https://huijzer.xyz/posts/55)
|
|
||||||
- [Forgejo](https://nickcunningh.am/blog/how-to-setup-and-configure-forgejo-with-support-for-forgejo-actions-and-more)
|
|
||||||
- [Argus](https://github.com/release-argus/Argus)
|
|
||||||
- [SearXNG](https://github.com/searxng/searxng)
|
|
||||||
- [Dependency-Track](https://dependencytrack.org/)
|
|
||||||
- [Authelia](https://www.authelia.com/)
|
|
||||||
- [BentoPDF](https://github.com/alam00000/bentopdf)
|
|
||||||
|
|
||||||
## License
|
## License
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
email bensuperpc@gmail.com
|
||||||
|
key_type p384
|
||||||
|
|
||||||
|
log {
|
||||||
|
output file /data/logs/access.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
import bensuperpc.org/Caddyfile
|
||||||
|
import bensuperpc.com/Caddyfile
|
||||||
|
import bensuperpc.net/Caddyfile
|
||||||
|
import bensuperpc.ovh/Caddyfile
|
||||||
|
import bensuperpc.fr/Caddyfile
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
bensuperpc.com {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
|
|
||||||
|
www.bensuperpc.com {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
bensuperpc.fr {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
|
|
||||||
|
www.bensuperpc.fr {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
bensuperpc.net {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
|
|
||||||
|
www.bensuperpc.net {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
@@ -0,0 +1,101 @@
|
|||||||
|
www.bensuperpc.org {
|
||||||
|
root * /var/www/html
|
||||||
|
php_fastcgi wordpress:9000
|
||||||
|
|
||||||
|
file_server
|
||||||
|
encode zstd gzip
|
||||||
|
|
||||||
|
# metrics /metrics
|
||||||
|
|
||||||
|
@disallowed {
|
||||||
|
path /xmlrpc.php
|
||||||
|
path *.sql
|
||||||
|
path /wp-content/uploads/*.php
|
||||||
|
}
|
||||||
|
|
||||||
|
rewrite @disallowed '/index.php'
|
||||||
|
|
||||||
|
respond /uploads/*.php 404
|
||||||
|
|
||||||
|
header {
|
||||||
|
# disable FLoC tracking
|
||||||
|
Permissions-Policy interest-cohort=()
|
||||||
|
|
||||||
|
# enable HSTS
|
||||||
|
Strict-Transport-Security max-age=31536000;
|
||||||
|
|
||||||
|
# disable clients from sniffing the media type
|
||||||
|
X-Content-Type-Options nosniff
|
||||||
|
|
||||||
|
# clickjacking protection
|
||||||
|
X-Frame-Options DENY
|
||||||
|
|
||||||
|
# Disable powerful features we don't need
|
||||||
|
Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
bensuperpc.org {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
|
|
||||||
|
adminer.bensuperpc.org {
|
||||||
|
reverse_proxy adminer:8080
|
||||||
|
}
|
||||||
|
|
||||||
|
uptimekuma.bensuperpc.org {
|
||||||
|
reverse_proxy uptime-kuma:3001
|
||||||
|
}
|
||||||
|
|
||||||
|
torrent.bensuperpc.org {
|
||||||
|
reverse_proxy qbittorrent:8080
|
||||||
|
}
|
||||||
|
|
||||||
|
git.bensuperpc.org {
|
||||||
|
reverse_proxy gitea:3000
|
||||||
|
}
|
||||||
|
|
||||||
|
jellyfin.bensuperpc.org {
|
||||||
|
reverse_proxy jellyfin:8096
|
||||||
|
}
|
||||||
|
|
||||||
|
ssh.bensuperpc.org {
|
||||||
|
reverse_proxy openssh:2222
|
||||||
|
}
|
||||||
|
|
||||||
|
syncthing.bensuperpc.org {
|
||||||
|
reverse_proxy syncthing:8384 {
|
||||||
|
header_up Host {upstream_hostport}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
dns.bensuperpc.org {
|
||||||
|
reverse_proxy dns-server:5380
|
||||||
|
}
|
||||||
|
|
||||||
|
link.bensuperpc.org {
|
||||||
|
# TODO: Use service with database
|
||||||
|
# Friendly links
|
||||||
|
redir /gnous https://gnous.eu permanent
|
||||||
|
redir /proxy https://imagisphe.re permanent
|
||||||
|
redir /patch https://spaceint.fr permanent
|
||||||
|
redir /greep https://greep.fr permanent
|
||||||
|
|
||||||
|
# Youtube links
|
||||||
|
redir /rickroll https://www.youtube.com/watch?v=dQw4w9WgXcQ permanent
|
||||||
|
redir /babyshark https://www.youtube.com/watch?v=XqZsoesa55w permanent
|
||||||
|
redir /cowcowcow https://www.youtube.com/watch?v=FavUpD_IjVY permanent
|
||||||
|
redir /badapple https://www.youtube.com/watch?v=FtutLA63Cp8 permanent
|
||||||
|
redir /macdo https://www.youtube.com/watch?v=Q16KpquGsIc permanent
|
||||||
|
redir /superiser https://www.youtube.com/watch?v=srnyVw-OR0g permanent
|
||||||
|
redir /daicon https://youtu.be/-840keiiFDE?si=zIPIokytxcnGw5fJ&t=162 permanent
|
||||||
|
redir /scp https://www.youtube.com/watch?v=FGCDndN20G8 permanent
|
||||||
|
redir /scpfb https://youtu.be/9zrKk-1E8zM?si=8R_ZBVG3GzMUYOe8&t=36 permanent
|
||||||
|
redir /mother https://youtu.be/w3NyycHR3fE?si=rNNSW9zYv0bcO2Eu permanent
|
||||||
|
redir /cpu https://www.youtube.com/watch?v=y39D4529FM4 permanent
|
||||||
|
redir /chanteur https://youtu.be/HXdP15Ubu6M?si=N0qvhqo--3pmSGmb permanent
|
||||||
|
redir /bna https://youtu.be/3T3ofoKfEoY?si=_7HkGQXMC7rBng8O permanent
|
||||||
|
redir /jojo https://youtu.be/U0TXIXTzJEY?si=2acWJWX06ju2w4uj permanent
|
||||||
|
redir /patapon https://youtu.be/H6CbNHLHkmk?si=ZvU8SzrOK-oCUXT5 permanent
|
||||||
|
redir /darkwater https://youtu.be/Tr8ZgF4Dc0E?si=CEOmm2J6Jp5rdbbt permanent
|
||||||
|
}
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
bensuperpc.ovh {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
|
|
||||||
|
www.bensuperpc.ovh {
|
||||||
|
redir https://www.bensuperpc.org{uri} permanent
|
||||||
|
}
|
||||||
@@ -0,0 +1,19 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Adminer
|
||||||
|
adminer:
|
||||||
|
image: adminer:latest
|
||||||
|
container_name: adminer
|
||||||
|
profiles:
|
||||||
|
- adminer
|
||||||
|
restart: on-failure
|
||||||
|
env_file:
|
||||||
|
- env/adminer.env
|
||||||
|
depends_on:
|
||||||
|
- wordpress_db
|
||||||
|
- caddy
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
@@ -0,0 +1,35 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Backup
|
||||||
|
backup:
|
||||||
|
image: offen/docker-volume-backup:latest
|
||||||
|
container_name: backup
|
||||||
|
profiles:
|
||||||
|
- backup
|
||||||
|
restart: on-failure
|
||||||
|
env_file:
|
||||||
|
- env/backup.env
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||||
|
- backup:/archive
|
||||||
|
- caddy_data:/backup/caddy_data:ro
|
||||||
|
- caddy_config:/backup/caddy_config:ro
|
||||||
|
# - gitea_data:/backup/gitea_data:ro
|
||||||
|
# - gitea_config:/backup/gitea_config:ro
|
||||||
|
# - wordpress_db:/backup/wordpress_db:ro
|
||||||
|
# - wordpress:/backup/wordpress:ro
|
||||||
|
# - jellyfin_config:/backup/jellyfin_config:ro
|
||||||
|
# - jellyfin_data:/backup/jellyfin_data:ro
|
||||||
|
# - jellyfin_cache:/backup/jellyfin_cache:ro
|
||||||
|
# - qbittorrent_config:/backup/qbittorrent_config:ro
|
||||||
|
# - qbittorrent_data:/backup/qbittorrent_data:ro
|
||||||
|
# - uptimekuma_data:/backup/uptimekuma_data:ro
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
backup:
|
||||||
|
name: backup
|
||||||
@@ -0,0 +1,46 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Caddy
|
||||||
|
caddy:
|
||||||
|
image: caddy:latest
|
||||||
|
container_name: caddy
|
||||||
|
profiles:
|
||||||
|
- caddy
|
||||||
|
restart: on-failure
|
||||||
|
ports:
|
||||||
|
- 80:80
|
||||||
|
- 443:443
|
||||||
|
volumes:
|
||||||
|
- wordpress:/var/www/html:rw
|
||||||
|
- caddy_data:/data:rw
|
||||||
|
- caddy_config:/config:rw
|
||||||
|
- ./caddy:/etc/caddy:ro
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
env_file:
|
||||||
|
- env/caddy.env
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
# cap_drop:
|
||||||
|
# - ALL
|
||||||
|
# cap_add:
|
||||||
|
# - CHOWN
|
||||||
|
# - FOWNER
|
||||||
|
# - DAC_OVERRIDE
|
||||||
|
# - SETGID
|
||||||
|
# - SETUID
|
||||||
|
# - NET_BIND_SERVICE
|
||||||
|
healthcheck:
|
||||||
|
test: pidof caddy || exit 1
|
||||||
|
interval: 120s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
caddy_data:
|
||||||
|
name: caddy_data
|
||||||
|
caddy_config:
|
||||||
|
name: caddy_config
|
||||||
@@ -0,0 +1,23 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
dns-server:
|
||||||
|
container_name: dns-server
|
||||||
|
hostname: dns-server
|
||||||
|
profiles:
|
||||||
|
- dns-server
|
||||||
|
image: technitium/dns-server:latest
|
||||||
|
restart: on-failure
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
volumes:
|
||||||
|
- dns-config:/etc/dns
|
||||||
|
env_file:
|
||||||
|
- env/technitium.env
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
dns-config:
|
||||||
|
name: dns-config
|
||||||
|
|
||||||
@@ -0,0 +1,51 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Gitea
|
||||||
|
gitea:
|
||||||
|
image: gitea/gitea:latest-rootless
|
||||||
|
container_name: gitea
|
||||||
|
profiles:
|
||||||
|
- gitea
|
||||||
|
restart: on-failure
|
||||||
|
depends_on:
|
||||||
|
- caddy
|
||||||
|
env_file:
|
||||||
|
- env/gitea.env
|
||||||
|
volumes:
|
||||||
|
- gitea_data:/var/lib/gitea
|
||||||
|
- gitea_config:/etc/gitea
|
||||||
|
# - /etc/timezone:/etc/timezone:ro
|
||||||
|
# - /etc/localtime:/etc/localtime:ro
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
# Database gitea
|
||||||
|
database_gitea:
|
||||||
|
image: mariadb:latest
|
||||||
|
container_name: database_gitea
|
||||||
|
profiles:
|
||||||
|
- database
|
||||||
|
- gitea
|
||||||
|
depends_on:
|
||||||
|
- gitea
|
||||||
|
restart: on-failure
|
||||||
|
volumes:
|
||||||
|
- gitea_db:/var/lib/mysql:rw
|
||||||
|
env_file:
|
||||||
|
- env/gitea_db.env
|
||||||
|
command: '--default-authentication-plugin=mysql_native_password'
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
gitea_data:
|
||||||
|
name: gitea_data
|
||||||
|
gitea_config:
|
||||||
|
name: gitea_config
|
||||||
|
gitea_db:
|
||||||
|
name: gitea_db
|
||||||
@@ -0,0 +1,28 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Jellyfin
|
||||||
|
jellyfin:
|
||||||
|
image: jellyfin/jellyfin:latest
|
||||||
|
container_name: jellyfin
|
||||||
|
profiles:
|
||||||
|
- jellyfin
|
||||||
|
restart: on-failure
|
||||||
|
depends_on:
|
||||||
|
- caddy
|
||||||
|
volumes:
|
||||||
|
- jellyfin_config:/config
|
||||||
|
- jellyfin_data:/movies:ro
|
||||||
|
- jellyfin_cache:/cache
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
jellyfin_config:
|
||||||
|
name: jellyfin_config
|
||||||
|
jellyfin_data:
|
||||||
|
name: jellyfin_data
|
||||||
|
jellyfin_cache:
|
||||||
|
name: jellyfin_cache
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
networks:
|
||||||
|
infra-network:
|
||||||
|
driver: bridge
|
||||||
|
name: infra-network
|
||||||
@@ -0,0 +1,25 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Openssh
|
||||||
|
openssh:
|
||||||
|
image: linuxserver/openssh-server:latest
|
||||||
|
container_name: openssh
|
||||||
|
profiles:
|
||||||
|
- openssh
|
||||||
|
restart: on-failure
|
||||||
|
env_file:
|
||||||
|
- env/openssh.env
|
||||||
|
volumes:
|
||||||
|
- openssh_config:/config
|
||||||
|
- openssh_data:/data
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
openssh_config:
|
||||||
|
name: openssh_config
|
||||||
|
openssh_data:
|
||||||
|
name: openssh_data
|
||||||
@@ -0,0 +1,27 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# qBittorrent
|
||||||
|
qbittorrent:
|
||||||
|
image: lscr.io/linuxserver/qbittorrent:latest
|
||||||
|
container_name: qbittorrent
|
||||||
|
profiles:
|
||||||
|
- qbittorrent
|
||||||
|
restart: on-failure
|
||||||
|
depends_on:
|
||||||
|
- caddy
|
||||||
|
env_file:
|
||||||
|
- env/qbittorrent.env
|
||||||
|
volumes:
|
||||||
|
- qbittorrent_config:/config
|
||||||
|
- qbittorrent_data:/downloads
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
qbittorrent_config:
|
||||||
|
name: qbittorrent_config
|
||||||
|
qbittorrent_data:
|
||||||
|
name: qbittorrent_data
|
||||||
@@ -0,0 +1,25 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# syncthing
|
||||||
|
syncthing:
|
||||||
|
image: linuxserver/syncthing:latest
|
||||||
|
container_name: syncthing
|
||||||
|
profiles:
|
||||||
|
- syncthing
|
||||||
|
restart: on-failure
|
||||||
|
env_file:
|
||||||
|
- env/syncthing.env
|
||||||
|
volumes:
|
||||||
|
- syncthing_config:/config
|
||||||
|
- syncthing_data:/data1
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
syncthing_config:
|
||||||
|
name: syncthing_config
|
||||||
|
syncthing_data:
|
||||||
|
name: syncthing_data
|
||||||
@@ -0,0 +1,16 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Uptime Kuma
|
||||||
|
uptime-kuma:
|
||||||
|
image: louislam/uptime-kuma:latest
|
||||||
|
container_name: uptime-kuma
|
||||||
|
profiles:
|
||||||
|
- uptime-kuma
|
||||||
|
volumes:
|
||||||
|
- uptimekuma_data:/app/data
|
||||||
|
restart: on-failure
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
@@ -0,0 +1,5 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
uptimekuma_data:
|
||||||
|
name: uptimekuma_data
|
||||||
@@ -0,0 +1,16 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Watchtower
|
||||||
|
watchtower:
|
||||||
|
image: containrrr/watchtower
|
||||||
|
container_name: watchtower
|
||||||
|
profiles:
|
||||||
|
- watchtower
|
||||||
|
restart: on-failure
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock:rw
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
@@ -0,0 +1,48 @@
|
|||||||
|
version: '3.9'
|
||||||
|
|
||||||
|
services:
|
||||||
|
# Wordpress
|
||||||
|
wordpress:
|
||||||
|
image: wordpress:fpm
|
||||||
|
container_name: wordpress
|
||||||
|
profiles:
|
||||||
|
- wordpress
|
||||||
|
restart: on-failure
|
||||||
|
depends_on:
|
||||||
|
- wordpress_db
|
||||||
|
- caddy
|
||||||
|
env_file:
|
||||||
|
- env/wordpress.env
|
||||||
|
volumes:
|
||||||
|
- ./config/wordpress/php.ini:/usr/local/etc/php/conf.d/custom.ini:ro
|
||||||
|
- wordpress:/var/www/html:rw
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
# Database wordpress
|
||||||
|
wordpress_db:
|
||||||
|
image: mariadb:latest
|
||||||
|
container_name: wordpress_db
|
||||||
|
profiles:
|
||||||
|
- database
|
||||||
|
- wordpress
|
||||||
|
depends_on:
|
||||||
|
- caddy
|
||||||
|
restart: on-failure
|
||||||
|
volumes:
|
||||||
|
- wordpress_db:/var/lib/mysql:rw
|
||||||
|
env_file:
|
||||||
|
- env/wordpress_db.env
|
||||||
|
command: '--default-authentication-plugin=mysql_native_password'
|
||||||
|
networks:
|
||||||
|
- infra-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
wordpress_db:
|
||||||
|
name: wordpress_db
|
||||||
|
wordpress:
|
||||||
|
name: wordpress
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
MYSQL_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||||
|
MYSQL_USER=bensuperpc
|
||||||
|
MYSQL_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||||
|
ADMINER_DEFAULT_SERVER=wordpress_db
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
BACKUP_COMPRESSION="zst"
|
||||||
|
BACKUP_CRON_EXPRESSION="0 2 * * *"
|
||||||
|
# BACKUP_RETENTION_DAYS: '7'
|
||||||
|
# BACKUP_FILENAME="backup-%Y-%m-%dT%H-%M-%S.{{ .Extension }}"
|
||||||
Vendored
+7
@@ -0,0 +1,7 @@
|
|||||||
|
USER_UID=1000
|
||||||
|
USER_GID=1000
|
||||||
|
GITEA__database__DB_TYPE=mysql
|
||||||
|
GITEA__database__HOST=database_gitea:3306
|
||||||
|
GITEA__database__NAME=gitea
|
||||||
|
GITEA__database__USER=bensuperpc
|
||||||
|
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
MYSQL_ROOT_PASSWORD=xpc4zIhHZzWKqVHcjBu4aW6aS7jG8d7X
|
||||||
|
MYSQL_USER=bensuperpc
|
||||||
|
MYSQL_PASSWORD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
|
||||||
|
MYSQL_DATABASE=gitea
|
||||||
Vendored
+11
@@ -0,0 +1,11 @@
|
|||||||
|
PUID=1000
|
||||||
|
PGID=1000
|
||||||
|
PUBLIC_KEY=
|
||||||
|
# PUBLIC_KEY_FILE=
|
||||||
|
# PUBLIC_KEY_DIR=
|
||||||
|
# PUBLIC_KEY_URL=
|
||||||
|
SUDO_ACCESS=false
|
||||||
|
PASSWORD_ACCESS=false
|
||||||
|
# USER_PASSWORD=
|
||||||
|
# USER_PASSWORD_FILE=
|
||||||
|
# USER_NAME=
|
||||||
Vendored
+5
@@ -0,0 +1,5 @@
|
|||||||
|
PUID=1000
|
||||||
|
PGID=1000
|
||||||
|
TZ=Etc/UTC
|
||||||
|
WEBUI_PORT=8080
|
||||||
|
TORRENTING_PORT=6881
|
||||||
Vendored
+2
@@ -0,0 +1,2 @@
|
|||||||
|
PUID=1000
|
||||||
|
PGID=1000
|
||||||
Vendored
+18
@@ -0,0 +1,18 @@
|
|||||||
|
DNS_SERVER_DOMAIN=dns-server
|
||||||
|
DNS_SERVER_ADMIN_PASSWORD=fddsdfF548TjSNbi490fzZspmLSDf
|
||||||
|
# DNS_SERVER_ADMIN_PASSWORD_FILE=password.txt
|
||||||
|
# DNS_SERVER_PREFER_IPV6=false
|
||||||
|
# DNS_SERVER_WEB_SERVICE_HTTP_PORT=5380
|
||||||
|
# DNS_SERVER_WEB_SERVICE_HTTPS_PORT=53443
|
||||||
|
# DNS_SERVER_WEB_SERVICE_ENABLE_HTTPS=true
|
||||||
|
# DNS_SERVER_WEB_SERVICE_USE_SELF_SIGNED_CERT=false
|
||||||
|
# DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP=true
|
||||||
|
# DNS_SERVER_RECURSION=AllowOnlyForPrivateNetworks
|
||||||
|
# DNS_SERVER_RECURSION_DENIED_NETWORKS=1.1.1.0/24
|
||||||
|
# DNS_SERVER_RECURSION_ALLOWED_NETWORKS=127.0.0.1, 192.168.1.0/24
|
||||||
|
# DNS_SERVER_ENABLE_BLOCKING=false
|
||||||
|
# DNS_SERVER_ALLOW_TXT_BLOCKING_REPORT=false
|
||||||
|
# DNS_SERVER_BLOCK_LIST_URLS=
|
||||||
|
# DNS_SERVER_FORWARDERS=1.1.1.1, 8.8.8.8
|
||||||
|
# DNS_SERVER_FORWARDER_PROTOCOL=Tcp
|
||||||
|
# DNS_SERVER_LOG_USING_LOCAL_TIME=true
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
WORDPRESS_DB_USER=bensuperpc
|
||||||
|
WORDPRESS_DB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||||
|
WORDPRESS_DB_NAME=wordpress
|
||||||
|
WORDPRESS_DB_HOST=wordpress_db:3306
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
MARIADB_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
||||||
|
MARIADB_USER=bensuperpc
|
||||||
|
MARIADB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
||||||
|
MARIADB_DATABASE=wordpress
|
||||||
@@ -1,69 +0,0 @@
|
|||||||
include:
|
|
||||||
# Main
|
|
||||||
- services/main/docker-compose.main.yml
|
|
||||||
# WordPress
|
|
||||||
- services/wordpress/docker-compose.wordpress.yml
|
|
||||||
# Caddy
|
|
||||||
- services/caddy/docker-compose.caddy.yml
|
|
||||||
# Dufs
|
|
||||||
- services/dufs/docker-compose.dufs.yml
|
|
||||||
# Forgejo
|
|
||||||
- services/forgejo/docker-compose.forgejo.yml
|
|
||||||
# Homepage
|
|
||||||
- services/homepage/docker-compose.homepage.yml
|
|
||||||
# It-tools
|
|
||||||
- services/it-tools/docker-compose.it-tools.yml
|
|
||||||
# omni-tools
|
|
||||||
- services/omni-tools/docker-compose.omni-tools.yml
|
|
||||||
# cyberchef
|
|
||||||
- services/cyberchef/docker-compose.cyberchef.yml
|
|
||||||
# Jellyfin
|
|
||||||
- services/jellyfin/docker-compose.jellyfin.yml
|
|
||||||
# Openssh
|
|
||||||
- services/openssh/docker-compose.openssh.yml
|
|
||||||
# Picoshare
|
|
||||||
- services/picoshare/docker-compose.picoshare.yml
|
|
||||||
# Privatebin
|
|
||||||
- services/privatebin/docker-compose.privatebin.yml
|
|
||||||
# Projectsend
|
|
||||||
- services/projectsend/docker-compose.projectsend.yml
|
|
||||||
# Psitransfer
|
|
||||||
- services/psitransfer/docker-compose.psitransfer.yml
|
|
||||||
# Qbittorrent
|
|
||||||
- services/qbittorrent/docker-compose.qbittorrent.yml
|
|
||||||
# Stirlingpdf
|
|
||||||
- services/stirlingpdf/docker-compose.stirlingpdf.yml
|
|
||||||
# Syncthing
|
|
||||||
- services/syncthing/docker-compose.syncthing.yml
|
|
||||||
# Transmission
|
|
||||||
- services/transmission/docker-compose.transmission.yml
|
|
||||||
# Uptime-kuma
|
|
||||||
- services/uptime-kuma/docker-compose.uptime-kuma.yml
|
|
||||||
# open-webui
|
|
||||||
- services/open-webui/docker-compose.open-webui.yml
|
|
||||||
# Memos
|
|
||||||
- services/memos/docker-compose.memos.yml
|
|
||||||
# Argus
|
|
||||||
- services/argus/docker-compose.argus.yml
|
|
||||||
# Dependency-Track
|
|
||||||
- services/dependency-track/docker-compose.dependency-track.yml
|
|
||||||
# Searxng
|
|
||||||
- services/searxng/docker-compose.searxng.yml
|
|
||||||
# Authelia
|
|
||||||
- services/authelia/docker-compose.authelia.yml
|
|
||||||
# Dozzle
|
|
||||||
- services/dozzle/docker-compose.dozzle.yml
|
|
||||||
# Minecraft
|
|
||||||
- services/minecraft-server/docker-compose.yml
|
|
||||||
# 7daystodie
|
|
||||||
- services/7daystodie-server/docker-compose.yml
|
|
||||||
# Satisfactory
|
|
||||||
- services/satisfactory-server/docker-compose.yml
|
|
||||||
# Team Fortress 2
|
|
||||||
- services/teamfortress2-server/docker-compose.yml
|
|
||||||
# LocalAI
|
|
||||||
- services/localai/docker-compose.localai.yml
|
|
||||||
# Bentopdf
|
|
||||||
- services/bentopdf/docker-compose.bentopdf.yml
|
|
||||||
# Code-server
|
|
||||||
- services/code-server/docker-compose.vscode-server.yml
|
|
||||||
@@ -1,50 +0,0 @@
|
|||||||
services:
|
|
||||||
# 7 days to die server
|
|
||||||
7daystodie_server:
|
|
||||||
image: vinanrra/7dtd-server:${SEVENDAYSTODIE_DOCKER_TAG:-latest}
|
|
||||||
container_name: 7daystodie_server
|
|
||||||
profiles:
|
|
||||||
- 7daystodie_server
|
|
||||||
restart: on-failure:7
|
|
||||||
ports:
|
|
||||||
- "26900:26900"
|
|
||||||
- "26901:26901"
|
|
||||||
- "26902:26902"
|
|
||||||
# - "8080:8080" # WEBADMIN
|
|
||||||
# - "8081:8081" # TELNET
|
|
||||||
# - "8082:8082" # WEBSERVER
|
|
||||||
volumes:
|
|
||||||
- 7daystodie_server_save:/home/sdtdserver/.local/share/7DaysToDie # 7 Days To Die world saves
|
|
||||||
- 7daystodie_server_config_lgsm:/home/sdtdserver/lgsm/config-lgsm/sdtdserver # LGSM config folder
|
|
||||||
- 7daystodie_server_file:/home/sdtdserver/serverfiles # Optional - serverfiles folder
|
|
||||||
- 7daystodie_server_log:/home/sdtdserver/log
|
|
||||||
networks:
|
|
||||||
- 7daystodie-network
|
|
||||||
env_file:
|
|
||||||
- ./env/7daystodie.env
|
|
||||||
environment:
|
|
||||||
- PUID=${PUID:-1000}
|
|
||||||
- PGID=${PGID:-1000}
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
# security_opt:
|
|
||||||
# - no-new-privileges:true
|
|
||||||
# cap_drop:
|
|
||||||
# - SYS_ADMIN
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
7daystodie_backup:
|
|
||||||
name: 7daystodie_backup
|
|
||||||
7daystodie_server_save:
|
|
||||||
name: 7daystodie_server_save
|
|
||||||
7daystodie_server_config_lgsm:
|
|
||||||
name: 7daystodie_server_config_lgsm
|
|
||||||
7daystodie_server_file:
|
|
||||||
name: 7daystodie_server_file
|
|
||||||
7daystodie_server_log:
|
|
||||||
name: 7daystodie_server_log
|
|
||||||
|
|
||||||
networks:
|
|
||||||
7daystodie-network:
|
|
||||||
driver: bridge
|
|
||||||
name: 7daystodie-network
|
|
||||||
|
|
||||||
-7
@@ -1,7 +0,0 @@
|
|||||||
START_MODE=3
|
|
||||||
VERSION=stable
|
|
||||||
TimeZone=Europe/Paris
|
|
||||||
BACKUP=NO
|
|
||||||
BACKUP_HOUR=2
|
|
||||||
BACKUP_MAX=7
|
|
||||||
MONITOR=NO
|
|
||||||
@@ -1,33 +0,0 @@
|
|||||||
services:
|
|
||||||
7daystodie_backup:
|
|
||||||
image: mazzolino/restic:${RESTIC_DOCKER_TAG:-latest}
|
|
||||||
container_name: 7daystodie_backup
|
|
||||||
profiles:
|
|
||||||
- 7daystodie_backup
|
|
||||||
depends_on:
|
|
||||||
- 7daystodie_server
|
|
||||||
extends:
|
|
||||||
file: ../../common.yml
|
|
||||||
service: service-base
|
|
||||||
env_file:
|
|
||||||
- ./env/7daystodie_backup.env
|
|
||||||
volumes:
|
|
||||||
- 7daystodie_backup:/mnt/restic
|
|
||||||
- 7daystodie_server_save:/data:ro
|
|
||||||
network_mode: none
|
|
||||||
cap_drop:
|
|
||||||
- NET_ADMIN
|
|
||||||
- NET_RAW
|
|
||||||
- SYS_ADMIN
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
7daystodie_backup:
|
|
||||||
name: 7daystodie_backup
|
|
||||||
7daystodie_server_save:
|
|
||||||
name: 7daystodie_server_save
|
|
||||||
7daystodie_server_config_lgsm:
|
|
||||||
name: 7daystodie_server_config_lgsm
|
|
||||||
7daystodie_server_file:
|
|
||||||
name: 7daystodie_server_file
|
|
||||||
7daystodie_server_log:
|
|
||||||
name: 7daystodie_server_log
|
|
||||||
-14
@@ -1,14 +0,0 @@
|
|||||||
#RUN_ON_STARTUP=true
|
|
||||||
RESTIC_REPOSITORY=/mnt/restic
|
|
||||||
RESTIC_BACKUP_SOURCES=/data
|
|
||||||
RESTIC_PASSWORD=__GENERATE_7DTD_RESTIC_PASSWORD__
|
|
||||||
# Backup (exuclusive with Check and Prune)
|
|
||||||
BACKUP_CRON=*/15 * * * *
|
|
||||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
|
||||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
|
||||||
# Check (exuclusive with Check and Prune)
|
|
||||||
#CHECK_CRON=*/15 * * * *
|
|
||||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
|
||||||
# Prune (exuclusive with Check and Prune)
|
|
||||||
#PRUNE_CRON=*/15 * * * *
|
|
||||||
#RESTIC_PRUNE_ARGS=
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
include:
|
|
||||||
# 7 days to die server
|
|
||||||
- 7daystodie/docker-compose.7daystodie.yml
|
|
||||||
# Backup server
|
|
||||||
- backup/docker-compose.backup.yml
|
|
||||||
@@ -1,87 +0,0 @@
|
|||||||
settings:
|
|
||||||
log:
|
|
||||||
level: DEBUG
|
|
||||||
defaults:
|
|
||||||
service:
|
|
||||||
latest_version:
|
|
||||||
access_token: <secret>
|
|
||||||
deployed_version:
|
|
||||||
allow_invalid_certs: true
|
|
||||||
notify:
|
|
||||||
default_gotify:
|
|
||||||
type: gotify
|
|
||||||
url_fields:
|
|
||||||
host: gotify.example.io
|
|
||||||
token: <secret>
|
|
||||||
default_mattermost:
|
|
||||||
type: mattermost
|
|
||||||
url_fields:
|
|
||||||
host: localhost
|
|
||||||
port: "8081"
|
|
||||||
token: <secret>
|
|
||||||
webhook:
|
|
||||||
awx_more:
|
|
||||||
type: github
|
|
||||||
url: http://localhost:8081
|
|
||||||
secret: <secret>
|
|
||||||
silent_fails: true
|
|
||||||
awx_other:
|
|
||||||
type: github
|
|
||||||
url: https://localhost:8081/api/v2/job_templates/36/github/
|
|
||||||
secret: <secret>
|
|
||||||
silent_fails: true
|
|
||||||
service:
|
|
||||||
forgejo:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://code.forgejo.org/api/v1/repos/forgejo/forgejo/releases
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: "['\"]tag_name['\"]: *['\"]v?([0-9.]+(?:-dev)?)['\"]"
|
|
||||||
deployed_version:
|
|
||||||
type: url
|
|
||||||
url: https://code.forgejo.org
|
|
||||||
regex: Powered by Forgejo.*\s+Version:\s+([0-9.]+(?:-dev)?)
|
|
||||||
dashboard:
|
|
||||||
web_url: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/{{ version }}.md
|
|
||||||
icon: https://code.forgejo.org/assets/img/logo.svg
|
|
||||||
tags:
|
|
||||||
- go
|
|
||||||
svt-av1:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://gitlab.com/api/v4/projects/AOMediaCodec%2FSVT-AV1/repository/tags?order_by=version&sort=desc
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: '"name":"v?([0-9.]+(?:-rc[0-9]+)?)"'
|
|
||||||
dashboard:
|
|
||||||
icon: https://upload.wikimedia.org/wikipedia/commons/8/84/AV1_logo_2018.svg
|
|
||||||
web_url: https://gitlab.com/AOMediaCodec/SVT-AV1/-/releases/v{{ version }}
|
|
||||||
tags:
|
|
||||||
- av1
|
|
||||||
- video
|
|
||||||
- encoder
|
|
||||||
ffmpeg:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://api.github.com/repos/FFmpeg/FFmpeg/tags
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: '"name":"n?([0-9.]+)"'
|
|
||||||
dashboard:
|
|
||||||
icon: https://upload.wikimedia.org/wikipedia/commons/7/76/FFmpeg_icon.svg?utm_source=commons.wikimedia.org&utm_campaign=index&utm_content=original
|
|
||||||
web_url: https://github.com/FFmpeg/FFmpeg/releases/tag/n{{ version }}
|
|
||||||
qbittorrent:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://api.github.com/repos/qbittorrent/qBittorrent/releases/latest
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: '"tag_name":"release-([0-9.]+)"'
|
|
||||||
dashboard:
|
|
||||||
icon: https://upload.wikimedia.org/wikipedia/commons/6/66/New_qBittorrent_Logo.svg
|
|
||||||
web_url: https://github.com/qbittorrent/qBittorrent/releases/tag/release-{{ version }}
|
|
||||||
tags:
|
|
||||||
- bittorrent
|
|
||||||
- qt
|
|
||||||
- cplusplus
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
services:
|
|
||||||
# argus
|
|
||||||
argus:
|
|
||||||
image: releaseargus/argus:${ARGUS_DOCKER_TAG:-latest}
|
|
||||||
container_name: argus
|
|
||||||
profiles:
|
|
||||||
- argus
|
|
||||||
environment:
|
|
||||||
- ARGUS_UID=${PUID:-1000}
|
|
||||||
- ARGUS_GID=${PGID:-1000}
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
volumes:
|
|
||||||
- argus_data:/app/data/
|
|
||||||
- ./config/config.yml:/app/config.yml
|
|
||||||
# healthcheck:
|
|
||||||
# test: ["CMD", "/healthcheck", "http://localhost:8080/api/v1/healthcheck"]
|
|
||||||
# interval: 1m
|
|
||||||
# timeout: 10s
|
|
||||||
# retries: 3
|
|
||||||
# start_period: 10s
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
argus_data:
|
|
||||||
name: argus_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
@@ -1,78 +0,0 @@
|
|||||||
theme: auto
|
|
||||||
|
|
||||||
server:
|
|
||||||
address: "tcp://0.0.0.0:9091"
|
|
||||||
|
|
||||||
log:
|
|
||||||
level: info
|
|
||||||
|
|
||||||
authentication_backend:
|
|
||||||
file:
|
|
||||||
path: /config/users_database.yml
|
|
||||||
|
|
||||||
# totp:
|
|
||||||
# issuer: bensuperpc.org
|
|
||||||
|
|
||||||
access_control:
|
|
||||||
default_policy: deny
|
|
||||||
rules:
|
|
||||||
- domain:
|
|
||||||
- "authelia.bensuperpc.org"
|
|
||||||
- "www.bensuperpc.org"
|
|
||||||
- "public.bensuperpc.org"
|
|
||||||
- "it-tools.bensuperpc.org"
|
|
||||||
- "omni-tools.bensuperpc.org"
|
|
||||||
- "cyberchef.bensuperpc.org"
|
|
||||||
- "bentopdf.bensuperpc.org"
|
|
||||||
- "wordpress.bensuperpc.org"
|
|
||||||
- "homepage.bensuperpc.org"
|
|
||||||
- "forgejo.bensuperpc.org"
|
|
||||||
policy: bypass
|
|
||||||
- domain:
|
|
||||||
- "jellyfin.bensuperpc.org"
|
|
||||||
- "openwebui.bensuperpc.org"
|
|
||||||
- "qbittorrent.bensuperpc.org"
|
|
||||||
- "syncthing.bensuperpc.org"
|
|
||||||
- "torrent.bensuperpc.org"
|
|
||||||
- "litellm.bensuperpc.org"
|
|
||||||
- "searxng.bensuperpc.org"
|
|
||||||
- "localai.bensuperpc.org"
|
|
||||||
subject:
|
|
||||||
- 'group:admins'
|
|
||||||
- 'group:users'
|
|
||||||
policy: one_factor
|
|
||||||
- domain:
|
|
||||||
- "*.bensuperpc.org"
|
|
||||||
subject:
|
|
||||||
- 'group:admins'
|
|
||||||
policy: one_factor
|
|
||||||
# - domain: "dependency-track.bensuperpc.org"
|
|
||||||
# resources:
|
|
||||||
# - "^/api/.*"
|
|
||||||
# policy: bypass
|
|
||||||
# - domain: "*.bensuperpc.org"
|
|
||||||
# policy: two_factor
|
|
||||||
|
|
||||||
session:
|
|
||||||
expiration: 72h
|
|
||||||
inactivity: 60m
|
|
||||||
remember_me: 1M
|
|
||||||
cookies:
|
|
||||||
- domain: "bensuperpc.org"
|
|
||||||
authelia_url: "https://authelia.bensuperpc.org"
|
|
||||||
|
|
||||||
regulation:
|
|
||||||
max_retries: 5
|
|
||||||
find_time: 3m
|
|
||||||
ban_time: 30m
|
|
||||||
|
|
||||||
storage:
|
|
||||||
postgres: {}
|
|
||||||
|
|
||||||
notifier:
|
|
||||||
filesystem:
|
|
||||||
filename: /config/notification.txt
|
|
||||||
# smtp:
|
|
||||||
# address: "submission://smtp.example.com:587"
|
|
||||||
# username: bensuperpc
|
|
||||||
# sender: "Authelia <authelia@bensuperpc.org>"
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
users:
|
|
||||||
bensuperpc:
|
|
||||||
displayname: "Bensuperpc"
|
|
||||||
password: "$argon2id$v=19$m=65536,t=3,p=4$1T+CwoeP6hcoddG8l1iilg$omcB+SICmNQzmZIXhE54S5+J68AU32f60a5ctYoEObU"
|
|
||||||
email: "bensuperpc@gmail.com"
|
|
||||||
groups:
|
|
||||||
- admins
|
|
||||||
- users
|
|
||||||
@@ -1,56 +0,0 @@
|
|||||||
services:
|
|
||||||
authelia:
|
|
||||||
container_name: authelia
|
|
||||||
image: authelia/authelia:${AUTHELIA_DOCKER_TAG:-4.39.20}
|
|
||||||
profiles:
|
|
||||||
- authelia
|
|
||||||
- caddy
|
|
||||||
depends_on:
|
|
||||||
authelia-postgres:
|
|
||||||
condition: service_healthy
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
# environment:
|
|
||||||
# - TZ=America/New_York
|
|
||||||
# - PUID=${PUID:-1000}
|
|
||||||
# - PGID=${PGID:-1000}
|
|
||||||
env_file:
|
|
||||||
- ./env/authelia.env
|
|
||||||
volumes:
|
|
||||||
- ./config:/config
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
- authelia-internal
|
|
||||||
|
|
||||||
authelia-postgres:
|
|
||||||
image: postgres:${AUTHELIA_POSTGRES_DOCKER_TAG:-18.4-alpine3.24}
|
|
||||||
container_name: authelia-postgres
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
volumes:
|
|
||||||
- authelia_db_data:/var/lib/postgresql
|
|
||||||
env_file:
|
|
||||||
- ./env/authelia_postgres.env
|
|
||||||
profiles:
|
|
||||||
- authelia
|
|
||||||
- caddy
|
|
||||||
healthcheck:
|
|
||||||
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
|
|
||||||
interval: 5s
|
|
||||||
timeout: 3s
|
|
||||||
retries: 5
|
|
||||||
networks:
|
|
||||||
- authelia-internal
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
authelia-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: authelia-internal
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
authelia_db_data: {}
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET=__GENERATE_AUTHELIA_JWT_SECRET__
|
|
||||||
AUTHELIA_SESSION_SECRET=__GENERATE_AUTHELIA_SESSION_SECRET__
|
|
||||||
AUTHELIA_STORAGE_ENCRYPTION_KEY=__GENERATE_AUTHELIA_STORAGE_ENCRYPTION_KEY__
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_ADDRESS=tcp://authelia-postgres:5432
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_DATABASE=authelia_db
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_USERNAME=authelia
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_PASSWORD=__GENERATE_AUTHELIA_DB_PASSWORD__
|
|
||||||
#AUTHELIA_NOTIFIER_SMTP_PASSWORD=your-smtp-password-here
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
POSTGRES_USER=authelia
|
|
||||||
POSTGRES_PASSWORD=__GENERATE_AUTHELIA_DB_PASSWORD__
|
|
||||||
POSTGRES_DB=authelia_db
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
services:
|
|
||||||
bentopdf:
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
image: ghcr.io/alam00000/bentopdf-simple:${BENTOPDF_DOCKER_TAG:-latest}
|
|
||||||
container_name: bentopdf
|
|
||||||
profiles:
|
|
||||||
- bentopdf
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
@@ -1,50 +0,0 @@
|
|||||||
{
|
|
||||||
email {$MAIL_DOMAIN}
|
|
||||||
key_type p384
|
|
||||||
|
|
||||||
log {
|
|
||||||
output file /data/logs/access.log {
|
|
||||||
roll_size 1GiB
|
|
||||||
roll_keep 20
|
|
||||||
roll_keep_for 720h
|
|
||||||
}
|
|
||||||
format json
|
|
||||||
}
|
|
||||||
|
|
||||||
auto_https {$AUTO_HTTPS_OPTIONS}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Common settings
|
|
||||||
import website/header.caddy
|
|
||||||
import website/authelia_middleware.caddy
|
|
||||||
|
|
||||||
# All website configurations
|
|
||||||
import website/main.caddy
|
|
||||||
import website/cyberchef.caddy
|
|
||||||
import website/forgejo.caddy
|
|
||||||
import website/homepage.caddy
|
|
||||||
import website/jellyfin.caddy
|
|
||||||
import website/memos.caddy
|
|
||||||
import website/openwebui.caddy
|
|
||||||
import website/privatebin.caddy
|
|
||||||
import website/psitransfer.caddy
|
|
||||||
import website/stirlingpdf.caddy
|
|
||||||
import website/transmission.caddy
|
|
||||||
import website/wordpress.caddy
|
|
||||||
import website/dufs.caddy
|
|
||||||
import website/it-tools.caddy
|
|
||||||
import website/omni-tools.caddy
|
|
||||||
import website/picoshare.caddy
|
|
||||||
import website/projectsend.caddy
|
|
||||||
import website/qbittorrent.caddy
|
|
||||||
import website/syncthing.caddy
|
|
||||||
import website/uptimekuma.caddy
|
|
||||||
import website/argus.caddy
|
|
||||||
import website/dependency-track.caddy
|
|
||||||
import website/searxng.caddy
|
|
||||||
import website/authelia.caddy
|
|
||||||
import website/dozzle.caddy
|
|
||||||
import website/litellm.caddy
|
|
||||||
import website/localai.caddy
|
|
||||||
import website/bentopdf.caddy
|
|
||||||
import website/vscode.caddy
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://argus.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$ARGUS_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
{$SCHEME}://authelia.{$MAIN_DOMAIN} {
|
|
||||||
reverse_proxy {$AUTHELIA_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
(authelia_middleware) {
|
|
||||||
forward_auth authelia:9091 {
|
|
||||||
uri /api/authz/forward-auth
|
|
||||||
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
||||||
header_up X-Forwarded-Proto {scheme}
|
|
||||||
header_up X-Forwarded-Host {host}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://bentopdf.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$BENTOPDF_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
{$SCHEME}://cyberchef.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
# Load balance between 2 instances
|
|
||||||
reverse_proxy {
|
|
||||||
to cyberchef0:8000 cyberchef1:8000
|
|
||||||
lb_policy round_robin
|
|
||||||
lb_retries 3
|
|
||||||
lb_try_interval 1s
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
{$SCHEME}://dependency-track.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy /api/* {$DEPENDENCY_TRACK_APISERVER_ADDRESS}
|
|
||||||
reverse_proxy {$DEPENDENCY_TRACK_FRONTEND_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://dozzle.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$DOZZLE_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://dufs.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy dufs:5000
|
|
||||||
}
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
{$SCHEME}://git.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$FORGEJO_ADDRESS}
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://forgejo.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://git.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
(header_common) {
|
|
||||||
Permissions-Policy: geolocation=(), camera=(), microphone=(), clipboard-read=(), usb=()
|
|
||||||
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
||||||
X-Content-Type-Options: nosniff
|
|
||||||
X-Frame-Options: DENY
|
|
||||||
Referrer-Policy: strict-origin-when-cross-origin
|
|
||||||
# Only useful for old browsers
|
|
||||||
X-XSS-Protection: "1; mode=block"
|
|
||||||
|
|
||||||
# Can cause issues with external resources
|
|
||||||
#Cross-Origin-Embedder-Policy: require-corp
|
|
||||||
Cross-Origin-Opener-Policy: same-origin
|
|
||||||
#Cross-Origin-Resource-Policy: same-origin
|
|
||||||
#Content-Security-Policy: default-src 'self'; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://homepage.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://www.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
{$SCHEME}://it-tools.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
# Load balance between 2 instances
|
|
||||||
reverse_proxy {
|
|
||||||
to it-tools0:8080 it-tools1:8080
|
|
||||||
lb_policy round_robin
|
|
||||||
lb_retries 3
|
|
||||||
lb_try_interval 1s
|
|
||||||
}
|
|
||||||
header {
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
{$SCHEME}://jellyfin.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$JELLYFIN_ADDRESS}
|
|
||||||
header {
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
{$SCHEME}://litellm.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$LITELLM_ADDRESS} {
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
{$SCHEME}://localai.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$LOCALAI_ADDRESS} {
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,28 +0,0 @@
|
|||||||
{$SCHEME}://www.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
header {
|
|
||||||
Cache-Control "public, max-age=10"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
|
|
||||||
handle_errors {
|
|
||||||
@notFound expression `{http.error.status_code} == 404`
|
|
||||||
redir @notFound https://www.{$MAIN_DOMAIN} permanent
|
|
||||||
}
|
|
||||||
|
|
||||||
reverse_proxy homepage:3000
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://{$MAIN_DOMAIN} {
|
|
||||||
redir https://www.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://public.{$MAIN_DOMAIN} {
|
|
||||||
root * /public_data
|
|
||||||
file_server browse
|
|
||||||
|
|
||||||
header / {
|
|
||||||
Cache-Control "no-store"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://memos.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$MEMOS_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
{$SCHEME}://omni-tools.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
# Load balance between 2 instances
|
|
||||||
reverse_proxy {
|
|
||||||
to omni-tools0:80 omni-tools1:80
|
|
||||||
lb_policy round_robin
|
|
||||||
lb_retries 3
|
|
||||||
lb_try_interval 1s
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
{$SCHEME}://openwebui.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$OPEN_WEBUI_ADDRESS} {
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://picoshare.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PICOSHARE_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://privatebin.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PRIVATEBIN_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://projectsend.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PROJECTSEND_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
{$SCHEME}://transfer.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PSITRANSFER_ADDRESS}
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://psitransfer.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://transfer.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
{$SCHEME}://torrent.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$QBITTORRENT_ADDRESS} {
|
|
||||||
header_up Referer "{$SCHEME}://torrent.{$MAIN_DOMAIN}"
|
|
||||||
}
|
|
||||||
header {
|
|
||||||
Cache-Control "no-store"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://qbittorrent.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://torrent.{$MAIN_DOMAIN} permanent
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://searxng.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$SEARXNG_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://stirlingpdf.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$STIRLINGPDF_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
{$SCHEME}://syncthing.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$SYNCTHING_ADDRESS} {
|
|
||||||
header_up Host {upstream_hostport}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://transmission.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$TRANSMISSION_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
{$SCHEME}://uptimekuma.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$UPTIMEKUMA_ADDRESS}
|
|
||||||
header {
|
|
||||||
Cache-Control "no-store"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
{$SCHEME}://vscode.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$VSCODE_SERVER_ADDRESS} {
|
|
||||||
header_up Host {upstream_hostport}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,32 +0,0 @@
|
|||||||
{$SCHEME}://wordpress.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
root * /var/www/html
|
|
||||||
php_fastcgi {$WORDPRESS_ADDRESS}
|
|
||||||
|
|
||||||
file_server
|
|
||||||
encode zstd gzip
|
|
||||||
|
|
||||||
@disallowed {
|
|
||||||
path /xmlrpc.php
|
|
||||||
path *.sql
|
|
||||||
path /wp-content/uploads/*.php
|
|
||||||
}
|
|
||||||
|
|
||||||
rewrite @disallowed '/index.php'
|
|
||||||
|
|
||||||
respond /uploads/*.php 404
|
|
||||||
|
|
||||||
header {
|
|
||||||
# enable HSTS
|
|
||||||
Strict-Transport-Security max-age=31536000;
|
|
||||||
|
|
||||||
# disable clients from sniffing the media type
|
|
||||||
X-Content-Type-Options nosniff
|
|
||||||
|
|
||||||
# clickjacking protection
|
|
||||||
# X-Frame-Options DENY
|
|
||||||
|
|
||||||
# Disable powerful features we don't need
|
|
||||||
Permissions-Policy "geolocation=(), camera=(), microphone=()"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,97 +0,0 @@
|
|||||||
services:
|
|
||||||
# Caddy
|
|
||||||
caddy:
|
|
||||||
#image: bensuperpc/caddy-l4:latest
|
|
||||||
image: caddy:${CADDY_DOCKER_TAG:-latest}
|
|
||||||
container_name: caddy
|
|
||||||
profiles:
|
|
||||||
- caddy
|
|
||||||
depends_on:
|
|
||||||
main_infrastructure:
|
|
||||||
condition: service_completed_successfully
|
|
||||||
ports:
|
|
||||||
- 80:80/tcp
|
|
||||||
- 80:80/udp
|
|
||||||
- 443:443/tcp
|
|
||||||
- 443:443/udp
|
|
||||||
volumes:
|
|
||||||
- caddy_data:/data:rw
|
|
||||||
- caddy_config:/config:rw
|
|
||||||
- ./config:/etc/caddy:ro
|
|
||||||
- wordpress:/var/www/html:rw
|
|
||||||
- public_data:/public_data:ro
|
|
||||||
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
- caddy-media
|
|
||||||
- caddy-tools
|
|
||||||
- caddy-files
|
|
||||||
- caddy-dev
|
|
||||||
- caddy-ai
|
|
||||||
- caddy-web
|
|
||||||
env_file:
|
|
||||||
- ./env/caddy.env
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
healthcheck:
|
|
||||||
test: pidof caddy || exit 1
|
|
||||||
interval: 120s
|
|
||||||
timeout: 10s
|
|
||||||
retries: 3
|
|
||||||
|
|
||||||
caddy_backup:
|
|
||||||
image: mazzolino/restic:${RESTIC_DOCKER_TAG:-latest}
|
|
||||||
container_name: caddy_backup
|
|
||||||
profiles:
|
|
||||||
- caddy
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
restart: on-failure:7
|
|
||||||
env_file:
|
|
||||||
- ./env/caddy_backup.env
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
volumes:
|
|
||||||
- caddy_backup:/mnt/restic
|
|
||||||
- caddy_data:/data:ro
|
|
||||||
network_mode: none
|
|
||||||
cap_drop:
|
|
||||||
- NET_ADMIN
|
|
||||||
- NET_RAW
|
|
||||||
- SYS_ADMIN
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
caddy_data:
|
|
||||||
name: caddy_data
|
|
||||||
caddy_config:
|
|
||||||
name: caddy_config
|
|
||||||
caddy_backup:
|
|
||||||
name: caddy_backup
|
|
||||||
wordpress:
|
|
||||||
name: wordpress
|
|
||||||
public_data:
|
|
||||||
name: public_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
caddy-media:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-media
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
caddy-files:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-files
|
|
||||||
caddy-dev:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-dev
|
|
||||||
caddy-ai:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-ai
|
|
||||||
caddy-web:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-web
|
|
||||||
@@ -1,32 +0,0 @@
|
|||||||
MAIN_DOMAIN=bensuperpc.org
|
|
||||||
MAIL_DOMAIN=bensuperpc@gmail.com
|
|
||||||
# Services
|
|
||||||
JELLYFIN_ADDRESS=jellyfin:8096
|
|
||||||
QBITTORRENT_ADDRESS=qbittorrent:8080
|
|
||||||
ARGUS_ADDRESS=argus:8080
|
|
||||||
FORGEJO_ADDRESS=forgejo:3000
|
|
||||||
UPTIMEKUMA_ADDRESS=uptime-kuma:3001
|
|
||||||
MEMOS_ADDRESS=memos:5230
|
|
||||||
HOMEPAGE_ADDRESS=homepage:3000
|
|
||||||
OPEN_WEBUI_ADDRESS=openwebui:8080
|
|
||||||
LITELLM_ADDRESS=litellm:4000
|
|
||||||
PICOSHARE_ADDRESS=picoshare:4001
|
|
||||||
PRIVATEBIN_ADDRESS=privatebin:8080
|
|
||||||
PROJECTSEND_ADDRESS=projectsend:80
|
|
||||||
STIRLINGPDF_ADDRESS=stirlingpdf:8080
|
|
||||||
SYNCTHING_ADDRESS=syncthing:8384
|
|
||||||
TRANSMISSION_ADDRESS=transmission:9091
|
|
||||||
PSITRANSFER_ADDRESS=psitransfer:3000
|
|
||||||
WORDPRESS_ADDRESS=wordpress:9000
|
|
||||||
DEPENDENCY_TRACK_FRONTEND_ADDRESS=dependency-track-frontend:8080
|
|
||||||
DEPENDENCY_TRACK_APISERVER_ADDRESS=dependency-track-apiserver:8080
|
|
||||||
SEARXNG_ADDRESS=searxng:8080
|
|
||||||
AUTHELIA_ADDRESS=authelia:9091
|
|
||||||
DOZZLE_ADDRESS=dozzle:8080
|
|
||||||
LOCALAI_ADDRESS=localai:8080
|
|
||||||
BENTOPDF_ADDRESS=bentopdf:8080
|
|
||||||
VSCODE_SERVER_ADDRESS=vscode-server:8443
|
|
||||||
# Scheme
|
|
||||||
SCHEME=https
|
|
||||||
# ignore_loaded_certs off
|
|
||||||
AUTO_HTTPS_OPTIONS=ignore_loaded_certs
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
#RUN_ON_STARTUP=true
|
|
||||||
RESTIC_REPOSITORY=/mnt/restic
|
|
||||||
RESTIC_BACKUP_SOURCES=/data
|
|
||||||
RESTIC_PASSWORD=__GENERATE_CADDY_RESTIC_PASSWORD__
|
|
||||||
# Backup (exuclusive with Check and Prune)
|
|
||||||
BACKUP_CRON=*/30 * * * *
|
|
||||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
|
||||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
|
||||||
# Check (exuclusive with Check and Prune)
|
|
||||||
#CHECK_CRON=*/30 * * * *
|
|
||||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
|
||||||
# Prune (exuclusive with Check and Prune)
|
|
||||||
#PRUNE_CRON=*/30 * * * *
|
|
||||||
#RESTIC_PRUNE_ARGS=
|
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
services:
|
|
||||||
# vscode-server
|
|
||||||
vscode-server:
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
image: lscr.io/linuxserver/code-server:${VSCODE_SERVER_DOCKER_TAG:-latest}
|
|
||||||
container_name: vscode-server
|
|
||||||
environment:
|
|
||||||
- PUID=${PUID:-1000}
|
|
||||||
- PGID=${PGID:-1000}
|
|
||||||
env_file:
|
|
||||||
- ./env/vscode-server.env
|
|
||||||
profiles:
|
|
||||||
- vscode-server
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
volumes:
|
|
||||||
- vscode-server_config:/config:rw
|
|
||||||
- public_data:/public_data:rw
|
|
||||||
- private_data:/private_data:rw
|
|
||||||
networks:
|
|
||||||
- caddy-dev
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-dev:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-dev
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
vscode-server_config:
|
|
||||||
name: vscode-server_config
|
|
||||||
private_data:
|
|
||||||
name: private_data
|
|
||||||
public_data:
|
|
||||||
name: public_data
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
SUDO_PASSWORD=__GENERATE_SUDO_VSCODE_SERVER_PASSWORD__
|
|
||||||
PASSWORD=__GENERATE_VSCODE_SERVER_PASSWORD__
|
|
||||||
PROXY_DOMAIN=vscode.bensuperpc.org
|
|
||||||
DOCKER_MODS=linuxserver/mods:code-server-python3
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
services:
|
|
||||||
service-base:
|
|
||||||
restart: on-failure:7
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
cap_drop:
|
|
||||||
- SYS_ADMIN
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
services:
|
|
||||||
# cyberchef
|
|
||||||
cyberchef0:
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
image: mpepping/cyberchef:${CYBERCHEF_DOCKER_TAG:-latest}
|
|
||||||
container_name: cyberchef0
|
|
||||||
profiles:
|
|
||||||
- cyberchef
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
read_only: false
|
|
||||||
|
|
||||||
cyberchef1:
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
image: mpepping/cyberchef:${CYBERCHEF_DOCKER_TAG:-latest}
|
|
||||||
container_name: cyberchef1
|
|
||||||
profiles:
|
|
||||||
- cyberchef
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
read_only: false
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
@@ -1,72 +0,0 @@
|
|||||||
services:
|
|
||||||
dependency-track-apiserver:
|
|
||||||
image: dependencytrack/apiserver:${DEPENDENCY_TRACK_API_DOCKER_TAG:-latest}
|
|
||||||
container_name: dependency-track-apiserver
|
|
||||||
profiles:
|
|
||||||
- dependency-track
|
|
||||||
depends_on:
|
|
||||||
dependency-track-postgres:
|
|
||||||
condition: service_healthy
|
|
||||||
env_file:
|
|
||||||
- ./env/dependency-track.env
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
networks:
|
|
||||||
- caddy-web
|
|
||||||
- dependency-track-internal
|
|
||||||
volumes:
|
|
||||||
- 'dtrack-data:/data'
|
|
||||||
|
|
||||||
dependency-track-frontend:
|
|
||||||
image: dependencytrack/frontend:${DEPENDENCY_TRACK_FRONTEND_DOCKER_TAG:-latest}
|
|
||||||
container_name: dependency-track-frontend
|
|
||||||
profiles:
|
|
||||||
- dependency-track
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
networks:
|
|
||||||
- caddy-web
|
|
||||||
- dependency-track-internal
|
|
||||||
depends_on:
|
|
||||||
dependency-track-apiserver:
|
|
||||||
condition: service_healthy
|
|
||||||
caddy:
|
|
||||||
condition: service_healthy
|
|
||||||
env_file:
|
|
||||||
- ./env/dependency-track.env
|
|
||||||
|
|
||||||
dependency-track-postgres:
|
|
||||||
image: postgres:${DEPENDENCY_TRACK_POSTGRES_DOCKER_TAG:-17-alpine}
|
|
||||||
container_name: dependency-track-postgres
|
|
||||||
profiles:
|
|
||||||
- dependency-track
|
|
||||||
env_file:
|
|
||||||
- ./env/postgres.env
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
networks:
|
|
||||||
- dependency-track-internal
|
|
||||||
healthcheck:
|
|
||||||
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
|
|
||||||
interval: 5s
|
|
||||||
timeout: 3s
|
|
||||||
retries: 5
|
|
||||||
volumes:
|
|
||||||
- "dtrack-postgres-data:/var/lib/postgresql/data"
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
dtrack-data:
|
|
||||||
name: dtrack-data
|
|
||||||
dtrack-postgres-data:
|
|
||||||
name: dtrack-postgres-data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-web:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-web
|
|
||||||
dependency-track-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: dependency-track-internal
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
ALPINE_DATABASE_MODE="external"
|
|
||||||
ALPINE_DATABASE_URL="jdbc:postgresql://dependency-track-postgres:5432/dtrack"
|
|
||||||
ALPINE_DATABASE_DRIVER="org.postgresql.Driver"
|
|
||||||
ALPINE_DATABASE_USERNAME="dtrack"
|
|
||||||
ALPINE_DATABASE_PASSWORD="__GENERATE_DTRACK_DB_PASSWORD__"
|
|
||||||
|
|
||||||
API_BASE_URL="https://dependency-track.bensuperpc.org"
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
POSTGRES_DB="dtrack"
|
|
||||||
POSTGRES_USER="dtrack"
|
|
||||||
POSTGRES_PASSWORD="__GENERATE_DTRACK_DB_PASSWORD__"
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
users:
|
|
||||||
admin:
|
|
||||||
email: me@email.net
|
|
||||||
name: admin
|
|
||||||
# docker run -it --rm amir20/dozzle generate admin --password password --email me@email.net --name "admin"
|
|
||||||
password: $2a$11$w56N4NICh5xD5Bbq6Z2Z2ef9/QUaa/YKleMiawn/Bru9hYsQOJyrm
|
|
||||||
filter: ""
|
|
||||||
roles: ""
|
|
||||||
@@ -1,56 +0,0 @@
|
|||||||
services:
|
|
||||||
dozzle:
|
|
||||||
image: amir20/dozzle:${DOZZLE_DOCKER_TAG:-latest}
|
|
||||||
container_name: dozzle
|
|
||||||
profiles:
|
|
||||||
- dozzle
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
- dozzle-dockerproxy
|
|
||||||
env_file:
|
|
||||||
- ./env/dozzle.env
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
volumes:
|
|
||||||
- dozzle_data:/data
|
|
||||||
secrets:
|
|
||||||
- source: dozzle_users
|
|
||||||
target: /data/users.yml
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
- dozzle-internal
|
|
||||||
|
|
||||||
dozzle-dockerproxy:
|
|
||||||
image: tecnativa/docker-socket-proxy:${DOCKER_SOCKET_PROXY_DOCKER_TAG:-latest}
|
|
||||||
container_name: dozzle-dockerproxy
|
|
||||||
profiles:
|
|
||||||
- dozzle
|
|
||||||
restart: on-failure:7
|
|
||||||
environment:
|
|
||||||
- CONTAINERS=1
|
|
||||||
- POST=0
|
|
||||||
- PING=1
|
|
||||||
- VERSION=1
|
|
||||||
- EVENTS=1
|
|
||||||
- INFO=1
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
||||||
networks:
|
|
||||||
- dozzle-internal
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
dozzle-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: dozzle-internal
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
dozzle_data:
|
|
||||||
name: dozzle_data
|
|
||||||
|
|
||||||
secrets:
|
|
||||||
dozzle_users:
|
|
||||||
file: ./config/users.yml
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
DOZZLE_AUTH_PROVIDER=simple
|
|
||||||
DOZZLE_REMOTE_HOST=tcp://dozzle-dockerproxy:2375
|
|
||||||
@@ -1,30 +0,0 @@
|
|||||||
services:
|
|
||||||
# dufs
|
|
||||||
dufs:
|
|
||||||
image: sigoden/dufs:${DUFS_DOCKER_TAG:-latest}
|
|
||||||
container_name: dufs
|
|
||||||
profiles:
|
|
||||||
- dufs
|
|
||||||
# user: ${PUID:-1000}:${PGID:-1000}
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
env_file:
|
|
||||||
- ./env/dufs.env
|
|
||||||
volumes:
|
|
||||||
- public_data:/data
|
|
||||||
networks:
|
|
||||||
- caddy-files
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
public_data:
|
|
||||||
name: public_data
|
|
||||||
private_data:
|
|
||||||
name: private_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-files:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-files
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
DUFS_BIND=0.0.0.0
|
|
||||||
DUFS_PORT=5000
|
|
||||||
DUFS_SERVE_PATH=/data
|
|
||||||
DUFS_HIDDEN=tmp,*.log,*.lock
|
|
||||||
DUFS_ALLOW_ALL=true
|
|
||||||
DUFS_COMPRESS=medium
|
|
||||||
DUFS_AUTH="admin:__GENERATE_DUFS_PASSWORD__@/:rw|@/:ro"
|
|
||||||
@@ -1,100 +0,0 @@
|
|||||||
services:
|
|
||||||
# forgejo
|
|
||||||
forgejo:
|
|
||||||
image: codeberg.org/forgejo/forgejo:${FORGEJO_DOCKER_TAG:-15}
|
|
||||||
container_name: forgejo
|
|
||||||
profiles:
|
|
||||||
- forgejo
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- database_forgejo
|
|
||||||
- caddy
|
|
||||||
ports:
|
|
||||||
- "22:2222"
|
|
||||||
env_file:
|
|
||||||
- ./env/forgejo.env
|
|
||||||
volumes:
|
|
||||||
- forgejo_data:/data
|
|
||||||
- /etc/timezone:/etc/timezone:ro
|
|
||||||
- /etc/localtime:/etc/localtime:ro
|
|
||||||
networks:
|
|
||||||
- caddy-dev
|
|
||||||
- forgejo-internal
|
|
||||||
# user: ${PUID:-1000}:${PGID:-1000}
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
|
|
||||||
# Database forgejo
|
|
||||||
database_forgejo:
|
|
||||||
image: mariadb:${FORGEJO_DB_DOCKER_TAG:-latest}
|
|
||||||
container_name: database_forgejo
|
|
||||||
profiles:
|
|
||||||
- forgejo
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
extends:
|
|
||||||
file: ../common.yml
|
|
||||||
service: service-base
|
|
||||||
volumes:
|
|
||||||
- forgejo_db:/var/lib/mysql:rw
|
|
||||||
env_file:
|
|
||||||
- ./env/forgejo_db.env
|
|
||||||
command: '--default-authentication-plugin=mysql_native_password'
|
|
||||||
networks:
|
|
||||||
- forgejo-internal
|
|
||||||
|
|
||||||
# forgejo-runner
|
|
||||||
docker-in-docker:
|
|
||||||
image: code.forgejo.org/oci/docker:${FORGEJO_DIND_DOCKER_TAG:-dind}
|
|
||||||
container_name: 'docker_dind'
|
|
||||||
hostname: docker
|
|
||||||
networks:
|
|
||||||
- forgejo-internal
|
|
||||||
profiles:
|
|
||||||
- forgejo-runner
|
|
||||||
privileged: true
|
|
||||||
environment:
|
|
||||||
DOCKER_TLS_CERTDIR: /certs
|
|
||||||
DOCKER_HOST: docker-in-docker
|
|
||||||
volumes:
|
|
||||||
- forgejo_certs:/certs
|
|
||||||
|
|
||||||
forgejo_runner:
|
|
||||||
image: data.forgejo.org/forgejo/runner:${FORGEJO_RUNNER_DOCKER_TAG:-12}
|
|
||||||
networks:
|
|
||||||
- forgejo-internal
|
|
||||||
profiles:
|
|
||||||
- forgejo-runner
|
|
||||||
depends_on:
|
|
||||||
docker-in-docker:
|
|
||||||
condition: service_started
|
|
||||||
container_name: 'forgejo_runner'
|
|
||||||
env_file:
|
|
||||||
- ./env/forgejo_runner.env
|
|
||||||
# user: ${PUID:-1000}:${PGID:-1000}
|
|
||||||
volumes:
|
|
||||||
# - ./config/forgejo_runner/config.yaml:/config.yaml:ro
|
|
||||||
- forgejo_runner:/data
|
|
||||||
- forgejo_certs:/certs
|
|
||||||
restart: on-failure:7
|
|
||||||
|
|
||||||
# command: '/bin/sh -c "while : ; do sleep 1 ; done ;"'
|
|
||||||
command: '/bin/sh -c "sleep 5; forgejo-runner -c /data/config.yml daemon"'
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
forgejo_data:
|
|
||||||
name: forgejo_data
|
|
||||||
forgejo_db:
|
|
||||||
name: forgejo_db
|
|
||||||
forgejo_certs:
|
|
||||||
name: forgejo_certs
|
|
||||||
forgejo_runner:
|
|
||||||
name: forgejo_runner
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-dev:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-dev
|
|
||||||
forgejo-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: forgejo-internal
|
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user