mirror of
https://github.com/bensuperpc/infrastructure.git
synced 2026-07-02 03:19:10 +02:00
Compare commits
6 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 Bensuperpc
|
cd2862a358 | ||
|
Bensuperpc
|
13c2b7df19 | ||
|
Bensuperpc
|
20fe33f7d5 | ||
|
Bensuperpc
|
c2f8075fd7 | ||
|
Bensuperpc
|
b13654df15 | ||
|
Bensuperpc
|
66b014c076 |
@@ -1 +0,0 @@
|
|||||||
github: bensuperpc
|
|
||||||
@@ -1,38 +0,0 @@
|
|||||||
---
|
|
||||||
name: Bug report
|
|
||||||
about: Create a report to help us improve
|
|
||||||
title: ''
|
|
||||||
labels: ''
|
|
||||||
assignees: ''
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
**Describe the bug**
|
|
||||||
A clear and concise description of what the bug is.
|
|
||||||
|
|
||||||
**To Reproduce**
|
|
||||||
Steps to reproduce the behavior:
|
|
||||||
1. Go to '...'
|
|
||||||
2. Click on '....'
|
|
||||||
3. Scroll down to '....'
|
|
||||||
4. See error
|
|
||||||
|
|
||||||
**Expected behavior**
|
|
||||||
A clear and concise description of what you expected to happen.
|
|
||||||
|
|
||||||
**Screenshots**
|
|
||||||
If applicable, add screenshots to help explain your problem.
|
|
||||||
|
|
||||||
**Desktop (please complete the following information):**
|
|
||||||
- OS: [e.g. iOS]
|
|
||||||
- Browser [e.g. chrome, safari]
|
|
||||||
- Version [e.g. 22]
|
|
||||||
|
|
||||||
**Smartphone (please complete the following information):**
|
|
||||||
- Device: [e.g. iPhone6]
|
|
||||||
- OS: [e.g. iOS8.1]
|
|
||||||
- Browser [e.g. stock browser, safari]
|
|
||||||
- Version [e.g. 22]
|
|
||||||
|
|
||||||
**Additional context**
|
|
||||||
Add any other context about the problem here.
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
---
|
|
||||||
name: Custom issue template
|
|
||||||
about: Describe this issue template's purpose here.
|
|
||||||
title: ''
|
|
||||||
labels: ''
|
|
||||||
assignees: ''
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
|
|
||||||
@@ -1,20 +0,0 @@
|
|||||||
---
|
|
||||||
name: Feature request
|
|
||||||
about: Suggest an idea for this project
|
|
||||||
title: ''
|
|
||||||
labels: ''
|
|
||||||
assignees: ''
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
**Is your feature request related to a problem? Please describe.**
|
|
||||||
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
|
|
||||||
|
|
||||||
**Describe the solution you'd like**
|
|
||||||
A clear and concise description of what you want to happen.
|
|
||||||
|
|
||||||
**Describe alternatives you've considered**
|
|
||||||
A clear and concise description of any alternative solutions or features you've considered.
|
|
||||||
|
|
||||||
**Additional context**
|
|
||||||
Add any other context or screenshots about the feature request here.
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
version: 2
|
|
||||||
updates:
|
|
||||||
- package-ecosystem: "github-actions"
|
|
||||||
directory: "/"
|
|
||||||
schedule:
|
|
||||||
interval: "daily"
|
|
||||||
@@ -1,48 +0,0 @@
|
|||||||
name: infrastructure
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches:
|
|
||||||
- "main"
|
|
||||||
- "master"
|
|
||||||
- "dev"
|
|
||||||
paths-ignore:
|
|
||||||
- "**/README.md"
|
|
||||||
pull_request:
|
|
||||||
branches:
|
|
||||||
- "*"
|
|
||||||
schedule:
|
|
||||||
- cron: "0 9 * * 2" # every tuesday at 9:00 https://crontab.guru/#0_7_*_*_1
|
|
||||||
workflow_dispatch:
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
image:
|
|
||||||
name: infrastructure
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
timeout-minutes: 30
|
|
||||||
steps:
|
|
||||||
- name: "Checkout Code"
|
|
||||||
uses: actions/checkout@v5
|
|
||||||
with:
|
|
||||||
submodules: "recursive"
|
|
||||||
fetch-depth: 0
|
|
||||||
- name: "Check compose"
|
|
||||||
run: make check
|
|
||||||
- name: "Update server image"
|
|
||||||
run: make pull
|
|
||||||
- name: "Build server"
|
|
||||||
run: make build
|
|
||||||
# - name: "Start server"
|
|
||||||
# run: make start
|
|
||||||
- name: "Logs server"
|
|
||||||
run: make logs
|
|
||||||
- name: "State server"
|
|
||||||
run: make state
|
|
||||||
- name: "Stop server"
|
|
||||||
run: make stop
|
|
||||||
- name: "Down server"
|
|
||||||
run: make down
|
|
||||||
- name: "Clean server"
|
|
||||||
run: make clean
|
|
||||||
- name: "Purge server"
|
|
||||||
run: make purge
|
|
||||||
@@ -1,31 +0,0 @@
|
|||||||
name: submodule-update
|
|
||||||
|
|
||||||
on:
|
|
||||||
schedule:
|
|
||||||
- cron: '0 */8 * * *'
|
|
||||||
workflow_dispatch:
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
image:
|
|
||||||
name: submodule-update
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: "Checkout Code"
|
|
||||||
uses: actions/checkout@v5
|
|
||||||
with:
|
|
||||||
token: ${{ secrets.CI_TOKEN }}
|
|
||||||
repository: ${{ github.repository }}
|
|
||||||
submodules: 'recursive'
|
|
||||||
fetch-depth: 1
|
|
||||||
# Update references
|
|
||||||
- name: Git Sumbodule Update
|
|
||||||
run: |
|
|
||||||
git pull --recurse-submodules
|
|
||||||
git submodule update --remote --recursive
|
|
||||||
# Commit and push
|
|
||||||
- name: Commit update
|
|
||||||
run: |
|
|
||||||
git config --global user.name 'Bensuperpc'
|
|
||||||
git config --global user.email 'bensuperpc@gmail.com'
|
|
||||||
git remote set-url origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}
|
|
||||||
git commit -am "Auto updated submodule references" && git push || echo "No changes to commit"
|
|
||||||
+2
-2
@@ -1,2 +1,2 @@
|
|||||||
|
*.env
|
||||||
/*.tar.gz
|
**/*.env
|
||||||
@@ -1,78 +0,0 @@
|
|||||||
#//////////////////////////////////////////////////////////////
|
|
||||||
#// //
|
|
||||||
#// docker-multimedia, 2024 //
|
|
||||||
#// Created: 30, May, 2021 //
|
|
||||||
#// Modified: 14 November, 2024 //
|
|
||||||
#// file: - //
|
|
||||||
#// - //
|
|
||||||
#// Source: //
|
|
||||||
#// OS: ALL //
|
|
||||||
#// CPU: ALL //
|
|
||||||
#// //
|
|
||||||
#//////////////////////////////////////////////////////////////
|
|
||||||
|
|
||||||
PROJECT_DIRECTORY ?= infrastructure
|
|
||||||
|
|
||||||
DOCKER_EXEC ?= docker
|
|
||||||
|
|
||||||
CONFIG_DIRECTORY ?= presets
|
|
||||||
CONFIG_FILES ?= $(addprefix $(CONFIG_DIRECTORY)/,$(addsuffix .conf,$(CONFIGS)))
|
|
||||||
include $(CONFIG_FILES)
|
|
||||||
|
|
||||||
DOCKER_PROFILES ?=
|
|
||||||
EXTRA_PROFILES ?=
|
|
||||||
|
|
||||||
PROFILE_CMD ?= $(addprefix --profile ,$(DOCKER_PROFILES) $(EXTRA_PROFILES))
|
|
||||||
|
|
||||||
COMPOSE_FILES ?= $(shell find ./$(PROJECT_DIRECTORY) -maxdepth 1 -name 'docker-compose*.yml' -type f | sed -e 's/^/--file /')
|
|
||||||
COMPOSE_DIR ?= --project-directory ./$(PROJECT_DIRECTORY)
|
|
||||||
|
|
||||||
UID ?= 1000
|
|
||||||
GID ?= 1000
|
|
||||||
TZ ?= Europe/Paris
|
|
||||||
|
|
||||||
ENV_ARG_VAR ?= PUID=$(UID) PGID=$(GID) TZ=$(TZ)
|
|
||||||
|
|
||||||
DOCKER_COMPOSE_COMMAND ?= $(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) $(PROFILE_CMD)
|
|
||||||
|
|
||||||
.PHONY: build all
|
|
||||||
all: start
|
|
||||||
|
|
||||||
GENERIC_TARGETS := build down up run config logs pull images start restart stop
|
|
||||||
|
|
||||||
.PHONY: $(GENERIC_TARGETS)
|
|
||||||
$(GENERIC_TARGETS):
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) $@
|
|
||||||
|
|
||||||
.PHONY: start-detached
|
|
||||||
start-detached:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) up -d
|
|
||||||
|
|
||||||
.PHONY: no-start
|
|
||||||
no-start:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) up --no-start
|
|
||||||
|
|
||||||
.PHONY: state
|
|
||||||
state:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) ps
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) top
|
|
||||||
|
|
||||||
.PHONY: volumes
|
|
||||||
volumes:
|
|
||||||
$(DOCKER_COMPOSE_COMMAND) config --volumes
|
|
||||||
|
|
||||||
.PHONY: git-update
|
|
||||||
git-update:
|
|
||||||
# git submodule update --init --recursive --remote
|
|
||||||
git pull --recurse-submodules --all --progress
|
|
||||||
|
|
||||||
.PHONY: update
|
|
||||||
update: git-update
|
|
||||||
|
|
||||||
.PHONY: clean
|
|
||||||
clean:
|
|
||||||
$(ENV_ARG_VAR) $(DOCKER_EXEC) system prune -f
|
|
||||||
|
|
||||||
.PHONY: purge
|
|
||||||
purge:
|
|
||||||
$(ENV_ARG_VAR) $(DOCKER_EXEC) compose $(COMPOSE_DIR) $(COMPOSE_FILES) down -v --rmi all
|
|
||||||
@@ -1,8 +1,15 @@
|
|||||||
#//////////////////////////////////////////////////////////////
|
#//////////////////////////////////////////////////////////////
|
||||||
|
#// ____ //
|
||||||
|
#// | __ ) ___ _ __ ___ _ _ _ __ ___ _ __ _ __ ___ //
|
||||||
|
#// | _ \ / _ \ '_ \/ __| | | | '_ \ / _ \ '__| '_ \ / __| //
|
||||||
|
#// | |_) | __/ | | \__ \ |_| | |_) | __/ | | |_) | (__ //
|
||||||
|
#// |____/ \___|_| |_|___/\__,_| .__/ \___|_| | .__/ \___| //
|
||||||
|
#// |_| |_| //
|
||||||
|
#//////////////////////////////////////////////////////////////
|
||||||
#// //
|
#// //
|
||||||
#// Script, 2022 //
|
#// Script, 2022 //
|
||||||
#// Created: 14, April, 2022 //
|
#// Created: 14, April, 2022 //
|
||||||
#// Modified: 30, November, 2024 //
|
#// Modified: 17, March, 2023 //
|
||||||
#// file: - //
|
#// file: - //
|
||||||
#// - //
|
#// - //
|
||||||
#// Source: //
|
#// Source: //
|
||||||
@@ -11,21 +18,63 @@
|
|||||||
#// //
|
#// //
|
||||||
#//////////////////////////////////////////////////////////////
|
#//////////////////////////////////////////////////////////////
|
||||||
|
|
||||||
#ADMIN_SERVICES := openssh
|
DOCKER := docker
|
||||||
# uptime-kuma
|
|
||||||
#BLOG_SERVICES := wordpress
|
|
||||||
#IA_SERVICES := open-webui
|
|
||||||
#SHARING_SERVICES := privatebin
|
|
||||||
# jellyfin
|
|
||||||
# psitransfer picoshare projectsend dufs syncthing
|
|
||||||
#UTILS_SERVICES := it-tools omni-tools cyberchef
|
|
||||||
# homepage
|
|
||||||
# stirlingpdf
|
|
||||||
|
|
||||||
PROJECT_DIRECTORY := infrastructure
|
PROFILES := wp_db wordpress webserver certbot phpmyadmin qbittorrent jellyfin
|
||||||
CONFIG_DIRECTORY := presets
|
PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
|
||||||
# 7dtd minecraft satisfactory torrent
|
|
||||||
CONFIGS := chatgpt
|
|
||||||
#DOCKER_PROFILES :=
|
|
||||||
|
|
||||||
include DockerCompose.mk
|
|
||||||
|
COMPOSE_FILES := $(shell find docker-compose* | sed -e 's/^/--file /')
|
||||||
|
|
||||||
|
AUTHOR := bensuperpc
|
||||||
|
|
||||||
|
.PHONY: build all
|
||||||
|
all: start
|
||||||
|
|
||||||
|
.PHONY: build
|
||||||
|
build:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) build
|
||||||
|
|
||||||
|
.PHONY: start
|
||||||
|
start:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) up -d
|
||||||
|
|
||||||
|
.PHONY: start-at
|
||||||
|
start-at:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) up
|
||||||
|
|
||||||
|
.PHONY: docker-check
|
||||||
|
docker-check:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILES_CMD) config
|
||||||
|
|
||||||
|
.PHONY: stop
|
||||||
|
stop: down
|
||||||
|
|
||||||
|
.PHONY: down
|
||||||
|
down:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) down
|
||||||
|
|
||||||
|
.PHONY: restart
|
||||||
|
restart: stop start
|
||||||
|
|
||||||
|
.PHONY: logs
|
||||||
|
logs:
|
||||||
|
docker compose $(COMPOSE_FILES) logs
|
||||||
|
|
||||||
|
.PHONY: state
|
||||||
|
state:
|
||||||
|
docker compose $(COMPOSE_FILES) ps
|
||||||
|
docker compose $(COMPOSE_FILES) top
|
||||||
|
|
||||||
|
.PHONY: update
|
||||||
|
update:
|
||||||
|
git pull --recurse-submodules --all --progress
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILES_CMD) pull
|
||||||
|
|
||||||
|
.PHONY: clean
|
||||||
|
clean:
|
||||||
|
$(DOCKER) images --filter=reference='bensuperpc/*' --format='{{.Repository}}:{{.Tag}}' | xargs -r $(DOCKER) rmi -f
|
||||||
|
|
||||||
|
.PHONY: purge
|
||||||
|
purge:
|
||||||
|
docker compose $(COMPOSE_FILES) $(PROFILE_CMD) down -v --rmi all
|
||||||
@@ -1,41 +1,31 @@
|
|||||||
# Infrastructure
|
# Infrastructure
|
||||||
|
|
||||||
_Open source, decentralized and self-hosted infrastructure for many local services and authentication with Authelia._
|
_My personal infrastructure for my servers and services._
|
||||||
|
|
||||||
|
## About
|
||||||
|
|
||||||
|
This is my infrastructure. It's a collection of scripts and configuration files that I use to manage my servers and services.
|
||||||
|
It uses Nginx and docker-compose to run my services (And many other things).
|
||||||
|
It's a **work in progress**, and I'm still learning a lot about it.
|
||||||
|
If you have any **questions** or **suggestions**, feel free to open an issue or a pull request.
|
||||||
|
|
||||||
## Features
|
## Features
|
||||||
|
|
||||||
- [x] caddy 2 HTTP/S reverse proxy
|
- [x] Nginx reverse proxy
|
||||||
- [x] Authelia (SSO / authentication middleware)
|
|
||||||
- [x] Open-WebUI + Ollama (Local chatGPT)
|
|
||||||
- [x] qbittorrent and transmission (Torrent client/server)
|
|
||||||
- [x] Docker / docker-compose
|
- [x] Docker / docker-compose
|
||||||
- [x] Homepage (Dashboard)
|
- [x] Letsencrypt / Certbot
|
||||||
- [x] SearXNG (Self-hosted search engine)
|
- [x] Wordpress (Via FASTCGI/NGINX)
|
||||||
- [x] Jellyfin (Eg Netflix, Disney+)
|
- [x] PHPMyAdmin (MariaDB)
|
||||||
- [x] Forgejo (Git server, fork of Gitea)
|
- [x] PGAdmin (PostgreSQL)
|
||||||
- [x] Uptime Kuma (Monitoring)
|
- [x] Qbittorrent
|
||||||
- [x] Argus (Application update monitoring)
|
- [x] Jellyfin
|
||||||
- [x] SyncThing (File synchronization)
|
- [ ] Gitea
|
||||||
- [x] Dufs (File server)
|
- [ ] Mastodon
|
||||||
- [x] PsiTransfer, ProjectSend, Picoshare (File sharing)
|
- [ ] Minecraft server (Hyperworld v2)
|
||||||
- [x] it-tools, omni-tools and cyberchef (Tools for IT)
|
- [ ] SSL for all subdomains / Services (Not just the main domain)
|
||||||
- [x] Privatebin
|
|
||||||
- [x] Memos (Note-taking)
|
|
||||||
- [x] Stirling PDF (PDF tools)
|
|
||||||
- [x] Wordpress (Via FASTCGI/caddy)
|
|
||||||
- [x] Dependency-Track (SBOM / vulnerability tracking)
|
|
||||||
- [X] Game (Satisfactory, Minecraft, 7 Days to Die, Team Fortress 2 etc...)
|
|
||||||
|
|
||||||
## Architecture
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Screenshots
|
## Screenshots
|
||||||
|
|
||||||
The homepage is a dashboard with many widgets and services.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Installation and configuration
|
## Installation and configuration
|
||||||
|
|
||||||
### Requirements
|
### Requirements
|
||||||
@@ -44,28 +34,7 @@ The homepage is a dashboard with many widgets and services.
|
|||||||
- [Docker Compose](https://docs.docker.com/compose/install/)
|
- [Docker Compose](https://docs.docker.com/compose/install/)
|
||||||
- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
|
- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
|
||||||
- [Web domain](https://www.ovh.com/world/domains/) (I use OVH)
|
- [Web domain](https://www.ovh.com/world/domains/) (I use OVH)
|
||||||
- [Open port 80, 443, 22 and 2222 on your router](http://192.168.1.1/)
|
- [Open port 80 and 443 on your router](http://192.168.0.1/) (I use a Orange box with default IP)
|
||||||
- For games server, you need to open these ports (7777, 8888, 25565, 26900, 26901, 26903)
|
|
||||||
|
|
||||||
List of ports used by the services in this infrastructure:
|
|
||||||
|
|
||||||
| Port number | Service | Description |
|
|
||||||
| ----------- | ------------- | ----------------- |
|
|
||||||
| 80 | Caddy | HTTP traffic |
|
|
||||||
| 443 | Caddy | HTTPS traffic |
|
|
||||||
| 22 | Forgejo | Git/SSH access |
|
|
||||||
| 2222 | OpenSSH | Global SSH access |
|
|
||||||
| 7777 | Satisfactory | Game server port |
|
|
||||||
| 8888 | Satisfactory | Game server port |
|
|
||||||
| 25565 | Minecraft | Game server port |
|
|
||||||
| 8100 | Bluemap Minecraft | Web map port |
|
|
||||||
| 26900 | 7 Days to Die | Game server port |
|
|
||||||
| 26901 | 7 Days to Die | Game server port |
|
|
||||||
| 26903 | 7 Days to Die | Game server port |
|
|
||||||
| 27015 | Team Fortress 2 | Game server port |
|
|
||||||
|
|
||||||
|
|
||||||
**To avoid get rate limit from letsencrypt (10 certificates per 3 hours), you need to disable some certificates in the caddyfiles and enable them 3h later...**
|
|
||||||
|
|
||||||
### Clone
|
### Clone
|
||||||
|
|
||||||
@@ -81,379 +50,130 @@ Go to the folder
|
|||||||
cd infrastructure
|
cd infrastructure
|
||||||
```
|
```
|
||||||
|
|
||||||
|
### Get the SSL certificate
|
||||||
|
|
||||||
|
For all **bensuperpc.org**, you need to replace it with your domain, example: **bensuperpc.com**
|
||||||
|
|
||||||
|
```sh
|
||||||
|
find . \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i 's/bensuperpc.org/bensuperpc.com/g'
|
||||||
|
```
|
||||||
|
|
||||||
|
Keep original config file
|
||||||
|
|
||||||
|
```sh
|
||||||
|
cp -r nginx/conf.d nginx/conf.d-original
|
||||||
|
```
|
||||||
|
|
||||||
|
Remove the old config file
|
||||||
|
|
||||||
|
```sh
|
||||||
|
rm -fr nginx/nginx-conf
|
||||||
|
```
|
||||||
|
|
||||||
|
Copy _nginx-conf-cert_ to _nginx-conf_, for temporary use to get the SSL certificate
|
||||||
|
|
||||||
|
```sh
|
||||||
|
cp -r nginx/conf.d-cert nginx/conf.d
|
||||||
|
```
|
||||||
|
|
||||||
|
Replace certbot commands in _docker-compose.yml_, and replace _bensuperpc.org_ by your domain
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
command: >
|
||||||
|
certonly --email bensuperpc@bensuperpc.fr --agree-tos --rsa-key-size 4096 --no-eff-email --verbose --noninteractive --keep-until-expiring --webroot
|
||||||
|
--webroot-path=/var/www/wordpress --domain bensuperpc.org --domain www.bensuperpc.org
|
||||||
|
--webroot-path=/var/www/jellyfin --domain jellyfin.bensuperpc.org --domain www.jellyfin.bensuperpc.org
|
||||||
|
```
|
||||||
|
|
||||||
|
With to get the SSL certificate
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
command: >
|
||||||
|
certonly --email bensuperpc@bensuperpc.fr --agree-tos --rsa-key-size 4096 --no-eff-email --verbose --noninteractive --staging --webroot
|
||||||
|
--webroot-path=/var/www/wordpress --domain bensuperpc.org --domain www.bensuperpc.org
|
||||||
|
--webroot-path=/var/www/jellyfin --domain jellyfin.bensuperpc.org --domain www.jellyfin.bensuperpc.org
|
||||||
|
```
|
||||||
|
|
||||||
|
Run the docker-compose and exit with CTRL+C and when you have the SSL certificate
|
||||||
|
|
||||||
|
```sh
|
||||||
|
make start-at
|
||||||
|
```
|
||||||
|
|
||||||
|
Replace certbot commands in _docker-compose.yml_ to update and renew the SSL certificate
|
||||||
|
|
||||||
|
```sh
|
||||||
|
command: >
|
||||||
|
certonly --email bensuperpc@bensuperpc.fr --agree-tos --rsa-key-size 4096 --no-eff-email --verbose --noninteractive --force-renewal --webroot
|
||||||
|
--webroot-path=/var/www/wordpress --domain bensuperpc.org --domain www.bensuperpc.org
|
||||||
|
--webroot-path=/var/www/jellyfin --domain jellyfin.bensuperpc.org --domain www.jellyfin.bensuperpc.org
|
||||||
|
```
|
||||||
|
|
||||||
|
Run the docker-compose to update and renew the SSL certificate and exit with CTRL+C when you have the SSL certificate
|
||||||
|
|
||||||
|
```sh
|
||||||
|
make start-at
|
||||||
|
```
|
||||||
|
|
||||||
|
Now you can replace the certbot commands in _docker-compose.yml_ with the original one
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
command: >
|
||||||
|
certonly --email bensuperpc@bensuperpc.fr --agree-tos --rsa-key-size 4096 --no-eff-email --verbose --noninteractive --keep-until-expiring --webroot
|
||||||
|
--webroot-path=/var/www/wordpress --domain bensuperpc.org --domain www.bensuperpc.org
|
||||||
|
--webroot-path=/var/www/jellyfin --domain jellyfin.bensuperpc.org --domain www.jellyfin.bensuperpc.org
|
||||||
|
```
|
||||||
|
|
||||||
|
Remove the cert config file
|
||||||
|
|
||||||
|
```sh
|
||||||
|
rm -fr nginx/conf.d
|
||||||
|
```
|
||||||
|
|
||||||
|
Copy _nginx-conf-original_ to _nginx-conf_, for definitive use
|
||||||
|
|
||||||
|
```sh
|
||||||
|
cp -r nginx/conf.d-original nginx/conf.d
|
||||||
|
```
|
||||||
|
|
||||||
|
Now you start services
|
||||||
|
|
||||||
|
```sh
|
||||||
|
make start-at
|
||||||
|
```
|
||||||
|
|
||||||
|
### Flask website
|
||||||
|
|
||||||
|
You can follow the [README.md](bensuperpc_website/README.md) to install the Flask website.
|
||||||
|
|
||||||
|
### Wordpress website
|
||||||
|
|
||||||
|
For the Wordpress website, you can configure in GUI when you go to the website.
|
||||||
|
|
||||||
### Start the infrastructure
|
### Start the infrastructure
|
||||||
|
|
||||||
Start the website with:
|
Start the website with:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
make up
|
make start-at
|
||||||
```
|
```
|
||||||
|
|
||||||
Stop the website with:
|
Stop the website with (or CTRL+C with the previous command):
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
make stop
|
make stop
|
||||||
```
|
```
|
||||||
|
|
||||||
Remove containers with:
|
## URL
|
||||||
|
|
||||||
```sh
|
You can access to the website with:
|
||||||
make down
|
|
||||||
```
|
|
||||||
|
|
||||||
Services are enabled via **preset configuration files** in the [`presets/`](presets/) directory.
|
- [bensuperpc.org](https://bensuperpc.org) and [www.bensuperpc.org](https://www.bensuperpc.org) (Wordpress for now)
|
||||||
|
- [phpmyadmin.bensuperpc.org](http://phpmyadmin.bensuperpc.org) and [www.phpmyadmin.bensuperpc.org](http://www.phpmyadmin.bensuperpc.org) (PHPMyAdmin for MariaDB)
|
||||||
|
- [pgadmin.bensuperpc.org](http://pgadmin.bensuperpc.org) and [www.pgadmin.bensuperpc.org](http://www.pgadmin.bensuperpc.org) (PGAdmin for PostgreSQL)
|
||||||
|
- [qbittorrent.bensuperpc.org](http://qbittorrent.bensuperpc.org) and [www.qbittorrent.bensuperpc.org](http://www.qbittorrent.bensuperpc.org) (Qbittorrent)
|
||||||
|
|
||||||
The active presets are declared in the [`Makefile`](Makefile) via the `CONFIGS` variable, for example, `CONFIGS := chatgpt` loads `presets/chatgpt.conf` which activates the `main_infrastructure`, `caddy`, `openssh`, and `openwebui` profiles.
|
## Build with
|
||||||
|
|
||||||
### Configure the domain
|
|
||||||
|
|
||||||
For all **bensuperpc.org**, you need to replace it with your domain, example: **mydomain.com**, so the same for **bensuperpc.com** ect...
|
|
||||||
|
|
||||||
```sh
|
|
||||||
find . \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i 's/bensuperpc.org/mydomain.com/g'
|
|
||||||
```
|
|
||||||
|
|
||||||
Check if all bensuperpc.* are replaced by your domain in [Caddyfile](infrastructure/services/caddy/config/Caddyfile)
|
|
||||||
|
|
||||||
And then, caddy will generate the certificate for you and renew it automatically :D
|
|
||||||
|
|
||||||
| Domain name | Type | Description |
|
|
||||||
| ------------------------------------------------------------------ | ---- | ------------------------------------------------------------ |
|
|
||||||
| [bensuperpc.org](https://bensuperpc.org) | Main | Redirect to [www.bensuperpc.org](https://www.bensuperpc.org) |
|
|
||||||
| [www.bensuperpc.org](https://www.bensuperpc.org) | Main | Homepage |
|
|
||||||
| [openwebui.bensuperpc.org](https://openwebui.bensuperpc.org) | Sub | For local chatGPT with ollama and openweb-ui |
|
|
||||||
| [authelia.bensuperpc.org](https://authelia.bensuperpc.org) | Sub | Authelia for authentication |
|
|
||||||
| [uptimekuma.bensuperpc.org](https://uptimekuma.bensuperpc.org) | Sub | Uptime Kuma for monitoring |
|
|
||||||
| [qbittorrent.bensuperpc.org](https://qbittorrent.bensuperpc.org) | Sub | Torrent client/server |
|
|
||||||
| [dozzle.bensuperpc.org](https://dozzle.bensuperpc.org) | Sub | Dozzle for docker logs |
|
|
||||||
| [transmission.bensuperpc.org](https://transmission.bensuperpc.org) | Sub | Torrent client/server |
|
|
||||||
| [forgejo.bensuperpc.org](https://forgejo.bensuperpc.org/) | Sub | Fork of Gitea for git |
|
|
||||||
| [git.bensuperpc.org](https://git.bensuperpc.org) | Sub | Fork of Gitea for git |
|
|
||||||
| [jellyfin.bensuperpc.org](https://jellyfin.bensuperpc.org) | Sub | Jellyfin for media server |
|
|
||||||
| [syncthing.bensuperpc.org](https://syncthing.bensuperpc.org) | Sub | SyncThing for file synchronization |
|
|
||||||
| [psitransfer.bensuperpc.org](https://psitransfer.bensuperpc.org) | Sub | PsiTransfer for file sharing |
|
|
||||||
| [it-tools.bensuperpc.org](https://it-tools.bensuperpc.org) | Sub | Tools for IT |
|
|
||||||
| [omni-tools.bensuperpc.org](https://omni-tools.bensuperpc.org) | Sub | Tools for IT |
|
|
||||||
| [privatebin.bensuperpc.org](https://privatebin.bensuperpc.org) | Sub | Privatebin |
|
|
||||||
| [projectsend.bensuperpc.org](https://projectsend.bensuperpc.org) | Sub | ProjectSend for file sharing |
|
|
||||||
| [picoshare.bensuperpc.org](https://picoshare.bensuperpc.org) | Sub | Picoshare for file sharing |
|
|
||||||
| [dufs.bensuperpc.org](https://dufs.bensuperpc.org) | Sub | Dufs for file sharing |
|
|
||||||
| [memos.bensuperpc.org](https://memos.bensuperpc.org) | Sub | Memos note-taking app |
|
|
||||||
| [stirlingpdf.bensuperpc.org](https://stirlingpdf.bensuperpc.org) | Sub | Stirling PDF tools |
|
|
||||||
| [argus.bensuperpc.org](https://argus.bensuperpc.org) | Sub | Argus for monitoring application updates |
|
|
||||||
| [searxng.bensuperpc.org](https://searxng.bensuperpc.org) | Sub | SearXNG self-hosted search engine |
|
|
||||||
| [dependency-track.bensuperpc.org](https://dependency-track.bensuperpc.org) | Sub | SBOM / vulnerability analysis |
|
|
||||||
| [wordpress.bensuperpc.org](https://wordpress.bensuperpc.org) | Sub | Wordpress website |
|
|
||||||
|
|
||||||
### Configure the infrastructure
|
|
||||||
|
|
||||||
You need to configure the infrastructure with your own configuration.
|
|
||||||
|
|
||||||
You can generate a password with 32 characters:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
openssl rand -base64 32
|
|
||||||
```
|
|
||||||
|
|
||||||
Or online: [passwordsgenerator.net](https://passwordsgenerator.net/)
|
|
||||||
|
|
||||||
#### Caddy
|
|
||||||
|
|
||||||
For [caddy_backup.env](infrastructure/services/caddy/env/caddy_backup.env) file, you need to change the password(s) for the restic backup.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
|
||||||
```
|
|
||||||
|
|
||||||
On [caddy.env](infrastructure/services/caddy/env/caddy.env) file, you need to update some variables, like the main domain, mail domain and scheme (http or https).
|
|
||||||
|
|
||||||
```sh
|
|
||||||
MAIN_DOMAIN=bensuperpc.org
|
|
||||||
MAIL_DOMAIN=bensuperpc@gmail.com
|
|
||||||
# Scheme
|
|
||||||
SCHEME=https
|
|
||||||
# ignore_loaded_certs off
|
|
||||||
AUTO_HTTPS_OPTIONS=ignore_loaded_certs
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Authelia
|
|
||||||
|
|
||||||
For [authelia.env](infrastructure/services/authelia/env/authelia.env) file, you need to change the password(s) and secret key:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET=ht87MVnXkXhBpDkMUHqKDqdg8UGBJt+Fx5jNIqXnN2k=
|
|
||||||
AUTHELIA_SESSION_SECRET=nsvbXKGRXVZUCUkOapntlq/Zh+d75WacTK5Jgyh8zYk=
|
|
||||||
AUTHELIA_STORAGE_ENCRYPTION_KEY=aWeIT74xIhGVd9nUOr4YTToTl5rpBEbzc/fv4jemuos=
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_HOST=authelia-postgres
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_PORT=5432
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_DATABASE=authelia_db
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_USERNAME=authelia
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_PASSWORD=sAdkxFW6k3GiMOrlBpl6OV76eb9cQz/uk95jmA2UpI8=
|
|
||||||
```
|
|
||||||
|
|
||||||
Same for [authelia_postgres.env](infrastructure/services/authelia/env/authelia_postgres.env) file, you need to change the password(s) and user for the database.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
POSTGRES_USER=authelia
|
|
||||||
POSTGRES_PASSWORD=sAdkxFW6k3GiMOrlBpl6OV76eb9cQz/uk95jmA2UpI8=
|
|
||||||
POSTGRES_DB=authelia_db
|
|
||||||
```
|
|
||||||
|
|
||||||
You also need to update [users_database.yml](infrastructure/services/authelia/config/users_database.yml)
|
|
||||||
|
|
||||||
```sh
|
|
||||||
docker run --rm authelia/authelia:latest authelia crypto hash generate argon2 --password 'MyPassword'
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Dozzle
|
|
||||||
|
|
||||||
To generate a new user for dozzle, you can use the following command [users.yml](infrastructure/services/dozzle/config/users.yml):
|
|
||||||
|
|
||||||
```sh
|
|
||||||
docker run -it --rm amir20/dozzle generate bensuperpc --password mypassword --email bensuperpc@gmail.com --name "bensuperpc"
|
|
||||||
```
|
|
||||||
|
|
||||||
#### PsiTransfer
|
|
||||||
|
|
||||||
For [psitransfer.env](infrastructure/services/psitransfer/env/psitransfer.env) file, you need to change the secret key.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
|
|
||||||
```
|
|
||||||
|
|
||||||
For [projectsend_db.env](infrastructure/services/projectsend/env/projectsend_db.env) file, you need to change the password(s) and user for the database.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
MARIADB_ROOT_PASSWORD=8O34297GrBfT3Ld34Lfg9mpotmZwbJtt
|
|
||||||
MARIADB_USER=bensuperpc
|
|
||||||
MARIADB_PASSWORD=wdSUa1JEZhXie5AJ5NcX1w73xmpO12EY
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Picoshare
|
|
||||||
|
|
||||||
For [picoshare.env](infrastructure/services/picoshare/env/picoshare.env) file, you need to change the secret key.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
PS_SHARED_SECRET=CBuS4DJLqIe93xF1KGYRrnhxUFBqLD2n
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Dufs
|
|
||||||
|
|
||||||
For [dufs.env](infrastructure/services/dufs/env/dufs.env) file, you need to change the secret key and if you want the user name.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/:ro"
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Stirling PDF
|
|
||||||
|
|
||||||
For [stirlingpdf.env](infrastructure/services/stirlingpdf/env/stirlingpdf.env) file, it's **completly optional**, you can change the password(s) and user.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
# Enable security, optional
|
|
||||||
DOCKER_ENABLE_SECURITY=true
|
|
||||||
SECURITY_ENABLE_LOGIN=true
|
|
||||||
# Can be disabled after initial login, optional,
|
|
||||||
# default it admin:stirling
|
|
||||||
SECURITY_INITIALLOGIN_USERNAME=admin
|
|
||||||
SECURITY_INITIALLOGIN_PASSWORD=Jw9U039f5xc2mFcacvGvPD9RjwIh4DzO
|
|
||||||
```
|
|
||||||
|
|
||||||
#### OpenSSH
|
|
||||||
|
|
||||||
You can need to add/change the public ssh key [id_ed25519.pub](infrastructure/services/openssh/config/authorized_keys/id_ed25519.pub) (its my public key), also change the config/password in [openssh.env](infrastructure/services/openssh/env/openssh.env):
|
|
||||||
|
|
||||||
```sh
|
|
||||||
SUDO_ACCESS=true
|
|
||||||
#PUBLIC_KEY_URL=https://github.com/bensuperpc.keys
|
|
||||||
PUBLIC_KEY_DIR=/authorized_ssh_keys
|
|
||||||
USER_PASSWORD=rdUwf36C11PLmpU9Lvq7tP5pfFBKAuCh
|
|
||||||
|
|
||||||
#PUBLIC_KEY=yourpublickey
|
|
||||||
#PUBLIC_KEY_FILE=/path/to/file
|
|
||||||
#PUBLIC_KEY_DIR=/path/to/directory/containing/_only_/pubkeys
|
|
||||||
#USER_PASSWORD_FILE=/path/to/file
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Open-WebUI
|
|
||||||
|
|
||||||
For [open-webui.env](infrastructure/services/open-webui/env/open-webui.env) file, you must change the secret key for the webui and configure its PostgreSQL backend.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
WEBUI_SECRET_KEY=7d83b15a417d090ba5c6b899270a05dd215c60848354c0c7574226d6ff02f39e
|
|
||||||
```
|
|
||||||
|
|
||||||
Also update [openwebui-postgres.env](infrastructure/services/open-webui/env/openwebui-postgres.env) with your own credentials.
|
|
||||||
|
|
||||||
To download the model, through open-webui GUI or you can use the following command:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
docker exec -it ollama ollama run deepseek-r1:8b
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Dependency-Track
|
|
||||||
|
|
||||||
For [dependency-track.env](infrastructure/services/dependency-track/env/dependency-track.env) file, you need to set the database credentials and the API server URL.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
POSTGRES_USER=dtrack
|
|
||||||
POSTGRES_PASSWORD=<your_password>
|
|
||||||
POSTGRES_DB=dtrack_db
|
|
||||||
ALPINE_DATA_DIRECTORY=/data
|
|
||||||
```
|
|
||||||
|
|
||||||
The frontend is available at `https://dependency-track.bensuperpc.org` and the API server at `/api/*`. Default credentials are `admin` / `admin`, **change them on first login**.
|
|
||||||
|
|
||||||
### Homepage
|
|
||||||
|
|
||||||
You can change the homepage config in these files:
|
|
||||||
|
|
||||||
- [bookmarks.yaml](infrastructure/services/homepage/config/bookmarks.yaml)
|
|
||||||
- [services.yaml](infrastructure/services/homepage/config/services.yaml)
|
|
||||||
- [settings.yaml](infrastructure/services/homepage/config/settings.yaml)
|
|
||||||
- [widgets.yaml](infrastructure/services/homepage/config/widgets.yaml)
|
|
||||||
|
|
||||||
### Forgejo
|
|
||||||
|
|
||||||
For Forgejo installation, you must change the password(s) and user in [forgejo_db.env](infrastructure/services/forgejo/env/forgejo_db.env) file and [forgejo.env](infrastructure/services/forgejo/env/forgejo.env) file.
|
|
||||||
|
|
||||||
Once the installation is complete, you need to set the installation lock:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
FORGEJO__security__INSTALL_LOCK=true
|
|
||||||
```
|
|
||||||
|
|
||||||
### Forgejo Runner (Out of date)
|
|
||||||
|
|
||||||
```sh
|
|
||||||
docker exec -it forgejo_runner /bin/bash
|
|
||||||
```
|
|
||||||
|
|
||||||
```sh
|
|
||||||
forgejo-runner generate-config > /data/config.yml
|
|
||||||
```
|
|
||||||
|
|
||||||
Now update the config.yml file to support docker-in-docker:
|
|
||||||
|
|
||||||
```yml
|
|
||||||
envs:
|
|
||||||
DOCKER_TLS_VERIFY: 1
|
|
||||||
DOCKER_CERT_PATH: /certs/client
|
|
||||||
DOCKER_HOST: tcp://docker:2376
|
|
||||||
labels: ["ubuntu-latest:docker://node:20-bookworm", "ubuntu-22.04:docker://node:20-bookworm"]
|
|
||||||
network: host
|
|
||||||
options: -v /certs/client:/certs/client
|
|
||||||
valid_volumes:
|
|
||||||
- /certs/client
|
|
||||||
```
|
|
||||||
|
|
||||||
Register the runner with your Forgejo instance:
|
|
||||||
|
|
||||||
|
|
||||||
```sh
|
|
||||||
forgejo-runner register
|
|
||||||
```
|
|
||||||
|
|
||||||
You will need to provide the following information:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
https://forgejo.bensuperpc.org/
|
|
||||||
<Your Registration Token, in https://forgejo.bensuperpc.org/admin/actions/runners>
|
|
||||||
ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04
|
|
||||||
main
|
|
||||||
```
|
|
||||||
|
|
||||||
### Docker volumes
|
|
||||||
|
|
||||||
This infrastructure uses docker volumes to store data, all configuration/data for each service are not shared between services for security and maintenance reasons, but **public_data** and **private_data** are shared between all services to store your data.
|
|
||||||
|
|
||||||
| Volume name | Description |
|
|
||||||
| ------------ | ---------------------------------------------------------------------------------------------------------- |
|
|
||||||
| public_data | Public data reachable on internet via [dufs.bensuperpc.org](https://dufs.bensuperpc.org), can be disabled. |
|
|
||||||
| private_data | Private data |
|
|
||||||
|
|
||||||
### SSH access
|
|
||||||
|
|
||||||
The default port for SSH/rsync is 2222.
|
|
||||||
|
|
||||||
You can access to the server with:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
ssh -p 2222 admin@bensuperpc.org
|
|
||||||
```
|
|
||||||
|
|
||||||
### Qbittorrent
|
|
||||||
|
|
||||||
To activate the alternative webui theme (VueTorrent), you need to go in the qbittorrent settings, then in the `webui` section, check the `Use alternative webui` and add `/vuetorrent` to text field.
|
|
||||||
|
|
||||||
|
|
||||||
### Local testing
|
|
||||||
|
|
||||||
If you want to test the infrastructure locally, you can add these lines in your `/etc/hosts` file:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
127.0.0.1 openwebui.bensuperpc.org
|
|
||||||
127.0.0.1 authelia.bensuperpc.org
|
|
||||||
127.0.0.1 memos.bensuperpc.org
|
|
||||||
127.0.0.1 stirlingpdf.bensuperpc.org
|
|
||||||
127.0.0.1 public.bensuperpc.org
|
|
||||||
127.0.0.1 private.bensuperpc.org
|
|
||||||
127.0.0.1 jellyfin.bensuperpc.org
|
|
||||||
127.0.0.1 syncthing.bensuperpc.org
|
|
||||||
127.0.0.1 psitransfer.bensuperpc.org
|
|
||||||
127.0.0.1 projectsend.bensuperpc.org
|
|
||||||
127.0.0.1 picoshare.bensuperpc.org
|
|
||||||
127.0.0.1 dufs.bensuperpc.org
|
|
||||||
127.0.0.1 it-tools.bensuperpc.org
|
|
||||||
127.0.0.1 omni-tools.bensuperpc.org
|
|
||||||
127.0.0.1 privatebin.bensuperpc.org
|
|
||||||
127.0.0.1 forgejo.bensuperpc.org
|
|
||||||
127.0.0.1 git.bensuperpc.org
|
|
||||||
127.0.0.1 qbittorrent.bensuperpc.org
|
|
||||||
127.0.0.1 transmission.bensuperpc.org
|
|
||||||
127.0.0.1 uptimekuma.bensuperpc.org
|
|
||||||
127.0.0.1 wordpress.bensuperpc.org
|
|
||||||
127.0.0.1 searxng.bensuperpc.org
|
|
||||||
127.0.0.1 dependency-track.bensuperpc.org
|
|
||||||
127.0.0.1 homepage.bensuperpc.org
|
|
||||||
```
|
|
||||||
|
|
||||||
Then update the [caddy.env](infrastructure/services/caddy/env/caddy.env) file with your local domain to disable the letsencrypt certificate generation and auto redirect to https:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
MAIN_DOMAIN=bensuperpc.org
|
|
||||||
# Scheme
|
|
||||||
SCHEME=https
|
|
||||||
# ignore_loaded_certs off
|
|
||||||
AUTO_HTTPS_OPTIONS=ignore_loaded_certs
|
|
||||||
```
|
|
||||||
|
|
||||||
And remove all the `import authelia_middleware` in the caddyfiles, authelia need https to work.
|
|
||||||
|
|
||||||
#### Wordpress
|
|
||||||
|
|
||||||
For the [wordpress.env](infrastructure/services/wordpress/env/wordpress.env) file, you need to change the password and user for the database.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
WORDPRESS_DB_USER=bensuperpc
|
|
||||||
WORDPRESS_DB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
|
||||||
```
|
|
||||||
|
|
||||||
For [wordpress_db.env](infrastructure/services/wordpress/env/wordpress_db.env) file, you need to change the password(s) and user for the database.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
MARIADB_ROOT_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
|
||||||
MARIADB_USER=bensuperpc
|
|
||||||
MARIADB_PASSWORD=lEOEf8cndnDjp84O4Uv5D9zJLJDFatLw
|
|
||||||
```
|
|
||||||
|
|
||||||
For [wordpress_backup.env](infrastructure/services/wordpress/env/wordpress_backup.env) file, you need to change the password(s) for the restic backup.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
|
||||||
```
|
|
||||||
|
|
||||||
## Sources
|
|
||||||
|
|
||||||
- [Wordpress](https://wordpress.org/)
|
- [Wordpress](https://wordpress.org/)
|
||||||
- [Gnu Make](https://www.gnu.org/software/make/)
|
- [Gnu Make](https://www.gnu.org/software/make/)
|
||||||
@@ -462,39 +182,15 @@ RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
|
|||||||
- [Docker](https://www.docker.com/)
|
- [Docker](https://www.docker.com/)
|
||||||
- [Docker Compose](https://docs.docker.com/compose/)
|
- [Docker Compose](https://docs.docker.com/compose/)
|
||||||
- [Docker Hub](https://hub.docker.com/)
|
- [Docker Hub](https://hub.docker.com/)
|
||||||
- [How To Start WordPress with Caddy using Docker Compose](https://minhcung.me/how-to-start-wordpress-with-caddy-using-docker-compose-3d31bb9ef88b)
|
- [Digital Ocean](https://www.digitalocean.com/)
|
||||||
- [Digital Ocean - How To Install WordPress with Docker Compose (nginx)](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-docker-compose)
|
- [Digital Ocean - How To Install WordPress with Docker Compose](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-docker-compose)
|
||||||
- [Imagisphe](https://imagisphe.re/)
|
- [PGAmin](https://www.pgadmin.org/)
|
||||||
- [Letsencrypt](https://letsencrypt.org/)
|
- [Qbittorrent](https://www.qbittorrent.org/)
|
||||||
- [Caddy](https://caddyserver.com/)
|
|
||||||
- [Adminer](https://www.adminer.org/)
|
|
||||||
- [self-hosted-ai-stack](https://triedandtestedbuilds.com/self-hosted-ai-stack-part-1)
|
|
||||||
- [Uptime Kuma](https://uptime-kuma.com/)
|
|
||||||
- [qbittorrent](https://www.qbittorrent.org/)
|
|
||||||
- [Transmission](https://transmissionbt.com/)
|
|
||||||
- [Gitea](https://gitea.io/)
|
|
||||||
- [Jellyfin](https://jellyfin.org/)
|
- [Jellyfin](https://jellyfin.org/)
|
||||||
- [SyncThing](https://syncthing.net/)
|
- [Letsencrypt](https://letsencrypt.org/)
|
||||||
- [PsiTransfer](https://psitransfer.com/)
|
- [Certbot](https://certbot.eff.org/)
|
||||||
- [It-tools](https://github.com/CorentinTh/it-tools)
|
- [Nginx](https://www.nginx.com/)
|
||||||
- [Omni-tools](https://github.com/iib0011/omni-tools)
|
- [UWSGI](https://uwsgi-docs.readthedocs.io/en/latest/)
|
||||||
- [Privatebin](https://github.com/PrivateBin/PrivateBin)
|
|
||||||
- [ghost](https://ghost.org)
|
|
||||||
- [Homepage Tuto](https://belginux.com/installer-homepage-avec-docker/)
|
|
||||||
- [ProjectSend](https://www.projectsend.org/)
|
|
||||||
- [Picoshare](https://github.com/mtlynch/picoshare)
|
|
||||||
- [Dufs](https://github.com/sigoden/dufs)
|
|
||||||
- [demos](https://github.com/usememos/memos)
|
|
||||||
- [Stirling PDF](https://github.com/Stirling-Tools/Stirling-PDF)
|
|
||||||
- [open-webui](https://github.com/open-webui/open-webui)
|
|
||||||
- [Fix docker volume](https://pratikpc.medium.com/use-docker-compose-named-volumes-as-non-root-within-your-containers-1911eb30f731)
|
|
||||||
- [Forgejo-runner](https://code.forgejo.org/forgejo/runner)
|
|
||||||
- [Forgejo-runner](https://huijzer.xyz/posts/55)
|
|
||||||
- [Forgejo](https://nickcunningh.am/blog/how-to-setup-and-configure-forgejo-with-support-for-forgejo-actions-and-more)
|
|
||||||
- [Argus](https://github.com/release-argus/Argus)
|
|
||||||
- [SearXNG](https://github.com/searxng/searxng)
|
|
||||||
- [Dependency-Track](https://dependencytrack.org/)
|
|
||||||
- [Authelia](https://www.authelia.com/)
|
|
||||||
|
|
||||||
## License
|
## License
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,32 @@
|
|||||||
|
version: "3.9"
|
||||||
|
|
||||||
|
services:
|
||||||
|
certbot:
|
||||||
|
depends_on:
|
||||||
|
- webserver
|
||||||
|
image: certbot/certbot:v2.5.0
|
||||||
|
container_name: certbot
|
||||||
|
profiles:
|
||||||
|
- certbot
|
||||||
|
volumes:
|
||||||
|
- certbot-cert:/etc/letsencrypt
|
||||||
|
- wordpress:/var/www/wordpress
|
||||||
|
- jellyfin:/var/www/jellyfin
|
||||||
|
#command: >
|
||||||
|
# certonly --email bensuperpc@bensuperpc.fr --agree-tos --rsa-key-size 4096 --no-eff-email --verbose --noninteractive --staging --webroot
|
||||||
|
# --webroot-path=/var/www/wordpress --domain bensuperpc.org --domain www.bensuperpc.org
|
||||||
|
# --webroot-path=/var/www/jellyfin --domain jellyfin.bensuperpc.org --domain www.jellyfin.bensuperpc.org
|
||||||
|
|
||||||
|
#command: >
|
||||||
|
# certonly --email bensuperpc@bensuperpc.fr --agree-tos --rsa-key-size 4096 --no-eff-email --verbose --noninteractive --force-renewal --webroot
|
||||||
|
# --webroot-path=/var/www/wordpress --domain bensuperpc.org --domain www.bensuperpc.org
|
||||||
|
# --webroot-path=/var/www/jellyfin --domain jellyfin.bensuperpc.org --domain www.jellyfin.bensuperpc.org
|
||||||
|
|
||||||
|
command: >
|
||||||
|
certonly --email bensuperpc@bensuperpc.fr --agree-tos --rsa-key-size 4096 --no-eff-email --verbose --noninteractive --keep-until-expiring --webroot
|
||||||
|
--webroot-path=/var/www/wordpress --domain bensuperpc.org --domain www.bensuperpc.org
|
||||||
|
--webroot-path=/var/www/jellyfin --domain jellyfin.bensuperpc.org --domain www.jellyfin.bensuperpc.org
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
certbot-cert:
|
||||||
|
name: certbot-cert
|
||||||
@@ -0,0 +1,48 @@
|
|||||||
|
version: "3.9"
|
||||||
|
|
||||||
|
services:
|
||||||
|
qbittorrent:
|
||||||
|
image: lscr.io/linuxserver/qbittorrent:latest
|
||||||
|
container_name: qbittorrent
|
||||||
|
profiles:
|
||||||
|
- qbittorrent
|
||||||
|
environment:
|
||||||
|
- PUID=1000
|
||||||
|
- PGID=1000
|
||||||
|
- TZ=Europe/London
|
||||||
|
- WEBUI_PORT=8080
|
||||||
|
volumes:
|
||||||
|
- qbittorrent-conf:/config
|
||||||
|
- qbittorrent-downloads:/downloads
|
||||||
|
#ports:
|
||||||
|
# - 8080:8080
|
||||||
|
# - 6881:6881
|
||||||
|
# - 6881:6881/udp
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- app-network
|
||||||
|
jellyfin:
|
||||||
|
image: lscr.io/linuxserver/jellyfin:latest
|
||||||
|
container_name: jellyfin
|
||||||
|
profiles:
|
||||||
|
- jellyfin
|
||||||
|
environment:
|
||||||
|
- PUID=1000
|
||||||
|
- PGID=1000
|
||||||
|
- TZ=Europe/London
|
||||||
|
- JELLYFIN_PublishedServerUrl=192.168.0.5 #optional
|
||||||
|
volumes:
|
||||||
|
- jellyfin-config:/config
|
||||||
|
- jellyfin-tvseries:/data/tvshows
|
||||||
|
- jellyfin-movies:/data/movies
|
||||||
|
- jellyfin:/var/www/html
|
||||||
|
#ports:
|
||||||
|
# - 8096:8096
|
||||||
|
# - 8920:8920 #optional
|
||||||
|
# - 7359:7359/udp #optional
|
||||||
|
# - 1900:1900/udp #optional
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- app-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
version: "3.9"
|
||||||
|
|
||||||
|
networks:
|
||||||
|
app-network:
|
||||||
|
driver: bridge
|
||||||
|
name: app-network
|
||||||
@@ -0,0 +1,24 @@
|
|||||||
|
version: "3.9"
|
||||||
|
|
||||||
|
services:
|
||||||
|
webserver:
|
||||||
|
depends_on:
|
||||||
|
- wordpress
|
||||||
|
image: nginx:1.24.0
|
||||||
|
container_name: webserver
|
||||||
|
profiles:
|
||||||
|
- webserver
|
||||||
|
restart: unless-stopped
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
volumes:
|
||||||
|
- wordpress:/var/www/wordpress
|
||||||
|
- jellyfin:/var/www/jellyfin
|
||||||
|
- ./nginx/conf.d:/etc/nginx/conf.d:ro
|
||||||
|
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- certbot-cert:/etc/letsencrypt:ro
|
||||||
|
networks:
|
||||||
|
- app-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
@@ -0,0 +1,15 @@
|
|||||||
|
version: "3.9"
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
qbittorrent-downloads:
|
||||||
|
name: qbittorrent-downloads
|
||||||
|
qbittorrent-conf:
|
||||||
|
name: qbittorrent-conf
|
||||||
|
jellyfin-config:
|
||||||
|
name: jellyfin-config
|
||||||
|
jellyfin-tvseries:
|
||||||
|
name: jellyfin-tvseries
|
||||||
|
jellyfin-movies:
|
||||||
|
name: jellyfin-movies
|
||||||
|
jellyfin:
|
||||||
|
name: jellyfin
|
||||||
@@ -0,0 +1,63 @@
|
|||||||
|
version: "3.9"
|
||||||
|
|
||||||
|
services:
|
||||||
|
wp_db:
|
||||||
|
image: mariadb:10.10.3
|
||||||
|
container_name: wp_db
|
||||||
|
profiles:
|
||||||
|
- wp_db
|
||||||
|
restart: unless-stopped
|
||||||
|
env_file:
|
||||||
|
- env/wp_database.env
|
||||||
|
volumes:
|
||||||
|
- dbdata:/var/lib/mysql
|
||||||
|
networks:
|
||||||
|
- app-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
wordpress:
|
||||||
|
depends_on:
|
||||||
|
- wp_db
|
||||||
|
image: wordpress:6.2.0-fpm
|
||||||
|
container_name: wordpress
|
||||||
|
profiles:
|
||||||
|
- wordpress
|
||||||
|
restart: unless-stopped
|
||||||
|
env_file:
|
||||||
|
- env/wordpress.env
|
||||||
|
volumes:
|
||||||
|
- wordpress:/var/www/html
|
||||||
|
networks:
|
||||||
|
- app-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
# cap_drop:
|
||||||
|
# - ALL
|
||||||
|
# cap_add:
|
||||||
|
# - SETUID
|
||||||
|
# - SETGID
|
||||||
|
# - DAC_OVERRIDE
|
||||||
|
# - NET_BIND_SERVICE
|
||||||
|
# - NET_RAW
|
||||||
|
# - CAP_CHOWN
|
||||||
|
phpmyadmin:
|
||||||
|
image: phpmyadmin:5.2.0
|
||||||
|
container_name: phpmyadmin
|
||||||
|
profiles:
|
||||||
|
- phpmyadmin
|
||||||
|
restart: unless-stopped
|
||||||
|
env_file:
|
||||||
|
- env/phpmyadmin.env
|
||||||
|
depends_on:
|
||||||
|
- wp_db
|
||||||
|
networks:
|
||||||
|
- app-network
|
||||||
|
security_opt:
|
||||||
|
- no-new-privileges:true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
wordpress:
|
||||||
|
name: wordpress
|
||||||
|
dbdata:
|
||||||
|
name: dbdata
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
POSTGRES_HOST_AUTH_METHOD=trust
|
||||||
|
POSTGRES_USER=bensuperpc
|
||||||
|
POSTGRES_PASSWORD=nPRh270dKH3hz%6HS2$X%8F3fqoQ*Fex
|
||||||
|
POSTGRES_DB=website
|
||||||
Vendored
+7
@@ -0,0 +1,7 @@
|
|||||||
|
FLASK_DEBUG=1
|
||||||
|
|
||||||
|
# Acces to the database
|
||||||
|
POSTGRES_URL=flask_db:5432
|
||||||
|
POSTGRES_USER=bensuperpc
|
||||||
|
POSTGRES_PW=nPRh270dKH3hz%6HS2$X%8F3fqoQ*Fex
|
||||||
|
POSTGRES_DB=website
|
||||||
Vendored
+3
@@ -0,0 +1,3 @@
|
|||||||
|
PGADMIN_DEFAULT_EMAIL=bensuperpc@bensuperpc.org
|
||||||
|
PGADMIN_DEFAULT_PASSWORD=LmRVf9DY291ez7B^^%2RntHcsCrJ5fQ!
|
||||||
|
#PGADMIN_ENABLE_TLS
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
MYSQL_ROOT_PASSWORD=g1qQWxTXyFXIKpAfbE0h5bxn&prr4zfd
|
||||||
|
MYSQL_USER=bensuperpc
|
||||||
|
MYSQL_PASSWORD=4Xnc7FB7902%*w9PW4y9&anQ5&hQdTzt
|
||||||
|
PMA_HOST=db
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
WORDPRESS_DB_USER=bensuperpc
|
||||||
|
WORDPRESS_DB_PASSWORD=4Xnc7FB7902%*w9PW4y9&anQ5&hQdTzt
|
||||||
|
WORDPRESS_DB_NAME=wordpress
|
||||||
|
WORDPRESS_DB_HOST=wp_db:3306
|
||||||
Vendored
+4
@@ -0,0 +1,4 @@
|
|||||||
|
MARIADB_ROOT_PASSWORD=g1qQWxTXyFXIKpAfbE0h5bxn&prr4zfd
|
||||||
|
MARIADB_USER=bensuperpc
|
||||||
|
MARIADB_PASSWORD=4Xnc7FB7902%*w9PW4y9&anQ5&hQdTzt
|
||||||
|
MARIADB_DATABASE=wordpress
|
||||||
@@ -1,63 +0,0 @@
|
|||||||
include:
|
|
||||||
# Main
|
|
||||||
- services/main/docker-compose.main.yml
|
|
||||||
# WordPress
|
|
||||||
- services/wordpress/docker-compose.wordpress.yml
|
|
||||||
# Caddy
|
|
||||||
- services/caddy/docker-compose.caddy.yml
|
|
||||||
# Dufs
|
|
||||||
- services/dufs/docker-compose.dufs.yml
|
|
||||||
# Forgejo
|
|
||||||
- services/forgejo/docker-compose.forgejo.yml
|
|
||||||
# Homepage
|
|
||||||
- services/homepage/docker-compose.homepage.yml
|
|
||||||
# It-tools
|
|
||||||
- services/it-tools/docker-compose.it-tools.yml
|
|
||||||
# omni-tools
|
|
||||||
- services/omni-tools/docker-compose.omni-tools.yml
|
|
||||||
# cyberchef
|
|
||||||
- services/cyberchef/docker-compose.cyberchef.yml
|
|
||||||
# Jellyfin
|
|
||||||
- services/jellyfin/docker-compose.jellyfin.yml
|
|
||||||
# Openssh
|
|
||||||
- services/openssh/docker-compose.openssh.yml
|
|
||||||
# Picoshare
|
|
||||||
- services/picoshare/docker-compose.picoshare.yml
|
|
||||||
# Privatebin
|
|
||||||
- services/privatebin/docker-compose.privatebin.yml
|
|
||||||
# Projectsend
|
|
||||||
- services/projectsend/docker-compose.projectsend.yml
|
|
||||||
# Psitransfer
|
|
||||||
- services/psitransfer/docker-compose.psitransfer.yml
|
|
||||||
# Qbittorrent
|
|
||||||
- services/qbittorrent/docker-compose.qbittorrent.yml
|
|
||||||
# Stirlingpdf
|
|
||||||
- services/stirlingpdf/docker-compose.stirlingpdf.yml
|
|
||||||
# Syncthing
|
|
||||||
- services/syncthing/docker-compose.syncthing.yml
|
|
||||||
# Transmission
|
|
||||||
- services/transmission/docker-compose.transmission.yml
|
|
||||||
# Uptime-kuma
|
|
||||||
- services/uptime-kuma/docker-compose.uptime-kuma.yml
|
|
||||||
# open-webui
|
|
||||||
- services/open-webui/docker-compose.open-webui.yml
|
|
||||||
# Memos
|
|
||||||
- services/memos/docker-compose.memos.yml
|
|
||||||
# Argus
|
|
||||||
- services/argus/docker-compose.argus.yml
|
|
||||||
# Dependency-Track
|
|
||||||
- services/dependency-track/docker-compose.dependency-track.yml
|
|
||||||
# Searxng
|
|
||||||
- services/searxng/docker-compose.searxng.yml
|
|
||||||
# Authelia
|
|
||||||
- services/authelia/docker-compose.authelia.yml
|
|
||||||
# Dozzle
|
|
||||||
- services/dozzle/docker-compose.dozzle.yml
|
|
||||||
# Minecraft
|
|
||||||
- services/minecraft-server/docker-compose.yml
|
|
||||||
# 7daystodie
|
|
||||||
- services/7daystodie-server/docker-compose.yml
|
|
||||||
# Satisfactory
|
|
||||||
- services/satisfactory-server/docker-compose.yml
|
|
||||||
# Team Fortress 2
|
|
||||||
- services/teamfortress2-server/docker-compose.yml
|
|
||||||
@@ -1,50 +0,0 @@
|
|||||||
services:
|
|
||||||
# 7 days to die server
|
|
||||||
7daystodie_server:
|
|
||||||
image: vinanrra/7dtd-server:latest
|
|
||||||
container_name: 7daystodie_server
|
|
||||||
profiles:
|
|
||||||
- 7daystodie_server
|
|
||||||
restart: on-failure:7
|
|
||||||
ports:
|
|
||||||
- "26900:26900"
|
|
||||||
- "26901:26901"
|
|
||||||
- "26902:26902"
|
|
||||||
# - "8080:8080" # WEBADMIN
|
|
||||||
# - "8081:8081" # TELNET
|
|
||||||
# - "8082:8082" # WEBSERVER
|
|
||||||
volumes:
|
|
||||||
- 7daystodie_server_save:/home/sdtdserver/.local/share/7DaysToDie # 7 Days To Die world saves
|
|
||||||
- 7daystodie_server_config_lgsm:/home/sdtdserver/lgsm/config-lgsm/sdtdserver # LGSM config folder
|
|
||||||
- 7daystodie_server_file:/home/sdtdserver/serverfiles # Optional - serverfiles folder
|
|
||||||
- 7daystodie_server_log:/home/sdtdserver/log
|
|
||||||
networks:
|
|
||||||
- 7daystodie-network
|
|
||||||
env_file:
|
|
||||||
- ./env/7daystodie.env
|
|
||||||
environment:
|
|
||||||
- PUID=${PUID:-1000}
|
|
||||||
- PGID=${PGID:-1000}
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
# security_opt:
|
|
||||||
# - no-new-privileges:true
|
|
||||||
# cap_drop:
|
|
||||||
# - SYS_ADMIN
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
7daystodie_backup:
|
|
||||||
name: 7daystodie_backup
|
|
||||||
7daystodie_server_save:
|
|
||||||
name: 7daystodie_server_save
|
|
||||||
7daystodie_server_config_lgsm:
|
|
||||||
name: 7daystodie_server_config_lgsm
|
|
||||||
7daystodie_server_file:
|
|
||||||
name: 7daystodie_server_file
|
|
||||||
7daystodie_server_log:
|
|
||||||
name: 7daystodie_server_log
|
|
||||||
|
|
||||||
networks:
|
|
||||||
7daystodie-network:
|
|
||||||
driver: bridge
|
|
||||||
name: 7daystodie-network
|
|
||||||
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
START_MODE=3
|
|
||||||
VERSION=stable
|
|
||||||
TimeZone=Europe/Paris
|
|
||||||
BACKUP=NO
|
|
||||||
BACKUP_HOUR=2
|
|
||||||
BACKUP_MAX=7
|
|
||||||
MONITOR=NO
|
|
||||||
-14
@@ -1,14 +0,0 @@
|
|||||||
#RUN_ON_STARTUP=true
|
|
||||||
RESTIC_REPOSITORY=/mnt/restic
|
|
||||||
RESTIC_BACKUP_SOURCES=/data
|
|
||||||
RESTIC_PASSWORD=SCY5cmu12Odca302EXabPA9jXYkCb2NN
|
|
||||||
# Backup (exuclusive with Check and Prune)
|
|
||||||
BACKUP_CRON=*/15 * * * *
|
|
||||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
|
||||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
|
||||||
# Check (exuclusive with Check and Prune)
|
|
||||||
#CHECK_CRON=*/15 * * * *
|
|
||||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
|
||||||
# Prune (exuclusive with Check and Prune)
|
|
||||||
#PRUNE_CRON=*/15 * * * *
|
|
||||||
#RESTIC_PRUNE_ARGS=
|
|
||||||
@@ -1,33 +0,0 @@
|
|||||||
services:
|
|
||||||
7daystodie_backup:
|
|
||||||
image: mazzolino/restic:latest
|
|
||||||
container_name: 7daystodie_backup
|
|
||||||
profiles:
|
|
||||||
- 7daystodie_backup
|
|
||||||
depends_on:
|
|
||||||
- 7daystodie_server
|
|
||||||
restart: on-failure:7
|
|
||||||
env_file:
|
|
||||||
- ./env/7daystodie_backup.env
|
|
||||||
volumes:
|
|
||||||
- 7daystodie_backup:/mnt/restic
|
|
||||||
- 7daystodie_server_save:/data:ro
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
network_mode: none
|
|
||||||
cap_drop:
|
|
||||||
- NET_ADMIN
|
|
||||||
- NET_RAW
|
|
||||||
- SYS_ADMIN
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
7daystodie_backup:
|
|
||||||
name: 7daystodie_backup
|
|
||||||
7daystodie_server_save:
|
|
||||||
name: 7daystodie_server_save
|
|
||||||
7daystodie_server_config_lgsm:
|
|
||||||
name: 7daystodie_server_config_lgsm
|
|
||||||
7daystodie_server_file:
|
|
||||||
name: 7daystodie_server_file
|
|
||||||
7daystodie_server_log:
|
|
||||||
name: 7daystodie_server_log
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
#RUN_ON_STARTUP=true
|
|
||||||
RESTIC_REPOSITORY=/mnt/restic
|
|
||||||
RESTIC_BACKUP_SOURCES=/data
|
|
||||||
RESTIC_PASSWORD=SCY5cmu12Odca302EXabPA9jXYkCb2NN
|
|
||||||
# Backup (exuclusive with Check and Prune)
|
|
||||||
BACKUP_CRON=*/15 * * * *
|
|
||||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
|
||||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
|
||||||
# Check (exuclusive with Check and Prune)
|
|
||||||
#CHECK_CRON=*/15 * * * *
|
|
||||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
|
||||||
# Prune (exuclusive with Check and Prune)
|
|
||||||
#PRUNE_CRON=*/15 * * * *
|
|
||||||
#RESTIC_PRUNE_ARGS=
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
include:
|
|
||||||
# 7 days to die server
|
|
||||||
- 7daystodie/docker-compose.7daystodie.yml
|
|
||||||
# Backup server
|
|
||||||
- backup/docker-compose.backup.yml
|
|
||||||
@@ -1,87 +0,0 @@
|
|||||||
settings:
|
|
||||||
log:
|
|
||||||
level: DEBUG
|
|
||||||
defaults:
|
|
||||||
service:
|
|
||||||
latest_version:
|
|
||||||
access_token: <secret>
|
|
||||||
deployed_version:
|
|
||||||
allow_invalid_certs: true
|
|
||||||
notify:
|
|
||||||
default_gotify:
|
|
||||||
type: gotify
|
|
||||||
url_fields:
|
|
||||||
host: gotify.example.io
|
|
||||||
token: <secret>
|
|
||||||
default_mattermost:
|
|
||||||
type: mattermost
|
|
||||||
url_fields:
|
|
||||||
host: localhost
|
|
||||||
port: "8081"
|
|
||||||
token: <secret>
|
|
||||||
webhook:
|
|
||||||
awx_more:
|
|
||||||
type: github
|
|
||||||
url: http://localhost:8081
|
|
||||||
secret: <secret>
|
|
||||||
silent_fails: true
|
|
||||||
awx_other:
|
|
||||||
type: github
|
|
||||||
url: https://localhost:8081/api/v2/job_templates/36/github/
|
|
||||||
secret: <secret>
|
|
||||||
silent_fails: true
|
|
||||||
service:
|
|
||||||
forgejo:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://code.forgejo.org/api/v1/repos/forgejo/forgejo/releases
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: "['\"]tag_name['\"]: *['\"]v?([0-9.]+(?:-dev)?)['\"]"
|
|
||||||
deployed_version:
|
|
||||||
type: url
|
|
||||||
url: https://code.forgejo.org
|
|
||||||
regex: Powered by Forgejo.*\s+Version:\s+([0-9.]+(?:-dev)?)
|
|
||||||
dashboard:
|
|
||||||
web_url: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/{{ version }}.md
|
|
||||||
icon: https://code.forgejo.org/assets/img/logo.svg
|
|
||||||
tags:
|
|
||||||
- go
|
|
||||||
svt-av1:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://gitlab.com/api/v4/projects/AOMediaCodec%2FSVT-AV1/repository/tags?order_by=version&sort=desc
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: '"name":"v?([0-9.]+(?:-rc[0-9]+)?)"'
|
|
||||||
dashboard:
|
|
||||||
icon: https://upload.wikimedia.org/wikipedia/commons/8/84/AV1_logo_2018.svg
|
|
||||||
web_url: https://gitlab.com/AOMediaCodec/SVT-AV1/-/releases/v{{ version }}
|
|
||||||
tags:
|
|
||||||
- av1
|
|
||||||
- video
|
|
||||||
- encoder
|
|
||||||
ffmpeg:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://api.github.com/repos/FFmpeg/FFmpeg/tags
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: '"name":"n?([0-9.]+)"'
|
|
||||||
dashboard:
|
|
||||||
icon: https://upload.wikimedia.org/wikipedia/commons/7/76/FFmpeg_icon.svg?utm_source=commons.wikimedia.org&utm_campaign=index&utm_content=original
|
|
||||||
web_url: https://github.com/FFmpeg/FFmpeg/releases/tag/n{{ version }}
|
|
||||||
qbittorrent:
|
|
||||||
latest_version:
|
|
||||||
type: url
|
|
||||||
url: https://api.github.com/repos/qbittorrent/qBittorrent/releases/latest
|
|
||||||
url_commands:
|
|
||||||
- type: regex
|
|
||||||
regex: '"tag_name":"release-([0-9.]+)"'
|
|
||||||
dashboard:
|
|
||||||
icon: https://upload.wikimedia.org/wikipedia/commons/6/66/New_qBittorrent_Logo.svg
|
|
||||||
web_url: https://github.com/qbittorrent/qBittorrent/releases/tag/release-{{ version }}
|
|
||||||
tags:
|
|
||||||
- bittorrent
|
|
||||||
- qt
|
|
||||||
- cplusplus
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
services:
|
|
||||||
# argus
|
|
||||||
argus:
|
|
||||||
image: releaseargus/argus:latest
|
|
||||||
container_name: argus
|
|
||||||
profiles:
|
|
||||||
- argus
|
|
||||||
environment:
|
|
||||||
- ARGUS_UID=${PUID:-1000}
|
|
||||||
- ARGUS_GID=${PGID:-1000}
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
volumes:
|
|
||||||
- argus_data:/app/data/
|
|
||||||
- ./config/config.yml:/app/config.yml
|
|
||||||
# healthcheck:
|
|
||||||
# test: ["CMD", "/healthcheck", "http://localhost:8080/api/v1/healthcheck"]
|
|
||||||
# interval: 1m
|
|
||||||
# timeout: 10s
|
|
||||||
# retries: 3
|
|
||||||
# start_period: 10s
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
argus_data:
|
|
||||||
name: argus_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
@@ -1,64 +0,0 @@
|
|||||||
theme: auto
|
|
||||||
|
|
||||||
server:
|
|
||||||
address: "tcp://0.0.0.0:9091"
|
|
||||||
|
|
||||||
log:
|
|
||||||
level: info
|
|
||||||
|
|
||||||
authentication_backend:
|
|
||||||
file:
|
|
||||||
path: /config/users_database.yml
|
|
||||||
|
|
||||||
access_control:
|
|
||||||
default_policy: deny
|
|
||||||
rules:
|
|
||||||
- domain:
|
|
||||||
- "authelia.bensuperpc.org"
|
|
||||||
- "www.bensuperpc.org"
|
|
||||||
- "public.bensuperpc.org"
|
|
||||||
- "it-tools.bensuperpc.org"
|
|
||||||
- "omni-tools.bensuperpc.org"
|
|
||||||
- "cyberchef.bensuperpc.org"
|
|
||||||
- "wordpress.bensuperpc.org"
|
|
||||||
- "homepage.bensuperpc.org"
|
|
||||||
policy: bypass
|
|
||||||
- domain:
|
|
||||||
- "jellyfin.bensuperpc.org"
|
|
||||||
- "openwebui.bensuperpc.org"
|
|
||||||
- "searxng.bensuperpc.org"
|
|
||||||
subject:
|
|
||||||
- 'group:admins'
|
|
||||||
- 'group:users'
|
|
||||||
policy: one_factor
|
|
||||||
- domain:
|
|
||||||
- "*.bensuperpc.org"
|
|
||||||
subject:
|
|
||||||
- 'group:admins'
|
|
||||||
policy: one_factor
|
|
||||||
# - domain: "dependency-track.bensuperpc.org"
|
|
||||||
# resources:
|
|
||||||
# - "^/api/.*"
|
|
||||||
# policy: bypass
|
|
||||||
# - domain: "*.bensuperpc.org"
|
|
||||||
# policy: two_factor
|
|
||||||
|
|
||||||
session:
|
|
||||||
expiration: 72h
|
|
||||||
inactivity: 60m
|
|
||||||
remember_me: 1M
|
|
||||||
cookies:
|
|
||||||
- domain: "bensuperpc.org"
|
|
||||||
authelia_url: "https://authelia.bensuperpc.org"
|
|
||||||
|
|
||||||
regulation:
|
|
||||||
max_retries: 5
|
|
||||||
find_time: 3m
|
|
||||||
ban_time: 15m
|
|
||||||
|
|
||||||
storage:
|
|
||||||
postgres: {}
|
|
||||||
|
|
||||||
notifier:
|
|
||||||
filesystem:
|
|
||||||
filename: /config/notification.txt
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
users:
|
|
||||||
bensuperpc:
|
|
||||||
displayname: "Bensuperpc"
|
|
||||||
password: "$argon2id$v=19$m=65536,t=3,p=4$1T+CwoeP6hcoddG8l1iilg$omcB+SICmNQzmZIXhE54S5+J68AU32f60a5ctYoEObU"
|
|
||||||
email: "bensuperpc@gmail.com"
|
|
||||||
groups:
|
|
||||||
- admins
|
|
||||||
- users
|
|
||||||
@@ -1,56 +0,0 @@
|
|||||||
services:
|
|
||||||
authelia:
|
|
||||||
container_name: authelia
|
|
||||||
image: authelia/authelia:latest
|
|
||||||
profiles:
|
|
||||||
- authelia
|
|
||||||
- caddy
|
|
||||||
depends_on:
|
|
||||||
authelia-postgres:
|
|
||||||
condition: service_healthy
|
|
||||||
# environment:
|
|
||||||
# - TZ=America/New_York
|
|
||||||
# - PUID=${PUID:-1000}
|
|
||||||
# - PGID=${PGID:-1000}
|
|
||||||
env_file:
|
|
||||||
- ./env/authelia.env
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
volumes:
|
|
||||||
- ./config:/config
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
- authelia-internal
|
|
||||||
restart: on-failure:7
|
|
||||||
|
|
||||||
authelia-postgres:
|
|
||||||
image: postgres:17-alpine
|
|
||||||
container_name: authelia-postgres
|
|
||||||
restart: on-failure:7
|
|
||||||
volumes:
|
|
||||||
- authelia_db_data:/var/lib/postgresql/data
|
|
||||||
env_file:
|
|
||||||
- ./env/authelia_postgres.env
|
|
||||||
profiles:
|
|
||||||
- authelia
|
|
||||||
- caddy
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
healthcheck:
|
|
||||||
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
|
|
||||||
interval: 5s
|
|
||||||
timeout: 3s
|
|
||||||
retries: 5
|
|
||||||
networks:
|
|
||||||
- authelia-internal
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
authelia-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: authelia-internal
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
authelia_db_data: {}
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET=ht87MVnXkXhBpDkMUHqKDqdg8UGBJt+Fx5jNIqXnN2k=
|
|
||||||
AUTHELIA_SESSION_SECRET=nsvbXKGRXVZUCUkOapntlq/Zh+d75WacTK5Jgyh8zYk=
|
|
||||||
AUTHELIA_STORAGE_ENCRYPTION_KEY=aWeIT74xIhGVd9nUOr4YTToTl5rpBEbzc/fv4jemuos=
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_HOST=authelia-postgres
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_PORT=5432
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_DATABASE=authelia_db
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_USERNAME=authelia
|
|
||||||
AUTHELIA_STORAGE_POSTGRES_PASSWORD=sAdkxFW6k3GiMOrlBpl6OV76eb9cQz/uk95jmA2UpI8=
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
POSTGRES_USER=authelia
|
|
||||||
POSTGRES_PASSWORD=sAdkxFW6k3GiMOrlBpl6OV76eb9cQz/uk95jmA2UpI8=
|
|
||||||
POSTGRES_DB=authelia_db
|
|
||||||
@@ -1,46 +0,0 @@
|
|||||||
{
|
|
||||||
email {$MAIL_DOMAIN}
|
|
||||||
key_type p384
|
|
||||||
|
|
||||||
log {
|
|
||||||
output file /data/logs/access.log {
|
|
||||||
roll_size 1GiB
|
|
||||||
roll_keep 20
|
|
||||||
roll_keep_for 720h
|
|
||||||
}
|
|
||||||
format json
|
|
||||||
}
|
|
||||||
|
|
||||||
auto_https {$AUTO_HTTPS_OPTIONS}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Common settings
|
|
||||||
import website/header.caddy
|
|
||||||
import website/authelia_middleware.caddy
|
|
||||||
|
|
||||||
# All website configurations
|
|
||||||
import website/main.caddy
|
|
||||||
import website/cyberchef.caddy
|
|
||||||
import website/forgejo.caddy
|
|
||||||
import website/homepage.caddy
|
|
||||||
import website/jellyfin.caddy
|
|
||||||
import website/memos.caddy
|
|
||||||
import website/openwebui.caddy
|
|
||||||
import website/privatebin.caddy
|
|
||||||
import website/psitransfer.caddy
|
|
||||||
import website/stirlingpdf.caddy
|
|
||||||
import website/transmission.caddy
|
|
||||||
import website/wordpress.caddy
|
|
||||||
import website/dufs.caddy
|
|
||||||
import website/it-tools.caddy
|
|
||||||
import website/omni-tools.caddy
|
|
||||||
import website/picoshare.caddy
|
|
||||||
import website/projectsend.caddy
|
|
||||||
import website/qbittorrent.caddy
|
|
||||||
import website/syncthing.caddy
|
|
||||||
import website/uptimekuma.caddy
|
|
||||||
import website/argus.caddy
|
|
||||||
import website/dependency-track.caddy
|
|
||||||
import website/searxng.caddy
|
|
||||||
import website/authelia.caddy
|
|
||||||
import website/dozzle.caddy
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://argus.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$ARGUS_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
{$SCHEME}://authelia.{$MAIN_DOMAIN} {
|
|
||||||
reverse_proxy {$AUTHELIA_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
(authelia_middleware) {
|
|
||||||
forward_auth authelia:9091 {
|
|
||||||
uri /api/authz/forward-auth
|
|
||||||
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
{$SCHEME}://cyberchef.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
# Load balance between 2 instances
|
|
||||||
reverse_proxy {
|
|
||||||
to cyberchef0:8000 cyberchef1:8000
|
|
||||||
lb_policy round_robin
|
|
||||||
lb_retries 3
|
|
||||||
lb_try_interval 1s
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
{$SCHEME}://dependency-track.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy /api/* {$DEPENDENCY_TRACK_APISERVER_ADDRESS}
|
|
||||||
reverse_proxy {$DEPENDENCY_TRACK_FRONTEND_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://dozzle.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$DOZZLE_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://dufs.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy dufs:5000
|
|
||||||
}
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
{$SCHEME}://git.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$FORGEJO_ADDRESS}
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://forgejo.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://git.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
(header_common) {
|
|
||||||
Permissions-Policy: geolocation=(), camera=(), microphone=(), clipboard-read=(), usb=()
|
|
||||||
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
||||||
X-Content-Type-Options: nosniff
|
|
||||||
X-Frame-Options: DENY
|
|
||||||
Referrer-Policy: strict-origin-when-cross-origin
|
|
||||||
# Only useful for old browsers
|
|
||||||
X-XSS-Protection: "1; mode=block"
|
|
||||||
|
|
||||||
# Can cause issues with external resources
|
|
||||||
#Cross-Origin-Embedder-Policy: require-corp
|
|
||||||
Cross-Origin-Opener-Policy: same-origin
|
|
||||||
#Cross-Origin-Resource-Policy: same-origin
|
|
||||||
#Content-Security-Policy: default-src 'self'; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://homepage.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://www.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
{$SCHEME}://it-tools.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
# Load balance between 2 instances
|
|
||||||
reverse_proxy {
|
|
||||||
to it-tools0:8080 it-tools1:8080
|
|
||||||
lb_policy round_robin
|
|
||||||
lb_retries 3
|
|
||||||
lb_try_interval 1s
|
|
||||||
}
|
|
||||||
header {
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
{$SCHEME}://jellyfin.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$JELLYFIN_ADDRESS}
|
|
||||||
header {
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,28 +0,0 @@
|
|||||||
{$SCHEME}://www.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
header {
|
|
||||||
Cache-Control "public, max-age=10"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
|
|
||||||
handle_errors {
|
|
||||||
@notFound expression `{http.error.status_code} == 404`
|
|
||||||
redir @notFound https://www.{$MAIN_DOMAIN} permanent
|
|
||||||
}
|
|
||||||
|
|
||||||
reverse_proxy homepage:3000
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://{$MAIN_DOMAIN} {
|
|
||||||
redir https://www.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://public.{$MAIN_DOMAIN} {
|
|
||||||
root * /public_data
|
|
||||||
file_server browse
|
|
||||||
|
|
||||||
header / {
|
|
||||||
Cache-Control "no-store"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://memos.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$MEMOS_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
{$SCHEME}://omni-tools.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
# Load balance between 2 instances
|
|
||||||
reverse_proxy {
|
|
||||||
to omni-tools0:80 omni-tools1:80
|
|
||||||
lb_policy round_robin
|
|
||||||
lb_retries 3
|
|
||||||
lb_try_interval 1s
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
{$SCHEME}://openwebui.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$OPEN_WEBUI_ADDRESS} {
|
|
||||||
flush_interval -1
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://picoshare.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PICOSHARE_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://privatebin.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PRIVATEBIN_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://projectsend.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PROJECTSEND_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
{$SCHEME}://transfer.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$PSITRANSFER_ADDRESS}
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://psitransfer.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://transfer.{$MAIN_DOMAIN}{uri} permanent
|
|
||||||
}
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
{$SCHEME}://torrent.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$QBITTORRENT_ADDRESS} {
|
|
||||||
header_up Referer "{$SCHEME}://torrent.{$MAIN_DOMAIN}"
|
|
||||||
}
|
|
||||||
header {
|
|
||||||
Cache-Control "no-store"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
{$SCHEME}://qbittorrent.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
redir https://torrent.{$MAIN_DOMAIN} permanent
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://searxng.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$SEARXNG_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://stirlingpdf.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$STIRLINGPDF_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
{$SCHEME}://syncthing.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$SYNCTHING_ADDRESS} {
|
|
||||||
header_up Host {upstream_hostport}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
{$SCHEME}://transmission.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$TRANSMISSION_ADDRESS}
|
|
||||||
}
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
{$SCHEME}://uptimekuma.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
reverse_proxy {$UPTIMEKUMA_ADDRESS}
|
|
||||||
header {
|
|
||||||
Cache-Control "no-store"
|
|
||||||
import header_common
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,32 +0,0 @@
|
|||||||
{$SCHEME}://wordpress.{$MAIN_DOMAIN} {
|
|
||||||
import authelia_middleware
|
|
||||||
root * /var/www/html
|
|
||||||
php_fastcgi {$WORDPRESS_ADDRESS}
|
|
||||||
|
|
||||||
file_server
|
|
||||||
encode zstd gzip
|
|
||||||
|
|
||||||
@disallowed {
|
|
||||||
path /xmlrpc.php
|
|
||||||
path *.sql
|
|
||||||
path /wp-content/uploads/*.php
|
|
||||||
}
|
|
||||||
|
|
||||||
rewrite @disallowed '/index.php'
|
|
||||||
|
|
||||||
respond /uploads/*.php 404
|
|
||||||
|
|
||||||
header {
|
|
||||||
# enable HSTS
|
|
||||||
Strict-Transport-Security max-age=31536000;
|
|
||||||
|
|
||||||
# disable clients from sniffing the media type
|
|
||||||
X-Content-Type-Options nosniff
|
|
||||||
|
|
||||||
# clickjacking protection
|
|
||||||
# X-Frame-Options DENY
|
|
||||||
|
|
||||||
# Disable powerful features we don't need
|
|
||||||
Permissions-Policy "geolocation=(), camera=(), microphone=()"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,99 +0,0 @@
|
|||||||
services:
|
|
||||||
# Caddy
|
|
||||||
caddy:
|
|
||||||
#image: bensuperpc/caddy-l4:latest
|
|
||||||
image: caddy:latest
|
|
||||||
container_name: caddy
|
|
||||||
profiles:
|
|
||||||
- caddy
|
|
||||||
depends_on:
|
|
||||||
main_infrastructure:
|
|
||||||
condition: service_completed_successfully
|
|
||||||
restart: on-failure:7
|
|
||||||
ports:
|
|
||||||
- 80:80/tcp
|
|
||||||
- 80:80/udp
|
|
||||||
- 443:443/tcp
|
|
||||||
- 443:443/udp
|
|
||||||
volumes:
|
|
||||||
- caddy_data:/data:rw
|
|
||||||
- caddy_config:/config:rw
|
|
||||||
- ./config:/etc/caddy:ro
|
|
||||||
- wordpress:/var/www/html:rw
|
|
||||||
- public_data:/public_data:ro
|
|
||||||
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
- caddy-media
|
|
||||||
- caddy-tools
|
|
||||||
- caddy-files
|
|
||||||
- caddy-dev
|
|
||||||
- caddy-ai
|
|
||||||
- caddy-web
|
|
||||||
env_file:
|
|
||||||
- ./env/caddy.env
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
healthcheck:
|
|
||||||
test: pidof caddy || exit 1
|
|
||||||
interval: 120s
|
|
||||||
timeout: 10s
|
|
||||||
retries: 3
|
|
||||||
|
|
||||||
caddy_backup:
|
|
||||||
image: mazzolino/restic:latest
|
|
||||||
container_name: caddy_backup
|
|
||||||
profiles:
|
|
||||||
- caddy
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
restart: on-failure:7
|
|
||||||
env_file:
|
|
||||||
- ./env/caddy_backup.env
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
volumes:
|
|
||||||
- caddy_backup:/mnt/restic
|
|
||||||
- caddy_data:/data:ro
|
|
||||||
network_mode: none
|
|
||||||
cap_drop:
|
|
||||||
- NET_ADMIN
|
|
||||||
- NET_RAW
|
|
||||||
- SYS_ADMIN
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
caddy_data:
|
|
||||||
name: caddy_data
|
|
||||||
caddy_config:
|
|
||||||
name: caddy_config
|
|
||||||
caddy_backup:
|
|
||||||
name: caddy_backup
|
|
||||||
wordpress:
|
|
||||||
name: wordpress
|
|
||||||
public_data:
|
|
||||||
name: public_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
caddy-media:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-media
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
caddy-files:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-files
|
|
||||||
caddy-dev:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-dev
|
|
||||||
caddy-ai:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-ai
|
|
||||||
caddy-web:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-web
|
|
||||||
-28
@@ -1,28 +0,0 @@
|
|||||||
MAIN_DOMAIN=bensuperpc.org
|
|
||||||
MAIL_DOMAIN=bensuperpc@gmail.com
|
|
||||||
# Services
|
|
||||||
JELLYFIN_ADDRESS=jellyfin:8096
|
|
||||||
QBITTORRENT_ADDRESS=qbittorrent:8080
|
|
||||||
ARGUS_ADDRESS=argus:8080
|
|
||||||
FORGEJO_ADDRESS=forgejo:3000
|
|
||||||
UPTIMEKUMA_ADDRESS=uptime-kuma:3001
|
|
||||||
MEMOS_ADDRESS=memos:5230
|
|
||||||
HOMEPAGE_ADDRESS=homepage:3000
|
|
||||||
OPEN_WEBUI_ADDRESS=openwebui:8080
|
|
||||||
PICOSHARE_ADDRESS=picoshare:4001
|
|
||||||
PRIVATEBIN_ADDRESS=privatebin:8080
|
|
||||||
PROJECTSEND_ADDRESS=projectsend:80
|
|
||||||
STIRLINGPDF_ADDRESS=stirlingpdf:8080
|
|
||||||
SYNCTHING_ADDRESS=syncthing:8384
|
|
||||||
TRANSMISSION_ADDRESS=transmission:9091
|
|
||||||
PSITRANSFER_ADDRESS=psitransfer:3000
|
|
||||||
WORDPRESS_ADDRESS=wordpress:9000
|
|
||||||
DEPENDENCY_TRACK_FRONTEND_ADDRESS=dependency-track-frontend:8080
|
|
||||||
DEPENDENCY_TRACK_APISERVER_ADDRESS=dependency-track-apiserver:8080
|
|
||||||
SEARXNG_ADDRESS=searxng:8080
|
|
||||||
AUTHELIA_ADDRESS=authelia:9091
|
|
||||||
DOZZLE_ADDRESS=dozzle:8080
|
|
||||||
# Scheme
|
|
||||||
SCHEME=https
|
|
||||||
# ignore_loaded_certs off
|
|
||||||
AUTO_HTTPS_OPTIONS=ignore_loaded_certs
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
#RUN_ON_STARTUP=true
|
|
||||||
RESTIC_REPOSITORY=/mnt/restic
|
|
||||||
RESTIC_BACKUP_SOURCES=/data
|
|
||||||
RESTIC_PASSWORD=YFQh8v3Wi95v0p6h88D4u8C8z4gLfdMw
|
|
||||||
# Backup (exuclusive with Check and Prune)
|
|
||||||
BACKUP_CRON=*/30 * * * *
|
|
||||||
RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
|
|
||||||
#RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
|
|
||||||
# Check (exuclusive with Check and Prune)
|
|
||||||
#CHECK_CRON=*/30 * * * *
|
|
||||||
#RESTIC_CHECK_ARGS=--read-data-subset=40%
|
|
||||||
# Prune (exuclusive with Check and Prune)
|
|
||||||
#PRUNE_CRON=*/30 * * * *
|
|
||||||
#RESTIC_PRUNE_ARGS=
|
|
||||||
@@ -1,38 +0,0 @@
|
|||||||
services:
|
|
||||||
# cyberchef
|
|
||||||
cyberchef0:
|
|
||||||
image: mpepping/cyberchef:latest
|
|
||||||
container_name: cyberchef0
|
|
||||||
profiles:
|
|
||||||
- cyberchef
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
read_only: false
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
cap_drop:
|
|
||||||
- SYS_ADMIN
|
|
||||||
|
|
||||||
cyberchef1:
|
|
||||||
image: mpepping/cyberchef:latest
|
|
||||||
container_name: cyberchef1
|
|
||||||
profiles:
|
|
||||||
- cyberchef
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
read_only: false
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
cap_drop:
|
|
||||||
- SYS_ADMIN
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
@@ -1,68 +0,0 @@
|
|||||||
services:
|
|
||||||
dependency-track-apiserver:
|
|
||||||
image: dependencytrack/apiserver
|
|
||||||
container_name: dependency-track-apiserver
|
|
||||||
profiles:
|
|
||||||
- dependency-track
|
|
||||||
depends_on:
|
|
||||||
dependency-track-postgres:
|
|
||||||
condition: service_healthy
|
|
||||||
env_file:
|
|
||||||
- ./env/dependency-track.env
|
|
||||||
restart: on-failure:7
|
|
||||||
networks:
|
|
||||||
- caddy-web
|
|
||||||
- dependency-track-internal
|
|
||||||
volumes:
|
|
||||||
- 'dtrack-data:/data'
|
|
||||||
|
|
||||||
dependency-track-frontend:
|
|
||||||
image: dependencytrack/frontend
|
|
||||||
container_name: dependency-track-frontend
|
|
||||||
profiles:
|
|
||||||
- dependency-track
|
|
||||||
restart: on-failure:7
|
|
||||||
networks:
|
|
||||||
- caddy-web
|
|
||||||
- dependency-track-internal
|
|
||||||
depends_on:
|
|
||||||
dependency-track-apiserver:
|
|
||||||
condition: service_healthy
|
|
||||||
caddy:
|
|
||||||
condition: service_healthy
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
env_file:
|
|
||||||
- ./env/dependency-track.env
|
|
||||||
|
|
||||||
dependency-track-postgres:
|
|
||||||
image: postgres:17-alpine
|
|
||||||
container_name: dependency-track-postgres
|
|
||||||
profiles:
|
|
||||||
- dependency-track
|
|
||||||
env_file:
|
|
||||||
- ./env/postgres.env
|
|
||||||
restart: on-failure:7
|
|
||||||
networks:
|
|
||||||
- dependency-track-internal
|
|
||||||
healthcheck:
|
|
||||||
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
|
|
||||||
interval: 5s
|
|
||||||
timeout: 3s
|
|
||||||
retries: 5
|
|
||||||
volumes:
|
|
||||||
- "dtrack-postgres-data:/var/lib/postgresql/data"
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
dtrack-data:
|
|
||||||
name: dtrack-data
|
|
||||||
dtrack-postgres-data:
|
|
||||||
name: dtrack-postgres-data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-web:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-web
|
|
||||||
dependency-track-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: dependency-track-internal
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
ALPINE_DATABASE_MODE="external"
|
|
||||||
ALPINE_DATABASE_URL="jdbc:postgresql://dependency-track-postgres:5432/dtrack"
|
|
||||||
ALPINE_DATABASE_DRIVER="org.postgresql.Driver"
|
|
||||||
ALPINE_DATABASE_USERNAME="dtrack"
|
|
||||||
ALPINE_DATABASE_PASSWORD="dtrack"
|
|
||||||
|
|
||||||
API_BASE_URL="https://dependency-track.bensuperpc.org"
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
POSTGRES_DB="dtrack"
|
|
||||||
POSTGRES_USER="dtrack"
|
|
||||||
POSTGRES_PASSWORD="dtrack"
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
users:
|
|
||||||
bensuperpc:
|
|
||||||
email: bensuperpc@gmail.com
|
|
||||||
name: bensuperpc
|
|
||||||
password: $2a$11$w56N4NICh5xD5Bbq6Z2Z2ef9/QUaa/YKleMiawn/Bru9hYsQOJyrm
|
|
||||||
filter: ""
|
|
||||||
roles: ""
|
|
||||||
@@ -1,56 +0,0 @@
|
|||||||
services:
|
|
||||||
dozzle:
|
|
||||||
image: amir20/dozzle:latest
|
|
||||||
container_name: dozzle
|
|
||||||
profiles:
|
|
||||||
- dozzle
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
- dozzle-dockerproxy
|
|
||||||
env_file:
|
|
||||||
- ./env/dozzle.env
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
volumes:
|
|
||||||
- dozzle_data:/data
|
|
||||||
secrets:
|
|
||||||
- source: dozzle_users
|
|
||||||
target: /data/users.yml
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
- dozzle-internal
|
|
||||||
|
|
||||||
dozzle-dockerproxy:
|
|
||||||
image: tecnativa/docker-socket-proxy:latest
|
|
||||||
container_name: dozzle-dockerproxy
|
|
||||||
profiles:
|
|
||||||
- dozzle
|
|
||||||
restart: on-failure:7
|
|
||||||
environment:
|
|
||||||
- CONTAINERS=1
|
|
||||||
- POST=0
|
|
||||||
- PING=1
|
|
||||||
- VERSION=1
|
|
||||||
- EVENTS=1
|
|
||||||
- INFO=1
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
||||||
networks:
|
|
||||||
- dozzle-internal
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
dozzle-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: dozzle-internal
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
dozzle_data:
|
|
||||||
name: dozzle_data
|
|
||||||
|
|
||||||
secrets:
|
|
||||||
dozzle_users:
|
|
||||||
file: ./config/users.yml
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
DOZZLE_AUTH_PROVIDER=simple
|
|
||||||
DOZZLE_REMOTE_HOST=tcp://dozzle-dockerproxy:2375
|
|
||||||
@@ -1,30 +0,0 @@
|
|||||||
services:
|
|
||||||
# dufs
|
|
||||||
dufs:
|
|
||||||
image: sigoden/dufs:latest
|
|
||||||
container_name: dufs
|
|
||||||
profiles:
|
|
||||||
- dufs
|
|
||||||
# user: ${PUID:-1000}:${PGID:-1000}
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
env_file:
|
|
||||||
- ./env/dufs.env
|
|
||||||
volumes:
|
|
||||||
- public_data:/data
|
|
||||||
networks:
|
|
||||||
- caddy-files
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
public_data:
|
|
||||||
name: public_data
|
|
||||||
private_data:
|
|
||||||
name: private_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-files:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-files
|
|
||||||
-7
@@ -1,7 +0,0 @@
|
|||||||
DUFS_BIND=0.0.0.0
|
|
||||||
DUFS_PORT=5000
|
|
||||||
DUFS_SERVE_PATH=/data
|
|
||||||
DUFS_HIDDEN=tmp,*.log,*.lock
|
|
||||||
DUFS_ALLOW_ALL=true
|
|
||||||
DUFS_COMPRESS=medium
|
|
||||||
DUFS_AUTH="admin:heqihlOfBmJDESGFlpbPi7P7Mi6F7RkV@/:rw|@/:ro"
|
|
||||||
@@ -1,100 +0,0 @@
|
|||||||
services:
|
|
||||||
# forgejo
|
|
||||||
forgejo:
|
|
||||||
image: codeberg.org/forgejo/forgejo:15
|
|
||||||
container_name: forgejo
|
|
||||||
profiles:
|
|
||||||
- forgejo
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- database_forgejo
|
|
||||||
- caddy
|
|
||||||
ports:
|
|
||||||
- "22:2222"
|
|
||||||
env_file:
|
|
||||||
- ./env/forgejo.env
|
|
||||||
volumes:
|
|
||||||
- forgejo_data:/data
|
|
||||||
- /etc/timezone:/etc/timezone:ro
|
|
||||||
- /etc/localtime:/etc/localtime:ro
|
|
||||||
networks:
|
|
||||||
- caddy-dev
|
|
||||||
- forgejo-internal
|
|
||||||
# user: ${PUID:-1000}:${PGID:-1000}
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
|
|
||||||
# Database forgejo
|
|
||||||
database_forgejo:
|
|
||||||
image: mariadb:latest
|
|
||||||
container_name: database_forgejo
|
|
||||||
profiles:
|
|
||||||
- forgejo
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
restart: on-failure:7
|
|
||||||
volumes:
|
|
||||||
- forgejo_db:/var/lib/mysql:rw
|
|
||||||
env_file:
|
|
||||||
- ./env/forgejo_db.env
|
|
||||||
command: '--default-authentication-plugin=mysql_native_password'
|
|
||||||
networks:
|
|
||||||
- forgejo-internal
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
|
|
||||||
# forgejo-runner
|
|
||||||
docker-in-docker:
|
|
||||||
image: code.forgejo.org/oci/docker:dind
|
|
||||||
container_name: 'docker_dind'
|
|
||||||
hostname: docker
|
|
||||||
networks:
|
|
||||||
- forgejo-internal
|
|
||||||
profiles:
|
|
||||||
- forgejo-runner
|
|
||||||
privileged: true
|
|
||||||
environment:
|
|
||||||
DOCKER_TLS_CERTDIR: /certs
|
|
||||||
DOCKER_HOST: docker-in-docker
|
|
||||||
volumes:
|
|
||||||
- forgejo_certs:/certs
|
|
||||||
|
|
||||||
forgejo_runner:
|
|
||||||
image: data.forgejo.org/forgejo/runner:12
|
|
||||||
networks:
|
|
||||||
- forgejo-internal
|
|
||||||
profiles:
|
|
||||||
- forgejo-runner
|
|
||||||
depends_on:
|
|
||||||
docker-in-docker:
|
|
||||||
condition: service_started
|
|
||||||
container_name: 'forgejo_runner'
|
|
||||||
env_file:
|
|
||||||
- ./env/forgejo_runner.env
|
|
||||||
# user: ${PUID:-1000}:${PGID:-1000}
|
|
||||||
volumes:
|
|
||||||
# - ./config/forgejo_runner/config.yaml:/config.yaml:ro
|
|
||||||
- forgejo_runner:/data
|
|
||||||
- forgejo_certs:/certs
|
|
||||||
restart: on-failure:7
|
|
||||||
|
|
||||||
# command: '/bin/sh -c "while : ; do sleep 1 ; done ;"'
|
|
||||||
command: '/bin/sh -c "sleep 5; forgejo-runner -c /data/config.yml daemon"'
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
forgejo_data:
|
|
||||||
name: forgejo_data
|
|
||||||
forgejo_db:
|
|
||||||
name: forgejo_db
|
|
||||||
forgejo_certs:
|
|
||||||
name: forgejo_certs
|
|
||||||
forgejo_runner:
|
|
||||||
name: forgejo_runner
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-dev:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-dev
|
|
||||||
forgejo-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: forgejo-internal
|
|
||||||
-25
@@ -1,25 +0,0 @@
|
|||||||
USER_UID=1000
|
|
||||||
USER_GID=1000
|
|
||||||
FORGEJO__database__DB_TYPE=mysql
|
|
||||||
FORGEJO__database__HOST=database_forgejo:3306
|
|
||||||
FORGEJO__database__NAME=forgejo
|
|
||||||
FORGEJO__database__USER=bensuperpc
|
|
||||||
FORGEJO__database__PASSWD=ZcuHcM9tnIEM7EEO7R5jCpEt6v1d6r7s
|
|
||||||
FORGEJO__APP_NAME=Bensuperpc's Forgejo
|
|
||||||
FORGEJO__APP_SLOGAN=Personal Code, Mirrors, and More
|
|
||||||
FORGEJO__server__DOMAIN=git.bensuperpc.org
|
|
||||||
FORGEJO__server__SSH_DOMAIN=git.bensuperpc.org
|
|
||||||
FORGEJO__server__HTTP_PORT=3000
|
|
||||||
FORGEJO__server__SSH_LISTEN_PORT=2222
|
|
||||||
FORGEJO__server__SSH_PORT=22
|
|
||||||
FORGEJO__server__ROOT_URL=https://git.bensuperpc.org
|
|
||||||
FORGEJO__security__SECRET_KEY=7IWrMh7mC7UMo1SowvUsAT2LOX49eU6P
|
|
||||||
#FORGEJO__security__INTERNAL_TOKEN=
|
|
||||||
FORGEJO__security__INSTALL_LOCK=true
|
|
||||||
FORGEJO__security__MIN_PASSWORD_LENGTH=8
|
|
||||||
FORGEJO__actions__ENABLED=true
|
|
||||||
FORGEJO__actions__DEFAULT_ACTIONS_URL="https://git.bensuperpc.org"
|
|
||||||
#FORGEJO__log__LEVEL: "debug"
|
|
||||||
FORGEJO__repository__ENABLE_PUSH_CREATE_USER=true
|
|
||||||
FORGEJO__repository__DEFAULT_PUSH_CREATE_PRIVATE=false
|
|
||||||
FORGEJO__repository__DEFAULT_REPO_UNITS=repo.code,repo.actions
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
MARIADB_ROOT_PASSWORD=ZI8Trbot3b8WGqE5AKj1yphKMu4v9qQw
|
|
||||||
MARIADB_USER=bensuperpc
|
|
||||||
MARIADB_PASSWORD=ZcuHcM9tnIEM7EEO7R5jCpEt6v1d6r7s
|
|
||||||
MARIADB_DATABASE=forgejo
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
DOCKER_HOST=tcp://docker:2376
|
|
||||||
DOCKER_CERT_PATH=/certs/client
|
|
||||||
DOCKER_TLS_VERIFY=1
|
|
||||||
@@ -1,51 +0,0 @@
|
|||||||
---
|
|
||||||
# For configuration options and examples, please see:
|
|
||||||
# https://gethomepage.dev/configs/bookmarks
|
|
||||||
|
|
||||||
- Developer:
|
|
||||||
- Github:
|
|
||||||
- abbr: GH
|
|
||||||
href: https://github.com/bensuperpc
|
|
||||||
description: github.com
|
|
||||||
|
|
||||||
- Social:
|
|
||||||
- Reddit:
|
|
||||||
- abbr: RE
|
|
||||||
href: https://reddit.com/u/bensuperpc
|
|
||||||
description: reddit.com
|
|
||||||
- Twitter:
|
|
||||||
- abbr: TW
|
|
||||||
href: https://twitter.com/bensuperpc
|
|
||||||
description: twitter.com
|
|
||||||
- Bluesky:
|
|
||||||
- abbr: BS
|
|
||||||
href: https://bsky.app/profile/bensuperpc.bsky.social
|
|
||||||
description: bsky.app
|
|
||||||
- Mastodon:
|
|
||||||
- abbr: MA
|
|
||||||
href: https://mastodon.social/@bensuperpc
|
|
||||||
description: mastodon.social
|
|
||||||
|
|
||||||
- Entertainment:
|
|
||||||
- YouTube:
|
|
||||||
- abbr: YT
|
|
||||||
href: https://youtube.com/c/bensuperpc
|
|
||||||
description: youtube.com
|
|
||||||
- Twitch:
|
|
||||||
- abbr: TW
|
|
||||||
href: https://twitch.tv/bensuperpc
|
|
||||||
description: twitch.tv
|
|
||||||
|
|
||||||
- Friends:
|
|
||||||
- Gnous:
|
|
||||||
- abbr: Gn
|
|
||||||
href: https://gnous.eu/
|
|
||||||
description: gnous.eu
|
|
||||||
- Imagisphe:
|
|
||||||
- abbr: IM
|
|
||||||
href: https://imagisphe.re/
|
|
||||||
description: imagisphe.re
|
|
||||||
- Greep:
|
|
||||||
- abbr: GP
|
|
||||||
href: https://greep.fr/#/
|
|
||||||
description: greep.fr
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
# For configuration options and examples, please see:
|
|
||||||
# https://gethomepage.dev/configs/docker
|
|
||||||
|
|
||||||
my-docker:
|
|
||||||
host: homepage-dockerproxy
|
|
||||||
port: 2375
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
---
|
|
||||||
# sample kubernetes config
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
---
|
|
||||||
# url: https://proxmox.host.or.ip:8006
|
|
||||||
# token: username@pam!Token ID
|
|
||||||
# secret: secret
|
|
||||||
@@ -1,179 +0,0 @@
|
|||||||
---
|
|
||||||
# For configuration options and examples, please see:
|
|
||||||
# https://gethomepage.dev/configs/services/
|
|
||||||
|
|
||||||
- Public:
|
|
||||||
- it-tools:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
|
|
||||||
href: https://it-tools.bensuperpc.org/
|
|
||||||
description: IT Tools
|
|
||||||
# ping: it-tools.bensuperpc.org
|
|
||||||
container: it-tools0
|
|
||||||
server: my-docker
|
|
||||||
- omni-tools:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/it-tools.png
|
|
||||||
href: https://omni-tools.bensuperpc.org/
|
|
||||||
description: Omni Tools
|
|
||||||
# ping: omni-tools.bensuperpc.org
|
|
||||||
container: omni-tools0
|
|
||||||
server: my-docker
|
|
||||||
- cyberchef:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/cyberchef.png
|
|
||||||
href: https://cyberchef.bensuperpc.org/
|
|
||||||
description: CyberChef
|
|
||||||
# ping: cyberchef.bensuperpc.org
|
|
||||||
container: cyberchef0
|
|
||||||
server: my-docker
|
|
||||||
- caddy:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/caddy.png
|
|
||||||
href: https://public.bensuperpc.org/
|
|
||||||
description: File browser
|
|
||||||
# ping: public.bensuperpc.org
|
|
||||||
container: caddy
|
|
||||||
server: my-docker
|
|
||||||
- psitransfer:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/psitransfer.png
|
|
||||||
href: https://psitransfer.bensuperpc.org/
|
|
||||||
description: PsiTransfer
|
|
||||||
# ping: psitransfer.bensuperpc.org
|
|
||||||
container: psitransfer
|
|
||||||
server: my-docker
|
|
||||||
- stirlingpdf:
|
|
||||||
#icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/stirlingpdf.png
|
|
||||||
href: https://stirlingpdf.bensuperpc.org/
|
|
||||||
description: StirlingPDF
|
|
||||||
# ping: stirlingpdf.bensuperpc.org
|
|
||||||
container: stirlingpdf
|
|
||||||
server: my-docker
|
|
||||||
- privatebin:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/privatebin.png
|
|
||||||
href: https://privatebin.bensuperpc.org/
|
|
||||||
description: PrivateBin
|
|
||||||
# ping: privatebin.bensuperpc.org
|
|
||||||
container: privatebin
|
|
||||||
server: my-docker
|
|
||||||
- forgejo:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/forgejo.png
|
|
||||||
href: https://forgejo.bensuperpc.org/
|
|
||||||
description: Forgejo
|
|
||||||
# ping: forgejo.bensuperpc.org
|
|
||||||
container: forgejo
|
|
||||||
server: my-docker
|
|
||||||
- wordpress:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/wordpress.png
|
|
||||||
href: https://wordpress.bensuperpc.org/
|
|
||||||
description: Wordpress
|
|
||||||
# ping: wordpress.bensuperpc.org
|
|
||||||
container: wordpress
|
|
||||||
server: my-docker
|
|
||||||
- dufs:
|
|
||||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dufs.png
|
|
||||||
href: https://dufs.bensuperpc.org/
|
|
||||||
description: Dufs
|
|
||||||
# ping: dufs.bensuperpc.org
|
|
||||||
container: dufs
|
|
||||||
server: my-docker
|
|
||||||
|
|
||||||
- Personal:
|
|
||||||
- jellyfin:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/jellyfin.png
|
|
||||||
href: https://jellyfin.bensuperpc.org/
|
|
||||||
description: Jellyfin
|
|
||||||
# ping: jellyfin.bensuperpc.org
|
|
||||||
container: jellyfin
|
|
||||||
server: my-docker
|
|
||||||
- projectsend:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/projectsend.png
|
|
||||||
href: https://projectsend.bensuperpc.org/
|
|
||||||
description: ProjectSend
|
|
||||||
# ping: projectsend.bensuperpc.org
|
|
||||||
container: projectsend
|
|
||||||
server: my-docker
|
|
||||||
- searxng:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/searxng.png
|
|
||||||
href: https://searxng.bensuperpc.org/
|
|
||||||
description: SearXNG
|
|
||||||
# ping: searxng.bensuperpc.org
|
|
||||||
container: searxng
|
|
||||||
server: my-docker
|
|
||||||
- open-webui:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/open-webui.png
|
|
||||||
href: https://openwebui.bensuperpc.org/
|
|
||||||
description: ChatGPT local
|
|
||||||
# ping: openwebui.bensuperpc.org
|
|
||||||
container: openwebui
|
|
||||||
server: my-docker
|
|
||||||
- picoshare:
|
|
||||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/picoshare.png
|
|
||||||
href: https://picoshare.bensuperpc.org/
|
|
||||||
description: PicoShare
|
|
||||||
# ping: picoshare.bensuperpc.org
|
|
||||||
container: picoshare
|
|
||||||
server: my-docker
|
|
||||||
- qbittorrent:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/qbittorrent.png
|
|
||||||
href: https://qbittorrent.bensuperpc.org/
|
|
||||||
description: qBittorrent
|
|
||||||
# ping: qbittorrent.bensuperpc.org
|
|
||||||
container: qbittorrent
|
|
||||||
server: my-docker
|
|
||||||
- syncthing:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/syncthing.png
|
|
||||||
href: https://syncthing.bensuperpc.org/
|
|
||||||
description: Syncthing
|
|
||||||
# ping: syncthing.bensuperpc.org
|
|
||||||
container: syncthing
|
|
||||||
server: my-docker
|
|
||||||
- transmission:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/transmission.png
|
|
||||||
href: https://transmission.bensuperpc.org/
|
|
||||||
description: Transmission
|
|
||||||
# ping: transmission.bensuperpc.org
|
|
||||||
container: transmission
|
|
||||||
server: my-docker
|
|
||||||
|
|
||||||
- Games:
|
|
||||||
- minecraft:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/minecraft.png
|
|
||||||
# href: https://minecraft.bensuperpc.org/
|
|
||||||
description: Minecraft server
|
|
||||||
# ping: minecraft.bensuperpc.org
|
|
||||||
# container: minecraft-server
|
|
||||||
#server: my-docker
|
|
||||||
- 7dtd:
|
|
||||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
|
|
||||||
# href: https://7dtd.bensuperpc.org/
|
|
||||||
description: 7 Days to Die server
|
|
||||||
# ping: 7dtd.bensuperpc.org
|
|
||||||
# container: 7daystodie_server
|
|
||||||
#server: my-docker
|
|
||||||
- satisfactory:
|
|
||||||
# icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/7dtd.png
|
|
||||||
# href: https://7dtd.bensuperpc.org/
|
|
||||||
description: Satisfactory server
|
|
||||||
# ping: 7dtd.bensuperpc.org
|
|
||||||
# container: satisfactory_server
|
|
||||||
#server: my-docker
|
|
||||||
|
|
||||||
- Admin:
|
|
||||||
- uptime-kuma:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/uptime-kuma.png
|
|
||||||
href: https://uptimekuma.bensuperpc.org/
|
|
||||||
description: Uptime Kuma
|
|
||||||
ping: uptimekuma.bensuperpc.org
|
|
||||||
container: uptime-kuma
|
|
||||||
server: my-docker
|
|
||||||
- authelia:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/authelia.png
|
|
||||||
href: https://authelia.bensuperpc.org/
|
|
||||||
description: Authelia
|
|
||||||
# ping: authelia.bensuperpc.org
|
|
||||||
container: authelia
|
|
||||||
server: my-docker
|
|
||||||
- dozzle:
|
|
||||||
icon: https://cdn.jsdelivr.net/gh/walkxcode/dashboard-icons@master/png/dozzle.png
|
|
||||||
href: https://dozzle.bensuperpc.org/
|
|
||||||
description: Dozzle
|
|
||||||
# ping: dozzle.bensuperpc.org
|
|
||||||
container: dozzle
|
|
||||||
server: my-docker
|
|
||||||
@@ -1,54 +0,0 @@
|
|||||||
---
|
|
||||||
# For configuration options and examples, please see:
|
|
||||||
# https://gethomepage.dev/configs/settings/
|
|
||||||
|
|
||||||
title: Bensuperpc
|
|
||||||
|
|
||||||
description: Bensuperpc's homepage
|
|
||||||
|
|
||||||
base: https://www.bensuperpc.org
|
|
||||||
|
|
||||||
favicon: /image/favicon.ico
|
|
||||||
|
|
||||||
logpath: /app/logs
|
|
||||||
|
|
||||||
background:
|
|
||||||
image: /image/background.jpg
|
|
||||||
blur: md
|
|
||||||
opacity: 50
|
|
||||||
brightness: 50
|
|
||||||
|
|
||||||
theme: dark
|
|
||||||
color: slate
|
|
||||||
|
|
||||||
language: en
|
|
||||||
|
|
||||||
layout:
|
|
||||||
Public:
|
|
||||||
style: row
|
|
||||||
columns: 6
|
|
||||||
Personal:
|
|
||||||
style: row
|
|
||||||
columns: 6
|
|
||||||
Admin:
|
|
||||||
style: row
|
|
||||||
columns: 6
|
|
||||||
Games:
|
|
||||||
style: row
|
|
||||||
columns: 6
|
|
||||||
initiallyCollapsed: false
|
|
||||||
|
|
||||||
quicklaunch:
|
|
||||||
searchDescriptions: true
|
|
||||||
hideInternetSearch: false
|
|
||||||
hideVisitURL: false
|
|
||||||
|
|
||||||
hideVersion: true
|
|
||||||
|
|
||||||
headerStyle: boxed
|
|
||||||
|
|
||||||
useEqualHeights: true
|
|
||||||
|
|
||||||
#providers:
|
|
||||||
# openweathermap: openweathermapapikey
|
|
||||||
# weatherapi: weatherapiapikey
|
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
---
|
|
||||||
# For configuration options and examples, please see:
|
|
||||||
# https://gethomepage.dev/widgets/services/
|
|
||||||
|
|
||||||
#- logo:
|
|
||||||
# icon: /image/daisy.jpg
|
|
||||||
|
|
||||||
- resources:
|
|
||||||
cpu: true
|
|
||||||
cputemp: true
|
|
||||||
memory: true
|
|
||||||
disk: /
|
|
||||||
uptime: true
|
|
||||||
refresh: 3000
|
|
||||||
|
|
||||||
#- search:
|
|
||||||
# provider: duckduckgo
|
|
||||||
# target: _blank
|
|
||||||
# showSearchSuggestions: true
|
|
||||||
|
|
||||||
- datetime:
|
|
||||||
text_size: xl
|
|
||||||
locale: fr
|
|
||||||
format:
|
|
||||||
timeStyle: short
|
|
||||||
dateStyle: short
|
|
||||||
|
|
||||||
- openmeteo:
|
|
||||||
label: Nantes # optional
|
|
||||||
latitude: 47.216671
|
|
||||||
longitude: -1.55
|
|
||||||
timezone: Europe/Paris # optional
|
|
||||||
units: metric # or imperial
|
|
||||||
cache: 5 # Time in minutes to cache API responses, to stay within limits
|
|
||||||
format: # optional, Intl.NumberFormat options
|
|
||||||
maximumFractionDigits: 1
|
|
||||||
@@ -1,53 +0,0 @@
|
|||||||
services:
|
|
||||||
# homepage
|
|
||||||
homepage:
|
|
||||||
image: ghcr.io/gethomepage/homepage:latest
|
|
||||||
container_name: homepage
|
|
||||||
profiles:
|
|
||||||
- homepage
|
|
||||||
restart: on-failure:7
|
|
||||||
# environment:
|
|
||||||
# - PUID=${PUID:-1000}
|
|
||||||
# - PGID=${PGID:-1000}
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
- homepage-dockerproxy
|
|
||||||
env_file:
|
|
||||||
- ./env/homepage.env
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
volumes:
|
|
||||||
- homepage_log:/app/logs
|
|
||||||
- ./config:/app/config
|
|
||||||
- ./image:/app/public/image:ro
|
|
||||||
networks:
|
|
||||||
- caddy-infra
|
|
||||||
- homepage-internal
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
|
|
||||||
homepage-dockerproxy:
|
|
||||||
image: tecnativa/docker-socket-proxy:latest
|
|
||||||
container_name: homepage-dockerproxy
|
|
||||||
profiles:
|
|
||||||
- homepage
|
|
||||||
restart: on-failure:7
|
|
||||||
environment:
|
|
||||||
- CONTAINERS=1
|
|
||||||
- POST=0
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
||||||
networks:
|
|
||||||
- homepage-internal
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
homepage_log:
|
|
||||||
name: homepage_log
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
homepage-internal:
|
|
||||||
driver: bridge
|
|
||||||
name: homepage-internal
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
HOMEPAGE_ALLOWED_HOSTS=www.bensuperpc.org,homepage.bensuperpc.org
|
|
||||||
Binary file not shown.
|
Before Width: | Height: | Size: 569 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 51 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 295 KiB |
@@ -1,42 +0,0 @@
|
|||||||
services:
|
|
||||||
# it-tools
|
|
||||||
it-tools0:
|
|
||||||
image: ghcr.io/sharevb/it-tools:latest
|
|
||||||
container_name: it-tools0
|
|
||||||
profiles:
|
|
||||||
- it-tools
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
read_only: false
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
cap_drop:
|
|
||||||
- SYS_ADMIN
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
|
|
||||||
it-tools1:
|
|
||||||
image: ghcr.io/sharevb/it-tools:latest
|
|
||||||
container_name: it-tools1
|
|
||||||
profiles:
|
|
||||||
- it-tools
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
read_only: false
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
cap_drop:
|
|
||||||
- SYS_ADMIN
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
@@ -1,43 +0,0 @@
|
|||||||
services:
|
|
||||||
# Jellyfin
|
|
||||||
jellyfin:
|
|
||||||
image: lscr.io/linuxserver/jellyfin:latest
|
|
||||||
container_name: jellyfin
|
|
||||||
profiles:
|
|
||||||
- jellyfin
|
|
||||||
restart: on-failure:7
|
|
||||||
environment:
|
|
||||||
- PUID=${PUID:-1000}
|
|
||||||
- PGID=${PGID:-1000}
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
env_file:
|
|
||||||
- ./env/jellyfin.env
|
|
||||||
volumes:
|
|
||||||
- jellyfin_config:/config
|
|
||||||
- jellyfin_cache:/cache
|
|
||||||
- public_data:/public
|
|
||||||
- private_data:/private
|
|
||||||
# Hardware acceleration (For Intel and AMD GPUs)
|
|
||||||
devices:
|
|
||||||
- /dev/dri:/dev/dri
|
|
||||||
networks:
|
|
||||||
- caddy-media
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
jellyfin_config:
|
|
||||||
name: jellyfin_config
|
|
||||||
jellyfin_cache:
|
|
||||||
name: jellyfin_cache
|
|
||||||
public_data:
|
|
||||||
name: public_data
|
|
||||||
private_data:
|
|
||||||
name: private_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-media:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-media
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
DOCKER_MODS=linuxserver/mods:jellyfin-opencl-intel
|
|
||||||
@@ -1,64 +0,0 @@
|
|||||||
services:
|
|
||||||
main_infrastructure:
|
|
||||||
container_name: main_infrastructure
|
|
||||||
image: alpine:latest
|
|
||||||
profiles:
|
|
||||||
- main_infrastructure
|
|
||||||
volumes:
|
|
||||||
- public_data:/public_data:rw
|
|
||||||
- private_data:/private_data:rw
|
|
||||||
read_only: true
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
cap_drop:
|
|
||||||
- ALL
|
|
||||||
cap_add:
|
|
||||||
- CHOWN
|
|
||||||
- DAC_OVERRIDE
|
|
||||||
# Fix root permissions on mounted volumes
|
|
||||||
command: chown -R ${PUID:-1000}:${PGID:-1000} /public_data /private_data
|
|
||||||
|
|
||||||
watchtower:
|
|
||||||
container_name: watchtower
|
|
||||||
profiles:
|
|
||||||
- main_infrastructure
|
|
||||||
image: nickfedor/watchtower:latest
|
|
||||||
environment:
|
|
||||||
- TZ=${TZ:-Europe/Paris}
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
restart: on-failure:7
|
|
||||||
networks:
|
|
||||||
- watchtower-network
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
public_data:
|
|
||||||
name: public_data
|
|
||||||
private_data:
|
|
||||||
name: private_data
|
|
||||||
|
|
||||||
networks:
|
|
||||||
watchtower-network:
|
|
||||||
driver: bridge
|
|
||||||
name: watchtower-network
|
|
||||||
caddy-infra:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-infra
|
|
||||||
caddy-media:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-media
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
caddy-files:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-files
|
|
||||||
caddy-dev:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-dev
|
|
||||||
caddy-ai:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-ai
|
|
||||||
caddy-web:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-web
|
|
||||||
@@ -1,27 +0,0 @@
|
|||||||
services:
|
|
||||||
# memos
|
|
||||||
memos:
|
|
||||||
image: neosmemo/memos:latest
|
|
||||||
container_name: memos
|
|
||||||
profiles:
|
|
||||||
- memos
|
|
||||||
restart: on-failure:7
|
|
||||||
depends_on:
|
|
||||||
- caddy
|
|
||||||
env_file:
|
|
||||||
- ./env/memos.env
|
|
||||||
volumes:
|
|
||||||
- memos_config:/var/opt/memos
|
|
||||||
networks:
|
|
||||||
- caddy-tools
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges:true
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
memos_config:
|
|
||||||
name: memos_config
|
|
||||||
|
|
||||||
networks:
|
|
||||||
caddy-tools:
|
|
||||||
driver: bridge
|
|
||||||
name: caddy-tools
|
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user