509 lines
18 KiB
YAML
509 lines
18 KiB
YAML
version: '3.4'
|
|
volumes:
|
|
data:
|
|
services:
|
|
|
|
#############################################################################
|
|
##################### MariaDB Vikunja #####################
|
|
#############################################################################
|
|
db:
|
|
container_name: mariadb-vikunja
|
|
image: tobi312/rpi-mariadb:10.11-alpine
|
|
# image: yobasystems/alpine-mariadb:10.5.9
|
|
command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
|
|
ports:
|
|
- "3306:3306"
|
|
- "3307:3307"
|
|
restart: unless-stopped
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${VIKUNJA_DB_ROOT}
|
|
- MYSQL_DATABASE=vikunja
|
|
- MYSQL_USER=vikunja
|
|
- MYSQL_PASSWORD=${VIKUNJA_DB_PW}
|
|
volumes:
|
|
- ./databases/db:/var/lib/mysql
|
|
- /etc/localtime:/etc/localtime:ro
|
|
|
|
#############################################################################
|
|
##################### MariaDB Gitea #####################
|
|
#############################################################################
|
|
gitdb:
|
|
container_name: mariadb-git
|
|
image: tobi312/rpi-mariadb:10.11-alpine
|
|
# image: yobasystems/alpine-mariadb:10.5.9
|
|
command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
|
|
networks:
|
|
- gitea
|
|
# ports:
|
|
# - "3326:3306"
|
|
# - "3327:3307"
|
|
restart: unless-stopped
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${GITEA_DB_ROOT}
|
|
- MYSQL_DATABASE=gitea
|
|
- MYSQL_USER=gitea
|
|
- MYSQL_PASSWORD=${GITEA_DB_PW}
|
|
volumes:
|
|
- ./databases/db-git:/var/lib/mysql
|
|
- /etc/localtime:/etc/localtime:ro
|
|
|
|
#############################################################################
|
|
##################### MariaDB Nextcloud #####################
|
|
#############################################################################
|
|
# nextcloud-db:
|
|
# container_name: mariadb-nextcloud
|
|
# image: tobi312/rpi-mariadb:10.11-alpine
|
|
# # image: yobasystems/alpine-mariadb:10.5.9
|
|
# command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
|
|
# # networks:
|
|
# # ports:
|
|
# # - "3326:3306"
|
|
# # - "3327:3307"
|
|
# restart: unless-stopped
|
|
# environment:
|
|
# - MYSQL_ROOT_PASSWORD=${NEXTCLOUD_DB_ROOT}
|
|
# - MYSQL_DATABASE=nextcloud
|
|
# - MYSQL_USER=nextcloud
|
|
# - MYSQL_PASSWORD=${NEXTCLOUD_DB_PW}
|
|
# volumes:
|
|
# - ./databases/db-nextcloud:/var/lib/mysql
|
|
# - /etc/localtime:/etc/localtime:ro
|
|
|
|
#############################################################################
|
|
##################### MariaDB Baikal #####################
|
|
#############################################################################
|
|
|
|
baikal-db:
|
|
container_name: mariadb-baikal
|
|
image: tobi312/rpi-mariadb:10.11-alpine
|
|
restart: unless-stopped
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${BAIKAL_DB_ROOT}
|
|
- MYSQL_DATABASE=baikal
|
|
- MYSQL_USER=baikal
|
|
- MYSQL_PASSWORD=${BAIKAL_DB_PW}
|
|
volumes:
|
|
- ./databases/db-baikal:/var/lib/mysql
|
|
- /etc/localtime:/etc/localtime:ro
|
|
|
|
#############################################################################
|
|
##################### Nextcloud #####################
|
|
#############################################################################
|
|
|
|
# nextcloud:
|
|
# container_name: nextcloud
|
|
# image: nextcloud:latest
|
|
# restart: always
|
|
# links:
|
|
# - nextcloud-db
|
|
# volumes:
|
|
# - ./volumes/nextcloud:/var/www/html
|
|
# environment:
|
|
# - MYSQL_PASSWORD=${NEXTCLOUD_DB_PW}
|
|
# - MYSQL_DATABASE=nextcloud
|
|
# - MYSQL_USER=nextcloud
|
|
# - MYSQL_HOST=nextcloud-db
|
|
# - OVERWRITEPROTOCOL=https
|
|
# - OVERWRITECLIURL=https://cloud.gerle.duckdns.org
|
|
# - OVERWRITEHOST=cloud.gerle.duckdns.org
|
|
# networks:
|
|
# - dockernet
|
|
# - default
|
|
# labels:
|
|
# - 'traefik.enable=true'
|
|
# - 'traefik.http.routers.nextcloud.rule=Host(`cloud.gerle.duckdns.org`)'
|
|
# - "traefik.http.routers.nextcloud.entrypoints=websecure"
|
|
# - "traefik.http.routers.nextcloud.tls=true"
|
|
# - "traefik.http.routers.nextcloud.tls.certResolver=letsencrypt"
|
|
# - 'traefik.http.services.nextcloud.loadbalancer.server.port=80'
|
|
# - "traefik.http.routers.nextcloud.service=nextcloud"
|
|
# # - "traefik.docker.network=proxy"
|
|
# - "traefik.http.routers.nextcloud.middlewares=nextcloud-dav" #,default@file"
|
|
# - "traefik.http.middlewares.nextcloud-dav.replacepathregex.regex=^/.well-known/ca(l|rd)dav"
|
|
# - "traefik.http.middlewares.nextcloud-dav.replacepathregex.replacement=/remote.php/dav/"
|
|
|
|
#############################################################################
|
|
###################### Vikunja Api #####################
|
|
#############################################################################
|
|
api:
|
|
container_name: vikunja-api
|
|
image: vikunja/api
|
|
environment:
|
|
- VIKUNJA_DATABASE_HOST=db
|
|
- VIKUNJA_DATABASE_PASSWORD=${VIKUNJA_DB_PW}
|
|
- VIKUNJA_DATABASE_TYPE=mysql
|
|
- VIKUNJA_DATABASE_USER=vikunja
|
|
- VIKUNJA_DATABASE_DATABASE=vikunja
|
|
- VIKUNJA_SERVICE_JWTSECRET=${VIKUNJA_JWT}
|
|
- VIKUNJA_SERVICE_FRONTENDURL=https://vikunja.gerle.duckdns.org/
|
|
- VIKUNJA_SERVICE_TIMEZONE=Europe/Berlin
|
|
- VIKUNJA_DEFAULTSETTINGS_TIMEZONE=Europe/Berlin
|
|
- VIKUNJA_DEFAULTSETTINGS_WEEK_START=1
|
|
- VIKUNJA_MAILER_ENABLED=true
|
|
- VIKUNJA_MAILER_HOST=${MAIL_HOST}
|
|
- VIKUNJA_MAILER_PORT=${MAIL_PORT}
|
|
- VIKUNJA_MAILER_AUTHTYPE=login
|
|
- VIKUNJA_MAILER_USERNAME=${MAIL_USER}
|
|
- VIKUNJA_MAILER_PASSWORD=${MAIL_PW}
|
|
- VIKUNJA_MAILER_FROMEMAIL=${MAIL_ADDR}
|
|
# ports:
|
|
# - "3456:3456"
|
|
volumes:
|
|
- ./volumes/files:/app/vikunja/files
|
|
depends_on:
|
|
- db
|
|
networks:
|
|
- dockernet
|
|
- default
|
|
restart: unless-stopped
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.vikunja-api.rule=Host(`vikunja.gerle.duckdns.org`) && (PathPrefix(`/api/v1`) || PathPrefix(`/dav/`) || PathPrefix(`/.well-known/`))"
|
|
- "traefik.http.routers.vikunja-api.tls=true"
|
|
- "traefik.http.routers.vikunja-api.entrypoints=websecure"
|
|
- "traefik.http.routers.vikunja-api.tls.certResolver=letsencrypt"
|
|
# - 'traefik.http.services.vikunja-api.loadbalancer.server.port=80'
|
|
|
|
#############################################################################
|
|
##################### Vikunja Frontend #####################
|
|
#############################################################################
|
|
frontend:
|
|
container_name: vikunja-frontend
|
|
image: vikunja/frontend
|
|
# ports:
|
|
# - "80:80"
|
|
# environment:
|
|
# VIKUNJA_API_URL: http://gerle.i234.me:3456/api/v1
|
|
restart: unless-stopped
|
|
networks:
|
|
- dockernet
|
|
- default
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
- 'traefik.http.routers.vikunja-frontend.rule=Host(`vikunja.gerle.duckdns.org`)'
|
|
- "traefik.http.routers.vikunja-frontend.entrypoints=websecure"
|
|
- "traefik.http.routers.vikunja-frontend.tls.certResolver=letsencrypt"
|
|
- "traefik.http.routers.vikunja-frontend.tls=true"
|
|
- 'traefik.http.services.vikunja-frontend.loadbalancer.server.port=80'
|
|
|
|
#############################################################################
|
|
##################### Traefik #####################
|
|
#############################################################################
|
|
traefik:
|
|
image: 'traefik:latest'
|
|
container_name: 'traefik'
|
|
restart: 'unless-stopped'
|
|
# command:
|
|
# - "--log.level=DEBUG"
|
|
# - "--accesslog=true"
|
|
depends_on:
|
|
- api
|
|
environment:
|
|
- ACME_DNS_API_BASE="http://10.0.0.8:4443"
|
|
- ACME_DNS_STORAGE_PATH="/letsencrypt/lego-acme-dns-accounts.json"
|
|
- DUCKDNS_TOKEN=${DUCKDNS}
|
|
- DUCKDNS_PROPAGATION_TIMEOUT=120
|
|
# - DUCKDNS_SEQUENCE_INTERVAL
|
|
- LEGO_DISABLE_CNAME_SUPPORT=true
|
|
- FREEMYIP_TOKEN=${FMIP_TOKEN}
|
|
# - CF_API_EMAIL=${CLOUDFLARE_MAIL}
|
|
# - CF_API_KEY=${CLOUDFLARE_KEY}
|
|
# - CF_DNS_API_TOKEN=${CLOUDFLARE_TOKEN}
|
|
ports:
|
|
- '80:80'
|
|
- '8080:8080'
|
|
- '443:443'
|
|
- '2222:2222/tcp'
|
|
volumes:
|
|
- '/var/run/docker.sock:/var/run/docker.sock:ro'
|
|
- './traefik.yaml:/traefik.yaml'
|
|
- "./rules.yaml:/etc/traefik/rules.yaml"
|
|
- "./logs/:/logs/"
|
|
- './secrets/acme.json:/acme.json'
|
|
- './secrets/acme_ds.json:/acme_ds.json'
|
|
- './letsencrypt/:/letsencrypt'
|
|
- "./secrets/lego-acme-dns-accounts.json:/lego-acme-dns-accounts.json"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.api.rule=Host(`berry.local/traefik`)"
|
|
- "traefik.http.routers.api.service=api@internal"
|
|
- "traefik.http.routers.api.entrypoints=web"
|
|
# - "traefik.http.routers.synology.rule=Host(`nas.gerle.i234.me`)"
|
|
# - "traefik.http.routers.synology.service=nas"
|
|
# - "traefik.http.services.nas.loadBalancer.passHostHeader=true"
|
|
# - "traefik.http.services.nas.loadBalancer.servers.url=https://192.168.2.2:5001"
|
|
networks:
|
|
- dockernet
|
|
- default
|
|
|
|
#############################################################################
|
|
##################### WhoAmI #####################
|
|
#############################################################################
|
|
whoami:
|
|
container_name: whoami
|
|
image: 'traefik/whoami'
|
|
restart: 'unless-stopped'
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
|
|
# - "traefik.http.routers.whoami-http.entrypoints=web"
|
|
# - "traefik.http.routers.whoami-http.rule=Host(`whoami.gerle.duckdns.org`)"
|
|
|
|
- 'traefik.http.routers.whoami.rule=Host(`whoami.gerle.duckdns.org`)'
|
|
- 'traefik.http.services.whoami.loadbalancer.server.port=80'
|
|
- "traefik.http.routers.whoami.entrypoints=websecure"
|
|
- "traefik.http.routers.whoami.tls.certResolver=letsencrypt"
|
|
|
|
# - "traefik.http.middlewares.whoami-https.redirectscheme.scheme=https"
|
|
networks:
|
|
- dockernet
|
|
|
|
|
|
#############################################################################
|
|
##################### Baikal #####################
|
|
#############################################################################
|
|
baikal:
|
|
container_name: baikal
|
|
image: ckulka/baikal:latest
|
|
restart: always
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
- 'traefik.http.routers.baikal.rule=Host(`baikal.gerle.duckdns.org`)'
|
|
- 'traefik.http.services.baikal.loadbalancer.server.port=80'
|
|
- "traefik.http.routers.baikal.entrypoints=websecure"
|
|
- "traefik.http.routers.baikal.tls.certResolver=letsencrypt"
|
|
# traefik.port: 80
|
|
# Traefik middleware required for iOS, see https://github.com/ckulka/baikal-docker/issues/37.
|
|
# When using a Traefik provider file (YAML/TOML) instead of these labels, remove the escape
|
|
# character from "*.redirectregex.replacement" - it's only needed in Docker Compose YAML files:
|
|
# redirectRegex:
|
|
# replacement: "https://$1/dav/php/
|
|
- 'traefik.http.middlewares.baikal-dav.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav'
|
|
- 'traefik.http.middlewares.baikal-dav.redirectregex.replacement=https://$$1/dav.php/'
|
|
- 'traefik.http.middlewares.baikal-dav.redirectregex.permanent=true'
|
|
- 'traefik.http.routers.baikal.middlewares=baikal-dav'
|
|
volumes:
|
|
- ./volumes/baikal-config:/var/www/baikal/config
|
|
- ./volumes/baikal-data:/var/www/baikal/Specific
|
|
networks:
|
|
- dockernet
|
|
- default
|
|
|
|
|
|
# acmedns:
|
|
# build:
|
|
# context: .
|
|
# dockerfile: Dockerfile
|
|
# image: joohoi/acme-dns:latest
|
|
# ports:
|
|
# - "443:443"
|
|
# - "53:53"
|
|
# - "53:53/udp"
|
|
# - "80:80"
|
|
# volumes:
|
|
# - ./volumes/acmedns-config:/etc/acme-dns:ro
|
|
# - ./volumes/acmedns-data:/var/lib/acme-dns
|
|
|
|
|
|
#############################################################################
|
|
##################### GiTea #####################
|
|
#############################################################################
|
|
|
|
git:
|
|
image: gitea/gitea:latest
|
|
container_name: gitea
|
|
environment:
|
|
- GITEA__database__DB_TYPE=mysql
|
|
- GITEA__database__HOST=gitdb
|
|
- GITEA__database__NAME=gitea
|
|
- GITEA__database__USER=gitea
|
|
- GITEA__database__PASSWD=${GITEA_DB_PW}
|
|
- GITEA__repository__DEFAULT_BRANCH=master
|
|
- GITEA__mailer__ENABLED=true
|
|
- GITEA__mailer__FROM=${MAIL_ADDR}
|
|
- GITEA__mailer__PROTOCOL=smtp+starttls
|
|
- GITEA__mailer__SMTP_ADDR=${MAIL_HOST}
|
|
- GITEA__mailer__SMTP_PORT=${MAIL_PORT}
|
|
# - GITEA__mailer__IS_TLS_ENABLED=true
|
|
- GITEA__mailer__USER=${MAIL_USER}
|
|
- GITEA__mailer__PASSWD=${MAIL_PW}
|
|
- GITEA__server__ROOT_URL="https://git.gerle.duckdns.org"
|
|
- GITEA__server__START_SSH_SERVER=true
|
|
- GITEA__server__SSH_DOMAIN="git.gerle.duckdns.org"
|
|
- GITEA__server__SSH_PORT=22
|
|
- GITEA__server__SSH_LISTEN_PORT=2222
|
|
restart: always
|
|
networks:
|
|
- gitea
|
|
- dockernet
|
|
volumes:
|
|
- ./volumes/gitea:/data
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
ports:
|
|
- "3000:3000"
|
|
# - "222:22"
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
# - 'traefik.http.routers.git-ssh.rule=Host(`git.gerle.duckdns.org`)'
|
|
# - 'traefik.http.services.git-ssh.loadbalancer.server.port=22'
|
|
# - "traefik.http.routers.git-ssh.entrypoints=ssh"
|
|
- traefik.tcp.routers.gitea-ssh.rule=HostSNI(`*`)
|
|
- traefik.tcp.routers.gitea-ssh.entrypoints=ssh
|
|
- traefik.tcp.routers.gitea-ssh.service=gitea-ssh-svc
|
|
- traefik.tcp.services.gitea-ssh-svc.loadbalancer.server.port=2222
|
|
- 'traefik.http.routers.git.rule=Host(`git.gerle.duckdns.org`)'
|
|
- 'traefik.http.services.git.loadbalancer.server.port=3000'
|
|
- "traefik.http.routers.git.entrypoints=websecure"
|
|
- "traefik.http.routers.git.tls.certResolver=letsencrypt"
|
|
depends_on:
|
|
- gitdb
|
|
|
|
|
|
|
|
#############################################################################
|
|
##################### Pihole #####################
|
|
#############################################################################
|
|
pihole:
|
|
container_name: pihole
|
|
image: pihole/pihole:latest
|
|
# For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
|
|
ports:
|
|
- "53:53/tcp"
|
|
- "53:53/udp"
|
|
- "67:67/udp" # Only required if you are using Pi-hole as your DHCP server
|
|
- "8022:80/tcp"
|
|
environment:
|
|
TZ: 'Europe/Berlin'
|
|
WEBPASSWORD: ${PIHOLE_PW}
|
|
# Volumes store your data between container upgrades
|
|
volumes:
|
|
- './volumes/pihole-etc:/etc/pihole'
|
|
- './volumes/pihole-etc-dnsmasq.d:/etc/dnsmasq.d'
|
|
# https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
|
|
# cap_add:
|
|
# - NET_ADMIN # Required if you are using Pi-hole as your DHCP server, else not needed
|
|
restart: unless-stopped
|
|
|
|
|
|
#############################################################################
|
|
##################### Grocy #####################
|
|
#############################################################################
|
|
|
|
# grocy-frontend:
|
|
# container_name: grocy-frontend
|
|
# image: grocy/frontend:v3.3.2
|
|
# # build:
|
|
# # args:
|
|
# # GROCY_VERSION: v3.3.2
|
|
# # PLATFORM: linux/amd64
|
|
# # context: .
|
|
# # dockerfile: Containerfile-frontend
|
|
# depends_on:
|
|
# - backend
|
|
# # ports:
|
|
# # - "8888:80"
|
|
# networks:
|
|
# - dockernet
|
|
# - default
|
|
# read_only: true
|
|
# volumes:
|
|
# - ./volumes/grocy:/var/www/data
|
|
# tmpfs:
|
|
# - /tmp
|
|
# restart: unless-stopped
|
|
# labels:
|
|
# - 'traefik.enable=true'
|
|
# - 'traefik.http.routers.grocy.rule=Host(`grocy.gerle.duckdns.org`)'
|
|
# # - 'traefik.http.services.grocy.loadbalancer.server.port=8888'
|
|
# - "traefik.http.routers.grocy.entrypoints=websecure"
|
|
# - "traefik.http.routers.grocy.tls.certResolver=letsencrypt"
|
|
|
|
# backend:
|
|
# container_name: grocy-backend
|
|
# image: grocy/backend:v3.3.2
|
|
# expose:
|
|
# - '9000'
|
|
# read_only: true
|
|
# networks:
|
|
# # - dockernet
|
|
# - default
|
|
# tmpfs:
|
|
# - /tmp
|
|
# volumes:
|
|
# - ./volumes/grocy:/var/www/data
|
|
# environment:
|
|
# # - GROCY_MODE=production
|
|
# - GROCY_CULTURE=de
|
|
# - MAX_UPLOAD=50M
|
|
# - PHP_MAX_FILE_UPLOAD=200
|
|
# - PHP_MAX_POST=100M
|
|
# - PHP_MEMORY_LIMIT=512M
|
|
# - GROCY_CURRENCY=EUR
|
|
# restart: unless-stopped
|
|
|
|
|
|
|
|
grocy:
|
|
image: lscr.io/linuxserver/grocy:latest
|
|
container_name: grocy
|
|
environment:
|
|
- PUID=1000
|
|
- PGID=1000
|
|
- TZ=Etc/UTC
|
|
- GROCY_CURRENCY=EUR
|
|
- GROCY_CULTURE=de
|
|
volumes:
|
|
- ./volumes/grocy:/config
|
|
# ports:
|
|
# - 9283:80
|
|
restart: unless-stopped
|
|
networks:
|
|
- gitea
|
|
- dockernet
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
- 'traefik.http.routers.grocy.rule=Host(`grocy.gerle.duckdns.org`)'
|
|
- "traefik.http.routers.grocy.entrypoints=websecure"
|
|
- "traefik.http.routers.grocy.tls.certResolver=letsencrypt"
|
|
- "traefik.http.routers.grocy.tls=true"
|
|
- 'traefik.http.services.grocy.loadbalancer.server.port=80'
|
|
|
|
#############################################################################
|
|
##################### Networks #####################
|
|
#############################################################################
|
|
|
|
networks:
|
|
dockernet:
|
|
external: true
|
|
gitea:
|
|
external: false
|
|
|
|
# secrets:
|
|
# mariadb_root:
|
|
# file: ./docker/secrets/mariadb_root
|
|
# vikunja-db_database:
|
|
# file: ./docker/secrets/vikunja-db_database
|
|
# vikunja-db_user:
|
|
# file: ./docker/secrets/vikunja-db_user
|
|
# vikunja-db_pw:
|
|
# file: ./docker/secrets/vikunja-db_pw
|
|
# gitea-db_database:
|
|
# file: ./docker/secrets/gitea-db_database
|
|
# gitea-db_user:
|
|
# file: ./docker/secrets/gitea-db_user
|
|
# gitea-db_pw:
|
|
# file: ./docker/secrets/gitea-db_pw
|
|
# viknja_jwt:
|
|
# file: ./docker/secrets/vikunja_jwt
|
|
# mail_host:
|
|
# file: ./docker/secrets/mail_host
|
|
# mail_user:
|
|
# file: ./docker/secrets/mail_user
|
|
# mail_pw:
|
|
# file: ./docker/secrets/mail_pw
|
|
# duckdns_token:
|
|
# file: ./docker/secrets/duckdns_token
|
|
|
|
|