homelab
/
docker-compose-templates
1
0
Fork 0
Code
docker-compose-templates/docker-compose.yml

629 lines
17 KiB
YAML
Raw Blame History

---
version: '3.3'
# todo: remove profiles from this file and from the dce/dc alias
include:
- services/bazarr.yml
- services/jellyfin.yml
- services/komga.yml
- services/radarr.yml
- services/miniflux.yml
- services/jelu.yml
- services/sonarr.yml
- services/nextcloud.yml
services:
caddy:
image: caddy
container_name: caddy
ports:
- "${TIMETRACKER_EXTERNAL_PORT}:${TIMETRACKER_INTERNAL_PORT}"
- "${DENDRON_NOTES_EXTERNAL_PORT}:${DENDRON_NOTES_INTERNAL_PORT}"
- 80:80
- 443:443
user: ${PUID}
volumes:
- "${DOCKER_STORAGE_PATH}/caddy/etc:/etc/caddy"
- "${DOCKER_STORAGE_PATH}/caddy/data:/data"
- "${DOCKER_STORAGE_PATH}/caddy/config:/config"
- "/www/notes:/srv/notes"
- "timetracker-static:/srv/timetracker"
networks:
public:
ipv4_address: 192.168.240.2
profiles:
- infra
- base
restart: unless-stopped
# cap_drop:
# - ALL
# cap_add:
# - NET_BIND_SERVICE
timetracker:
image: ${REGISTRY_URL}/timetracker
container_name: timetracker
environment:
- TZ=${TZ}
- "CSRF_TRUSTED_ORIGINS=https://tracker.kucharczyk.xyz"
user: ${PUID}
volumes:
- "${DOCKER_STORAGE_PATH}/timetracker/db.sqlite3:/home/timetracker/app/db.sqlite3"
- "${DOCKER_STORAGE_PATH}/timetracker/backups:/home/timetracker/app/games/fixtures/backups"
- "timetracker-static:/var/www/django/static"
depends_on:
- caddy
networks:
public:
ipv4_address: 192.168.240.3
profiles:
- base
restart: unless-stopped
trilium:
image: zadam/trilium
container_name: trilium
restart: always
environment:
- TRILIUM_DATA_DIR=/home/node/trilium-data
volumes:
- ${DOCKER_STORAGE_PATH}/trilium:/home/node/trilium-data
ports:
- "${TRILIUM_EXTERNAL_PORT}:${TRILIUM_INTERNAL_PORT}"
networks:
public:
ipv4_address: 192.168.240.4
profiles:
- base
ntfy:
image: binwiederhier/ntfy
container_name: ntfy
command:
- serve
user: ${PUID}:${PGID}
environment:
- TZ=${TZ}
volumes:
- "${DOCKER_STORAGE_PATH}/ntfy/cache:/var/cache/ntfy"
- "${DOCKER_STORAGE_PATH}/ntfy/config:/etc/ntfy"
ports:
- "${NTFY_EXTERNAL_PORT}:${NTFY_INTERNAL_PORT}"
networks:
public:
ipv4_address: 192.168.240.5
profiles:
- base
- infra
restart: unless-stopped
audiobookshelf:
image: ghcr.io/advplyr/audiobookshelf
container_name: audiobookshelf
environment:
- AUDIOBOOKSHELF_UID=${PUID}
- AUDIOBOOKSHELF_GID=${PGID}
- TZ=${TZ}
volumes:
- "${DOCKER_STORAGE_PATH}/audiobookshelf/audiobooks:/audiobooks"
- "${DOCKER_STORAGE_PATH}/audiobookshelf/podcasts:/podcasts"
- "${DOCKER_STORAGE_PATH}/audiobookshelf/config:/config"
- "${DOCKER_STORAGE_PATH}/audiobookshelf/metadata:/metadata"
ports:
- "${AUDIOBOOKSHELF_EXTERNAL_PORT}:${AUDIOBOOKSHELF_INTERNAL_PORT}"
networks:
public:
ipv4_address: 192.168.240.6
profiles:
- disabled
restart: unless-stopped
beets:
image: ${REGISTRY_URL}/beets:latest
container_name: beets
environment:
- PUID=${PUID}
- PGID=${PGID}
- TZ=${TZ}
volumes:
- "${DOCKER_STORAGE_PATH}/beets:/config"
- "${STORAGE_PATH}/media/music2:/music"
- "${STORAGE_PATH}/download/music:/downloads"
ports:
- 8337:8337
networks:
public:
ipv4_address: 192.168.240.7
profiles:
- base
restart: unless-stopped
mealie:
container_name: mealie
image: hkotel/mealie:latest
environment:
PUID: ${PUID}
PGID: ${PGID}
TZ: ${TZ}
env_file:
- mealie.env
volumes:
- "${DOCKER_STORAGE_PATH}/mealie/data/:/app/data"
ports:
- ${MEALIE_EXTERNAL_PORT}:${MEALIE_INTERNAL_PORT}
networks:
public:
ipv4_address: 192.168.240.8
restart: unless-stopped
rtorrent:
image: binhex/arch-rtorrentvpn
container_name: rtorrent
volumes:
- "${DOCKER_STORAGE_PATH}/rtorrent/config:/config"
- "${DOCKER_STORAGE_PATH}/rtorrent/watch:/watch"
- ${STORAGE_PATH}/seed:/data
- /etc/localtime:/etc/localtime:ro
environment:
- PUID=${PUID}
- PGID=${PGID}
env_file:
- rtorrent.env
ports:
- "9080:9080"
- "9443:9443"
- "8118:8118"
- "6881:6881"
networks:
public:
ipv4_address: 192.168.240.9
profiles:
- base
restart: unless-stopped
webhook:
image: ${REGISTRY_URL}/webhook
container_name: webhook
build: https://git.kucharczyk.xyz/containers/webhook.git#main
user: ${PUID}:${PGID}
environment:
- TZ=${TZ}
volumes:
- "${DOCKER_STORAGE_PATH}/webhook/config:/config"
- "${DOCKER_STORAGE_PATH}/webhook/scripts:/var/webhook"
ports:
- "${WEBHOOK_EXTERNAL_PORT}:${WEBHOOK_INTERNAL_PORT}"
networks:
public:
ipv4_address: 192.168.240.10
profiles:
- base
- infra
restart: unless-stopped
valheim:
image: ghcr.io/lloesche/valheim-server
container_name: valheim
volumes:
- ${DOCKER_STORAGE_PATH}/valheim/config:/config
- ${DOCKER_STORAGE_PATH}/valheim/data:/opt/valheim
env_file:
- valheim.env
ports:
- ${VALHEIM_EXTERNAL_PORT}:${VALHEIM_INTERNAL_PORT}
cap_add:
- SYS_NICE
networks:
public:
ipv4_address: 192.168.240.11
profiles:
- disabled
restart: unless-stopped
7daystodie:
image: 7daysserver:latest
container_name: 7dtd
volumes:
- ${DOCKER_STORAGE_PATH}/7daystodie/saves:/home/steam/.local/share/7DaysToDie/Saves
- ${DOCKER_STORAGE_PATH}/7daystodie/server:/home/steam/server
ports:
- 26900-26902:26900-26902/udp
- 18500:8080
networks:
public:
ipv4_address: 192.168.240.12
profiles:
- disabled
restart: unless-stopped
stash:
image: stashapp/stash:latest
container_name: stash
ports:
- "${STASH_EXTERNAL_PORT}:${STASH_INTERNAL_PORT}"
## If you intend to use stash's DLNA functionality uncomment the below network mode and comment out the above ports section
# network_mode: host
logging:
driver: "json-file"
options:
max-file: "10"
max-size: "2m"
environment:
- STASH_STASH=/data/
- STASH_GENERATED=/generated/
- STASH_METADATA=/metadata/
- STASH_CACHE=/cache/
- STASH_PORT=${STASH_INTERNAL_PORT}
volumes:
- /etc/localtime:/etc/localtime:ro
## Adjust below paths (the left part) to your liking.
## E.g. you can change ./config:/root/.stash to ./stash:/root/.stash
## Keep configs, scrapers, and plugins here.
- "${DOCKER_STORAGE_PATH}/stash/config:/root/.stash"
## Point this at your collection.
- "${STORAGE_PATH}/xxx:/data/"
## This is where your stash's metadata lives
- "${DOCKER_STORAGE_PATH}/stash/metadata:/metadata"
## Any other cache content.
- "${DOCKER_STORAGE_PATH}/stash/cache:/cache"
## Where to store generated content (screenshots,previews,transcodes,sprites)
- "${DOCKER_STORAGE_PATH}/stash/generated:/generated"
## Where to store binary blob data (scene covers, images)
- "${DOCKER_STORAGE_PATH}/stash/blobs:/blobs"
networks:
public:
ipv4_address: 192.168.240.13
profiles:
- base
restart: unless-stopped
navidrome:
image: deluan/navidrome
container_name: navidrome
ports:
- "${NAVIDROME_EXTERNAL_PORT}:${NAVIDROME_INTERNAL_PORT}"
env_file:
- navidrome.env
user: "${PUID}:${PGID}"
volumes:
- "${DOCKER_STORAGE_PATH}/navidrome:/data"
- "${STORAGE_PATH}/media/music2:/music"
networks:
public:
ipv4_address: 192.168.240.14
profiles:
- base
restart: unless-stopped
maloja:
image: krateng/maloja
container_name: maloja
ports:
- "${MALOJA_EXTERNAL_PORT}:${MALOJA_INTERNAL_PORT}"
env_file:
- maloja.env
user: "${PUID}:${PGID}"
volumes:
- "${DOCKER_STORAGE_PATH}/maloja:/data"
networks:
public:
ipv4_address: 192.168.240.15
profiles:
- base
restart: unless-stopped
redis:
container_name: redis
image: docker.io/library/redis:7
networks:
public:
ipv4_address: 192.168.240.30
restart: unless-stopped
volumes:
- "${DOCKER_STORAGE_PATH}/redis:/data"
paperless-ngx:
container_name: paperless-ngx
image: ghcr.io/paperless-ngx/paperless-ngx:latest
restart: unless-stopped
depends_on:
- redis
- gotenberg
- tika
ports:
- "${PAPERLESS_EXTERNAL_PORT}:${PAPERLESS_INTERNAL_PORT}"
networks:
public:
ipv4_address: 192.168.240.16
profiles:
- base
healthcheck:
test:
[
"CMD",
"curl",
"-fs",
"-S",
"--max-time",
"2",
"http://localhost:8000"
]
interval: 30s
timeout: 10s
retries: 5
volumes:
- "${DOCKER_STORAGE_PATH}/paperless-ngx/data:/usr/src/paperless/data"
- "${DOCKER_STORAGE_PATH}/paperless-ngx/media:/usr/src/paperless/media"
- "${DOCKER_STORAGE_PATH}/paperless-ngx/export:/usr/src/paperless/export"
- "${DOCKER_STORAGE_PATH}/paperless-ngx/consume:/usr/src/paperless/consume"
env_file: paperless-ngx.env
environment:
PAPERLESS_REDIS: redis://redis:6379
PAPERLESS_TIKA_ENABLED: 1
PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
PAPERLESS_TIKA_ENDPOINT: http://tika:9998
PAPERLESS_URL: "https://paperless.${DOMAIN}"
gotenberg:
image: docker.io/gotenberg/gotenberg:7.6
restart: unless-stopped
networks:
public:
ipv4_address: 192.168.240.17
# The gotenberg chromium route is used to convert .eml files. We do not
# want to allow external content like tracking pixels or even javascript.
profiles:
- base
command:
- "gotenberg"
- "--chromium-disable-javascript=true"
- "--chromium-allow-list=file:///tmp/.*"
tika:
image: ghcr.io/paperless-ngx/tika:latest
networks:
public:
ipv4_address: 192.168.240.18
profiles:
- base
restart: unless-stopped
homer:
image: b4bz/homer
container_name: homer
ports:
- "${HOMER_EXTERNAL_PORT}:${HOMER_INTERNAL_PORT}"
networks:
public:
ipv4_address: 192.168.240.19
profiles:
- base
volumes:
- "${DOCKER_STORAGE_PATH}/homer:/www/assets"
environment:
UID: ${PUID}
GID: ${PGID}
restart: unless-stopped
syncthing:
image: lscr.io/linuxserver/syncthing:latest
container_name: syncthing
volumes:
- "${DOCKER_STORAGE_PATH}/syncthing:/config"
- "${STORAGE_PATH}/docker-storage/syncthing:/general"
ports:
- "${SYNCTHING_EXTERNAL_PORT1}:${SYNCTHING_INTERNAL_PORT1}"
- "${SYNCTHING_EXTERNAL_PORT2}:${SYNCTHING_INTERNAL_PORT2}"
- "${SYNCTHING_EXTERNAL_PORT3}:${SYNCTHING_INTERNAL_PORT3}"
- "${SYNCTHING_EXTERNAL_PORT4}:${SYNCTHING_INTERNAL_PORT4}"
environment:
- "PUID=${PUID}"
- "PGID=${PGID}"
restart: unless-stopped
profiles:
- base
networks:
public:
ipv4_address: 192.168.240.20
mediawiki:
container_name: mediawiki
image: mediawiki
networks:
public:
ipv4_address: 192.168.240.21
depends_on:
- mariadb
ports:
- "${MEDIAWIKI_EXTERNAL_PORT}:${MEDIAWIKI_INTERNAL_PORT}"
volumes:
- "${DOCKER_STORAGE_PATH}/mediawiki/images:/var/www/html/images"
- "${DOCKER_STORAGE_PATH}/mediawiki/extensions:/var/www/html/extensions"
- "${DOCKER_STORAGE_PATH}/mediawiki/LocalSettings.php:/var/www/html/LocalSettings.php"
profiles:
- base
restart: unless-stopped
photoprism:
container_name: photoprism
image: docker.io/photoprism/photoprism
networks:
public:
ipv4_address: 192.168.240.22
ports:
- "${PHOTOPRISM_EXTERNAL_PORT}:${PHOTOPRISM_INTERNAL_PORT}"
depends_on:
- mariadb
env_file:
- photoprism.env
volumes:
- "${PHOTOS_STORAGE_PATH}/import:/photoprism/import"
- "${PHOTOS_STORAGE_PATH}/originals:/photoprism/originals"
- "${PHOTOS_STORAGE_PATH}/storage:/photoprism/storage"
profiles:
- base
restart: unless-stopped
mariadb:
container_name: mariadb
image: linuxserver/mariadb
networks:
public:
ipv4_address: 192.168.240.23
ports:
- "${MARIADB_EXTERNAL_PORT}:${MARIADB_INTERNAL_PORT}"
volumes:
- "${DOCKER_STORAGE_PATH}/mariadb:/config"
- sockets:/run/mysqld/
restart: unless-stopped
profiles:
- infra
- base
baserow:
container_name: baserow
image: baserow/baserow:latest
networks:
public:
ipv4_address: 192.168.240.24
depends_on:
- postgres
env_file:
- baserow.env
volumes:
- "${DOCKER_STORAGE_PATH}/baserow:/baserow/data"
restart: unless-stopped
profiles:
- base
postgres:
container_name: postgres
image: postgres:latest
networks:
public:
ipv4_address: 192.168.240.25
volumes:
- "${DOCKER_STORAGE_PATH}/postgres:/var/lib/postgresql/data"
restart: unless-stopped
profiles:
- base
- infra
gitea:
container_name: gitea
image: ${REGISTRY_URL}/gitea:latest
networks:
public:
ipv4_address: 192.168.240.26
depends_on:
- postgres
ports:
- "${GITEA_WEBUI_EXTERNAL_PORT}:${GITEA_WEBUI_INTERNAL_PORT}"
- "${GITEA_SSH_EXTERNAL_PORT}:${GITEA_SSH_INTERNAL_PORT}"
volumes:
- "${DOCKER_STORAGE_PATH}/gitea:/data"
restart: unless-stopped
gitearunner:
container_name: gitearunner
image: gitea/act_runner
depends_on:
- gitea
volumes:
- "${DOCKER_STORAGE_PATH}/gitearunner/config:/config"
- "${DOCKER_STORAGE_PATH}/gitearunner/data:/data"
- /var/run/docker.sock:/var/run/docker.sock
networks:
public:
ipv4_address: 192.168.240.27
environment:
- GITEA_INSTANCE_URL=https://git.${DOMAIN}
- CONFIG_FILE=/config/config.yaml
# When using Docker Secrets, it's also possible to use
# GITEA_RUNNER_REGISTRATION_TOKEN_FILE to pass the location.
# The env var takes precedence
- GITEA_RUNNER_REGISTRATION_TOKEN=92U7bIiADtqkILwjjj9rffjz8vyNp0zo7uaOgrIG
- GITEA_RUNNER_LABELS="ubuntu-latest:docker://catthehacker/ubuntu:act-latest"
- GITEA_RUNNER_NAME="NAS_CONTAINER"
profiles:
- base
- infrastructure
restart: unless-stopped
linkace:
image: linkace/linkace:simple
container_name: linkace
networks:
public:
ipv4_address: 192.168.240.28
depends_on:
- mariadb
- redis
environment:
# these env variables are instead of .env file
# see https://www.linkace.org/docs/v1/setup/setup-with-docker/advanced-configuration/#using-docker-environment-variables-instead-of-the-env-file
- APP_KEY=base64:X6XDR+dfqn5PM9QdmmxJoOECSsldWhkfnyi6yvohgNM=
- DB_HOST=${MYSQL_HOST}
- DB_DATABASE=${LINKACE_DB}
- DB_USERNAME=${LINKACE_DB_USERNAME}
- DB_PASSWORD=${LINKACE_DB_PASSWORD}
- REDIS_HOST=redis
ports:
- "${LINKACE_EXTERNAL_PORT}:${LINKACE_INTERNAL_PORT}"
volumes:
- ${DOCKER_STORAGE_PATH}/linkace/backups:/app/storage/app/backups
- ${DOCKER_STORAGE_PATH}/linkace/logs:/app/storage/logs
restart: unless-stopped
profiles:
- base
# ghost:
# image: "ghost:latest"
# container_name: ghost
# environment:
# - url=http://blog.kucharczyk.xyz
# labels:
# - "traefik.enable=true"
# - "traefik.http.routers.ghost.rule=Host(`blog.kucharczyk.xyz`)"
# - "traefik.http.routers.ghost.entrypoints=https"
# - "traefik.http.routers.ghost.tls.certresolver=myresolver"
# volumes:
# - ${DOCKER_STORAGE_PATH}/ghost/content:/var/lib/ghost/content
# networks:
# - public
vaultwarden:
image: vaultwarden/server:latest
container_name: vaultwarden
networks:
public:
ipv4_address: 192.168.240.29
ports:
- "${VAULTWARDEN_EXTERNAL_PORT}:${VAULTWARDEN_INTERNAL_PORT}"
environment:
#- PUSH_ENABLED=true
#- PUSH_INSTALLATION='287eaff9-7be7-4b52-a31d-b09100dc0f5c'
#- PUSH_INSTALLATION_KEY='n0xrH7YORuvJk8rqvxB5'
- ADMIN_TOKEN=$$argon2id$$v=19$$m=65540,t=3,p=4$$aWJ2cVRvYUsySkM3M01TMTJJMnZqbUF0Wm1qRWhvd1B6Sk50Q1hwck96dz0$$FKjZ36E54pX2e0AE9OaDpiH43TyAyfVwr3IvracbqEA
volumes:
- ${DOCKER_STORAGE_PATH}/vaultwarden:/data
restart: unless-stopped
profiles:
- base
- infra
networks:
public:
attachable: true
ipam:
config:
# 192.168.240.1 - 192.168.240.254
- subnet: "192.168.240.0/24"
volumes:
timetracker-static:
sockets:
View Git Blame Copy Permalink