ddp/docker-compose
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

upped docker-compose version (just because), explicitly called :latest (just because), commented out ark-server and mass, added tixbkend (separate tix web and force it to run as uid=1000, and backend that processes pdfs), upped emby to a newer 4.9 release - but still not allowing latest, so we can convert back to prod 4.9 version when it goes to latest, adjsted telegraf group after reinstall of mara -- this still is not elegant, but works

Browse Source
This commit is contained in:
Damien De Paoli
2024-06-30 17:16:14 +10:00
parent 2ed88cd9d6
commit d8433d4bd5
1 changed files with 102 additions and 80 deletions
Download Patch File Download Diff File Expand all files Collapse all files

182
docker-compose.yml
View File

@@ -1,11 +1,11 @@
# To note, if I am using an env_file to /srv/docker/config/secrets/*,
# then I have taken the ENV variable with a password for that container and
# put it into a separate file (1 place for common pwds like for ldap, but also so this file can be shared safely)
version: '3.7'
version: '3.9'
services:
traefik:
container_name: traefik
image: "traefik"
image: traefik:latest
restart: always
network_mode: host
command:
@@ -46,7 +46,7 @@ services:
sonarr:
container_name: sonarr
image: linuxserver/sonarr
image: linuxserver/sonarr:latest
restart: always
environment:
- TZ=Australia/Melbourne
@@ -69,7 +69,7 @@ services:
radarr:
container_name: radarr
image: linuxserver/radarr
image: linuxserver/radarr:latest
restart: always
environment:
- TZ=Australia/Melbourne
@@ -113,7 +113,7 @@ services:
calibre:
container_name: calibre
image: linuxserver/calibre
image: linuxserver/calibre:latest
restart: always
environment:
- TZ=Australia/Melbourne
@@ -145,7 +145,7 @@ services:
container_name: emby
# image: emby/embyserver
# image: emby/embyserver:beta
image: emby/embyserver:4.9.0.5
image: emby/embyserver:4.9.0.22
restart: always
network_mode: host
environment:
@@ -260,7 +260,7 @@ services:
- NET_ADMIN
openldap:
image: bitnami/openldap
image: bitnami/openldap:latest
user: "2000"
container_name: openldap
restart: always
@@ -290,7 +290,7 @@ services:
# webmail
webmail:
image: roundcube/roundcubemail
image: roundcube/roundcubemail:latest
container_name: webmail
restart: always
labels:
@@ -321,7 +321,7 @@ services:
portainer:
container_name: portainer
image: portainer/portainer-ce
image: portainer/portainer-ce:latest
restart: always
depends_on:
- pihole
@@ -339,7 +339,7 @@ services:
# this is running network_mode: host so it is on the same subnet as the IoT
# devices and can see/discover them
hass:
image: ghcr.io/home-assistant/home-assistant
image: ghcr.io/home-assistant/home-assistant:latest
container_name: hass
privileged: true
network_mode: host
@@ -369,33 +369,33 @@ services:
- "traefik.http.routers.hass.tls.certresolver=myresolver"
# this runs in network_most host so that it can find the players automatically
mass:
image: ghcr.io/music-assistant/server
container_name: mass
restart: always
network_mode: host
depends_on:
- pihole
- emby
volumes:
- /srv/docker/container/mass/data:/data
- /export/docker/storage/music:/music
- /etc/localtime:/etc/localtime:ro
labels:
- "com.centurylinklabs.watchtower.enable=true"
- "traefik.enable=true"
- "traefik.http.routers.mass.rule=Host(`hass.depaoli.id.au`) && PathPrefix(`/mass/`)"
- "traefik.http.routers.mass.tls=true"
- "traefik.http.routers.mass.entrypoints=secureweb"
- "traefik.http.middlewares.stripprefix-mass.stripprefix.prefixes=/mass"
- "traefik.http.routers.mass.middlewares=stripprefix-mass@docker"
- "traefik.http.routers.mass.tls.certresolver=myresolver"
# to note with network_mode: host, this works via localhost --> traefik routes this to http://127.0.0.1:8095"
- "traefik.http.services.mass.loadbalancer.server.port=8095"
# mass:
# image: ghcr.io/music-assistant/server:latest
# container_name: mass
# restart: always
# network_mode: host
# depends_on:
# - pihole
# - emby
# volumes:
# - /srv/docker/container/mass/data:/data
# - /export/docker/storage/music:/music
# - /etc/localtime:/etc/localtime:ro
# labels:
# - "com.centurylinklabs.watchtower.enable=true"
# - "traefik.enable=true"
# - "traefik.http.routers.mass.rule=Host(`hass.depaoli.id.au`) && PathPrefix(`/mass/`)"
# - "traefik.http.routers.mass.tls=true"
# - "traefik.http.routers.mass.entrypoints=secureweb"
# - "traefik.http.middlewares.stripprefix-mass.stripprefix.prefixes=/mass"
# - "traefik.http.routers.mass.middlewares=stripprefix-mass@docker"
# - "traefik.http.routers.mass.tls.certresolver=myresolver"
# # to note with network_mode: host, this works via localhost --> traefik routes this to http://127.0.0.1:8095"
# - "traefik.http.services.mass.loadbalancer.server.port=8095"
mosquitto:
container_name: mosquitto
image: eclipse-mosquitto
image: eclipse-mosquitto:latest
restart: always
volumes:
- /srv/docker/container/mosquitto:/mosquitto
@@ -409,7 +409,7 @@ services:
esphome:
container_name: esphome
image: esphome/esphome
image: esphome/esphome:latest
environment:
- ESPHOME_DASHBOARD_USE_PING=true
volumes:
@@ -426,7 +426,7 @@ services:
sabnzbd:
# image: linuxserver/sabnzbd:4.2.2-ls151
image: linuxserver/sabnzbd
image: linuxserver/sabnzbd:latest
container_name: sabnzbd
restart: always
environment:
@@ -474,8 +474,9 @@ services:
telegraf:
image: telegraf:latest
container_name: telegraf
# needs to be 0 / root to run smartmontools / nvme
user: "0:139"
# needs to be 0 / root to run smartmontools / nvme, and 124/docker to read docker.sock
#user: "root:docker"
user: "root:124"
entrypoint: /root/mara-init/entrypoint-wrapper.sh
volumes:
- /srv/docker/container/telegraf:/etc/telegraf
@@ -506,7 +507,7 @@ services:
restart: always
grafana:
image: grafana/grafana
image: grafana/grafana:latest
container_name: grafana
restart: always
depends_on:
@@ -533,7 +534,7 @@ services:
pihole:
container_name: pihole
image: pihole/pihole
image: pihole/pihole:latest
ports:
- "192.168.0.2:53:53/tcp"
- "192.168.0.2:53:53/udp"
@@ -562,7 +563,7 @@ services:
bookdb_dev:
container_name: bookdb_dev
image: postgres
image: postgres:latest
restart: always
environment:
POSTGRES_USER: ddp
@@ -644,7 +645,7 @@ services:
padb_dev:
container_name: padb_dev
image: postgres
image: postgres:latest
restart: always
# replace entrypoint to install cron and a cron job to backup users so we can rebuild the content from sqls
entrypoint: /root/mara-init/entrypoint-wrapper.sh
@@ -737,14 +738,15 @@ services:
restart: always
environment:
ENV: "production"
# force using uid/gid of 1000/1000 so we can share dev/prod for now - may care enough 1 day to fix
build:
context: '/home/ddp/src/snow-ticket-analysis'
context: '/home/ddp/src/tix'
args:
USERID: "2000"
GROUPID: "2000"
user: "2000:2000"
USERID: "1000"
GROUPID: "1000"
user: "1000:1000"
volumes:
- /home/ddp/src/snow-ticket-analysis/stats.db:/stats.db
- /home/ddp/src/tix/:/tix
- /etc/localtime:/etc/localtime:ro
labels:
- "com.centurylinklabs.watchtower.enable=false"
@@ -754,10 +756,29 @@ services:
- "traefik.http.routers.tix.entrypoints=secureweb"
- "traefik.http.routers.tix.tls.certresolver=myresolver"
# this runs cron to invoke the snow-ticket-analysis.py once a day to extract
# the next pdfs and add data to stats.db - then used by tix: to graph the data
tixbkend:
container_name: tixbkend
restart: always
environment:
ENV: "production"
# force using uid/gid of 1000/1000 so we can share dev/prod for now - may care enough 1 day to fix
build:
context: '/home/ddp/src/snow-ticket-analysis'
args:
USERID: "1000"
GROUPID: "1000"
volumes:
- /home/ddp/src/tix/:/tix/
- /etc/localtime:/etc/localtime:ro
labels:
- "com.centurylinklabs.watchtower.enable=false"
vaultwarden:
container_name: vaultwarden
restart: always
image: vaultwarden/server
image: vaultwarden/server:latest
depends_on:
- pihole
- openldap
@@ -791,7 +812,7 @@ services:
# used for hass (eufy) to get notifications from camera
eufy_security_ws:
image: bropat/eufy-security-ws
image: bropat/eufy-security-ws:latest
container_name: eufy_security_ws
restart: always
environment:
@@ -814,7 +835,7 @@ services:
# used for hass (eufy) to stream from camera
rtsp_simple_server:
image: aler9/rtsp-simple-server
image: aler9/rtsp-simple-server:latest
container_name: rtsp_simple_server
restart: always
environment:
@@ -829,36 +850,37 @@ services:
volumes:
- "/etc/localtime:/etc/localtime:ro"
ark-server:
restart: always
image: hermsi/ark-server
container_name: ark-server
volumes:
- /srv/docker/container/ark-server:/app
- /srv/docker/container/ark-server-backups:/home/steam/ARK-Backups
environment:
- "SESSION_NAME=The Island - ARK"
- "SERVER_MAP=TheIsland"
- "SERVER_PASSWORD=bagrid"
- "ADMIN_PASSWORD=arkadminpassword"
- "MAX_PLAYERS=5"
- "UPDATE_ON_START=false"
- "BACKUP_ON_STOP=true"
- "PRE_UPDATE_BACKUP=true"
- "WARN_ON_STOP=true"
- "GAME_MOD_IDS=1404697612,1428596566,772235118,895711211,731604991"
ports:
# Port for connections from ARK game client
- "7777:7777/udp"
# Raw UDP socket port (always Game client port +1)
- "7778:7778/udp"
# RCON management port
- "27020:27020/tcp"
# Steam's server-list port
- "27015:27015/udp"
# ark-server:
# # for now ark-server wont start by default, needs manual startup
# restart: "no"
# image: hermsi/ark-server
# container_name: ark-server
# volumes:
# - /srv/docker/container/ark-server:/app
# - /srv/docker/container/ark-server-backups:/home/steam/ARK-Backups
# environment:
# - "SESSION_NAME=The Island - ARK"
# - "SERVER_MAP=TheIsland"
# - "SERVER_PASSWORD=bagrid"
# - "ADMIN_PASSWORD=arkadminpassword"
# - "MAX_PLAYERS=5"
# - "UPDATE_ON_START=false"
# - "BACKUP_ON_STOP=true"
# - "PRE_UPDATE_BACKUP=true"
# - "WARN_ON_STOP=true"
# - "GAME_MOD_IDS=1404697612,1428596566,772235118,895711211,731604991"
# ports:
# # Port for connections from ARK game client
# - "7777:7777/udp"
# # Raw UDP socket port (always Game client port +1)
# - "7778:7778/udp"
# # RCON management port
# - "27020:27020/tcp"
# # Steam's server-list port
# - "27015:27015/udp"
kuma:
image: louislam/uptime-kuma
image: louislam/uptime-kuma:latest
container_name: kuma
volumes:
- /srv/docker/container/kuma/data:/app/data
@@ -969,7 +991,7 @@ services:
- mythdb
wiki:
image: lscr.io/linuxserver/bookstack
image: lscr.io/linuxserver/bookstack:latest
container_name: wiki
environment:
- PUID=1000
@@ -994,7 +1016,7 @@ services:
- "traefik.http.routers.wiki.tls.certresolver=myresolver"
wikidb:
image: lscr.io/linuxserver/mariadb
image: lscr.io/linuxserver/mariadb:latest
container_name: wikidb
environment:
- PUID=1000