build

__swarm/bookstack/.env

@@ -1,2 +1,89 @@
-APPNAME=bookstack
+APPNAME: bookstack
-DOCKER_REGISTRY=r.sectorq.eu/library/
+DOCKER_REGISTRY: r.sectorq.eu/library/
+PUID: 1000
+PGID: 1000
+APP_URL: https://bookstack.sectorq.eu
+DB_HOST: db
+DB_PORT: 3306
+DB_USER: bookstack
+DB_PASS: l4c1j4yd33Du5lo
+DB_DATABASE: bookstackapp
+MYSQL_ROOT_PASSWORD: l4c1j4yd33Du5lo
+TZ: Europe/Bratislava
+MYSQL_DATABASE: bookstackapp
+MYSQL_USER: bookstack
+MYSQL_PASSWORD: l4c1j4yd33Du5lo
+APP_KEY: base64:HB4Gre472TO2pllXEw7afFY2dJ7E09ZJAaHLYP0/hV8=
+# # Set authentication method to be saml2
+# AUTH_METHOD: saml2
+# # Control if BookStack automatically initiates login via your SAML system if it's the only authentication method.
+# # Prevents the need for the user to click the "Login with x" button on the login page.
+# # Setting this to true enables auto-initiation.
+# AUTH_AUTO_INITIATE: false
+# # Set the display name to be shown on the login button.
+# # (Login with <name>)
+# SAML2_NAME: authentik
+# # Name of the attribute which provides the user's email address
+# SAML2_EMAIL_ATTRIBUTE: email
+# # Name of the attribute to use as an ID for the SAML user.
+# SAML2_EXTERNAL_ID_ATTRIBUTE: uid
+# # Enable SAML group sync.
+# SAML2_USER_TO_GROUPS: true
+# # Set the attribute from which BookStack will read groups names from.
+# # You will need to rename your roles in Bookstack to match your groups in authentik.
+# SAML2_GROUP_ATTRIBUTE: http://schemas.xmlsoap.org/claims/Group
+# # Name of the attribute(s) to use for the user's display name
+# # Can have multiple attributes listed, separated with a '|' in which
+# # case those values will be joined with a space.
+# # Example: SAML2_DISPLAY_NAME_ATTRIBUTES=firstName|lastName
+# # Defaults to the ID value if not found.
+# ######SAML2_DISPLAY_NAME_ATTRIBUTES: http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname
+# SAML2_DISPLAY_NAME_ATTRIBUTES: username
+
+# # Identity Provider entityID URL
+# SAML2_IDP_ENTITYID: https://auth.sectorq.eu/api/v3/providers/saml/10/metadata/?download
+
+# # Auto-load metadata from the IDP
+# # Setting this to true negates the need to specify the next three options
+# SAML2_AUTOLOAD_METADATA: true
+
+
+# Set OIDC to be the authentication method
+AUTH_METHOD: oidc
+#AUTH_METHOD: standard 
+# Control if BookStack automatically initiates login via your OIDC system 
+# if it's the only authentication method. Prevents the need for the
+# user to click the "Login with x" button on the login page.
+# Setting this to true enables auto-initiation.
+AUTH_AUTO_INITIATE: true
+
+# Set the display name to be shown on the login button.
+# (Login with <name>)
+OIDC_NAME: SSO
+
+# Name of the claims(s) to use for the user's display name.
+# Can have multiple attributes listed, separated with a '|' in which 
+# case those values will be joined with a space.
+# Example: OIDC_DISPLAY_NAME_CLAIMS=given_name|family_name
+OIDC_DISPLAY_NAME_CLAIMS: name
+
+# OAuth Client ID to access the identity provider
+OIDC_CLIENT_ID: GCPj547vTmEpmsCM8jkuR222SS31yZMdp7oAU82U
+
+# OAuth Client Secret to access the identity provider
+OIDC_CLIENT_SECRET: Nador7SOdsYgfNhRwbeRKLNPkPiASBAlTnKVi294xbOz8MM3e2RlzAaWQsQNZmBtLLZVifb1TG3OpKrVXeeW3Vu8HmJuvy8GwSAT2r0pP0241tDdEShq7UkP9G5Esdt8
+
+# Issuer URL
+# Must start with 'https://'
+OIDC_ISSUER: https://auth.sectorq.eu/application/o/bookstack/
+
+# The "end session" (RP-initiated logout) URL to call during BookStack logout.
+# By default this is false which disables RP-initiated logout.
+# Setting to "true" will enable logout if found as supported by auto-discovery.
+# Otherwise, this can be set as a specific URL endpoint.
+OIDC_END_SESSION_ENDPOINT: false
+
+# Enable auto-discovery of endpoints and token keys.
+# As per the standard, expects the service to serve a 
+# `<issuer>/.well-known/openid-configuration` endpoint.
+OIDC_ISSUER_DISCOVER: true

__swarm/bookstack/stack.env

@@ -1,3 +1,4 @@
+APP_KEY=base64:HB4Gre472TO2pllXEw7afFY2dJ7E09ZJAaHLYP0/hV8=
 PUID=1000
 PGID=1000
 APP_URL=https://bookstack.sectorq.eu

mediacenter/.env

@@ -9,4 +9,4 @@ LIDARR_TOKEN=a9d7379966bd467aa0ad226848575e03
 QBIT_TOKEN=l4c1j4yd33Du5lo
 RADARR_TOKEN=671f20f9518b4ab3a977cc00f95b0427
 SONARR_TOKEN=325b15a81c544ed2a1cd2bb16e95a129
-HW_MODE=cpu
+HW_MODE=hw

mediacenter/docker-compose.yml

@@ -3,6 +3,67 @@ networks:
     driver: bridge
   mediarr:
     driver: bridge
+volumes:
+  homarr_configs:
+  homarr_icons:
+  homarr_data:
+  jackett_config:
+  jackett_downloads:
+  jellyfin_config:
+  jellyseerr_config:
+  lidarr_config:
+  qbittorrent_config:
+  radarr_config:
+  sonarr_config:
+  bazarr_config:
+  m-server_music:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.101,rw,nfsvers=4.2,nolock
+      device: :/music
+  m-server_movies:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.101,rw,nfsvers=4.2,nolock
+      device: :/movies
+  m-server_shows:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.101,rw,nfsvers=4.2,nolock
+      device: :/shows
+  nas_shows:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/shows
+  nas_movies:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/movies
+  nas_music:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/movies
+  nas_movies2:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/xxx
+  nas_live:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/live
 services:
   bazarr:
     container_name: bazarr
@@ -36,11 +97,11 @@ services:
       - 6767:6767
     restart: ${RESTART:-unless-stopped}
     volumes:
-      - /share/docker_data/bazarr/config:/config
+      - bazarr_config:/config
-      - /media/m-server/movies:/movies/m-server
+      - m-server_movies:/movies/m-server
-      - /media/m-server/shows:/tv/m-server
+      - m-server_shows:/tv/m-server
-      - /media/nas/movies:/movies/nas
+      - nas_movies:/movies/nas
-      - /media/nas/shows:/tv/nas
+      - nas_shows:/tv/nas
   flaresolverr:
     container_name: flaresolverr
     environment:
@@ -72,9 +133,9 @@ services:
     restart: ${RESTART:-unless-stopped}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-      - /share/docker_data/homarr/configs:/app/data/configs
+      - homarr_configs:/app/data/configs
-      - /share/docker_data/homarr/icons:/app/public/icons
+      - homarr_icons:/app/public/icons
-      - /share/docker_data/homarr/data:/data
+      - homarr_data:/data
   jackett:
     container_name: jackett
     dns:
@@ -111,8 +172,8 @@ services:
     - 9117:9117
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/jackett/config:/config
+    - jackett_config:/config
-    - /share/docker_data/jackett/downloads:/downloads
+    - jackett_downloads:/downloads
   jellyfin:
     container_name: jellyfin
     environment:
@@ -147,15 +208,15 @@ services:
     - 7359:7359
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/jellyfin:/config
+    - jellyfin_config:/config
-    - /media/m-server/movies:/data/movies/m-server
+    - m-server_movies:/data/movies/m-server
-    - /media/m-server/music:/data/music/m-server
+    - m-server_music:/data/music/m-server
-    - /media/m-server/shows:/data/shows/m-server
+    - m-server_shows:/data/shows/m-server
-    - /media/nas/movies:/data/movies/nas
+    - nas_movies:/data/movies/nas
-    - /media/nas/music:/data/music/nas
+    - nas_music:/data/music/nas
-    - /media/nas/shows:/data/shows/nas
+    - nas_shows:/data/shows/nas
-    - /media/nas/live:/data/live/nas
+    - nas_live:/data/live/nas
-    - /media/nas/xxx:/data/xxx/nas
+    - nas_movies2:/data/xxx/nas
   jellyseerr:
     container_name: jellyseerr
     environment:
@@ -184,7 +245,7 @@ services:
     - 5055:5055
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/jellyseerr/config:/app/config
+    - jellyseerr_config:/app/config
   lidarr:
     container_name: lidarr
     environment:
@@ -214,8 +275,8 @@ services:
     - 8686:8686
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/lidarr/config:/config
+    - lidarr_config:/config
-    - /media/m-server/music:/music
+    - m-server_music:/music
     - /media/m-server/downloads:/downloads
   qbittorrent:
     container_name: qbittorrent
@@ -249,10 +310,9 @@ services:
     ports:
     - 8085:8085
     - 6881:6881
-    - 6881:6881
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/qbittorrent/config:/config
+    - qbittorrent_config:/config
     - /media/m-server/downloads:/downloads
   radarr:
     container_name: radarr
@@ -286,9 +346,9 @@ services:
     - 7878:7878
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/radarr/config:/config
+    - radarr_config:/config
-    - /media/m-server/movies/:/movies-m-server
+    - m-server_movies:/movies-m-server
-    - /media/nas/movies/:/movies-nas
+    - nas_movies:/movies-nas
     - /media/m-server/downloads:/downloads
   sonarr:
     container_name: sonarr
@@ -321,7 +381,7 @@ services:
     - 8989:8989
     restart: ${RESTART:-unless-stopped}
     volumes:
-    - /share/docker_data/sonarr/config:/config
+    - sonarr_config:/config
-    - /media/m-server/shows:/tv-m-server
+    - m-server_shows:/tv-m-server
-    - /media/nas/shows:/tv-nas
+    - nas_shows:/tv-nas
-    - /media/m-server/downloads:/downloads
+    - /media/m-server/downloads:/downloads