build

gitlab/docker-compose.yml

@@ -41,7 +41,7 @@ services:
       wud.watch.digest: true
     network_mode: bridge
     ports:
-    - 8780:80
+    - 8785:80
     - 8743:443
     - '8722:22'
     restart: unless-stopped

homepage/docker-compose.yml

@@ -23,3 +23,4 @@ services:
     - /share/docker_data/homepage/config:/app/config
     - /var/run/docker.sock:/var/run/docker.sock:ro
     - /share/docker_data/homepage/images:/app/public/images
+    - /share/docker_data/homepage/icons:/app/public/icons

immich/.env

@@ -1,13 +1,14 @@
-# You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables
+# You can find documentation for all the supported env variables at https://docs.immich.app/install/environment-variables
 
 # The location where your uploaded files are stored
-UPLOAD_LOCATION=./library
-# The location where your database files are stored
-DB_DATA_LOCATION=./postgres
+UPLOAD_LOCATION=/media/nas/nas-qda_1/immich/library
+
+# The location where your database files are stored. Network shares are not supported for the database
+DB_DATA_LOCATION=/share/docker_data/immich/db
 
 # To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
 # TZ=Etc/UTC
-TZ=Europe/Bratislava
+
 # The Immich version to use. You can pin this to a specific version like "v1.71.0"
 IMMICH_VERSION=release
 
@@ -19,9 +20,3 @@ DB_PASSWORD=postgres
 ###################################################################################
 DB_USERNAME=postgres
 DB_DATABASE_NAME=immich
-IMMICH_INSTANCE_URL=https://immich.sectorq.eu/api
-IMMICH_API_KEY=l4c1j4yd33Du5lo
-APPNAME=immich
-DOCKER_REGISTRY=r.sectorq.eu/library/
-HW_MODE1=vaapi
-HW_MODE2=openvino

immich/docker-compose.yml

@@ -1,59 +1,36 @@
+#
+# WARNING: To install Immich, follow our guide: https://docs.immich.app/install/docker-compose
+#
+# Make sure to use the docker-compose.yml of the current release:
+#
+# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
+#
+# The compose file on main may not be compatible with the latest release.
+
 name: immich
+
 services:
-  database:
-    command: postgres -c shared_preload_libraries=vectors.so -c 'search_path="$$user",
-      public, vectors' -c logging_collector=on -c max_wal_size=2GB -c shared_buffers=512MB
-      -c wal_compression=on
-    container_name: immich_postgres
-    env_file:
-    - stack.env
-    environment:
-      POSTGRES_INITDB_ARGS: --data-checksums
-    healthcheck:
-      interval: 5m
-      start_interval: 30s
-      start_period: 5m
-      test: pg_isready --dbname="$${DB_PASSWORD}" --username="$${DB_USERNAME}" ||
-        exit 1; Chksum="$$(psql --dbname="$${DB_DATABASE_NAME}" --username="$${DB_USERNAME}"
-        --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures),
-        0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [
-        "$$Chksum" = '0' ] || exit 1
-    image: ${DOCKER_REGISTRY:-}docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0
-    labels:
-      wud.watch: true
-      wud.watch.digest: true
-    restart: ${RESTART:-unless-stopped}
-    volumes:
-    - /share/docker_data/immich/db:/var/lib/postgresql/data
-  immich-machine-learning:
-    container_name: immich_machine_learning
-    env_file:
-    - stack.env
-    extends:
-      file: hwaccel.ml.yml
-      service: ${HW_MODE2:-cpu}
-    healthcheck:
-      disable: false
-    image: ${DOCKER_REGISTRY:-}ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
-    labels:
-      wud.watch: true
-      wud.watch.digest: true
-    restart: ${RESTART:-unless-stopped}
-    volumes:
-    - model-cache:/cache
   immich-server:
     container_name: immich_server
-    depends_on:
-    - redis
-    - database
-    env_file:
-    - stack.env
+    image: ${DOCKER_REGISTRY:-}ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
     extends:
       file: hwaccel.transcoding.yml
-      service: ${HW_MODE1:-cpu}
+      service: vaapi # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
+    volumes:
+      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
+      - ${UPLOAD_LOCATION}:/data
+      - /etc/localtime:/etc/localtime:ro
+      - /media/nas/nas-photo:/mnt/photos2
+    env_file:
+      - .env
+    ports:
+      - '2283:2283'
+    depends_on:
+      - redis
+      - database
+    restart: ${RESTART:-unless-stopped}
     healthcheck:
       disable: false
-    image: ${DOCKER_REGISTRY:-}ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
     labels:
       homepage.container: immich_server
       homepage.description: Photo server
@@ -62,27 +39,50 @@ services:
       homepage.icon: ${APPNAME}.png
       homepage.name: Immich
       homepage.server: my-docker
-      homepage.widget.key: wVxjlztA8MpeuzKkNGCSUPK2WjAY55qq4cfs9Zr5opU
+      homepage.widget.key: mdaRNyiY19w9YEz3MXT3fiPD9XH3CtQYRM26C0wZJM
       homepage.widget.type: ${APPNAME}
       homepage.widget.url: https://${APPNAME}.sectorq.eu
       homepage.widget.version: '2'
       wud.watch: true
       wud.watch.digest: true
-    ports:
-    - 2283:2283
-    restart: ${RESTART:-unless-stopped}
+  immich-machine-learning:
+    container_name: immich_machine_learning
+    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
+    # Example tag: ${IMMICH_VERSION:-release}-cuda
+    image: ${DOCKER_REGISTRY:-}ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
+    extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
+      file: hwaccel.ml.yml
+      service: openvino # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
     volumes:
-    - /share/docker_data/immich/library:/usr/src/app/upload
-    - /media/nas/nas-photo:/mnt/photos2
-    - /etc/localtime:/etc/localtime:ro
+      - model-cache:/cache
+    env_file:
+      - .env
+    restart: ${RESTART:-unless-stopped}
+    healthcheck:
+      disable: false
+
   redis:
     container_name: immich_redis
+    image: ${DOCKER_REGISTRY:-}docker.io/valkey/valkey:8-bookworm@sha256:fea8b3e67b15729d4bb70589eb03367bab9ad1ee89c876f54327fc7c6e618571
     healthcheck:
       test: redis-cli ping || exit 1
-    image: ${DOCKER_REGISTRY:-}docker.io/redis:6.2-alpine
-    labels:
-      wud.watch: true
-      wud.watch.digest: true
     restart: ${RESTART:-unless-stopped}
+
+  database:
+    container_name: immich_postgres
+    image: ${DOCKER_REGISTRY:-}ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
+    environment:
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_USER: ${DB_USERNAME}
+      POSTGRES_DB: ${DB_DATABASE_NAME}
+      POSTGRES_INITDB_ARGS: '--data-checksums'
+      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
+      # DB_STORAGE_TYPE: 'HDD'
+    volumes:
+      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
+      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
+    shm_size: 128mb
+    restart: ${RESTART:-unless-stopped}
+
 volumes:
-  model-cache: null
+  model-cache:

immich/stack.env

@@ -1,9 +1,10 @@
 # You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables
 
 # The location where your uploaded files are stored
-UPLOAD_LOCATION=./library
+UPLOAD_LOCATION=/media/nas/qda_1/immich/library
+#UPLOAD_LOCATION=/share/docker_data/immich/library
 # The location where your database files are stored
-DB_DATA_LOCATION=./postgres
+DB_DATA_LOCATION=/share/docker_data/immich/db
 
 # To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
 # TZ=Etc/UTC
@@ -19,3 +20,4 @@ DB_PASSWORD=postgres
 ###################################################################################
 DB_USERNAME=postgres
 DB_DATABASE_NAME=immich
+POSTGRES_PASSWORD=postgres

kestra/docker-compose.yml

@@ -58,6 +58,7 @@ services:
     restart: ${RESTART:-unless-stopped}
     user: root
     volumes:
+    - /etc/localtime:/etc/localtime:ro
     - /share/docker_data/kestra/kestra-data:/app/storage
     - /var/run/docker.sock:/var/run/docker.sock
     - /tmp/kestra-wd:/tmp/kestra-wd

mailu/stack.env

@@ -15,10 +15,10 @@ SECRET_KEY=T1GSGDDBVRYF7UR7
 SUBNET=192.168.205.0/24
 
 # Main mail domain
-DOMAIN=sectorq.eu
+DOMAIN=mail.sectorq.eu
 
 # Hostnames for this server, separated with commas
-HOSTNAMES=sectorq.eu,mail.sectorq.eu
+HOSTNAMES=mail.sectorq.eu,sectorq.eu
 
 # Postmaster local part (will append the main mail domain)
 POSTMASTER=admin

mediacenter/docker-compose.yml

@@ -37,8 +37,10 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
       - /share/docker_data/bazarr/config:/config
-      - /media/data/movies:/movies
-      - /media/data/shows:/tv
+      - /media/m-server/movies:/movies/m-server
+      - /media/m-server/shows:/tv/m-server
+      - /media/nas/movies:/movies/nas
+      - /media/nas/shows:/tv/nas
   flaresolverr:
     container_name: flaresolverr
     environment:
@@ -146,9 +148,12 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
     - /share/docker_data/jellyfin:/config
-    - /media/data/movies:/data/movies
-    - /media/data/music:/data/music
-    - /media/data/shows:/data/shows
+    - /media/m-server/movies:/data/movies/m-server
+    - /media/m-server/music:/data/music/m-server
+    - /media/m-server/shows:/data/shows/m-server
+    - /media/nas/movies:/data/movies/nas
+    - /media/nas/music:/data/music/nas
+    - /media/nas/shows:/data/shows/nas
   jellyseerr:
     container_name: jellyseerr
     environment:
@@ -208,8 +213,8 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
     - /share/docker_data/lidarr/config:/config
-    - /media/data/music:/music
-    - /media/data/downloads:/downloads
+    - /media/m-server/music:/music
+    - /media/m-server/downloads:/downloads
   qbittorrent:
     container_name: qbittorrent
     environment:
@@ -246,7 +251,7 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
     - /share/docker_data/qbittorrent/config:/config
-    - /media/data/downloads:/downloads
+    - /media/m-server/downloads:/downloads
   radarr:
     container_name: radarr
     dns:
@@ -280,8 +285,9 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
     - /share/docker_data/radarr/config:/config
-    - /media/data/movies:/movies
-    - /media/data/downloads:/downloads
+    - /media/m-server/movies/:/movies-m-server
+    - /media/nas/movies/:/movies-nas
+    - /media/m-server/downloads:/downloads
   sonarr:
     container_name: sonarr
     dns:
@@ -314,5 +320,6 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
     - /share/docker_data/sonarr/config:/config
-    - /media/data/shows:/tv
-    - /media/data/downloads:/downloads
+    - /media/m-server/shows:/tv-m-server
+    - /media/nas/shows:/tv-nas
+    - /media/m-server/downloads:/downloads

n8n/.env

@@ -0,0 +1,2 @@
+APPNAME=bitwarden
+DOCKER_REGISTRY=r.sectorq.eu/library/

n8n/docker-compose.yml

@@ -0,0 +1,33 @@
+version: "3"
+services:
+  n8n:
+    image: ${DOCKER_REGISTRY:-}n8nio/n8n:latest
+    container_name: n8n
+    ports:
+      - "5679:5678"
+    environment:
+      - N8N_HOST=n8n.sectorq.eu
+      - N8N_PORT=5678
+      - N8N_PROTOCOL=https
+      - N8N_BASIC_AUTH_ACTIVE=true
+      - N8N_BASIC_AUTH_USER=sth
+      - N8N_BASIC_AUTH_PASSWORD=pwd
+      - N8N_RUNNERS_ENABLED=true
+      - N8N_RUNNERS_MODE=internal
+      - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
+      - N8N_SECURE_COOKIE=false
+      - WEBHOOK_URL=https://n8n.sectorq.eu
+    volumes:
+      - /share/docker_data/n8n/n8n-data:/home/node/.n8n
+    restart: ${RESTART:-unless-stopped}
+    stop_grace_period: 60s
+    labels:      
+      homepage.container: n8n
+      homepage.description: Workflow management
+      homepage.group: Utils
+      homepage.href: https://${APPNAME}.sectorq.eu
+      homepage.icon: /icons/n8n.svg
+      homepage.name: n8n
+      homepage.server: my-docker
+      wud.watch: true
+      wud.watch.digest: true   

nextcloud/.env

@@ -1,3 +1,2 @@
 APPNAME=nextcloud
-DOCKER_REGISTRY=r.sectorq.eu/library/
 #RESTART=always

nextcloud/docker-compose.yml

@@ -73,3 +73,22 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
     - /share/docker_data/nextcloud/redis:/data
+  appapi-harp:
+    environment:
+      - HP_SHARED_KEY=l4c1j4yd33Du5lo
+      - NC_INSTANCE_URL=https://nc.sectorq.eu
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /share/docker_data/nextcloud/certs:/certs
+    container_name: appapi-harp
+    hostname: appapi-harp
+    restart: unless-stopped
+    ports:
+      - 8780:8780
+      - 8782:8782
+    image: ${DOCKER_REGISTRY:-}ghcr.io/nextcloud/nextcloud-appapi-harp:release
+    networks:
+    - nextcloud_network
+    labels:
+      wud.watch: true
+      wud.watch.digest: true

zabbix-server/docker-compose.yml

@@ -61,7 +61,7 @@ services:
       homepage.name: Zabbix Server
       homepage.server: my-docker
       homepage.weight: '90'
-      homepage.widget.key: a5294f55cccb490cded051a6ccd45f15f3434f06f7c77de4b22abc8bf086534a
+      homepage.widget.key: 431bda3fbb45a9d603c1b74d57c3a61df1e07124c5c7119cb6379194d5555822
       homepage.widget.type: ${APPNAME}
       homepage.widget.url: https://${APPNAME}.sectorq.eu
       wud.watch: true