build

__swarm/authentik/.env

@@ -3,7 +3,7 @@ PG_USER=authentik
 PG_DB=authentik
 AUTHENTIK_SECRET_KEY=ZKkVCxj8kKj5ZklvzxKG2IgYQOftDoLPRjc57yomr1qzbKEQVZ
 AUTHENTIK_ERROR_REPORTING__ENABLED=true
-AUTHENTIK_TAG=2025.8.4
+AUTHENTIK_TAG=2025.10.2
 POSTGRES_PASSWORD=499NU6Ze5HcJK4IwSShO8oDbj3j0i0CalyEzfgEp
 POSTGRES_USER=authentik
 POSTGRES_DB=authentik

__swarm/gitlab/gitlab-swarm.yml

@@ -10,6 +10,7 @@
         - wud.watch.digest=true
         - wud.watch=true
       dns:
+        - 192.168.77.1
         - 192.168.77.101
     app:
       environment:

__swarm/homepage/homepage-swarm.yml

@@ -1,6 +1,7 @@
 services:
   homepage:
     dns:
+    - 192.168.77.1
     - 192.168.77.101
     environment:
       HOMEPAGE_ALLOWED_HOSTS: sectorq.eu,active.home.lan:3003,m-server.home.lan:3003,rpi5.home.lan:3003,nas.home.lan:3003,192.168.77.238:3003,rack.home.lan:3003,192.168.80.222:3003

__swarm/mediacenter/mediacenter-swarm.yml

@@ -3,6 +3,7 @@ networks:
     driver: overlay
   mediarr:
     driver: overlay
+
 volumes:
   homarr_configs:
   homarr_icons:
@@ -16,7 +17,54 @@ volumes:
   radarr_config:
   sonarr_config:
   bazarr_config:
-
+  m-server_music:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.101,rw,nfsvers=4.2,nolock
+      device: :/music
+  m-server_movies:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.101,rw,nfsvers=4.2,nolock
+      device: :/movies
+  m-server_shows:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.101,rw,nfsvers=4.2,nolock
+      device: :/shows
+  nas_shows:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/shows
+  nas_movies:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/movies
+  nas_music:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/movies
+  nas_movies2:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/xxx
+  nas_live:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=192.168.77.106,rw,nfsvers=4.1,nolock
+      device: :/live
 services:
   bazarr:
     environment:
@@ -60,6 +108,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   flaresolverr:
     environment:
       LOG_LEVEL: info
@@ -82,6 +131,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   homarr:
     hostname: homarr
     image: ${DOCKER_REGISTRY:-}ghcr.io/ajnart/homarr:latest
@@ -106,6 +156,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   jackett:
     dns:
     - 192.168.77.101
@@ -147,6 +198,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   jellyfin:
     environment:
       TZ: Europe/Bratislava
@@ -172,13 +224,14 @@ services:
     user: root
     volumes:
     - jellyfin_config:/config
-    - /media/m-server/movies:/data/movies/m-server
+    - m-server_movies:/data/movies/m-server
-    - /media/m-server/music:/data/music/m-server
+    - m-server_music:/data/music/m-server
-    - /media/m-server/shows:/data/shows/m-server
+    - m-server_shows:/data/shows/m-server
-    - /media/nas/movies:/data/movies/nas
+    - nas_live:/data/live/nas
-    - /media/nas/music:/data/music/nas
+    - nas_movies:/data/movies/nas
-    - /media/nas/shows:/data/shows/nas
+    - nas_music:/data/music/nas
-    - /media/nas/xxx:/data/xxx/nas
+    - nas_shows:/data/shows/nas
+    - nas_movies2:/data/xxx/nas
     - /dev/dri:/dev/dri
     devices:
       - /dev/dri/renderD128:/dev/dri/renderD128
@@ -203,6 +256,7 @@ services:
         constraints:
         - node.role == manager
         - node.labels.gpu == amd
+
   jellyseerr:
     environment:
       LOG_LEVEL: debug
@@ -238,6 +292,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   lidarr:
     environment:
       PUID: '1000'
@@ -276,6 +331,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   qbittorrent:
     environment:
       PUID: '1000'
@@ -321,6 +377,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   radarr:
     dns:
     - 192.168.77.101
@@ -363,6 +420,7 @@ services:
       placement:
         constraints:
         - node.role == manager
+
   sonarr:
     dns:
     - 192.168.77.101

__swarm/pihole/pihole-swarm.yml

@@ -1,5 +1,5 @@
 volumes:
-  data::
+  data:
     driver: local
   dnsmasq_d:
     driver: local
@@ -43,6 +43,10 @@ services:
     volumes:
     - data:/etc/pihole
     - dnsmasq_d:/etc/dnsmasq.d
+    - type: tmpfs
+      target: /dev/shm
+      tmpfs:
+        size: 248000000
     deploy:
       labels:
         com.centurylinklabs.watchtower.enable: 'true'

home-assistant/docker-compose.yml

@@ -54,7 +54,7 @@ services:
     container_name: esphome
     image: ${DOCKER_REGISTRY:-}esphome/esphome:latest
     volumes:
-      - /share/docker_data/esphome_config:/config
+      - /share/docker_data/esphome/config:/config
       - /etc/localtime:/etc/localtime:ro
     restart: ${RESTART:-unless-stopped}
     privileged: true

mailu3/docker-compose.yml

@@ -167,6 +167,10 @@ services:
     networks:
       - default
       - fts_attachments
+    ulimits:
+      nofile:
+        soft: 30000
+        hard: 30000
     restart: ${RESTART:-unless-stopped}
     volumes:
       - /share/docker_data/mailu3/mail:/mail

ollama/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       - "/dev/kfd"
       - "/dev/dri"
     volumes:
-      - ollama_models:/root/.ollama
+      - models:/root/.ollama
     environment:
       - HSA_OVERRIDE_GFX_VERSION=11.0.0
     ports:
@@ -16,4 +16,4 @@ services:
       - "8.8.8.8"
       
 volumes:
-  ollama_models:
+  models:

pihole/.env

@@ -1,2 +1,3 @@
 APPNAME=pihole
-PASSWORD=l4c1j4yd33Du5lo
+PASSWORD=l4c1j4yd33Du5lo
+PIHOLE_HOSTNAME=m-server

pihole/docker-compose.yml

@@ -31,8 +31,19 @@ services:
       FTLCONF_dns_upstreams: 8.8.8.8;8.8.4.4
       FTLCONF_webserver_api_password: ${PASSWORD}
       TZ: Europe/Bratislava
-    hostname: m-server
+    hostname: ${PIHOLE_HOSTNAME}
     image: pihole/pihole:latest
+    shm_size: '256mb'
+    logging:
+      driver: loki
+      options:
+        loki-url: http://192.168.77.101:3100/loki/api/v1/push
+        loki-relabel-config: |
+          - action: labelmap
+            regex: swarm_stack
+            replacement: namespace
+          - action: labelmap
+            regex: swarm_(service)
     labels:
       com.centurylinklabs.watchtower.enable: 'true'
       homepage.container: pihole
@@ -53,10 +64,15 @@ services:
       pihole:
         ipv4_address: 192.168.78.254
     ports:
-    - '53:53'
+    - '53:53/udp'
     - '9380:80'
     - '9343:443'  
     restart: always
     volumes:
-    - /share/docker_data/pihole/etc-pihole:/etc/pihole
+    - data:/etc/pihole
-    - /share/docker_data/pihole/etc-dnsmasq.d:/etc/dnsmasq.d
+    - dnsmasq_d:/etc/dnsmasq.d
+volumes:
+  data:
+    driver: local
+  dnsmasq_d:
+    driver: local