build

__swarm/homepage/homepage-swarm.yml

@@ -1,16 +1,11 @@
-networks:
-  pihole_pihole:
-    external: true
 services:
   homepage:
     dns:
-    - 192.168.78.254
+    - 192.168.77.101
     environment:
       HOMEPAGE_ALLOWED_HOSTS: sectorq.eu,active.home.lan:3003,m-server.home.lan:3003,rpi5.home.lan:3003,nas.home.lan:3003,192.168.77.238:3003,rack.home.lan:3003,192.168.80.222:3003
       TZ: Europe/Bratislava
     image: ${DOCKER_REGISTRY:-}ghcr.io/gethomepage/homepage:latest
-    networks:
-    - pihole_pihole
     ports:
     - target: 3000
       published: 3003

__swarm/immich/.env

@@ -21,4 +21,6 @@ DB_PASSWORD=postgres
 DB_USERNAME=postgres
 DB_DATABASE_NAME=immich
 HW_MODE1=vaapi
-HW_MODE2=openvino
+HW_MODE2=openvino
+APPNAME=immich
+DOCKER_REGISTRY=r.sectorq.eu/library/

__swarm/immich/immich-swarm.yml

@@ -1,5 +1,5 @@
 services:
-  immich-server:
+  server:
     image: ${DOCKER_REGISTRY:-}ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
     # devices:
     #   - /dev/dri:/dev/dri
@@ -38,7 +38,7 @@ services:
       placement:
         constraints:
         - node.role == manager
-  immich-machine-learning:
+  machine-learning:
     image: ${DOCKER_REGISTRY:-}ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
     # device_cgroup_rules:
     #   - 'c 189:* rmw'

__swarm/immich/stack.env

@@ -20,4 +20,6 @@ DB_PASSWORD=postgres
 ###################################################################################
 DB_USERNAME=postgres
 DB_DATABASE_NAME=immich
-POSTGRES_PASSWORD=postgres
+POSTGRES_PASSWORD=postgres
+APPNAME=immich
+DOCKER_REGISTRY=r.sectorq.eu/library/

__swarm/jupyter/jupyter-swarm.yml

@@ -10,7 +10,7 @@ services:
     image: ${DOCKER_REGISTRY:-}jupyter/base-notebook:latest
     deploy:
       labels:
-        homepage.container: jupyter-base-notebook-1
+        homepage.container: jupyter_base-notebook
         homepage.description: Python server
         homepage.group: Utils
         homepage.href: http://m-server.home.lan:8888/

__swarm/kestra/kestra-swarm.yml

@@ -4,15 +4,37 @@ services:
     environment:
       SECRET_MYPASSWORD: bDRjMWo0eWQzM0R1NWxv
       SECRET_GITLAB: Z2xwYXQtdWotbi1lRWZUWTM5OFBFNHZLU1M=
-      KESTRA_CONFIGURATION: "datasources:\n  postgres:\n    url: jdbc:postgresql://postgres:5432/kestra\n\
+      KESTRA_CONFIGURATION: |
-        \    driverClassName: org.postgresql.Driver\n    username: kestra\n    password:\
+        datasources:
-        \ k3str4\nkestra:\n  server:\n    basicAuth:\n      enabled: false\n     \
+          postgres:
-        \ username: \"jaydee@sectorq.eu\" # it must be a valid email address\n   \
+            url: jdbc:postgresql://postgres:5432/kestra
-        \   password: ${PASSWORD}\n  repository:\n    type: postgres\n  storage:\n\
+            driverClassName: org.postgresql.Driver
-        \    type: local\n    local:\n      basePath: \"/app/storage\"\n  queue:\n\
+            username: kestra
-        \    type: postgres\n  tasks:\n    tmpDir:\n      path: /tmp/kestra-wd/tmp\n\
+            password: k3str4
-        \  url: http://localhost:8080/\n  tutorial-flows:\n    enabled: false\nmicronaut:\n\
+        kestra:
-        \  server:\n    cors:\n      enabled: true\n"
+          server:
+            basicAuth:
+              enabled: false
+              username: "jaydee@sectorq.eu" # it must be a valid email address
+              password: ${PASSWORD}
+          repository:
+            type: postgres
+          storage:
+            type: local
+            local:
+              basePath: "/app/storage"
+          queue:
+            type: postgres
+          tasks:
+            tmpDir:
+              path: /tmp/kestra-wd/tmp
+          url: http://localhost:8080/
+          tutorial-flows:
+            enabled: false
+        micronaut:
+          server:
+            cors:
+              enabled: true
     image: ${DOCKER_REGISTRY:-}kestra/kestra:${KESTRA_VERSION:-latest}
     ports:
     - target: 8080
@@ -32,7 +54,7 @@ services:
     deploy:
       labels:
         com.centurylinklabs.watchtower.enable: 'true'
-        homepage.container: kestra-kestra-1
+        homepage.container: kestra_kestra
         homepage.description: Automation
         homepage.group: Infrastructure
         homepage.href: https://${APPNAME}.sectorq.eu

__swarm/mealie/mealie-swarm.yml

@@ -1,5 +1,5 @@
 services:
-  mealie:
+  app:
     image: ${DOCKER_REGISTRY}ghcr.io/mealie-recipes/mealie:v2.8.0
     ports:
     - target: 9000
@@ -11,7 +11,7 @@ services:
         limits:
           memory: 1000M
       labels:
-        homepage.container: mealie
+        homepage.container: mealie_app
         homepage.description: Recipe server
         homepage.group: Utils
         homepage.href: https://${APPNAME}.sectorq.eu

__swarm/mosquitto/mosquitto-swarm.yml

@@ -1,7 +1,11 @@
 services:
   mosquitto:
     image: ${DOCKER_REGISTRY:-}eclipse-mosquitto
-    network_mode: host
+    ports:
+    - target: 1883
+      published: 1883
+      protocol: tcp
+      mode: host
     volumes:
     - conf:/mosquitto/config
     - data:/mosquitto/data

__swarm/motioneye/motioneye-swarm.yml

@@ -1,5 +1,5 @@
 services:
-  motioneye:
+  app:
     dns:
     - 192.168.77.101
     environment:
@@ -16,12 +16,12 @@ services:
       mode: ingress
     volumes:
     - /etc/localtime:/etc/localtime:ro
-    - /share/docker_data/motioneye/etc_motioneye:/etc/motioneye
+    - config:/etc/motioneye
-    - /share/docker_data/motioneye/var_lib_motioneye:/var/lib/motioneye
+    - data:/var/lib/motioneye
     deploy:
       labels:
         com.centurylinklabs.watchtower.enable: 'true'
-        homepage.container: motioneye
+        homepage.container: motioneye_app
         homepage.description: Video manager
         homepage.group: Media
         homepage.href: http://m-server.home.lan:8765/
@@ -35,3 +35,6 @@ services:
       placement:
         constraints:
         - node.role == manager
+volumes:
+  config:
+  data:

__swarm/n8n/n8n-swarm.yml

@@ -1,6 +1,6 @@
 version: '3'
 services:
-  n8n:
+  app:
     image: ${DOCKER_REGISTRY:-}n8nio/n8n:latest
     ports:
     - target: 5678
@@ -20,11 +20,11 @@ services:
       N8N_SECURE_COOKIE: 'false'
       WEBHOOK_URL: https://n8n.sectorq.eu
     volumes:
-    - n8n-data:/home/node/.n8n
+    - data:/home/node/.n8n
     stop_grace_period: 60s
     deploy:
       labels:
-        homepage.container: n8n
+        homepage.container: n8n_app
         homepage.description: Workflow management
         homepage.group: Utils
         homepage.href: https://${APPNAME}.sectorq.eu
@@ -38,5 +38,5 @@ services:
         constraints:
         - node.role == manager
 volumes:
-  n8n-data:
+  data:
     driver: local

__swarm/nebula/nebula-swarm.yml

@@ -0,0 +1,15 @@
+services:
+  nebula-sync:
+    image: ghcr.io/lovelaze/nebula-sync:latest
+    environment:
+      PRIMARY: http://192.168.77.101:9380|l4c1j4yd33Du5lo
+      REPLICAS: http://192.168.77.106:9380|l4c1j4yd33Du5lo
+      CLIENT_SKIP_TLS_VERIFICATION: 'true'
+      FULL_SYNC: 'true'
+      RUN_GRAVITY: 'true'
+      CRON: 0 * * * *
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+        - node.role == manager

__swarm/nextcloud/.env

@@ -1,2 +1,3 @@
 APPNAME=nextcloud
-#RESTART=always
+#RESTART=always
+DOCKER_REGISTRY=r.sectorq.eu/library/

__swarm/nextcloud/nextcloud-swarm.yml

@@ -1,23 +1,12 @@
-networks:
-  nextcloud_network:
-    ipam:
-      config:
-      - subnet: 192.168.80.0/28
-      driver: default
-  pihole_pihole:
-    external: true
 services:
   app:
     dns:
-    - 192.168.78.254
+    - 192.168.77.101
     env_file:
     - stack.env
     image: ${DOCKER_REGISTRY:-}nextcloud:latest
     links:
     - db
-    networks:
-    - nextcloud_network
-    - pihole_pihole
     ports:
     - target: 80
       published: 8134
@@ -35,7 +24,7 @@ services:
         com.centurylinklabs.watchtower.enable: 'true'
         com.centurylinklabs.watchtower.lifecycle.post-update: apt update;apt install
           -y smbclient;chown -R www-data:www-data /var/www/html
-        homepage.container: nextcloud-app-1
+        homepage.container: nextcloud_app
         homepage.description: Cloud server
         homepage.group: Infrastructure
         homepage.href: https://nc.sectorq.eu
@@ -58,8 +47,6 @@ services:
     env_file:
     - stack.env
     image: ${DOCKER_REGISTRY:-}yobasystems/alpine-mariadb:latest
-    networks:
-    - nextcloud_network
     volumes:
     - mariadb:/var/lib/mysql
     - /etc/localtime:/etc/localtime
@@ -74,8 +61,6 @@ services:
         - node.role == manager
   redis:
     image: ${DOCKER_REGISTRY:-}redis:alpine
-    networks:
-    - nextcloud_network
     volumes:
     - redis:/data
     deploy:
@@ -104,8 +89,6 @@ services:
       protocol: tcp
       mode: ingress
     image: ${DOCKER_REGISTRY:-}ghcr.io/nextcloud/nextcloud-appapi-harp:release
-    networks:
-    - nextcloud_network
     deploy:
       labels:
         wud.watch: 'true'

__swarm/node-red/node-red-swarm.yml

@@ -1,14 +1,10 @@
-networks:
-  node-red-net: null
 services:
-  node-red:
+  app:
     dns:
     - 192.168.77.101
     environment:
       TZ: Europe/Bratislava
     image: ${DOCKER_REGISTRY:-}nodered/node-red:latest
-    networks:
-    - node-red-net
     ports:
     - target: 1880
       published: 1880
@@ -21,7 +17,7 @@ services:
         com.centurylinklabs.watchtower.enable: 'true'
         wud.watch: 'true'
         wud.watch.digest: 'true'
-        homepage.container: node-red-node-red-1
+        homepage.container: node-red_app
         homepage.description: Node red
         homepage.group: Infrastructure
         homepage.href: http://active.home.lan:1880

__swarm/ollama/ollama-swarm.yml

@@ -1,11 +1,11 @@
 services:
-  ollama:
+  app:
     image: ${DOCKER_REGISTRY:-}ollama/ollama:rocm
     devices:
     - /dev/kfd
     - /dev/dri
     volumes:
-    - ollama_models:/root/.ollama
+    - models:/root/.ollama
     environment:
       HSA_OVERRIDE_GFX_VERSION: 11.0.0
     ports:
@@ -21,4 +21,4 @@ services:
         constraints:
         - node.role == manager
 volumes:
-  ollama_models:
+  models:

__swarm/onlyoffice/onlyoffice-swarm.yml

@@ -1,11 +1,11 @@
 services:
-  onlyoffice-documentserver:
+  server:
     build:
       context: .
     image: onlyoffice/documentserver
     environment:
       DB_TYPE: postgres
-      DB_HOST: onlyoffice-postgresql
+      DB_HOST: postgresql
       DB_PORT: '5432'
       DB_NAME: onlyoffice
       DB_USER: onlyoffice
@@ -42,10 +42,10 @@ services:
         com.centurylinklabs.watchtower.enable: 'true'
         wud.watch: 'true'
         wud.watch.digest: 'true'
-        homepage.container: onlyoffice-documentserver
+        homepage.container: onlyoffice_server
         homepage.description: OnlyOffice Document Server
         homepage.group: Infrastructure
-        homepage.href: http://active.home.lan:8280/example
+        homepage.href: http://active.home.lan:8280/example/
         homepage.icon: onlyoffice.png
         homepage.name: OnlyOffice Document Server
         homepage.server: my-docker-swarm
@@ -71,7 +71,7 @@ services:
       placement:
         constraints:
         - node.role == manager
-  onlyoffice-postgresql:
+  postgresql:
     image: postgres:15
     environment:
       POSTGRES_DB: onlyoffice
@@ -80,7 +80,7 @@ services:
     expose:
     - '5432'
     volumes:
-    - postgresql_data:/var/lib/postgresql
+    - db:/var/lib/postgresql
     healthcheck:
       test:
       - CMD-SHELL
@@ -95,7 +95,7 @@ services:
         constraints:
         - node.role == manager
 volumes:
-  postgresql_data:
+  db:
   data:
   logs:
   cache:

__swarm/pihole/pihole-swarm.yml

@@ -1,7 +1,7 @@
 volumes:
-  pihole_etc_pihole:
+  data::
     driver: local
-  pihole_etc_dnsmasq_d:
+  dnsmasq_d:
     driver: local
 
 networks:
@@ -12,7 +12,7 @@ networks:
       config:
         - subnet: 192.168.78.0/24
 services:
-  pihole:
+  app:
     cap_add:
     - NET_ADMIN
     - SYS_TIME
@@ -41,12 +41,12 @@ services:
       protocol: tcp
       mode: ingress
     volumes:
-    - pihole_etc_pihole:/etc/pihole
+    - data:/etc/pihole
-    - pihole_etc_dnsmasq_d:/etc/dnsmasq.d
+    - dnsmasq_d:/etc/dnsmasq.d
     deploy:
       labels:
         com.centurylinklabs.watchtower.enable: 'true'
-        homepage.container: pihole
+        homepage.container: pihole_app
         homepage.description: Add blocker
         homepage.group: Infrastructure
         homepage.href: https://active.home.lan:9343/admin

__swarm/rancher/rancher-swarm.yml

@@ -11,7 +11,6 @@ services:
       published: 7443
       protocol: tcp
       mode: ingress
-    privileged: true
     volumes:
     - data:/var/lib/rancher
     cap_add:

__swarm/registry/docker-compose.yml

@@ -21,3 +21,4 @@ services:
     volumes:
     - /share/docker_data/registry/auth:/auth
     - /share/docker_registry/data:/var/lib/registry
+    - /share/docker_data/registry/config:/etc/docker/registry/

rancher/docker-compose.yml

@@ -12,4 +12,6 @@ services:
     privileged: true
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/rancher:/var/lib/rancher
+    - data:/var/lib/rancher
+volumes:
+  data:

registry/docker-compose.yml

@@ -21,3 +21,4 @@ services:
     volumes:
     - /share/docker_data/registry/auth:/auth
     - /share/docker_registry/data:/var/lib/registry
+    - /share/docker_data/registry/config:/etc/docker/registry/