118 Commits

Author SHA1 Message Date
dependabot[bot] 8e9e8f0a4e Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-06 21:43:21 +00:00
Bensuperpc 9f043ac4eb Update Minecraft server 2026-05-04 00:20:11 +02:00
Bensuperpc 7ff08b937d Move to mono repo
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2026-03-31 18:56:37 +02:00
Bensuperpc d7f684398e Update 2026-01-21 00:30:52 +01:00
Bensuperpc bd1078d42e Update Caddy and uptimekuma
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-12-28 23:29:41 +01:00
Bensuperpc 5f8acf4315 Fix perms
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-10-26 17:17:32 +01:00
Bensuperpc 1abbb99b2f Update Minecraft service
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-10-26 17:17:07 +01:00
Bensuperpc bf80b3a405 Remove Gitea
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-10-18 23:08:12 +02:00
Bensuperpc 5dea9bf9cf Move presets
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-10-18 22:35:37 +02:00
Bensuperpc 91ed7ef60f Update submodule
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-10-14 19:39:16 +02:00
Bensuperpc 876e35b736 Add config files and optimize Makefile
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-10-06 23:32:48 +02:00
Bensuperpc dcdf02e3ce Merge pull request #2 from bensuperpc/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-10-06 21:35:57 +02:00
Bensuperpc ad3fb75871 Update qbittorrent webui
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-09-17 23:12:44 +02:00
Bensuperpc 6e447b865b Update 7daystodie
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-09-17 23:12:19 +02:00
Bensuperpc 897be921a6 Fix HTTP3 caddy, update TF2
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-09-08 00:07:41 +02:00
Bensuperpc d8d00cbd24 Add Teamfortress 2
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-09-01 22:36:21 +02:00
Bensuperpc 6b39245125 Update Forgejo to rootless image
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-08-24 20:09:28 +02:00
Bensuperpc f48cbcc522 Add cyberchef and update config
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-08-22 23:44:57 +02:00
Bensuperpc 36e57c4a47 Fix Rsync/SSH transfert speed 2025-08-16 00:53:47 +02:00
Bensuperpc 31596675b9 Fix Caddy config, update Makefile 2025-08-15 22:52:05 +02:00
dependabot[bot] 183c181c8f Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 06:52:35 +00:00
Bensuperpc 2b902e54be Update caddy config
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-08-06 14:01:14 +02:00
Bensuperpc fcd4dc85bc Update caddy
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-07-19 21:02:21 +02:00
Bensuperpc 840c6fa5b5 Update Makefile
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-07-14 15:51:30 +02:00
Bensuperpc 628c6fe906 Add tools and fix deps
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-07-07 23:38:20 +02:00
Bensuperpc 19a6c49949 Update minecraft-server
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-07-03 00:17:45 +02:00
Bensuperpc 045d142e27 Update readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-07-01 22:24:44 +02:00
Bensuperpc e5e13b11e8 Update readme and Caddy 2025-06-30 23:17:40 +02:00
Bensuperpc 736959c540 Improve forgejo 2025-06-30 00:01:37 +02:00
Bensuperpc e942d364fe Improve Forgejo 2025-06-29 20:58:20 +02:00
Bensuperpc c7b7ce8585 Forgejo 2025-06-29 13:42:09 +02:00
Bensuperpc 2d268629b5 Update scripts 2025-06-22 11:35:04 +02:00
Bensuperpc ccc7f82f0a Update Minecraft server 2025-04-25 23:01:37 +02:00
Bensuperpc 49af326783 Add omni-tools 2025-04-24 23:48:06 +02:00
Bensuperpc d6d8fedc11 Update config 2025-04-22 23:22:37 +02:00
Bensuperpc 22f4237b49 Update submodule 2025-03-22 11:19:52 +01:00
Bensuperpc 81c1188014 Update homepage 2025-02-05 21:00:27 +01:00
Bensuperpc ee2ed9273a Update volumes's names 2025-02-03 22:42:12 +01:00
Bensuperpc 14ca102a0f Move services
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-02-02 13:15:46 +01:00
Bensuperpc 4fc62cb648 Fix DL open-webui model
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-02-02 12:27:39 +01:00
Bensuperpc e7e544e774 Fix readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-02-02 01:11:10 +01:00
Bensuperpc e5472d4abb Fix wrong container for homepage
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-02-02 01:08:50 +01:00
Bensuperpc f90b8301bd Simplify docker-compose include
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-02-02 01:01:24 +01:00
Bensuperpc 970aad479c Add satisfactory
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-02-02 00:53:06 +01:00
Bensuperpc 81c81a5d83 Add open-webui and improve readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-02-01 02:32:58 +01:00
Bensuperpc 7595072298 Add working 7 days to die
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-29 00:13:51 +01:00
Bensuperpc ec5cb3c38c Add 7 days to die
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-28 23:10:27 +01:00
Bensuperpc 591eb61c40 Update submodule
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-27 08:13:24 +01:00
Bensuperpc b486ac3d0d Add working minecraft server
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-26 19:15:42 +01:00
Bensuperpc d111652a1c Update Mincraft server
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-26 17:02:35 +01:00
Bensuperpc 18db276b49 Add Mincraft server
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-26 17:00:47 +01:00
Bensuperpc 4c910bdf2e Update diagram
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-26 16:53:00 +01:00
Bensuperpc 2fbbba051f Fix makefile
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-26 13:05:31 +01:00
Bensuperpc 9a6ac97872 Add demos
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-26 09:30:49 +01:00
Bensuperpc 951d1130b0 Remove adminer
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-24 22:52:50 +01:00
Bensuperpc 3b4c3cb54c Improve docker-compose
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-19 21:08:53 +01:00
Bensuperpc 3bdcd4d459 Update makefile template
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2025-01-19 15:20:16 +01:00
Bensuperpc b8f69ed6e2 Add more cap_drop
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-22 19:57:33 +02:00
Bensuperpc 9700b8a379 Update config and add public caddy file browser
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-20 21:06:41 +02:00
Bensuperpc e0ce9cf191 Update backup and improve security
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-20 00:44:57 +02:00
Bensuperpc 9c9938bc55 Sync changes
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 22:40:39 +02:00
Bensuperpc 33785901fc Update readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 22:12:25 +02:00
Bensuperpc ca1eaf9787 Clean old cache
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 22:10:16 +02:00
Bensuperpc f25a6fdb32 Fix OpenSSH perm issues
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 22:09:00 +02:00
Bensuperpc fb8d683f9f SSH can be root
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 20:28:15 +02:00
Bensuperpc 8885463196 Revert to mariaDB database instead linuxserver/mariadb
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 19:51:22 +02:00
Bensuperpc 7d6d59a4ab Update config
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 19:22:18 +02:00
Bensuperpc 68c23b1b0f Update ressources path
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 19:22:00 +02:00
Bensuperpc 6c9adab271 Update Makefile and readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 00:07:41 +02:00
Bensuperpc 6c8f789e58 Add more image
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-16 00:02:18 +02:00
Bensuperpc b862f17417 Add asset
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-15 23:59:53 +02:00
Bensuperpc bc7167a1b7 Update chown service
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-15 21:23:20 +02:00
Bensuperpc d53081cd35 Update backup
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-14 11:52:01 +02:00
Bensuperpc 5bada9c98b Fix perms issues
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-14 11:17:26 +02:00
Bensuperpc ca42926acc Increase security
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-14 09:44:20 +02:00
Bensuperpc e5d8ced52d Merge commit 'd6cfd4b' 2024-09-12 00:07:33 +02:00
Bensuperpc b10dcf6603 Update makefile
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-12 00:07:08 +02:00
Bensuperpc d6cfd4b229 Update README.md 2024-09-11 13:02:44 +02:00
Bensuperpc d1f13de09e Add mastodon
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-10 23:49:59 +02:00
Bensuperpc 4818e18842 Add openSSH, fix perms volumes, improve homepage, rework makefile
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-09 21:49:42 +02:00
Bensuperpc 811f6ac7bb Move to linuxserver for mariadb and jellyfin
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-08 23:08:39 +02:00
Bensuperpc 540bf34947 Revert "Add fleet"
This reverts commit 6817b3deb0.
2024-09-08 21:02:56 +02:00
Bensuperpc 6817b3deb0 Add fleet
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-08 21:02:35 +02:00
Bensuperpc 860be99a4e Fix UID and GID
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-08 15:19:48 +02:00
Bensuperpc 1b9c6ad1ad Update Caddy and Makefile
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-08 13:55:28 +02:00
Bensuperpc 35e54a598c Update dufs perms
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-07 21:20:05 +02:00
Bensuperpc 018282f8bb Update user for project send
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-07 19:11:25 +02:00
Bensuperpc a265603ff6 Fix docker perms
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-07 18:46:13 +02:00
Bensuperpc 6578de0ffa Fix user for dufs
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-07 17:24:52 +02:00
Bensuperpc 31220657c8 Update public files via dufs
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-07 10:15:43 +02:00
Bensuperpc 4676eb9cdc Update picoshare
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-05 23:37:48 +02:00
Bensuperpc 754c5ccb9c Remove watchtower
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-05 23:22:12 +02:00
Bensuperpc 6ab1b3c486 Remove dozzle
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-05 20:57:37 +02:00
Bensuperpc 4496211aa5 Update readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-04 23:27:40 +02:00
Bensuperpc e430fad46e Revert "Disable stirlingpdf"
This reverts commit 55bf1ddf70.
2024-09-03 23:54:40 +02:00
Bensuperpc 55bf1ddf70 Disable stirlingpdf
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-03 23:33:03 +02:00
Bensuperpc b6d1b9f5a7 Add stirlingpdf
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-03 23:31:53 +02:00
Bensuperpc 54e24022ce Fix icon on dufs
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-02 22:26:48 +02:00
Bensuperpc a65975e840 Update caddy config
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-02 21:58:58 +02:00
Bensuperpc 62e7ec4650 Update reeadme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-02 21:19:27 +02:00
Bensuperpc 41fe67ba58 Update dufs and caddy logs
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-02 21:16:50 +02:00
Bensuperpc 0745869554 Add dufs
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-02 20:14:27 +02:00
Bensuperpc 4dc0d9f56a Add backup for caddy
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-09-01 23:33:52 +02:00
Bensuperpc 96d4284d64 Update homepage
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-31 12:34:50 +02:00
Bensuperpc 1b34b7f9f2 Fix readonly
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-30 00:55:17 +02:00
Bensuperpc b2a3b2623e Update profile and read only it-tools
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-28 23:31:13 +02:00
Bensuperpc 162250b0d9 Fix privatebin config
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-28 22:38:15 +02:00
Bensuperpc b819c4398d Add test load balancer
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-28 20:47:33 +02:00
Bensuperpc 5b48945835 Add Picoshare
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-27 23:53:12 +02:00
Bensuperpc d7a36310ec Add ProjectSend
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-26 22:07:40 +02:00
Bensuperpc c0aa45026b Update homepage
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 21:11:26 +02:00
Bensuperpc 71ab3026c6 Fix console error
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 20:57:30 +02:00
Bensuperpc 2aaccc2458 Move wordpress domain
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 20:53:35 +02:00
Bensuperpc a15380b95c Update backup wordpress
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 14:56:02 +02:00
Bensuperpc 84986db7b1 Update readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 14:45:05 +02:00
Bensuperpc 3573286659 Update readme
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 14:44:34 +02:00
Bensuperpc 0c75405cec Update homepage
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 14:36:28 +02:00
Bensuperpc b8259bf676 Update services
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-08-25 14:30:04 +02:00
158 changed files with 3171 additions and 834 deletions
-15
View File
@@ -1,15 +0,0 @@
name: Build And Test
run-name: ${{ gitea.actor }} is runs ci pipeline
on: [ push ]
jobs:
build:
runs-on: ubuntu-latest
steps:
- run: ls
publish:
runs-on: cth-ubuntu-latest
needs: build
if: gitea.ref == 'refs/heads/main'
steps:
- run: ls
+4 -2
View File
@@ -22,12 +22,14 @@ jobs:
timeout-minutes: 30
steps:
- name: "Checkout Code"
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
submodules: "recursive"
fetch-depth: 0
- name: "Check compose"
run: make check
- name: "Update server image"
run: make update-docker
run: make image-update
- name: "Build server"
run: make build
# - name: "Start server"
+1 -1
View File
@@ -11,7 +11,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: "Checkout Code"
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
token: ${{ secrets.CI_TOKEN }}
repository: ${{ github.repository }}
+1
View File
@@ -1 +1,2 @@
/*.tar.gz
+77
View File
@@ -0,0 +1,77 @@
#//////////////////////////////////////////////////////////////
#// //
#// docker-multimedia, 2024 //
#// Created: 30, May, 2021 //
#// Modified: 14 November, 2024 //
#// file: - //
#// - //
#// Source: //
#// OS: ALL //
#// CPU: ALL //
#// //
#//////////////////////////////////////////////////////////////
PROJECT_DIRECTORY ?= infrastructure
DOCKER_EXEC ?= docker
CONFIG_DIRECTORY ?= presets
CONFIG_FILES ?= $(addprefix $(CONFIG_DIRECTORY)/,$(addsuffix .conf,$(CONFIGS)))
include $(CONFIG_FILES)
DOCKER_PROFILES ?=
EXTRA_PROFILES ?=
PROFILE_CMD ?= $(addprefix --profile ,$(DOCKER_PROFILES) $(EXTRA_PROFILES))
COMPOSE_FILES ?= $(shell find ./$(PROJECT_DIRECTORY) -maxdepth 1 -name 'docker-compose*.yml' -type f | sed -e 's/^/--file /')
COMPOSE_DIR ?= --project-directory ./$(PROJECT_DIRECTORY)
UID ?= 1000
GID ?= 1000
ENV_ARG_VAR ?= PUID=$(UID) PGID=$(GID)
DOCKER_COMPOSE_COMMAND ?= $(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD)
.PHONY: build all
all: start
GENERIC_TARGETS := build down up run config logs pull images start restart stop
.PHONY: $(GENERIC_TARGETS)
$(GENERIC_TARGETS):
$(DOCKER_COMPOSE_COMMAND) $@
.PHONY: start-detached
start-detached:
$(DOCKER_COMPOSE_COMMAND) up -d
.PHONY: no-start
no-start:
$(DOCKER_COMPOSE_COMMAND) up --no-start
.PHONY: state
state:
$(DOCKER_COMPOSE_COMMAND) ps
$(DOCKER_COMPOSE_COMMAND) top
.PHONY: volumes
volumes:
$(DOCKER_COMPOSE_COMMAND) config --volumes
.PHONY: git-update
git-update:
# git submodule update --init --recursive --remote
git pull --recurse-submodules --all --progress
.PHONY: update
update: image-update git-update
.PHONY: clean
clean:
docker system prune -f
.PHONY: purge
purge:
$(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) down -v --rmi all
+18 -65
View File
@@ -1,8 +1,8 @@
#//////////////////////////////////////////////////////////////
#// //
#// Infrastructure, 2024 //
#// Script, 2022 //
#// Created: 14, April, 2022 //
#// Modified: 05, May, 2024 //
#// Modified: 30, November, 2024 //
#// file: - //
#// - //
#// Source: //
@@ -11,68 +11,21 @@
#// //
#//////////////////////////////////////////////////////////////
DOCKER := docker
#ADMIN_SERVICES := openssh
# uptime-kuma
#BLOG_SERVICES := wordpress
#IA_SERVICES := open-webui
#SHARING_SERVICES := privatebin
# jellyfin
# psitransfer picoshare projectsend dufs syncthing
#UTILS_SERVICES := it-tools omni-tools cyberchef
# homepage
# stirlingpdf
PROFILES := caddy wordpress adminer syncthing uptime-kuma jellyfin qbittorrent psitransfer gitea it-tools privatebin homepage
PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
PROJECT_DIRECTORY := infrastructure
CONFIG_DIRECTORY := presets
# 7dtd minecraft satisfactory
CONFIGS := minecraft satisfactory
#DOCKER_PROFILES :=
# gitea-runner transmission dozzle watchtower
COMPOSE_FILES := $(shell find . -name 'docker-compose*.yml' -type f | sed -e 's/^/--file /')
COMPOSE_DIR := --project-directory ./infrastructure
.PHONY: build all
all: start
.PHONY: build
build:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) build
.PHONY: start
start:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) up -d
.PHONY: start-at
start-at:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) up
.PHONY: docker-check
docker-check:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) config
.PHONY: stop
stop: down
.PHONY: down
down:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) down
.PHONY: restart
restart: stop start
.PHONY: logs
logs:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) logs
.PHONY: state
state:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) ps
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) top
.PHONY: update-docker
update-docker:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) pull
.PHONY: update
update: update-docker
git submodule update --init --recursive --remote
git pull --recurse-submodules --all --progress
.PHONY: clean
clean:
$(DOCKER) images --filter=reference='bensuperpc/*' --format='{{.Repository}}:{{.Tag}}' | xargs -r $(DOCKER) rmi -f
.PHONY: purge
purge:
docker compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD) down -v --rmi all
include DockerCompose.mk
+224 -69
View File
@@ -1,32 +1,41 @@
# Infrastructure
_My personal infrastructure for my servers and services._
_Open source, decentralized and self-hosted infrastructure for many services._
## About
This is my infrastructure. It's a collection of scripts and configuration files that I use to manage my servers and services.
It uses caddy and docker-compose to run my services (And many other things).
It's a **work in progress**, and I'm still learning a lot about it.
If you have any **questions** or **suggestions**, feel free to open an issue or a pull request.
## Features
- [x] caddy 2 reverse proxy
- [x] caddy 2 HTTP/S reverse proxy
- [x] Docker / docker-compose
- [x] Caddy
- [x] Wordpress (Via FASTCGI/caddy)
- [x] Adminer (MariaDB)
- [x] Jellyfin (Media server)
- [x] Gitea (Git server)
- [x] Forgejo (Git server, fork of Gitea)
- [x] Uptime Kuma (Monitoring)
- [x] qbittorrent and transmission (Torrent client/server)
- [x] SyncThing (File synchronization)
- [x] PsiTransfer (File sharing)
- [x] it-tools (Tools for IT)
- [x] PsiTransfer, ProjectSend, Picoshare (File sharing)
- [x] it-tools and omni-tools (Tools for IT)
- [x] Open-WebUI (Local chatGPT)
- [x] Privatebin (Pastebin)
- [X] [Satisfactory](https://github.com/bensuperpc/docker-satisfactory)
- [x] [7 days to die](https://github.com/bensuperpc/docker-7daystodie)
- [x] [minecraft](https://github.com/bensuperpc/docker-minecraft-server)
## Architecture
![Architecture](ressources/arch_infra.png)
## Screenshots
The homepage is a dashboard with many widgets and services.
![Homepage](ressources/homepagev1.jpg)
## Installation and configuration
### Requirements
@@ -35,9 +44,25 @@ If you have any **questions** or **suggestions**, feel free to open an issue or
- [Docker Compose](https://docs.docker.com/compose/install/)
- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
- [Web domain](https://www.ovh.com/world/domains/) (I use OVH)
- [Open port 80, 443, 2222 on your router](http://192.168.0.1/)
- [Open port 80, 443, 22, 2222 and 5555 on your router](http://192.168.1.1/)
- For games server, you need to open these ports (7777, 25565, 26900, 26901, 26903)
***To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...***
List of ports used by the services in this infrastructure:
| Port number | Service | Description |
| ----------- | ------------- | ----------------- |
| 80 | Caddy | HTTP traffic |
| 443 | Caddy | HTTPS traffic |
| 22 | Forgejo | Git/SSH access |
| 2222 | OpenSSH | Global SSH access |
| 7777 | Satisfactory | Game server port |
| 25565 | Minecraft | Game server port |
| 26900 | 7 Days to Die | Game server port |
| 26901 | 7 Days to Die | Game server port |
| 26903 | 7 Days to Die | Game server port |
**To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...**
### Clone
@@ -53,6 +78,8 @@ Go to the folder
cd infrastructure
```
Change services you want to enable in the [Makefile](Makefile) file, by default all services are enabled (games servers included).
### Configure the domain
For all **bensuperpc.org**, you need to replace it with your domain, example: **mydomain.com**, so the same for **bensuperpc.com** ect...
@@ -61,28 +88,33 @@ For all **bensuperpc.org**, you need to replace it with your domain, example: **
find . \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i 's/bensuperpc.org/mydomain.com/g'
```
Check if all bensuperpc.* are replaced by your domain in [Caddyfile](caddy/wordpress/Caddyfile)
Check if all bensuperpc.* are replaced by your domain in [Caddyfile](caddy/services/wordpress/Caddyfile)
And then, caddy will generate the certificate for you and renew it automatically :D
| Domain name | Type | Description |
| --- | --- | --- |
| [bensuperpc.org](https://bensuperpc.org) | Main | Main domain |
| [adminer.bensuperpc.org](https://adminer.bensuperpc.org) | Sub | Adminer for MariaDB for wordpress only |
| ------------------------------------------------------------------ | ---- | ------------------------------------------------------------ |
| [bensuperpc.org](https://bensuperpc.org) | Main | Redirect to [www.bensuperpc.org](https://www.bensuperpc.org) |
| [www.bensuperpc.org](https://www.bensuperpc.org) | Main | Homepage |
| [open-webui.bensuperpc.org](https://open-webui.bensuperpc.org) | Sub | For local chatGPT |
| [wordpress.bensuperpc.org](https://wordpress.bensuperpc.org) | Sub | Wordpress website |
| [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) | Sub | Uptime Kuma for monitoring |
| [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) | Sub | Torrent client/server |
| [transmission.bensuperpc.org](https://transmission.bensuperpc.org) | Sub | Torrent client/server |
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Gitea for git |
| [forgejo.bensuperpc.org](https://forgejo.bensuperpc.org/) | Sub | Fork of Gitea for git |
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Fork of Gitea for git |
| [link.bensuperpc.org](https://link.bensuperpc.org) | Sub | For link shortener |
| [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) | Sub | Jellyfin for media server |
| [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) | Sub | SyncThing for file synchronization |
| [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) | Sub | PsiTransfer for file sharing |
| [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) | Sub | Tools for IT |
| [omni-tools.bensuperpc.org](https://omni-tools.bensuperpc.org) | Sub | Tools for IT |
| [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) | Sub | Pastebin |
| bensuperpc.com | Main | Redirect to bensuperpc.org |
| bensuperpc.fr | Main | Redirect to bensuperpc.org |
| bensuperpc.net | Main | Redirect to bensuperpc.org |
| bensuperpc.ovh | Main | Redirect to bensuperpc.org |
| [projectsend.bensuperpc.org](https://projectsend.bensuperpc.org) | Sub | ProjectSend for file sharing |
| [picoshare.bensuperpc.org](https://picoshare.bensuperpc.org) | Sub | Picoshare for file sharing |
| [dufs.bensuperpc.org](https://dufs.bensuperpc.org) | Sub | Dufs for file sharing |
| [memos.bensuperpc.org](https://memos.bensuperpc.org) | Sub | Caddy for file sharing |
| [stirlingpdf.bensuperpc.org](https://stirlingpdf.bensuperpc.org) | Sub | Stirling PDF tools |
### Configure the infrastructure
@@ -94,59 +126,111 @@ You can generate a password with 32 characters:
openssl rand -base64 32
```
For the [wordpress.env](infrastructure/wordpress/env/wordpress.env) file, you need to change the password and user for the database.
Or online: [passwordsgenerator.net](https://passwordsgenerator.net/)
#### Caddy
For [caddy_backup.env](infrastructure/services/caddy/env/caddy_backup.env) file, you need to change the password(s) for the restic backup.
```sh
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
```
#### Wordpress
For the [wordpress.env](infrastructure/services/wordpress/env/wordpress.env) file, you need to change the password and user for the database.
```sh
WORDPRESS_DB_USER=bensuperpc
WORDPRESS_DB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
WORDPRESS_DB_NAME=wordpress
WORDPRESS_DB_HOST=wordpress_db:3306
```
For [wordpress_db.env](infrastructure/wordpress/env/wordpress_db.env) file, you need to change the password(s) and user for the database.
For [wordpress_db.env](infrastructure/services/wordpress/env/wordpress_db.env) file, you need to change the password(s) and user for the database.
```sh
MARIADB_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
MARIADB_USER=bensuperpc
MARIADB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
MARIADB_DATABASE=wordpress
```
For [adminer.env](infrastructure/wordpress/env/adminer.env) file, you need to change the password(s) and user for the database.
For [wordpress_backup.env](infrastructure/services/wordpress/env/wordpress_backup.env) file, you need to change the password(s) for the restic backup.
```sh
MYSQL_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
MYSQL_USER=bensuperpc
MYSQL_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
ADMINER_DEFAULT_SERVER=wordpress_db
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
```
For [gitea.env](infrastructure/gitea/env/gitea.env) file, you need to change the password(s) and user for the database.
#### PsiTransfer
```sh
GITEA__database__DB_TYPE=mysql
GITEA__database__HOST=database_gitea:3306
GITEA__database__NAME=gitea
GITEA__database__USER=bensuperpc
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
GITEA__security__SECRET_KEY=ykcZt23an1E4lFHWvrCKdAyt16WAiK9c
```
For [gitea_db.env](infrastructure/gitea/env/gitea_db.env) file, you need to change the password(s) and user for the database.
```sh
MYSQL_ROOT_PASSWORD=xpc4zIhHZzWKqVHcjBu4aW6aS7jG8d7X
MYSQL_USER=bensuperpc
MYSQL_PASSWORD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
MYSQL_DATABASE=gitea
```
For [psitransfer.env](infrastructure/psitransfer/env/psitransfer.env) file, you need to change the password(s) and user for the database.
For [psitransfer.env](infrastructure/services/psitransfer/env/psitransfer.env) file, you need to change the secret key.
```sh
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
```
For [projectsend_db.env](infrastructure/services/projectsend/env/projectsend_db.env) file, you need to change the password(s) and user for the database.
```sh
MARIADB_ROOT_PASSWORD=8O34297GrBfT3Ld34Lfg9mpotmZwbJtt
MARIADB_USER=bensuperpc
MARIADB_PASSWORD=wdSUa1JEZhXie5AJ5NcX1w73xmpO12EY
```
#### Picoshare
For [picoshare.env](infrastructure/services/picoshare/env/picoshare.env) file, you need to change the secret key.
```sh
PS_SHARED_SECRET=CBuS4DJLqIe93xF1KGYRrnhxUFBqLD2n
```
#### Dufs
For [dufs.env](infrastructure/services/dufs/env/dufs.env) file, you need to change the secret key and if you want the user name.
```sh
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/:ro"
```
#### Stirling PDF
For [stirlingpdf.env](infrastructure/services/stirlingpdf/env/stirlingpdf.env) file, it's **completly optional**, you can change the password(s) and user.
```sh
# Enable security, optional
DOCKER_ENABLE_SECURITY=true
SECURITY_ENABLE_LOGIN=true
# Can be disabled after initial login, optional,
# default it admin:stirling
SECURITY_INITIALLOGIN_USERNAME=admin
SECURITY_INITIALLOGIN_PASSWORD=Jw9U039f5xc2mFcacvGvPD9RjwIh4DzO
```
#### OpenSSH
You can need to add/change the public ssh key [id_ed25519.pub](infrastructure/services/openssh/config/authorized_keys/id_ed25519.pub) (its my public key), also change the config/password in [openssh.env](infrastructure/services/openssh/env/openssh.env):
```sh
SUDO_ACCESS=true
#PUBLIC_KEY_URL=https://github.com/bensuperpc.keys
PUBLIC_KEY_DIR=/authorized_ssh_keys
USER_PASSWORD=rdUwf36C11PLmpU9Lvq7tP5pfFBKAuCh
#PUBLIC_KEY=yourpublickey
#PUBLIC_KEY_FILE=/path/to/file
#PUBLIC_KEY_DIR=/path/to/directory/containing/_only_/pubkeys
#USER_PASSWORD_FILE=/path/to/file
```
#### Open-WebUI
For [open-webui.env](infrastructure/services/open-webui/env/open-webui.env) file, entirely optional.
To download the model, you can use:
```sh
docker exec -it ollama ollama run deepseek-r1:8b
```
### Start the infrastructure
Start the website with:
@@ -167,27 +251,87 @@ Remove countainers with:
make down
```
### All services
You can find all service on this table:
| Service | Description | URL |
| --- | --- | --- |
| Wordpress | Wordpress website | [bensuperpc.org](https://bensuperpc.org) and [www.bensuperpc.org](https://www.bensuperpc.org) |
| Adminer | Adminer for MariaDB | [adminer.bensuperpc.org](https://adminer.bensuperpc.org) |
| Uptime Kuma | Uptime Kuma for monitoring | [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) |
| qbittorrent | qbittorrent server | [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) |
| transmission | transmission server | [transmission.bensuperpc.org](https://transmission.bensuperpc.org) |
| Gitea | Gitea for git | [git.bensuperpc.org](https://git.bensuperpc.org) |
| Jellyfin | Jellyfin for media server | [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) |
| SyncThing | SyncThing for file synchronization | [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) |
| PsiTransfer | PsiTransfer for file sharing | [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) |
| it-tools | Tools for IT | [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) |
| Privatebin | Pastebin | [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) |
You can disable some services by removing the service name in PROFILES variable in the [Makefile](Makefile) file.
To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-containers-using-gitea-runners-600729555e07
To enable the gitea CI: [how-to-build-docker-containers-using-gitea-runners](https://medium.com/@lokanx/how-to-build-docker-containers-using-gitea-runners-600729555e07)
### Homepage
You can change the homepage config in these files:
- [bookmarks.yaml](infrastructure/services/homepage/config/bookmarks.yaml)
- [services.yaml](infrastructure/services/homepage/config/services.yaml)
- [settings.yaml](infrastructure/services/homepage/config/settings.yaml)
- [widgets.yaml](infrastructure/services/homepage/config/widgets.yaml)
### Forgejo
For Forgejo installation, you must change the password(s) and user in [forgejo_db.env](infrastructure/services/forgejo/env/forgejo_db.env) file and [forgejo.env](infrastructure/services/forgejo/env/forgejo.env) file.
Once the installation is complete, you need to set the installation lock:
```sh
FORGEJO__security__INSTALL_LOCK=true
```
### Forgejo Runner
```sh
docker exec -it forgejo_runner /bin/bash
```
```sh
forgejo-runner generate-config > /data/config.yml
```
Now update the config.yml file to support docker-in-docker:
```yml
envs:
DOCKER_TLS_VERIFY: 1
DOCKER_CERT_PATH: /certs/client
DOCKER_HOST: tcp://docker:2376
labels: ["ubuntu-latest:docker://node:20-bookworm", "ubuntu-22.04:docker://node:20-bookworm"]
network: host
options: -v /certs/client:/certs/client
valid_volumes:
- /certs/client
```
Register the runner with your Forgejo instance:
```sh
forgejo-runner register
```
You will need to provide the following information:
```sh
https://forgejo.bensuperpc.org/
<Your Registration Token, in https://forgejo.bensuperpc.org/admin/actions/runners>
ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04
main
```
### Docker volumes
This infrastructure uses docker volumes to store data, all configuration/data for each service are not shared between services for security and maintenance reasons, but **public_data** and **private_data** are shared between all services to store your data.
| Volume name | Description |
| ------------ | ---------------------------------------------------------------------------------------------------------- |
| public_data | Public data reachable on internet via [dufs.bensuperpc.org](https://dufs.bensuperpc.org), can be disabled. |
| private_data | Private data |
### SSH access
The default port for ssh/rsync is is 2222.
You can access to the server with:
```sh
ssh -p 2222 admin@bensuperpc.org
```
## Sources
@@ -200,6 +344,7 @@ To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-container
- [Docker Hub](https://hub.docker.com/)
- [How To Start WordPress with Caddy using Docker Compose](https://minhcung.me/how-to-start-wordpress-with-caddy-using-docker-compose-3d31bb9ef88b)
- [Digital Ocean - How To Install WordPress with Docker Compose (nginx)](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-docker-compose)
- [Imagisphe](https://imagisphe.re/)
- [Letsencrypt](https://letsencrypt.org/)
- [Caddy](https://caddyserver.com/)
- [Adminer](https://www.adminer.org/)
@@ -211,10 +356,20 @@ To enable the gitea CI: https://medium.com/@lokanx/how-to-build-docker-container
- [SyncThing](https://syncthing.net/)
- [PsiTransfer](https://psitransfer.com/)
- [It-tools](https://github.com/CorentinTh/it-tools)
- [Omni-tools](https://github.com/iib0011/omni-tools)
- [Privatebin](https://github.com/PrivateBin/PrivateBin)
- [ghost](https://ghost.org)
- [Homepage Tuto](https://belginux.com/installer-homepage-avec-docker/)
- [Imagisphe](https://imagisphe.re/)
- [ProjectSend](https://www.projectsend.org/)
- [Picoshare](https://github.com/mtlynch/picoshare)
- [Dufs](https://github.com/sigoden/dufs)
- [demos](https://github.com/usememos/memos)
- [Stirling PDF](https://github.com/Stirling-Tools/Stirling-PDF)
- [open-webui](https://github.com/open-webui/open-webui)
- [Fix docker volume](https://pratikpc.medium.com/use-docker-compose-named-volumes-as-non-root-within-your-containers-1911eb30f731)
- [Forgejo-runner](https://code.forgejo.org/forgejo/runner)
- [Forgejo-runner](https://huijzer.xyz/posts/55)
- [Forgejo](https://nickcunningh.am/blog/how-to-setup-and-configure-forgejo-with-support-for-forgejo-actions-and-more)
## License
-15
View File
@@ -1,15 +0,0 @@
{
email bensuperpc@gmail.com
key_type p384
log {
output file /data/logs/access.log
format json
}
}
import bensuperpc.org/*
import bensuperpc.com/*
import bensuperpc.net/*
import bensuperpc.ovh/*
import bensuperpc.fr/*
@@ -1,7 +0,0 @@
bensuperpc.com {
redir https://www.bensuperpc.org{uri} permanent
}
www.bensuperpc.com {
redir https://www.bensuperpc.org{uri} permanent
}
@@ -1,7 +0,0 @@
bensuperpc.fr {
redir https://www.bensuperpc.org{uri} permanent
}
www.bensuperpc.fr {
redir https://www.bensuperpc.org{uri} permanent
}
@@ -1,19 +0,0 @@
bensuperpc.net {
redir https://www.bensuperpc.org{uri} permanent
}
www.bensuperpc.net {
redir https://www.bensuperpc.org{uri} permanent
}
git.bensuperpc.net {
redir https://git.bensuperpc.org{uri} permanent
}
jellyfin.bensuperpc.net {
redir https://jellyfin.bensuperpc.org{uri} permanent
}
uptimekuma.bensuperpc.net {
redir https://uptimekuma.bensuperpc.org{uri} permanent
}
@@ -1,139 +0,0 @@
www.bensuperpc.org {
root * /var/www/html
php_fastcgi wordpress:9000
file_server
encode zstd gzip
# metrics /metrics
@disallowed {
path /xmlrpc.php
path *.sql
path /wp-content/uploads/*.php
}
rewrite @disallowed '/index.php'
respond /uploads/*.php 404
header {
# disable FLoC tracking
Permissions-Policy interest-cohort=()
# enable HSTS
Strict-Transport-Security max-age=31536000;
# disable clients from sniffing the media type
X-Content-Type-Options nosniff
# clickjacking protection
# X-Frame-Options DENY
# Disable powerful features we don't need
Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
}
}
bensuperpc.org {
redir https://www.bensuperpc.org{uri} permanent
}
adminer.bensuperpc.org {
reverse_proxy adminer:8080
}
uptimekuma.bensuperpc.org {
reverse_proxy uptime-kuma:3001
}
torrent.bensuperpc.org {
reverse_proxy qbittorrent:8080
}
qbittorrent.bensuperpc.org {
redir https://torrent.bensuperpc.org permanent
}
transmission.bensuperpc.org {
reverse_proxy transmission:9091
}
gitea.bensuperpc.org {
redir https://git.bensuperpc.org permanent
}
git.bensuperpc.org {
reverse_proxy gitea:3000
}
jellyfin.bensuperpc.org {
reverse_proxy jellyfin:8096
}
transfer.bensuperpc.org {
reverse_proxy psitransfer:3000
}
psitransfer.bensuperpc.org {
redir https://transfer.bensuperpc.org{uri} permanent
}
syncthing.bensuperpc.org {
reverse_proxy syncthing:8384 {
header_up Host {upstream_hostport}
}
}
it-tools.bensuperpc.org {
reverse_proxy it-tools:80
}
tools.bensuperpc.org {
redir https://it-tools.bensuperpc.org permanent
}
privatebin.bensuperpc.org {
reverse_proxy privatebin:8080
}
pastebin.bensuperpc.org {
redir https://privatebin.bensuperpc.org permanent
}
homepage.bensuperpc.org {
reverse_proxy homepage:3000
}
dozzle.bensuperpc.org {
reverse_proxy dozzle:8080
}
link.bensuperpc.org {
# TODO: Use service with database
# Friendly links
redir /gnous https://gnous.eu permanent
redir /proxy https://imagisphe.re permanent
redir /patch https://spaceint.fr permanent
redir /greep https://greep.fr permanent
# Youtube links
redir /rickroll https://www.youtube.com/watch?v=dQw4w9WgXcQ permanent
redir /babyshark https://www.youtube.com/watch?v=XqZsoesa55w permanent
redir /cowcowcow https://www.youtube.com/watch?v=FavUpD_IjVY permanent
redir /badapple https://www.youtube.com/watch?v=FtutLA63Cp8 permanent
redir /macdo https://www.youtube.com/watch?v=Q16KpquGsIc permanent
redir /superiser https://www.youtube.com/watch?v=srnyVw-OR0g permanent
redir /daicon https://youtu.be/-840keiiFDE?si=zIPIokytxcnGw5fJ&t=162 permanent
redir /scp https://www.youtube.com/watch?v=FGCDndN20G8 permanent
redir /scpfb https://youtu.be/9zrKk-1E8zM?si=8R_ZBVG3GzMUYOe8&t=36 permanent
redir /mother https://youtu.be/w3NyycHR3fE?si=rNNSW9zYv0bcO2Eu permanent
redir /cpu https://www.youtube.com/watch?v=y39D4529FM4 permanent
redir /lechanteur https://youtu.be/HXdP15Ubu6M?si=N0qvhqo--3pmSGmb permanent
redir /bna https://youtu.be/3T3ofoKfEoY?si=_7HkGQXMC7rBng8O permanent
redir /jojo https://youtu.be/U0TXIXTzJEY?si=2acWJWX06ju2w4uj permanent
redir /patapon https://youtu.be/H6CbNHLHkmk?si=ZvU8SzrOK-oCUXT5 permanent
redir /darkwater https://youtu.be/Tr8ZgF4Dc0E?si=CEOmm2J6Jp5rdbbt permanent
redir /train https://youtu.be/l8mScKWj3kQ?si=BV07uJ9eP3kzV9Kl permanent
redir /jdg https://www.youtube.com/@joueurdugrenier permanent
}
@@ -1,7 +0,0 @@
bensuperpc.ovh {
redir https://www.bensuperpc.org{uri} permanent
}
www.bensuperpc.ovh {
redir https://www.bensuperpc.org{uri} permanent
}
@@ -1,42 +0,0 @@
services:
# Caddy
caddy:
image: caddy:latest
container_name: caddy
profiles:
- caddy
restart: on-failure:5
ports:
- 80:80
- 443:443
volumes:
- wordpress:/var/www/html:rw
- caddy_data:/data:rw
- caddy_config:/config:rw
- ./caddy/config:/etc/caddy:ro
networks:
- infra-network
env_file:
- ./caddy/env/caddy.env
security_opt:
- no-new-privileges:true
#cap_drop:
# - ALL
cap_add:
- NET_ADMIN
healthcheck:
test: pidof caddy || exit 1
interval: 120s
timeout: 10s
retries: 3
volumes:
caddy_data:
name: caddy_data
caddy_config:
name: caddy_config
networks:
infra-network:
driver: bridge
name: infra-network
View File
+51
View File
@@ -0,0 +1,51 @@
include:
# Main
- services/main/docker-compose.main.yml
# WordPress
- services/wordpress/docker-compose.wordpress.yml
# Caddy
- services/caddy/docker-compose.caddy.yml
# Dufs
- services/dufs/docker-compose.dufs.yml
# Forgejo
- services/forgejo/docker-compose.forgejo.yml
# Homepage
- services/homepage/docker-compose.homepage.yml
# It-tools
- services/it-tools/docker-compose.it-tools.yml
# omni-tools
- services/omni-tools/docker-compose.omni-tools.yml
# cyberchef
- services/cyberchef/docker-compose.cyberchef.yml
# Jellyfin
- services/jellyfin/docker-compose.jellyfin.yml
# Openssh
- services/openssh/docker-compose.openssh.yml
# Picoshare
- services/picoshare/docker-compose.picoshare.yml
# Privatebin
- services/privatebin/docker-compose.privatebin.yml
# Projectsend
- services/projectsend/docker-compose.projectsend.yml
# Psitransfer
- services/psitransfer/docker-compose.psitransfer.yml
# Qbittorrent
- services/qbittorrent/docker-compose.qbittorrent.yml
# Stirlingpdf
- services/stirlingpdf/docker-compose.stirlingpdf.yml
# Syncthing
- services/syncthing/docker-compose.syncthing.yml
# Transmission
- services/transmission/docker-compose.transmission.yml
# Uptime-kuma
- services/uptime-kuma/docker-compose.uptime-kuma.yml
# open-webui
- services/open-webui/docker-compose.open-webui.yml
# Minecraft
- services/minecraft-server/docker-compose.yml
# 7daystodie
- services/7daystodie-server/docker-compose.yml
# Satisfactory
- services/satisfactory-server/docker-compose.yml
# Team Fortress 2
- services/teamfortress2-server/docker-compose.yml
@@ -1,18 +0,0 @@
services:
# dozzle
dozzle:
image: amir20/dozzle:latest
container_name: dozzle
profiles:
- dozzle
restart: on-failure:5
depends_on:
- caddy
env_file:
- ./dozzle/env/dozzle.env
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
networks:
- infra-network
security_opt:
- no-new-privileges:true
-1
View File
@@ -1 +0,0 @@
DOZZLE_LEVEL=info
@@ -1,98 +0,0 @@
# Example configuration file, it's safe to copy this as the default config file without any modification.
# You don't have to copy this file to your instance,
# just run `./act_runner generate-config > config.yaml` to generate a config file.
log:
# The level of logging, can be trace, debug, info, warn, error, fatal
level: info
runner:
# Where to store the registration result.
file: .runner
# Execute how many tasks concurrently at the same time.
capacity: 1
# Extra environment variables to run jobs.
envs:
A_TEST_ENV_NAME_1: a_test_env_value_1
A_TEST_ENV_NAME_2: a_test_env_value_2
# Extra environment variables to run jobs from a file.
# It will be ignored if it's empty or the file doesn't exist.
env_file: .env
# The timeout for a job to be finished.
# Please note that the Gitea instance also has a timeout (3h by default) for the job.
# So the job could be stopped by the Gitea instance if it's timeout is shorter than this.
timeout: 3h
# Whether skip verifying the TLS certificate of the Gitea instance.
insecure: false
# The timeout for fetching the job from the Gitea instance.
fetch_timeout: 5s
# The interval for fetching the job from the Gitea instance.
fetch_interval: 2s
# The labels of a runner are used to determine which jobs the runner can run, and how to run them.
# Like: "macos-arm64:host" or "ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
# Find more images provided by Gitea at https://gitea.com/gitea/runner-images .
# If it's empty when registering, it will ask for inputting labels.
# If it's empty when execute `daemon`, will use labels in `.runner` file.
labels:
- "ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
- "ubuntu-22.04:docker://gitea/runner-images:ubuntu-22.04"
- "ubuntu-20.04:docker://gitea/runner-images:ubuntu-20.04"
cache:
# Enable cache server to use actions/cache.
enabled: true
# The directory to store the cache data.
# If it's empty, the cache data will be stored in $HOME/.cache/actcache.
dir: ""
# The host of the cache server.
# It's not for the address to listen, but the address to connect from job containers.
# So 0.0.0.0 is a bad choice, leave it empty to detect automatically.
host: ""
# The port of the cache server.
# 0 means to use a random available port.
port: 0
# The external cache server URL. Valid only when enable is true.
# If it's specified, act_runner will use this URL as the ACTIONS_CACHE_URL rather than start a server by itself.
# The URL should generally end with "/".
external_server: ""
container:
# Specifies the network to which the container will connect.
# Could be host, bridge or the name of a custom network.
# If it's empty, act_runner will create a network automatically.
network: ""
# Whether to use privileged mode or not when launching task containers (privileged mode is required for Docker-in-Docker).
privileged: false
# And other options to be used when the container is started (eg, --add-host=my.gitea.url:host-gateway).
options:
# The parent directory of a job's working directory.
# NOTE: There is no need to add the first '/' of the path as act_runner will add it automatically.
# If the path starts with '/', the '/' will be trimmed.
# For example, if the parent directory is /path/to/my/dir, workdir_parent should be path/to/my/dir
# If it's empty, /workspace will be used.
workdir_parent:
# Volumes (including bind mounts) can be mounted to containers. Glob syntax is supported, see https://github.com/gobwas/glob
# You can specify multiple volumes. If the sequence is empty, no volumes can be mounted.
# For example, if you only allow containers to mount the `data` volume and all the json files in `/src`, you should change the config to:
# valid_volumes:
# - data
# - /src/*.json
# If you want to allow any volume, please use the following configuration:
# valid_volumes:
# - '**'
valid_volumes: []
# overrides the docker client host with the specified one.
# If it's empty, act_runner will find an available docker host automatically.
# If it's "-", act_runner will find an available docker host automatically, but the docker host won't be mounted to the job containers and service containers.
# If it's not empty or "-", the specified docker host will be used. An error will be returned if it doesn't work.
docker_host: ""
# Pull docker image(s) even if already present
force_pull: true
# Rebuild docker image(s) even if already present
force_rebuild: false
host:
# The parent directory of a job's working directory.
# If it's empty, $HOME/.cache/act/ will be used.
workdir_parent:
@@ -1,72 +0,0 @@
services:
# Gitea
gitea:
image: gitea/gitea:latest-rootless
container_name: gitea
profiles:
- gitea
restart: on-failure:5
depends_on:
- database_gitea
- caddy
ports:
- "22:22"
env_file:
- ./gitea/env/gitea.env
volumes:
- gitea_data:/var/lib/gitea
- gitea_config:/etc/gitea
# - /etc/timezone:/etc/timezone:ro
# - /etc/localtime:/etc/localtime:ro
networks:
- infra-network
security_opt:
- no-new-privileges:true
# Database gitea
database_gitea:
image: mariadb:latest
container_name: database_gitea
profiles:
- database
- gitea
restart: on-failure:5
volumes:
- gitea_db:/var/lib/mysql:rw
env_file:
- ./gitea/env/gitea_db.env
command: '--default-authentication-plugin=mysql_native_password'
networks:
- infra-network
security_opt:
- no-new-privileges:true
# Gitea-runner
gitea-runner:
image: gitea/act_runner:latest
container_name: gitea-runner
profiles:
- gitea-runner
depends_on:
- gitea
restart: on-failure:5
env_file:
- ./gitea/env/gitea-runner.env
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- gitea_runner:/data
- ./gitea/config/gitea_runner/config.yaml:/config.yaml:ro
networks:
- infra-network
security_opt:
- no-new-privileges:true
volumes:
gitea_data:
name: gitea_data
gitea_config:
name: gitea_config
gitea_db:
name: gitea_db
gitea_runner:
name: gitea_runner
-5
View File
@@ -1,5 +0,0 @@
GITEA_INSTANCE_URL=https://git.bensuperpc.org
GITEA_RUNNER_REGISTRATION_TOKEN=TBGzS0m823Xk732zRqjrbcSWFTEPajj5V5OFzXWP
GITEA_RUNNER_NAME=runner-1
#GITEA_RUNNER_LABELS=
CONFIG_FILE=/config.yaml
-15
View File
@@ -1,15 +0,0 @@
USER_UID=1000
USER_GID=1000
GITEA__database__DB_TYPE=mysql
GITEA__database__HOST=database_gitea:3306
GITEA__database__NAME=gitea
GITEA__database__USER=bensuperpc
GITEA__database__PASSWD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
GITEA__security__SECRET_KEY=ykcZt23an1E4lFHWvrCKdAyt16WAiK9c
#GITEA__security__INTERNAL_TOKEN=
GITEA__server__DOMAIN=git.bensuperpc.org
GITEA__server__SSH_DOMAIN=git.bensuperpc.org
GITEA__server__HTTP_PORT=3000
GITEA__server__SSH_LISTEN_PORT=22
GITEA__server__SSH_PORT=22
GITEA__server__ROOT_URL=https://git.bensuperpc.org
-4
View File
@@ -1,4 +0,0 @@
MYSQL_ROOT_PASSWORD=xpc4zIhHZzWKqVHcjBu4aW6aS7jG8d7X
MYSQL_USER=bensuperpc
MYSQL_PASSWORD=K7s5yoHknnEd7vsZoxb8I3dK9mjToF1j
MYSQL_DATABASE=gitea
@@ -1,18 +0,0 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/latest/configs/bookmarks
- Developer:
- Github:
- abbr: GH
href: https://github.com/bensuperpc
- Social:
- Reddit:
- abbr: RE
href: https://reddit.com/u/bensuperpc
- Entertainment:
- YouTube:
- abbr: YT
href: https://youtube.com/c/bensuperpc
@@ -1,50 +0,0 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/latest/configs/services
- Personal:
- wordpress:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/wordpress.png
href: https://www.bensuperpc.org/
description: Wordpress
- uptime-kuma:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/uptime-kuma.png
href: https://uptimekuma.bensuperpc.org/
description: Uptime Kuma
- Sharing:
- jellyfin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/jellyfin.png
href: https://jellyfin.bensuperpc.org/
description: Jellyfin
- psitransfer:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/psitransfer.png
href: https://psitransfer.bensuperpc.org/
description: PsiTransfer
- privatebin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/privatebin.png
href: https://privatebin.bensuperpc.org/
description: PrivateBin
- qbittorrent:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/qbittorrent.png
href: https://qbittorrent.bensuperpc.org/
description: qBittorrent
- syncthing:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/syncthing.png
href: https://syncthing.bensuperpc.org/
description: Syncthing
- transmission:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/transmission.png
href: https://transmission.bensuperpc.org/
description: Transmission
- Utils:
- it-tools:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
href: https://it-tools.bensuperpc.org/
description: IT Tools
- gitea:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/gitea.png
href: https://gitea.bensuperpc.org/
description: Gitea
@@ -1,19 +0,0 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/latest/configs/service-widgets
- resources:
cpu: true
memory: true
disk: /
- search:
provider: duckduckgo
target: _blank
- datetime:
text_size: xl
locale: fr
format:
timeStyle: long
dateStyle: long
@@ -1,43 +0,0 @@
services:
# Jellyfin
jellyfin:
image: jellyfin/jellyfin:latest
container_name: jellyfin
profiles:
- jellyfin
restart: on-failure:5
depends_on:
- caddy
env_file:
- ./jellyfin/env/jellyfin.env
volumes:
- jellyfin_config:/config
- jellyfin_data_movies:/movies:rw
- jellyfin_data_series:/series:rw
- jellyfin_data_documentaries:/documentaries:rw
- jellyfin_data_musics:/musics:rw
- jellyfin_data_personal:/personal:rw
- jellyfin_cache:/cache
# Hardware acceleration (For Intel and AMD GPUs)
devices:
- /dev/dri:/dev/dri
networks:
- infra-network
security_opt:
- no-new-privileges:true
volumes:
jellyfin_config:
name: jellyfin_config
jellyfin_data_movies:
name: jellyfin_data_movies
jellyfin_data_series:
name: jellyfin_data_series
jellyfin_data_documentaries:
name: jellyfin_data_documentaries
jellyfin_data_musics:
name: jellyfin_data_musics
jellyfin_data_personal:
name: jellyfin_data_personal
jellyfin_cache:
name: jellyfin_cache
View File
-5
View File
@@ -1,5 +0,0 @@
PUID=1000
PGID=1000
TZ=Etc/UTC
WEBUI_PORT=8080
TORRENTING_PORT=6881
@@ -0,0 +1,54 @@
services:
# 7 days to die server
7daystodie_server:
image: vinanrra/7dtd-server:latest
container_name: 7daystodie_server
profiles:
- 7daystodie_server
restart: on-failure:5
ports:
- "26900:26900"
- "26901:26901"
- "26902:26902"
# - "8080:8080" # WEBADMIN
# - "8081:8081" # TELNET
# - "8082:8082" # WEBSERVER
volumes:
- 7daystodie_server_save:/home/sdtdserver/.local/share/7DaysToDie # 7 Days To Die world saves
- 7daystodie_server_config_lgsm:/home/sdtdserver/lgsm/config-lgsm/sdtdserver # LGSM config folder
- 7daystodie_server_file:/home/sdtdserver/serverfiles # Optional - serverfiles folder
- 7daystodie_server_log:/home/sdtdserver/log
networks:
- infra-network
env_file:
- ./env/7daystodie.env
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
# security_opt:
# - no-new-privileges:true
# cap_drop:
# - SYS_ADMIN
deploy:
resources:
limits:
memory: 16G
reservations:
memory: 4G
volumes:
7daystodie_backup:
name: 7daystodie_backup
7daystodie_server_save:
name: 7daystodie_server_save
7daystodie_server_config_lgsm:
name: 7daystodie_server_config_lgsm
7daystodie_server_file:
name: 7daystodie_server_file
7daystodie_server_log:
name: 7daystodie_server_log
networks:
infra-network:
driver: bridge
name: infra-network
@@ -0,0 +1,7 @@
START_MODE=3
VERSION=stable
TimeZone=Europe/Paris
BACKUP=NO
BACKUP_HOUR=2
BACKUP_MAX=7
MONITOR=NO
@@ -0,0 +1,14 @@
#RUN_ON_STARTUP=true
RESTIC_REPOSITORY=/mnt/restic
RESTIC_BACKUP_SOURCES=/data
RESTIC_PASSWORD=SCY5cmu12Odca302EXabPA9jXYkCb2NN
# Backup (exuclusive with Check and Prune)
BACKUP_CRON=*/15 * * * *
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
# Check (exuclusive with Check and Prune)
#CHECK_CRON=*/15 * * * *
#RESTIC_CHECK_ARGS=--read-data-subset=40%
# Prune (exuclusive with Check and Prune)
#PRUNE_CRON=*/15 * * * *
#RESTIC_PRUNE_ARGS=
@@ -0,0 +1,33 @@
services:
7daystodie_backup:
image: mazzolino/restic:latest
container_name: 7daystodie_backup
profiles:
- 7daystodie_backup
depends_on:
- 7daystodie_server
restart: on-failure:5
env_file:
- ./env/7daystodie_backup.env
volumes:
- 7daystodie_backup:/mnt/restic
- 7daystodie_server_save:/data:ro
security_opt:
- no-new-privileges:true
network_mode: none
cap_drop:
- NET_ADMIN
- NET_RAW
- SYS_ADMIN
volumes:
7daystodie_backup:
name: 7daystodie_backup
7daystodie_server_save:
name: 7daystodie_server_save
7daystodie_server_config_lgsm:
name: 7daystodie_server_config_lgsm
7daystodie_server_file:
name: 7daystodie_server_file
7daystodie_server_log:
name: 7daystodie_server_log
@@ -0,0 +1,14 @@
#RUN_ON_STARTUP=true
RESTIC_REPOSITORY=/mnt/restic
RESTIC_BACKUP_SOURCES=/data
RESTIC_PASSWORD=SCY5cmu12Odca302EXabPA9jXYkCb2NN
# Backup (exuclusive with Check and Prune)
BACKUP_CRON=*/15 * * * *
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
# Check (exuclusive with Check and Prune)
#CHECK_CRON=*/15 * * * *
#RESTIC_CHECK_ARGS=--read-data-subset=40%
# Prune (exuclusive with Check and Prune)
#PRUNE_CRON=*/15 * * * *
#RESTIC_PRUNE_ARGS=
@@ -0,0 +1,5 @@
include:
# 7 days to die server
- 7daystodie/docker-compose.7daystodie.yml
# Backup server
- backup/docker-compose.backup.yml
@@ -0,0 +1,41 @@
{
email {$MAIL_DOMAIN}
key_type p384
log {
output file /data/logs/access.log {
roll_size 1GiB
roll_keep 20
roll_keep_for 720h
}
format json
}
}
# import website/*
# Common settings
import website/header.caddy
# All website configurations
import website/main.caddy
import website/cyberchef.caddy
import website/forgejo.caddy
import website/homepage.caddy
import website/jellyfin.caddy
import website/memos.caddy
import website/open-webui.caddy
import website/privatebin.caddy
import website/psitransfer.caddy
import website/stirlingpdf.caddy
import website/transmission.caddy
import website/wordpress.caddy
import website/dufs.caddy
import website/it-tools.caddy
import website/omni-tools.caddy
import website/picoshare.caddy
import website/projectsend.caddy
import website/qbittorrent.caddy
import website/syncthing.caddy
import website/uptimekuma.caddy
@@ -0,0 +1,9 @@
cyberchef.{$MAIN_DOMAIN} {
# Load balance between 2 instances
reverse_proxy {
to cyberchef0:8000 cyberchef1:8000
lb_policy round_robin
lb_retries 3
lb_try_interval 1s
}
}
@@ -0,0 +1,3 @@
dufs.{$MAIN_DOMAIN} {
reverse_proxy dufs:5000
}
@@ -0,0 +1,7 @@
git.{$MAIN_DOMAIN} {
reverse_proxy forgejo:3000
}
forgejo.{$MAIN_DOMAIN} {
redir https://git.{$MAIN_DOMAIN}{uri} permanent
}
@@ -0,0 +1,15 @@
(header_common) {
Permissions-Policy: geolocation=(), camera=(), microphone=(), clipboard-read=(), usb=()
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
# Only useful for old browsers
X-XSS-Protection: "1; mode=block"
# Can cause issues with external resources
#Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
#Cross-Origin-Resource-Policy: same-origin
#Content-Security-Policy: default-src 'self'; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';
}
@@ -0,0 +1,3 @@
homepage.{$MAIN_DOMAIN} {
reverse_proxy homepage:3000
}
@@ -0,0 +1,12 @@
it-tools.{$MAIN_DOMAIN} {
# Load balance between 2 instances
reverse_proxy {
to it-tools0:8080 it-tools1:8080
lb_policy round_robin
lb_retries 3
lb_try_interval 1s
}
header {
import header_common
}
}
@@ -0,0 +1,6 @@
jellyfin.{$MAIN_DOMAIN} {
reverse_proxy jellyfin:8096
header {
import header_common
}
}
@@ -0,0 +1,27 @@
www.{$MAIN_DOMAIN} {
header {
Cache-Control "public, max-age=10"
import header_common
}
handle_errors {
@notFound expression `{http.error.status_code} == 404`
redir @notFound https://www.{$MAIN_DOMAIN} permanent
}
reverse_proxy homepage:3000
}
{$MAIN_DOMAIN} {
redir https://www.{host}{uri} permanent
}
public.{$MAIN_DOMAIN} {
root * /public_data
file_server browse
header / {
Cache-Control "no-store"
import header_common
}
}
@@ -0,0 +1,3 @@
memos.{$MAIN_DOMAIN} {
reverse_proxy memos:5230
}
@@ -0,0 +1,9 @@
omni-tools.{$MAIN_DOMAIN} {
# Load balance between 2 instances
reverse_proxy {
to omni-tools0:80 omni-tools1:80
lb_policy round_robin
lb_retries 3
lb_try_interval 1s
}
}
@@ -0,0 +1,3 @@
open-webui.{$MAIN_DOMAIN} {
reverse_proxy open-webui:8080
}
@@ -0,0 +1,3 @@
picoshare.{$MAIN_DOMAIN} {
reverse_proxy picoshare:4001
}
@@ -0,0 +1,7 @@
privatebin.{$MAIN_DOMAIN} {
reverse_proxy privatebin:8080
}
pastebin.{$MAIN_DOMAIN} {
redir https://privatebin.{$MAIN_DOMAIN} permanent
}
@@ -0,0 +1,3 @@
projectsend.{$MAIN_DOMAIN} {
reverse_proxy projectsend:80
}
@@ -0,0 +1,7 @@
transfer.{$MAIN_DOMAIN} {
reverse_proxy psitransfer:3000
}
psitransfer.{$MAIN_DOMAIN} {
redir https://transfer.{$MAIN_DOMAIN}{uri} permanent
}
@@ -0,0 +1,11 @@
torrent.{$MAIN_DOMAIN} {
reverse_proxy qbittorrent:8080
header {
Cache-Control "no-store"
import header_common
}
}
qbittorrent.{$MAIN_DOMAIN} {
redir https://torrent.{$MAIN_DOMAIN} permanent
}
@@ -0,0 +1,3 @@
stirlingpdf.{$MAIN_DOMAIN} {
reverse_proxy stirlingpdf:8080
}
@@ -0,0 +1,5 @@
syncthing.{$MAIN_DOMAIN} {
reverse_proxy syncthing:8384 {
header_up Host {upstream_hostport}
}
}
@@ -0,0 +1,3 @@
transmission.{$MAIN_DOMAIN} {
reverse_proxy transmission:9091
}
@@ -0,0 +1,7 @@
uptimekuma.{$MAIN_DOMAIN} {
reverse_proxy uptime-kuma:3001
header {
Cache-Control "no-store"
import header_common
}
}
@@ -0,0 +1,34 @@
wordpress.{$MAIN_DOMAIN} {
root * /var/www/html
php_fastcgi wordpress:9000
file_server
encode zstd gzip
@disallowed {
path /xmlrpc.php
path *.sql
path /wp-content/uploads/*.php
}
rewrite @disallowed '/index.php'
respond /uploads/*.php 404
header {
# disable FLoC tracking
Permissions-Policy interest-cohort=()
# enable HSTS
Strict-Transport-Security max-age=31536000;
# disable clients from sniffing the media type
X-Content-Type-Options nosniff
# clickjacking protection
# X-Frame-Options DENY
# Disable powerful features we don't need
Permissions-Policy "geolocation=(), camera=(), microphone=() interest-cohort=()"
}
}
@@ -0,0 +1,65 @@
services:
# Caddy
caddy:
image: bensuperpc/caddy-l4:latest
container_name: caddy
profiles:
- caddy
depends_on:
main_infrastructure:
condition: service_completed_successfully
restart: on-failure:5
ports:
- 80:80/tcp
- 80:80/udp
- 443:443/tcp
- 443:443/udp
volumes:
- caddy_data:/data:rw
- caddy_config:/config:rw
- ./config:/etc/caddy:ro
- wordpress:/var/www/html:rw
- public_data:/public_data:ro
networks:
- infra-network
env_file:
- ./env/caddy.env
security_opt:
- no-new-privileges:true
healthcheck:
test: pidof caddy || exit 1
interval: 120s
timeout: 10s
retries: 3
caddy_backup:
image: mazzolino/restic:latest
container_name: caddy_backup
profiles:
- caddy
depends_on:
- caddy
restart: on-failure:5
env_file:
- ./env/caddy_backup.env
volumes:
- caddy_backup:/mnt/restic
- caddy_data:/data:ro
network_mode: none
cap_drop:
- NET_ADMIN
- NET_RAW
- SYS_ADMIN
volumes:
caddy_data:
name: caddy_data
caddy_config:
name: caddy_config
caddy_backup:
name: caddy_backup
wordpress:
name: wordpress
public_data:
name: public_data
+2
View File
@@ -0,0 +1,2 @@
MAIN_DOMAIN=bensuperpc.org
MAIL_DOMAIN=bensuperpc@gmail.com
+14
View File
@@ -0,0 +1,14 @@
#RUN_ON_STARTUP=true
RESTIC_REPOSITORY=/mnt/restic
RESTIC_BACKUP_SOURCES=/data
RESTIC_PASSWORD=YFQh8v3Wi95v0p6h88D4u8C8z4gLfdMw
# Backup (exuclusive with Check and Prune)
BACKUP_CRON=*/30 * * * *
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
# Check (exuclusive with Check and Prune)
#CHECK_CRON=*/30 * * * *
#RESTIC_CHECK_ARGS=--read-data-subset=40%
# Prune (exuclusive with Check and Prune)
#PRUNE_CRON=*/30 * * * *
#RESTIC_PRUNE_ARGS=
@@ -0,0 +1,51 @@
services:
# cyberchef
cyberchef0:
image: mpepping/cyberchef:latest
container_name: cyberchef0
profiles:
- cyberchef
restart: on-failure:5
depends_on:
- caddy
networks:
- infra-network
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
deploy:
resources:
limits:
cpus: '0.5'
memory: 512M
reservations:
cpus: '0.001'
memory: 20M
cyberchef1:
image: mpepping/cyberchef:latest
container_name: cyberchef1
profiles:
- cyberchef
restart: on-failure:5
depends_on:
- caddy
networks:
- infra-network
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
deploy:
resources:
limits:
cpus: '0.5'
memory: 512M
reservations:
cpus: '0.001'
memory: 20M
@@ -0,0 +1,25 @@
services:
# dufs
dufs:
image: sigoden/dufs:latest
container_name: dufs
profiles:
- dufs
# user: ${PUID:-1000}:${PGID:-1000}
restart: on-failure:5
depends_on:
- caddy
env_file:
- ./env/dufs.env
volumes:
- public_data:/data
networks:
- infra-network
security_opt:
- no-new-privileges:true
volumes:
public_data:
name: public_data
private_data:
name: private_data
+7
View File
@@ -0,0 +1,7 @@
DUFS_BIND=0.0.0.0
DUFS_PORT=5000
DUFS_SERVE_PATH=/data
DUFS_HIDDEN=tmp,*.log,*.lock
DUFS_ALLOW_ALL=true
DUFS_COMPRESS=medium
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/:ro"
@@ -0,0 +1,93 @@
services:
# forgejo
forgejo:
image: codeberg.org/forgejo/forgejo:13
container_name: forgejo
profiles:
- forgejo
restart: on-failure:5
depends_on:
- database_forgejo
- caddy
ports:
- "22:2222"
env_file:
- ./env/forgejo.env
volumes:
- forgejo_data:/data
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
networks:
- infra-network
# user: ${PUID:-1000}:${PGID:-1000}
security_opt:
- no-new-privileges:true
# Database forgejo
database_forgejo:
image: mariadb:latest
container_name: database_forgejo
profiles:
- forgejo
depends_on:
- caddy
restart: on-failure:5
volumes:
- forgejo_db:/var/lib/mysql:rw
env_file:
- ./env/forgejo_db.env
command: '--default-authentication-plugin=mysql_native_password'
networks:
- infra-network
security_opt:
- no-new-privileges:true
# forgejo-runner
docker-in-docker:
image: code.forgejo.org/oci/docker:dind
container_name: 'docker_dind'
hostname: docker
networks:
- infra-network
profiles:
- forgejo-runner
privileged: true
environment:
DOCKER_TLS_CERTDIR: /certs
DOCKER_HOST: docker-in-docker
volumes:
- forgejo_certs:/certs
forgejo_runner:
image: data.forgejo.org/forgejo/runner:12
networks:
- infra-network
profiles:
- forgejo-runner
links:
- docker-in-docker
depends_on:
docker-in-docker:
condition: service_started
container_name: 'forgejo_runner'
env_file:
- ./env/forgejo_runner.env
# user: ${PUID:-1000}:${PGID:-1000}
volumes:
# - ./config/forgejo_runner/config.yaml:/config.yaml:ro
- forgejo_runner:/data
- forgejo_certs:/certs
restart: 'unless-stopped'
# command: '/bin/sh -c "while : ; do sleep 1 ; done ;"'
command: '/bin/sh -c "sleep 5; forgejo-runner -c /data/config.yml daemon"'
volumes:
forgejo_data:
name: forgejo_data
forgejo_db:
name: forgejo_db
forgejo_certs:
name: forgejo_certs
forgejo_runner:
name: forgejo_runner
+25
View File
@@ -0,0 +1,25 @@
USER_UID=1000
USER_GID=1000
FORGEJO__database__DB_TYPE=mysql
FORGEJO__database__HOST=database_forgejo:3306
FORGEJO__database__NAME=forgejo
FORGEJO__database__USER=bensuperpc
FORGEJO__database__PASSWD=ZcuHcM9tnIEM7EEO7R5jCpEt6v1d6r7s
FORGEJO__APP_NAME=Bensuperpc's Forgejo
FORGEJO__APP_SLOGAN=Personal Code, Mirrors, and More
FORGEJO__server__DOMAIN=git.bensuperpc.org
FORGEJO__server__SSH_DOMAIN=git.bensuperpc.org
FORGEJO__server__HTTP_PORT=3000
FORGEJO__server__SSH_LISTEN_PORT=2222
FORGEJO__server__SSH_PORT=22
FORGEJO__server__ROOT_URL=https://git.bensuperpc.org
FORGEJO__security__SECRET_KEY=7IWrMh7mC7UMo1SowvUsAT2LOX49eU6P
#FORGEJO__security__INTERNAL_TOKEN=
FORGEJO__security__INSTALL_LOCK=true
FORGEJO__security__MIN_PASSWORD_LENGTH=8
FORGEJO__actions__ENABLED=true
FORGEJO__actions__DEFAULT_ACTIONS_URL="https://git.bensuperpc.org"
#FORGEJO__log__LEVEL: "debug"
FORGEJO__repository__ENABLE_PUSH_CREATE_USER=true
FORGEJO__repository__DEFAULT_PUSH_CREATE_PRIVATE=false
FORGEJO__repository__DEFAULT_REPO_UNITS=repo.code,repo.actions
+4
View File
@@ -0,0 +1,4 @@
MARIADB_ROOT_PASSWORD=ZI8Trbot3b8WGqE5AKj1yphKMu4v9qQw
MARIADB_USER=bensuperpc
MARIADB_PASSWORD=ZcuHcM9tnIEM7EEO7R5jCpEt6v1d6r7s
MARIADB_DATABASE=forgejo
@@ -0,0 +1,3 @@
DOCKER_HOST=tcp://docker:2376
DOCKER_CERT_PATH=/certs/client
DOCKER_TLS_VERIFY=1
@@ -0,0 +1,51 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/configs/bookmarks
- Developer:
- Github:
- abbr: GH
href: https://github.com/bensuperpc
description: github.com
- Social:
- Reddit:
- abbr: RE
href: https://reddit.com/u/bensuperpc
description: reddit.com
- Twitter:
- abbr: TW
href: https://twitter.com/bensuperpc
description: twitter.com
- Bluesky:
- abbr: BS
href: https://bsky.app/profile/bensuperpc.bsky.social
description: bsky.app
- Mastodon:
- abbr: MA
href: https://mastodon.social/@bensuperpc
description: mastodon.social
- Entertainment:
- YouTube:
- abbr: YT
href: https://youtube.com/c/bensuperpc
description: youtube.com
- Twitch:
- abbr: TW
href: https://twitch.tv/bensuperpc
description: twitch.tv
- Friends:
- Gnous:
- abbr: Gn
href: https://gnous.eu/
description: gnous.eu
- Imagisphe:
- abbr: IM
href: https://imagisphe.re/
description: imagisphe.re
- Greep:
- abbr: GP
href: https://greep.fr/#/
description: greep.fr
@@ -1,10 +1,10 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/latest/configs/docker/
# https://gethomepage.dev/configs/docker
# my-docker:
# host: 127.0.0.1
# port: 2375
#jellyfin:
# host: jellyfin
# port: 8096
#my-docker:
# socket: /var/run/docker.sock
@@ -0,0 +1,4 @@
---
# url: https://proxmox.host.or.ip:8006
# token: username@pam!Token ID
# secret: secret
@@ -0,0 +1,139 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/configs/services/
- Personal:
- wordpress:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/wordpress.png
href: https://wordpress.bensuperpc.org/
description: Wordpress
ping: wordpress.bensuperpc.org
container: wordpress
- jellyfin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/jellyfin.png
href: https://jellyfin.bensuperpc.org/
description: Jellyfin
ping: jellyfin.bensuperpc.org
container: jellyfin
- projectsend:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/projectsend.png
href: https://projectsend.bensuperpc.org/
description: ProjectSend
ping: projectsend.bensuperpc.org
container: projectsend
- Sharing:
- psitransfer:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/psitransfer.png
href: https://psitransfer.bensuperpc.org/
description: PsiTransfer
ping: psitransfer.bensuperpc.org
container: psitransfer
- picoshare:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/picoshare.png
href: https://picoshare.bensuperpc.org/
description: PicoShare
ping: picoshare.bensuperpc.org
container: picoshare
- privatebin:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/privatebin.png
href: https://privatebin.bensuperpc.org/
description: PrivateBin
ping: privatebin.bensuperpc.org
container: privatebin
- qbittorrent:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/qbittorrent.png
href: https://qbittorrent.bensuperpc.org/
description: qBittorrent
ping: qbittorrent.bensuperpc.org
container: qbittorrent
- syncthing:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/syncthing.png
href: https://syncthing.bensuperpc.org/
description: Syncthing
ping: syncthing.bensuperpc.org
container: syncthing
- transmission:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/transmission.png
href: https://transmission.bensuperpc.org/
description: Transmission
ping: transmission.bensuperpc.org
container: transmission
- dufs:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dufs.png
href: https://dufs.bensuperpc.org/
description: Dufs
ping: dufs.bensuperpc.org
container: dufs
# - caddy:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/caddy.png
# href: https://public.bensuperpc.org/
# description: File browser
# ping: public.bensuperpc.org
# container: caddy
- Utils:
- it-tools:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
href: https://it-tools.bensuperpc.org/
description: IT Tools
ping: it-tools.bensuperpc.org
container: it-tools0
- omni-tools:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
href: https://omni-tools.bensuperpc.org/
description: Omni Tools
ping: omni-tools.bensuperpc.org
container: omni-tools0
- cyberchef:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/cyberchef.png
href: https://cyberchef.bensuperpc.org/
description: CyberChef
ping: cyberchef.bensuperpc.org
container: cyberchef0
- stirlingpdf:
#icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/stirlingpdf.png
href: https://stirlingpdf.bensuperpc.org/
description: StirlingPDF
ping: stirlingpdf.bensuperpc.org
container: stirlingpdf
- forgejo:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/forgejo.png
href: https://forgejo.bensuperpc.org/
description: Forgejo
ping: forgejo.bensuperpc.org
container: forgejo
- open-webui:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/open-webui.png
href: https://open-webui.bensuperpc.org/
description: ChatGPT local
ping: open-webui.bensuperpc.org
container: open-webui
- Games:
- minecraft:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/minecraft.png
# href: https://minecraft.bensuperpc.org/
description: Minecraft server
# ping: minecraft.bensuperpc.org
container: minecraft-server
- 7dtd:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
# href: https://7dtd.bensuperpc.org/
description: 7 Days to Die server
# ping: 7dtd.bensuperpc.org
container: 7daystodie_server
- satisfactory:
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
# href: https://7dtd.bensuperpc.org/
description: Satisfactory server
# ping: 7dtd.bensuperpc.org
container: satisfactory_server
- Admin:
- uptime-kuma:
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/uptime-kuma.png
href: https://uptimekuma.bensuperpc.org/
description: Uptime Kuma
ping: uptimekuma.bensuperpc.org
container: uptime-kuma
@@ -1,17 +1,19 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/latest/configs/settings
# https://gethomepage.dev/configs/settings/
title: Bensuperpc
base: https://homepage.bensuperpc.org
description: Bensuperpc's homepage
#favicon: /images/favicon.ico
base: https://www.bensuperpc.org
favicon: /image/favicon.ico
logpath: /app/logs
background:
image: /images/electronic.jpg
image: /image/background.jpg
blur: md
opacity: 50
brightness: 50
@@ -19,22 +21,26 @@ background:
theme: dark
color: slate
language: fr
language: en
layout:
Personal:
style: row
columns: 6
Media:
style: row
columns: 6
Sharing:
style: row
columns: 6
Admin:
style: row
columns: 6
Utils:
style: row
columns: 6
initiallyCollapsed: false
Games:
style: row
columns: 6
initiallyCollapsed: false
quicklaunch:
searchDescriptions: true
@@ -0,0 +1,37 @@
---
# For configuration options and examples, please see:
# https://gethomepage.dev/widgets/services/
# https://gethomepage.dev/widgets/services/qbittorrent/
#- logo:
# icon: /image/daisy.jpg
- resources:
cpu: true
cputemp: true
memory: true
disk: /
uptime: true
refresh: 3000
#- search:
# provider: duckduckgo
# target: _blank
# showSearchSuggestions: true
- datetime:
text_size: xl
locale: fr
format:
timeStyle: short
dateStyle: short
- openmeteo:
label: Nantes # optional
latitude: 47.216671
longitude: -1.55
timezone: Europe/Paris # optional
units: metric # or imperial
cache: 5 # Time in minutes to cache API responses, to stay within limits
format: # optional, Intl.NumberFormat options
maximumFractionDigits: 1
@@ -6,15 +6,23 @@ services:
profiles:
- homepage
restart: on-failure:5
# environment:
# - PUID=${PUID:-1000}
# - PGID=${PGID:-1000}
depends_on:
- caddy
env_file:
- ./homepage/env/homepage.env
- ./env/homepage.env
volumes:
- homepage_log:/app/logs
- ./homepage/config:/app/config:ro
- ./homepage/image:/app/public/images:ro
- ./config:/app/config
- ./image:/app/public/image:ro
- /var/run/docker.sock:/var/run/docker.sock:ro
# develop:
# watch:
# - action: sync+restart
# path: ./homepage/image
# target: /app/public/image
networks:
- infra-network
security_opt:
@@ -1,2 +1,3 @@
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
#PSITRANSFER_PORT=3000
HOMEPAGE_ALLOWED_HOSTS=www.bensuperpc.org

Before

Width:  |  Height:  |  Size: 569 KiB

After

Width:  |  Height:  |  Size: 569 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 51 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 295 KiB

@@ -0,0 +1,51 @@
services:
# it-tools
it-tools0:
image: ghcr.io/sharevb/it-tools:latest
container_name: it-tools0
profiles:
- it-tools
restart: on-failure:5
depends_on:
- caddy
networks:
- infra-network
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
deploy:
resources:
limits:
cpus: '0.5'
memory: 512M
reservations:
cpus: '0.001'
memory: 20M
it-tools1:
image: ghcr.io/sharevb/it-tools:latest
container_name: it-tools1
profiles:
- it-tools
restart: on-failure:5
depends_on:
- caddy
networks:
- infra-network
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
deploy:
resources:
limits:
cpus: '0.5'
memory: 512M
reservations:
cpus: '0.001'
memory: 20M
@@ -0,0 +1,37 @@
services:
# Jellyfin
jellyfin:
image: lscr.io/linuxserver/jellyfin:latest
container_name: jellyfin
profiles:
- jellyfin
restart: on-failure:5
environment:
- PUID=${PUID:-1000}
- PGID=${PGID:-1000}
depends_on:
- caddy
env_file:
- ./env/jellyfin.env
volumes:
- jellyfin_config:/config
- jellyfin_cache:/cache
- public_data:/public
- private_data:/private
# Hardware acceleration (For Intel and AMD GPUs)
devices:
- /dev/dri:/dev/dri
networks:
- infra-network
security_opt:
- no-new-privileges:true
volumes:
jellyfin_config:
name: jellyfin_config
jellyfin_cache:
name: jellyfin_cache
public_data:
name: public_data
private_data:
name: private_data
+2
View File
@@ -0,0 +1,2 @@
TZ=Etc/UTC
DOCKER_MODS=linuxserver/mods:jellyfin-opencl-intel
@@ -0,0 +1,30 @@
services:
main_infrastructure:
container_name: main_infrastructure
image: alpine:latest
profiles:
- main_infrastructure
volumes:
- public_data:/public_data:rw
- private_data:/private_data:rw
read_only: true
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
cap_add:
- CHOWN
- DAC_OVERRIDE
# Fix root permissions on mounted volumes
command: chown -R ${PUID:-1000}:${PGID:-1000} /public_data /private_data
volumes:
public_data:
name: public_data
private_data:
name: private_data
networks:
infra-network:
driver: bridge
name: infra-network
@@ -0,0 +1,22 @@
services:
# memos
memos:
image: neosmemo/memos:latest
container_name: memos
profiles:
- memos
restart: on-failure:5
depends_on:
- caddy
env_file:
- ./env/memos.env
volumes:
- memos_config:/var/opt/memos
networks:
- infra-network
security_opt:
- no-new-privileges:true
volumes:
memos_config:
name: memos_config
+1
View File
@@ -0,0 +1 @@
@@ -0,0 +1,34 @@
services:
minecraft_backup:
image: mazzolino/restic:latest
container_name: minecraft_backup
profiles:
- minecraft_backup
depends_on:
- mc-server
- minecraft_proxy
restart: on-failure:3
env_file:
- ./env/backup.env
volumes:
- minecraft_server_backup:/mnt/restic
- minecraft_server_data:/data/minecraft_server_data:ro
- minecraft_proxy_data:/data/minecraft_proxy_data:ro
- minecraft_rcon_data:/data/minecraft_rcon_data:ro
security_opt:
- no-new-privileges:true
network_mode: none
cap_drop:
- NET_ADMIN
- NET_RAW
- SYS_ADMIN
volumes:
minecraft_server_backup:
name: minecraft_server_backup
minecraft_server_data:
name: minecraft_server_data
minecraft_proxy_data:
name: minecraft_proxy_data
minecraft_rcon_data:
name: minecraft_rcon_data
@@ -0,0 +1,14 @@
#RUN_ON_STARTUP=true
RESTIC_REPOSITORY=/mnt/restic
RESTIC_BACKUP_SOURCES=/data
RESTIC_PASSWORD=7xymiWBH4c56rlBXPXbgkxF2zw3f2AGs
# Backup (exuclusive with Check and Prune)
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
BACKUP_CRON=*/15 * * * *
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
# Check (exuclusive with Check and Prune)
#CHECK_CRON=*/15 * * * *
#RESTIC_CHECK_ARGS=--read-data-subset=40%
# Prune (exuclusive with Check and Prune)
#PRUNE_CRON=*/15 * * * *
#RESTIC_PRUNE_ARGS=
@@ -0,0 +1,5 @@
include:
# Minecraft server
- minecraft-server/docker-compose.yml
# Backup server
- backup/docker-compose.backup.yml
@@ -0,0 +1,4 @@
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/better-stonecutter-v1-1.zip
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/cuttable-wood-v2-2.zip
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/easy-bone-blocks-v1-0-1.zip
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/more-smeltable-items-v2-0-3.zip
@@ -0,0 +1,152 @@
# Dynmap
https://dev.bukkit.org/projects/dynmap/files/4167109/download
# Dynmap-WorldGuard
# https://dev.bukkit.org/projects/dynmap-worldguard/files/latest
# v1.4-beta-1 (05-02-2022)
https://dev.bukkit.org/projects/dynmap-worldguard/files/3635984/download
# Dynmap-EssentialsX
# https://dev.bukkit.org/projects/dynmap-essentialsx/files/latest
# v1.0-beta-1 (09-02-2022)
https://dev.bukkit.org/projects/dynmap-essentialsx/files/3634752/download
# Dynmap-Structures
https://dev.bukkit.org/projects/dynmap-structures/files/3845985/download
# EssentialsX
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsX-2.19.7.jar
# EssentialsX Add-on
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXChat-2.19.7.jar
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXSpawn-2.19.7.jar
# https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXDiscord-2.19.7.jar
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXProtect-2.19.7.jar
https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXAntiBuild-2.19.7.jar
# https://github.com/EssentialsX/Essentials/releases/download/2.19.7/EssentialsXGeoIP-2.19.7.jar
# Serverutils
# https://serverutils.fvdh.dev/api/v1/Bukkit/latest
https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_worlds/ServerUtils-Bukkit-3.5.3.jar
# WorldEdit, WorldGuard and FastAsyncWorldEdit
# https://dev.bukkit.org/projects/worldedit/files/latest
https://dev.bukkit.org/projects/worldguard/files/latest
https://ci.athion.net/job/FastAsyncWorldEdit/339/artifact/artifacts/FastAsyncWorldEdit-Bukkit-2.5.1-SNAPSHOT-339.jar
https://github.com/MrMicky-FR/WorldEditSelectionVisualizer/releases/download/v2.1.3/WorldEditSelectionVisualizer-2.1.3.jar
# LuckPerms
# https://download.luckperms.net/1438/bukkit/loader/LuckPerms-Bukkit-5.4.30.jar
# Vault
https://dev.bukkit.org/projects/vault/files/latest
# Advanced Portals
# https://dev.bukkit.org/projects/advanced-portals/files/latest
https://github.com/sekwah41/Advanced-Portals/releases/download/v0.9.2/Advanced-Portals-0.9.2.jar
# ProtocolLib
# https://github.com/dmulloy2/ProtocolLib/releases/download/4.8.0/ProtocolLib.jar
https://ci.dmulloy2.net/job/ProtocolLib/lastSuccessfulBuild/artifact/target/ProtocolLib.jar
# NBT-API
https://dev.bukkit.org/projects/nbt-api/files/latest
# CoreProtect
https://dev.bukkit.org/projects/coreprotect/files/latest
# Decent Holograms
# https://www.spigotmc.org/resources/decent-holograms-1-8-1-18-papi-support-no-dependencies.96927/
# https://github.com/DecentSoftware-eu/DecentHolograms/releases/download/2.7.2/DecentHolograms-2.7.2.jar
# DropHeads
# https://dev.bukkit.org/projects/dropheads/files/latest
# OpenInv
https://dev.bukkit.org/projects/openinv/files/latest
# Animated-TabList
https://dev.bukkit.org/projects/animated-tab-tablist/files/latest
# DeadChest
# https://dev.bukkit.org/projects/dead-chest/files/latest
# UberEnchant
https://dev.bukkit.org/projects/uberenchant/files/latest
# TreeAssist
# https://dev.bukkit.org/projects/tree-assist/files/latest
# Beta TreeAssist v7.3.31 (18-07-2022)
https://dev.bukkit.org/projects/tree-assist/files/3963990/download
# Shopkeepers
https://dev.bukkit.org/projects/shopkeepers/files/latest
# EconomyShopGUI
https://dev.bukkit.org/projects/economyshopgui/files/latest
# SignShop v3
# https://dev.bukkit.org/projects/signshop/files/latest
# Quickshop-reremake
# https://dev.bukkit.org/projects/quickshop-reremake/files/latest
# https://ci.codemc.io/job/PotatoCraft-Studio/job/QuickShopDynmap/7/artifact/target/QuickShop-Dynmap-1.0.jar
# CustomCrafting Advanced Custom Recipes
# https://dev.bukkit.org/projects/customcrafting-advanced-custom-recipes/files/latest
# https://dev.bukkit.org/projects/wolfyutilities/files/latest
# Insta Mine Deepslate
https://dev.bukkit.org/projects/insta-mine-deepslate/files/latest
# SkinsRestorerX
https://github.com/SkinsRestorer/SkinsRestorerX/releases/download/14.2.5/SkinsRestorer.jar
# ImageOnMap
https://dev.bukkit.org/projects/imageonmap/files/latest
# Geyser
https://ci.opencollab.dev/job/GeyserMC/job/Geyser/job/master/lastSuccessfulBuild/artifact/bootstrap/spigot/target/Geyser-Spigot.jar
# Floodgate
https://ci.opencollab.dev/job/GeyserMC/job/Floodgate/job/master/lastSuccessfulBuild/artifact/spigot/build/libs/floodgate-spigot.jar
# ViaVersion
# https://github.com/ViaVersion/ViaVersion/releases/download/4.3.1/ViaVersion-4.3.1.jar
# ViaBackwards
# https://github.com/ViaVersion/ViaBackwards/releases/download/4.3.0/ViaBackwards-4.3.0.jar
# PvPManager
# https://dev.bukkit.org/projects/pvpmanager/files/latest
# AuthMe Reloaded
# https://ci.codemc.io/job/AuthMe/job/AuthMeReloaded/lastSuccessfulBuild/artifact/target/AuthMe-5.6.0-SNAPSHOT.jar
# SignBoard
# https://dev.bukkit.org/projects/signboard/files/latest
# plan-player-analytics
https://github.com/plan-player-analytics/Plan/releases/download/5.5.2163/Plan-5.5-build-2163.jar
# MiniMOTD
# https://github.com/jpenilla/MiniMOTD/releases/download/v2.0.9/minimotd-universal-2.0.9.jar
# Citizens2
https://ci.citizensnpcs.co/job/Citizens2/2756/artifact/dist/target/Citizens-2.0.30-b2756.jar
# Simple voice chat [BUKKIT/SPIGOT/PAPER][1.19] Simple Voice Chat 1.19-2.2.45 (18-06-2022)
https://dev.bukkit.org/projects/simple-voice-chat/files/latest
# BKCommonLib
https://ci.mg-dev.eu/job/BKCommonLib/1454/artifact/target/BKCommonLib-1.19.3-v2-SNAPSHOT-1454.jar
# MyWorlds
https://ci.mg-dev.eu/job/MyWorlds/lastSuccessfulBuild/artifact/target/MyWorlds-1.19.3-v2-SNAPSHOT-196.jar
# PurpurExtras
https://cdn.modrinth.com/data/Hn8OHmqL/versions/w60JPGhg/PurpurExtras-1.23.0.jar
#FreedomChat
https://cdn.modrinth.com/data/MubyTbnA/versions/qGaisS0d/FreedomChat-1.3.1.jar
@@ -0,0 +1,106 @@
services:
minecraft_proxy:
image: itzg/bungeecord:latest
container_name: minecraft_proxy_server
profiles:
- minecraft_proxy
- minecraft_server
restart: on-failure:3
env_file:
- ./env/proxy.env
environment:
INIT_MEMORY: "512M"
MAX_MEMORY: "2048M"
ports:
# Server Minecraft port
- "25565:25577"
# Server Minecraft Bedrock port (GeyserMC)
#- "19132:19132/udp"
# Rcon port
#- "25576:25575"
# Plan port
# - "8806:8804"
volumes:
- minecraft_proxy_data:/server
networks:
- infra-network
mc-server:
image: itzg/minecraft-server:latest
container_name: minecraft_server
profiles:
- minecraft_server
depends_on:
- minecraft_proxy
restart: on-failure:3
ports:
# Server Minecraft port (Disable if you use proxy)
# - "25565:25565"
# Rcon port
# - "25575:25575"
# Server Minecraft Bedrock port (GeyserMC)
# - "19132:19132/udp"
# Dynmap port
# - "8123:8123"
# BlueMap port
- "8100:8100"
# Plan port
- "8804:8804"
env_file:
- ./env/server.env
- ./env/world.env
- ./env/mods_plugins.env
environment:
MAX_MEMORY: "${MAX_MEMORY:-24G}"
volumes:
- minecraft_server_data:/data
# - ./asset_links/plugins.txt:/extras/plugins.txt:ro
networks:
- infra-network
deploy:
resources:
# limits:
# cpus: '8.0'
# memory: 26G
reservations:
cpus: '0.01'
memory: 20M
rcon-web:
image: itzg/rcon:latest
container_name: minecraft_rcon_web
profiles:
- mc-web
restart: on-failure:3
depends_on:
- minecraft_server
- minecraft_proxy
environment:
RWA_USERNAME: admin
RWA_PASSWORD: admin
RWA_ADMIN: "TRUE"
# is referring to the hostname of 'minecraft_server' compose service below
RWA_RCON_HOST: minecraft_server
RWA_RCON_PASSWORD: 6hxU3Oxmh2Q8e6S9fjkdWJikRCON_PASSWORD
ports:
# web UI port
- "4326:4326"
# websocket access from UI
- "4327:4327"
volumes:
- minecraft_rcon_data:/opt/rcon-web-admin/db
networks:
- infra-network
volumes:
minecraft_server_data:
name: minecraft_server_data
minecraft_proxy_data:
name: minecraft_proxy_data
minecraft_rcon_data:
name: minecraft_rcon_data
networks:
infra-network:
driver: bridge
name: infra-network
@@ -0,0 +1,34 @@
# Disable SignLink: 39593
#KeepChunks,Chunky,Plasmo Voice Server,viaversion,viabackwards,LuckPerms,QuickShop-Reremake,KeepChunks, DecentHolograms
#SPIGET_RESOURCES=23307,81534,91064,19254,27448,28140,62575,23307,96927
# MODPACK= # MODPACK or MODS
# MODS=https://dev.bukkit.org/projects/dynmap/files/3620010/download
#MODS_FILE=/extras/plugins.txt
REMOVE_OLD_MODS=false
REMOVE_OLD_MODS_INCLUDE=*.jar,*-version.json
REMOVE_OLD_MODS_EXCLUDE=
REMOVE_OLD_MODS_DEPTH=16
# RESOURCE_PACK=
# RESOURCE_PACK_SHA1=
# Minecraft Datapack
# DATAPACKS=Terralith_v2.2_Seed_3820.zip
#DATAPACKS_FILE=/extras/datapacks.txt
#REMOVE_OLD_DATAPACKS=false
#REMOVE_OLD_DATAPACKS_INCLUDE=*.zip
# REMOVE_OLD_DATAPACKS_EXCLUDE=
#REMOVE_OLD_DATAPACKS_DEPTH=1
#RESOURCE_PACK=
#RESOURCE_PACK_SHA1=
# MODS_FORGEAPI_KEY
# MODS_FORGEAPI_FILE
# MODS_FORGEAPI_PROJECTIDS
# MODS_FORGEAPI_RELEASES
# MODS_FORGEAPI_DOWNLOAD_DEPENDENCIES
# MODS_FORGEAPI_IGNORE_GAMETYPE
# REMOVE_OLD_FORGEAPI_MODS
# REMOVE_OLD_DATAPACKS_DEPTH
# REMOVE_OLD_DATAPACKS_INCLUDE
@@ -0,0 +1,14 @@
TYPE=VELOCITY
VELOCITY_VERSION=3.5.0-SNAPSHOT
VELOCITY_BUILD_ID=594
#PLUGINS=
#SPIGET_PLUGINS=
DEBUG=false
DEBUG_HELPER=false
ENABLE_RCON=false
#RCON_PASSWORD=6hxU3Oxmh2Q8e6S9fjkdWJik
#RCON_PORT=25576
INIT_MEMORY=512M
MAX_MEMORY=1536M
#JVM_OPTS=
JVM_XX_OPTS=-XX:+UseG1GC -XX:G1HeapRegionSize=4M -XX:+UnlockExperimentalVMOptions -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:MaxInlineLevel=15
@@ -0,0 +1,81 @@
# Base options
EULA=true
ONLINE_MODE=false
SERVER_PORT=25565
SERVER_NAME=MyServer
ICON=https://github.com/bensuperpc/docker-minecraft-server/releases/download/Test_world/icon_64x64.png
OVERRIDE_ICON=true
MOTD=A §l§cMinecraft§r §nserver
OVERRIDE_SERVER_PROPERTIES=true
ENFORCE_SECURE_PROFILE=false
# Server jar options
TYPE=PURPUR
VERSION=1.21.11
PURPUR_BUILD=2568
FORCE_REDOWNLOAD=false
BUILD_FROM_SOURCE=false
# Server options
INIT_MEMORY=2G
MAX_MEMORY=12G
EXEC_DIRECTLY=false
USE_AIKAR_FLAGS=true
USE_SIMD_FLAGS=true
# TUNE_VIRTUALIZED=true
# ENABLE_JMX=true
CONSOLE=false
GUI=false
TZ=Europe/Paris
# OPS options
OPS=Bensuperpc
# OPS_FILE=
OVERRIDE_OPS=true
#OP_PERMISSION_LEVEL=4
#FUNCTION_PERMISSION_LEVEL
# WHITELIST options
ENABLE_WHITELIST=false
OVERRIDE_WHITELIST=true
#WHITELIST=Bensuperpc
# WHITELIST_FILE=
ENFORCE_WHITELIST=false
# AUTOPAUSE options
ENABLE_AUTOPAUSE=false
AUTOPAUSE_TIMEOUT_EST=7200000
AUTOPAUSE_TIMEOUT_INIT=3600000
AUTOPAUSE_TIMEOUT_KN=480000
# AUTOSTOP options
# ENABLE_AUTOSTOP=true
# AUTOSTOP_TIMEOUT_EST
# AUTOSTOP_TIMEOUT_INIT
# AUTOSTOP_PERIOD
NETWORK_COMPRESSION_THRESHOLD=-1
LOG_TIMESTAMP=true
MAX_TICK_TIME=-1
# Time (sec) before AFK player was disconnected
PLAYER_IDLE_TIMEOUT=600
MAX_PLAYERS=32
ALLOW_FLIGHT=false
# RCON options
ENABLE_RCON=false
RCON_PASSWORD=6hxU3Oxmh2Q8e6S9fjkdWJik
RCON_PORT=25575
BROADCAST_CONSOLE_TO_OPS=true
BROADCAST_RCON_TO_OPS=true
# QUERY options
#ENABLE_QUERY=true
#QUERY_PORT=25565
# Others options
SNOOPER_ENABLED=true
ENABLE_STATUS=true
PREVIEWS_CHAT=false
#SYNC_CHUNK_WRITES=true
@@ -0,0 +1,22 @@
LEVEL=world
LEVEL_TYPE=default
# MAX_WORLD_SIZE=10000
# MAX_BUILD_HEIGHT=256
ALLOW_NETHER=true
GENERATE_STRUCTURES=true
VIEW_DISTANCE=12
SIMULATION_DISTANCE=10
ENABLE_COMMAND_BLOCK=true
ANNOUNCE_PLAYER_ACHIEVEMENTS=true
PVP=true
DIFFICULTY=hard
FORCE_GAMEMODE=false
MODE=survival
HARDCORE=false
SPAWN_PROTECTION=16
SEED=3820
# Spawn Entities Options
SPAWN_ANIMALS=true
SPAWN_MONSTERS=true
SPAWN_NPCS=true
@@ -0,0 +1,51 @@
services:
# omni-tools
omni-tools0:
image: iib0011/omni-tools:latest
container_name: omni-tools0
profiles:
- omni-tools
restart: on-failure:5
depends_on:
- caddy
networks:
- infra-network
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
deploy:
resources:
limits:
cpus: '0.5'
memory: 512M
reservations:
cpus: '0.001'
memory: 20M
omni-tools1:
image: iib0011/omni-tools:latest
container_name: omni-tools1
profiles:
- omni-tools
restart: on-failure:5
depends_on:
- caddy
networks:
- infra-network
read_only: false
security_opt:
- no-new-privileges:true
cap_drop:
- SYS_ADMIN
deploy:
resources:
limits:
cpus: '0.5'
memory: 512M
reservations:
cpus: '0.001'
memory: 20M
@@ -0,0 +1,42 @@
services:
ollama:
image: ollama/ollama:latest
#platform: linux/amd64
container_name: ollama
profiles:
- open-webui
depends_on:
- caddy
restart: on-failure:5
tty: true
volumes:
- ollama:/root/.ollama
security_opt:
- no-new-privileges:true
networks:
- infra-network
open-webui:
image: ghcr.io/open-webui/open-webui:main
container_name: open-webui
profiles:
- open-webui
volumes:
- open-webui:/app/backend/data
depends_on:
- ollama
- caddy
env_file:
- ./env/open-webui.env
#environment:
# - UID=${PUID:-1000}
# - GID=${PGID:-1000}
restart: on-failure:5
networks:
- infra-network
security_opt:
- no-new-privileges:true
volumes:
ollama: {}
open-webui: {}
+16
View File
@@ -0,0 +1,16 @@
OLLAMA_BASE_URL=http://ollama:11434
#WEBUI_SECRET_KEY=
#HF_HUB_OFFLINE=1
# Disable analytics
SCARF_NO_ANALYTICS=true
DO_NOT_TRACK=true
ANONYMIZED_TELEMETRY=false
#OPENAI_API_BASE_URL=
#OPENAI_API_KEY=
# Only with stable-diffusion-webui
#ENABLE_IMAGE_GENERATION=true
#AUTOMATIC1111_BASE_URL=http://stable-diffusion-webui:7860
#IMAGE_SIZE=64x64
#IMAGE_STEPS=3

Some files were not shown because too many files have changed in this diff Show More