build

__swarm/homepage/homepage-swarm.yml

@@ -5,7 +5,7 @@ services:
     - 192.168.77.101
     - 192.168.77.238
     environment:
-      HOMEPAGE_ALLOWED_HOSTS: sectorq.eu,active.home.lan:3003,m-server.home.lan:3003,rpi5.home.lan:3003,nas.home.lan:3003,192.168.77.238:3003,rack.home.lan:3003,192.168.80.222:3003,192.168.77.101:9343
+      HOMEPAGE_ALLOWED_HOSTS: "*"
       TZ: Europe/Bratislava
     image: ${DOCKER_REGISTRY:-}ghcr.io/gethomepage/homepage:latest
     ports:

__swarm/nginx/nginx-swarm.yml

@@ -4,7 +4,7 @@ networks:
 services:
   app:
     dns:
-    - 192.168.78.254
+    - 192.168.77.1
     healthcheck:
       interval: 10s
       test:

linkwarden/.env

@@ -1,6 +1,6 @@
 NEXTAUTH_URL=https://linkwarden.sectorq.eu/api/v1/auth
 NEXTAUTH_SECRET=l4c1j4yd33Du5lo
-
+DOCKER_REGISTRY=r.sectorq.eu/library/
 # Manual installation database settings
 # Example: DATABASE_URL=postgresql://user:password@localhost:5432/linkwarden
 DATABASE_URL=

linkwarden/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   postgres:
-    image: postgres:16-alpine
+    image: ${DOCKER_REGISTRY:-}postgres:16-alpine
     env_file: .env
 
     restart: always
@@ -12,7 +12,7 @@ services:
       - DATABASE_URL=postgresql://postgres:${POSTGRES_PASSWORD}@postgres:5432/postgres
     restart: always
     # build: . # uncomment to build from source
-    image: ghcr.io/linkwarden/linkwarden:latest # comment to build from source
+    image: ${DOCKER_REGISTRY:-}ghcr.io/linkwarden/linkwarden:latest # comment to build from source
     ports:
       - 3011:3000
     volumes:
@@ -36,7 +36,7 @@ services:
       wud.watch: true
       wud.watch.digest: true
   meilisearch:
-    image: getmeili/meilisearch:v1.12.8
+    image: ${DOCKER_REGISTRY:-}getmeili/meilisearch:v1.12.8
     restart: always
     env_file:
       - .env

mailu3/stack.env

@@ -141,10 +141,10 @@ COMPOSE_PROJECT_NAME=mailu
 CREDENTIAL_ROUNDS=12
 
 # Header to take the real ip from
-REAL_IP_HEADER=X-Real-IP
-
+# REAL_IP_HEADER=X-Real-IP
+REAL_IP_HEADER=X-Forwarded-For
 # IPs for nginx set_real_ip_from (CIDR list separated by commas)
-REAL_IP_FROM=192.168.77.101
+REAL_IP_FROM=172.0.0.0/8
 
 # choose wether mailu bounces (no) or rejects (yes) mail when recipient is unknown (value: yes, no)
 REJECT_UNLISTED_RECIPIENT=

mediacenter/docker-compose_nas.yml

@@ -0,0 +1,361 @@
+networks:
+  duplicati:
+    driver: bridge
+  mediarr:
+    driver: bridge
+volumes:
+  homarr_configs:
+  homarr_icons:
+  homarr_data:
+  jackett_config:
+  jackett_downloads:
+  jellyfin_config:
+  jellyseerr_config:
+  lidarr_config:
+  qbittorrent_config:
+  radarr_config:
+  sonarr_config:
+  bazarr_config:
+  # m-server_music:
+  #   driver: local
+  #   driver_opts:
+  #     type: nfs
+  #     o: addr=192.168.77.101,rw,nfsvers=4.1,nolock,nofail
+  #     device: "192.168.77.101:/music"
+  # m-server_movies:
+  #   driver: local
+  #   driver_opts:
+  #     type: nfs
+  #     o: addr=192.168.77.101,rw,nfsvers=4.1,nolock,nofail
+  #     device: "192.168.77.101:/movies"
+  # m-server_shows:
+  #   driver: local
+  #   driver_opts:
+  #     type: nfs
+  #     o: addr=192.168.77.101,rw,nfsvers=4.1,nolock,nofail
+  #     device: "192.168.77.101:/shows"
+
+services:
+  bazarr:
+    container_name: bazarr
+    depends_on:
+      - sonarr
+      - radarr
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Bratislava
+    hostname: bazarr
+    image: ${DOCKER_REGISTRY:-}lscr.io/linuxserver/bazarr:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: bazarr
+      homepage.description: Subtitles
+      homepage.group: Media
+      homepage.href: https://bazarr.sectorq.eu
+      homepage.icon: bazarr.png
+      homepage.name: bazarr
+      homepage.server: my-docker
+      homepage.weight: '90'
+      homepage.widget.key: ${BAZARR_TOKEN}
+      homepage.widget.type: bazarr
+      homepage.widget.url: https://bazarr.sectorq.eu
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+      - mediarr
+    ports:
+      - 6767:6767
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+      - bazarr_config:/config
+      # - m-server_movies:/movies/m-server
+      # - m-server_shows:/tv/m-server
+      - /share/movies:/movies/nas
+      - /share/shows:/tv/nas
+  flaresolverr:
+    container_name: flaresolverr
+    environment:
+    - LOG_LEVEL=info
+    - TZ=Europe/Bratislava
+    hostname: flaresolverr
+    image: ${DOCKER_REGISTRY:-}ghcr.io/flaresolverr/flaresolverr:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: true
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+      - mediarr
+    ports:
+      - 8191:8191
+    restart: ${RESTART:-unless-stopped}
+  homarr:
+    container_name: homarr
+    hostname: homarr
+    image: ${DOCKER_REGISTRY:-}ghcr.io/ajnart/homarr:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: true
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+      - mediarr
+    ports:
+      - 7575:7575
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - homarr_configs:/app/data/configs
+      - homarr_icons:/app/public/icons
+      - homarr_data:/data
+  jackett:
+    container_name: jackett
+    dns:
+      - 192.168.77.101
+    depends_on:
+      - sonarr
+      - radarr
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Bratislava
+      - AUTO_UPDATE=true
+      - RUN_OPTS=
+    hostname: jackett
+    image: ${DOCKER_REGISTRY:-}lscr.io/linuxserver/jackett:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: jackett
+      homepage.description: Subtitles
+      homepage.group: Media
+      homepage.href: https://jackett.sectorq.eu
+      homepage.icon: jackett.png
+      homepage.name: Jackett
+      homepage.server: my-docker
+      homepage.weight: '80'
+      homepage.widget.password: ${JACKET_TOKEN}
+      homepage.widget.type: jackett
+      homepage.widget.url: https://jackett.sectorq.eu
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+    - mediarr
+    ports:
+    - 9117:9117
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - jackett_config:/config
+    - jackett_downloads:/downloads
+  jellyfin:
+    container_name: jellyfin
+    environment:
+    - PUID=1000
+    - PGID=1000
+    - TZ=Europe/Bratislava
+    - JELLYFIN_PublishedServerUrl=https://jf.sectorq.eu
+    extends:
+      file: hwaccel.yml
+      service: ${HW_MODE:-cpu}
+    hostname: jellyfin
+    image: ${DOCKER_REGISTRY:-}lscr.io/linuxserver/jellyfin:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: jellyfin
+      homepage.description: Subtitles
+      homepage.group: Media
+      homepage.href: https://jf.sectorq.eu
+      homepage.icon: jellyfin.png
+      homepage.name: Jellyfin
+      homepage.server: my-docker
+      homepage.weight: '10'
+      homepage.widget.key: ${JELLYFIN_TOKEN}
+      homepage.widget.type: jellyfin
+      homepage.widget.url: https://jf.sectorq.eu
+      wud.watch: true
+      wud.watch.digest: true
+    network_mode: host
+    ports:
+    - 8096:8096
+    - 8920:8920
+    - 7359:7359
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - jellyfin_config:/config
+    # - m-server_movies:/data/movies/m-server
+    # - m-server_music:/data/music/m-server
+    # - m-server_shows:/data/shows/m-server
+    - /share/movies:/data/movies/nas
+    - /share/music:/data/music/nas
+    - /share/shows:/data/shows/nas
+    - /share/live:/data/live/nas
+    - /share/xxx:/data/xxx/nas
+  jellyseerr:
+    container_name: jellyseerr
+    environment:
+    - LOG_LEVEL=debug
+    - TZ=Europe/Bratislava
+    hostname: jellyseerr
+    image: ${DOCKER_REGISTRY:-}fallenbagel/jellyseerr:latest
+    labels:
+      com.centurylinklabs.watchtower.enabl: 'true'
+      homepage.container: jellyseerr
+      homepage.description: Subtitles
+      homepage.group: Media
+      homepage.href: https://js.sectorq.eu
+      homepage.icon: jellyseerr.png
+      homepage.name: Jellyseerr
+      homepage.server: my-docker
+      homepage.weight: '20'
+      homepage.widget.key: ${JELLYSEER_TOKEN}
+      homepage.widget.type: jellyseerr
+      homepage.widget.url: https://js.sectorq.eu
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+    - mediarr
+    ports:
+    - 5055:5055
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - jellyseerr_config:/app/config
+  lidarr:
+    container_name: lidarr
+    dns:
+      - 8.8.8.8
+      - 192.168.77.101
+    environment:
+    # - PUID=1000
+    # - PGID=1000
+    - TZ=Europe/Bratislava
+    hostname: lidarr
+    image: ${DOCKER_REGISTRY:-}lscr.io/linuxserver/lidarr:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: lidarr
+      homepage.description: Subtitles
+      homepage.group: Media
+      homepage.href: https://lidarr.sectorq.eu
+      homepage.icon: lidarr.png
+      homepage.name: Lidarr
+      homepage.server: my-docker
+      homepage.weight: '60'
+      homepage.widget.key: ${LIDARR_TOKEN}
+      homepage.widget.type: lidarr
+      homepage.widget.url: https://lidarr.sectorq.eu
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+    - mediarr
+    ports:
+    - 8686:8686
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - lidarr_config:/config
+    # - m-server_music:/music
+    - /share/downloads:/downloads
+  qbittorrent:
+    container_name: qbittorrent
+    environment:
+    - PUID=1000
+    - PGID=1000
+    - TZ=Europe/Bratislava
+    - WEBUI_PORT=8085
+    - FILE__PASSWORD=/run/secrets/mysecretpassword
+    hostname: qbittorrent
+    image: ${DOCKER_REGISTRY:-}lscr.io/linuxserver/qbittorrent:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: qbittorrent
+      homepage.description: Subtitles
+      homepage.group: Utilities
+      homepage.href: https://qbit.sectorq.eu
+      homepage.icon: qbittorrent.png
+      homepage.name: Qbittorrent
+      homepage.server: my-docker
+      homepage.weight: '95'
+      homepage.widget.enableLeechProgress: 'false'
+      homepage.widget.password: ${QBIT_TOKEN}
+      homepage.widget.type: qbittorrent
+      homepage.widget.url: https://qbit.sectorq.eu
+      homepage.widget.username: admin
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+    - mediarr
+    ports:
+    - 8085:8085
+    - 6881:6881
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - qbittorrent_config:/config
+    - /share/downloads:/downloads
+  radarr:
+    container_name: radarr
+    dns:
+    - 192.168.77.101
+    environment:
+    - PUID=1000
+    - PGID=1000
+    - TZ=Europe/Bratislava
+    hostname: radarr
+    image: ${DOCKER_REGISTRY:-}lscr.io/linuxserver/radarr:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: radarr
+      homepage.description: Subtitles
+      homepage.group: Media
+      homepage.href: https://radarr.sectorq.eu
+      homepage.icon: radarr.png
+      homepage.name: Radarr
+      homepage.server: my-docker
+      homepage.weight: '20'
+      homepage.widget.key: ${RADARR_TOKEN}
+      homepage.widget.type: radarr
+      homepage.widget.url: https://radarr.sectorq.eu
+      wud.display.icon: mdi:radarr
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+    - mediarr
+    ports:
+    - 7878:7878
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - radarr_config:/config
+    # - m-server_movies:/movies-m-server
+    - /share/movies:/movies-nas
+    - /share/downloads:/downloads
+  sonarr:
+    container_name: sonarr
+    dns:
+      - 192.168.77.101
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Bratislava
+    hostname: sonarr
+    image: ${DOCKER_REGISTRY:-}lscr.io/linuxserver/sonarr:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: 'true'
+      homepage.container: sonarr
+      homepage.description: Subtitles
+      homepage.group: Media
+      homepage.href: https://sonarr.sectorq.eu
+      homepage.icon: sonarr.png
+      homepage.name: Sonarr
+      homepage.server: my-docker
+      homepage.weight: '30'
+      homepage.widget.key: ${SONARR_TOKEN}
+      homepage.widget.type: sonarr
+      homepage.widget.url: https://sonarr.sectorq.eu
+      wud.watch: true
+      wud.watch.digest: true
+    networks:
+    - mediarr
+    ports:
+    - 8989:8989
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - sonarr_config:/config
+    # - m-server_shows:/tv-m-server
+    - /share/shows:/tv-nas
+    - /share/downloads:/downloads

mediacenter/hwaccel.yml

@@ -5,4 +5,4 @@ services:
   hw:
     devices:
       - /dev/dri/renderD128
-      - /dev/dri/card1
+      - /dev/dri/card0

puppet/docker-compose.yml

@@ -0,0 +1,31 @@
+version: "3.8"
+
+services:
+  puppetserver:
+    image: puppet/puppetserver:latest
+    container_name: puppetserver
+    hostname: active.home.lan
+    ports:
+      - "8140:8140"
+    environment:
+      - PUPPETSERVER_HOSTNAME=active.home.lan
+    volumes:
+      # Main Puppet config
+      - puppet-puppet:/etc/puppetlabs/puppet
+      - puppet-server:/etc/puppetlabs/puppetserver
+      # Puppet code (manifests, modules)
+      - puppet-code:/etc/puppetlabs/code
+
+    networks:
+      puppetnet:
+        aliases:
+          - puppet
+          - puppetserver
+          - active.home.lan
+
+networks:
+  puppetnet:
+volumes:
+  puppet-code:
+  puppet-server:
+  puppet-puppet:

puppet_agent/docker-compose.yml

@@ -0,0 +1,13 @@
+---
+services:
+  puppet-agent:
+    image: puppet/puppet-agent:latest
+    container_name: puppet-agent
+    hostname: nas.home.lan
+    environment:
+      - PUPPET_SERVER=active.home.lan
+    volumes:
+      - data:/etc/puppetlabs/puppet
+    command: ["agent", "-t"]
+volumes:
+  data:

registry/docker-compose_nas.yml

@@ -0,0 +1,24 @@
+name: registry
+services:
+  registry:
+    container_name: registry
+    environment:
+    - REGISTRY_STORAGE_DELETE_ENABLED=true
+    - REGISTRY_AUTH=htpasswd
+    - REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm
+    - REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd
+    image: registry:2
+    labels:
+      wud.watch: false
+      wud.watch.digest: false
+    logging:
+      driver: loki
+      options:
+        loki-url: http://192.168.77.101:3100/loki/api/v1/push
+    ports:
+    - 5000:5000
+    restart: always
+    volumes:
+    - /share/docker_data/registry/auth:/auth
+    - /share/docker_registry/data:/var/lib/registry
+    - /share/docker_data/registry/config:/etc/docker/registry/