alias

authentik/stack.env

@@ -3,7 +3,7 @@ PG_USER=authentik
 PG_DB=authentik
 AUTHENTIK_SECRET_KEY=ZKkVCxj8kKj5ZklvzxKG2IgYQOftDoLPRjc57yomr1qzbKEQVZ
 AUTHENTIK_ERROR_REPORTING__ENABLED=true
-AUTHENTIK_TAG=2025.2.1
+AUTHENTIK_TAG=2025.4.1
 POSTGRES_PASSWORD=499NU6Ze5HcJK4IwSShO8oDbj3j0i0CalyEzfgEp
 POSTGRES_USER=authentik
 POSTGRES_DB=authentik

fail2ban/.env

@@ -0,0 +1,2 @@
+APPNAME=fail2ban
+DOCKER_REGISTRY=r.sectorq.eu/library/

fail2ban/docker-compose.yaml

@@ -1,35 +1,49 @@
 ---
 services:
-  fail2ban:
+  # fail2ban:
-    image: lscr.io/linuxserver/fail2ban:latest
+  #   image: lscr.io/linuxserver/fail2ban:latest
-    container_name: fail2ban
+  #   container_name: fail2ban
-    cap_add:
+  #   cap_add:
-      - NET_ADMIN
+  #     - NET_ADMIN
-      - NET_RAW
+  #     - NET_RAW
-    network_mode: host
+  #   network_mode: host
+  #   environment:
+  #     - PUID=1000
+  #     - PGID=1000
+  #     - TZ=Europe/Bratislava
+  #     - VERBOSITY=-vvv #optional
+  #   volumes:
+  #     - /share/docker_data/fail2ban/config:/config
+  #     - /share/docker_data/fail2ban/log:/var/log:ro
+  #     # - /path/to/airsonic/log:/remotelogs/airsonic:ro #optional
+  #     # - /path/to/apache2/log:/remotelogs/apache2:ro #optional
+  #     # - /path/to/authelia/log:/remotelogs/authelia:ro #optional
+  #     # - /path/to/emby/log:/remotelogs/emby:ro #optional
+  #     # - /path/to/filebrowser/log:/remotelogs/filebrowser:ro #optional
+  #     - /share/docker_data/ha:/remotelogs/homeassistant:ro #optional
+  #     # - /path/to/lighttpd/log:/remotelogs/lighttpd:ro #optional
+  #     # - /path/to/nextcloud/log:/remotelogs/nextcloud:ro #optional
+  #     # - /path/to/nginx/log:/remotelogs/nginx:ro #optional
+  #     # - /path/to/nzbget/log:/remotelogs/nzbget:ro #optional
+  #     # - /path/to/overseerr/log:/remotelogs/overseerr:ro #optional
+  #     # - /path/to/prowlarr/log:/remotelogs/prowlarr:ro #optional
+  #     # - /path/to/radarr/log:/remotelogs/radarr:ro #optional
+  #     # - /path/to/sabnzbd/log:/remotelogs/sabnzbd:ro #optional
+  #     # - /path/to/sonarr/log:/remotelogs/sonarr:ro #optional
+  #     # - /path/to/unificontroller/log:/remotelogs/unificontroller:ro #optional
+  #     # - /path/to/vaultwarden/log:/remotelogs/vaultwarden:ro #optional
+  #   restart: unless-stopped
+  blockips-unifi:
+    stdin_open: true
+    tty: true
+    container_name: blockips-unifi
+    restart: always
     environment:
-      - PUID=1000
-      - PGID=1000
         - TZ=Europe/Bratislava
-      - VERBOSITY=-vvv #optional
     volumes:
-      - /share/docker_data/fail2ban/config:/config
+        - /share/docker_data/unify_block/config.php:/config.php
-      - /share/docker_data/fail2ban/log:/var/log:ro
+        - /share/docker_data/unify_block/ban.sh:/ban.sh
-      # - /path/to/airsonic/log:/remotelogs/airsonic:ro #optional
+        - /share/docker_data/unify_block/crontab:/etc/crontabs/root
-      # - /path/to/apache2/log:/remotelogs/apache2:ro #optional
+        - /share/docker_data/fail2ban/ban:/ban
-      # - /path/to/authelia/log:/remotelogs/authelia:ro #optional
+        - /share/docker_data/fail2ban/unban:/unban
-      # - /path/to/emby/log:/remotelogs/emby:ro #optional
+    image: ${DOCKER_REGISTRY:-}tusc/blockips-unifi:latest
-      # - /path/to/filebrowser/log:/remotelogs/filebrowser:ro #optional
-      - /share/docker_data/ha:/remotelogs/homeassistant:ro #optional
-      # - /path/to/lighttpd/log:/remotelogs/lighttpd:ro #optional
-      # - /path/to/nextcloud/log:/remotelogs/nextcloud:ro #optional
-      # - /path/to/nginx/log:/remotelogs/nginx:ro #optional
-      # - /path/to/nzbget/log:/remotelogs/nzbget:ro #optional
-      # - /path/to/overseerr/log:/remotelogs/overseerr:ro #optional
-      # - /path/to/prowlarr/log:/remotelogs/prowlarr:ro #optional
-      # - /path/to/radarr/log:/remotelogs/radarr:ro #optional
-      # - /path/to/sabnzbd/log:/remotelogs/sabnzbd:ro #optional
-      # - /path/to/sonarr/log:/remotelogs/sonarr:ro #optional
-      # - /path/to/unificontroller/log:/remotelogs/unificontroller:ro #optional
-      # - /path/to/vaultwarden/log:/remotelogs/vaultwarden:ro #optional
-    restart: unless-stopped

gitea/docker-compose.yml

@@ -38,7 +38,7 @@ services:
     - /etc/timezone:/etc/timezone:ro
     - /etc/localtime:/etc/localtime:ro
   runner:
-    image: docker.io/gitea/act_runner:nightly
+    image: ${DOCKER_REGISTRY:-}docker.io/gitea/act_runner:nightly
     environment:
       CONFIG_FILE: /config/config.yaml
       GITEA_INSTANCE_URL: "https://gitea.sectorq.eu/"

kestra/.env

@@ -1,3 +1,2 @@
 APPNAME=kestra
-DOCKER_REGISTRY=r.sectorq.eu/library/
 PASSWORD=l4c1j4yd33Du5lo

mealie/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   mealie:
-    image: ghcr.io/mealie-recipes/mealie:v2.8.0 # 
+    image: ${DOCKER_REGISTRY}ghcr.io/mealie-recipes/mealie:v2.8.0 # 
     container_name: mealie
     restart: always
     ports:

mediacenter/.env

@@ -9,3 +9,4 @@ LIDARR_TOKEN=a9d7379966bd467aa0ad226848575e03
 QBIT_TOKEN=l4c1j4yd33Du5lo
 RADARR_TOKEN=671f20f9518b4ab3a977cc00f95b0427
 SONARR_TOKEN=325b15a81c544ed2a1cd2bb16e95a129
+HW_MODE=hw

mediacenter/docker-compose.yml

@@ -75,6 +75,8 @@ services:
       - /share/docker_data/homarr/data:/data
   jackett:
     container_name: jackett
+    dns:
+      - 192.168.77.101
     depends_on:
       - sonarr
       - radarr
@@ -282,6 +284,8 @@ services:
     - /media/data/downloads:/downloads
   sonarr:
     container_name: sonarr
+    dns:
+      - 192.168.77.101
     environment:
       - PUID=1000
       - PGID=1000

nextcloud/stack.env

@@ -5,6 +5,6 @@ MYSQL_DATABASE=nextcloud
 MYSQL_USER=nextcloud
 MYSQL_HOST=db
 REDIS_HOST=redis
-# - PHP_MEMORY_LIMIT=1024M
+PHP_MEMORY_LIMIT=1024M
-# - PHP_UPLOAD_LIMIT=1024M
+PHP_UPLOAD_LIMIT=1024M
-# - NEXTCLOUD_MEMORY_LIMIT=1024M
+NEXTCLOUD_MEMORY_LIMIT=1024M

octoprint/docker-compose.yml

@@ -2,7 +2,7 @@ services:
   octoprint1:
     container_name: octoprint1
     devices:
-    - /dev:/dev
+      - /dev/ttyUSB0:/dev/ttyUSB0
     environment:
     - ENABLE_MJPG_STREAMER=true
     image: ${DOCKER_REGISTRY:-}octoprint/octoprint:latest

paperless-ngx/docker-compose.yml

@@ -1,11 +1,11 @@
 services:
   broker:
-    image: ${DOCKER_REGISTRY}docker.io/library/redis:8
+    image: ${DOCKER_REGISTRY:-}docker.io/library/redis:8
     restart: unless-stopped
     volumes:
       - /share/docker_data/paperless/redisdata:/data
   webserver:
-    image: ${DOCKER_REGISTRY}ghcr.io/paperless-ngx/paperless-ngx:latest
+    image: ${DOCKER_REGISTRY:-}ghcr.io/paperless-ngx/paperless-ngx:latest
     restart: unless-stopped
     depends_on:
       - broker

zabbix-server/docker-compose.yml

@@ -26,7 +26,7 @@ services:
     - db-server
     env_file:
     - stack.env
-    image: ${DOCKER_REGISTRY:-}zabbix/zabbix-web-nginx-pgsql:alpine-latest
+    image: ${DOCKER_REGISTRY:-}zabbix/zabbix-web-nginx-pgsql:alpine-7.2.0
     labels:
       com.centurylinklabs.watchtower.enable: true
       wud.watch: true
@@ -48,7 +48,7 @@ services:
     extends:
       file: logging.yml
       service: ${LOGGING:-syslog}
-    image: ${DOCKER_REGISTRY:-}zabbix/zabbix-server-pgsql:alpine-latest
+    image: ${DOCKER_REGISTRY:-}zabbix/zabbix-server-pgsql:alpine-7.2.0
     labels:
       com.centurylinklabs.watchtower.enable: 'true'
       homepage.container: zabbix-server-zabbix-server-1