adding v4 archives

anandslab · Dec 6, 2024 · cf653b2 · cf653b2
1 parent 3d02fe8
commit cf653b2
Show file tree

Hide file tree

Showing 123 changed files with 4,249 additions and 0 deletions.
diff --git a/archives/deployarr_v4/compose/adminer.yml b/archives/deployarr_v4/compose/adminer.yml
@@ -0,0 +1,22 @@
+services:
+  # Adminer - Frontend for Various Databases (MariaDB, PostgreSQL, etc.)
+  adminer:
+    image: adminer:latest
+    container_name: adminer
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - t3_proxy
+      - default
+    labels:
+      - "traefik.enable=true"
+      # HTTP Routers
+      - "traefik.http.routers.adminer-rtr.entrypoints=websecure"
+      - "traefik.http.routers.adminer-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      # Middlewares
+      - "traefik.http.routers.adminer-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      # HTTP Services
+      - "traefik.http.routers.adminer-rtr.service=adminer-svc"
+      - "traefik.http.services.adminer-svc.loadbalancer.server.port=8080"
diff --git a/archives/deployarr_v4/compose/airsonic-advanced.yml b/archives/deployarr_v4/compose/airsonic-advanced.yml
@@ -0,0 +1,35 @@
+services:
+  # Airsonic Advanced - Music Server
+  airsonic-advanced:
+    image: lscr.io/linuxserver/airsonic-advanced
+    container_name: airsonic-advanced
+    networks:
+      - t3_proxy
+    security_opt:
+      - no-new-privileges:true
+    restart: "no"
+    profiles: ["media", "all"]
+    volumes:
+      - $DOCKERDIR/appdata/airsonic/podcasts:/data/podcasts
+      - $DOCKERDIR/appdata/airsonic/playlists:/data/playlists
+      - $DOCKERDIR/appdata/airsonic/config:/config
+      # - $MEDIADIR1:/data/media1
+      # - $MEDIADIR2:/data/media2
+      # - $MEDIADIR3:/data/media3
+    ports:
+      - "4040:4040"
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+      JAVA_OPTS: '-Dserver.forward-headers-strategy=native' # optional - if you use a reverse-proxy
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.airsonic-advanced-rtr.entrypoints=websecure"
+      - "traefik.http.routers.airsonic-advanced-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.airsonic-advanced-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      ## HTTP Services
+      - "traefik.http.routers.airsonic-advanced-rtr.service=airsonic-advanced-svc"
+      - "traefik.http.services.airsonic-advanced-svc.loadbalancer.server.port=4040"
diff --git a/archives/deployarr_v4/compose/authelia.yml b/archives/deployarr_v4/compose/authelia.yml
@@ -0,0 +1,41 @@
+services:
+  # Authelia (Lite) - Self-Hosted Single Sign-On and Two-Factor Authentication
+  authelia:
+    container_name: authelia
+    image: authelia/authelia:4.38.8
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "all"]
+    networks:
+      - t3_proxy
+      - default
+    # ports:
+    #   - "9091:9091"
+    volumes:
+      - $DOCKERDIR/appdata/authelia:/config
+    environment:
+      - TZ=$TZ
+      - PUID=$PUID
+      - PGID=$PGID
+      - AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE=/run/secrets/authelia_jwt_secret
+      - AUTHELIA_SESSION_SECRET_FILE=/run/secrets/authelia_session_secret
+      - AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE=/run/secrets/authelia_storage_encryption_key
+      # - AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE=/run/secrets/authelia_storage_mysql_password
+      # - AUTHELIA_SESSION_REDIS_PASSWORD_FILE=/run/secrets/authelia_session_redis_password
+      # - AUTHELIA_DUO_API_INTEGRATION_KEY_FILE=/run/secrets/authelia_duo_api_integration_key
+      # - AUTHELIA_DUO_API_SECRET_KEY_FILE=/run/secrets/authelia_duo_api_secret_key
+    secrets:
+      - authelia_jwt_secret
+      - authelia_storage_encryption_key
+      - authelia_session_secret
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.authelia-rtr.entrypoints=websecure"
+      - "traefik.http.routers.authelia-rtr.rule=Host(`authelia.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.authelia-rtr.middlewares=chain-no-auth@file" # Should be chain-no-auth and not chain-authelia
+      ## HTTP Services
+      - "traefik.http.routers.authelia-rtr.service=authelia-svc"
+      - "traefik.http.services.authelia-svc.loadbalancer.server.port=9091"
diff --git a/archives/deployarr_v4/compose/baikal.yml b/archives/deployarr_v4/compose/baikal.yml
@@ -0,0 +1,26 @@
+services:
+  # Baikal - Users, Address Books, Calendars
+  baikal:
+    image: ckulka/baikal:nginx
+    container_name: baikal
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - t3_proxy
+    # ports:
+    #   - "80:80"
+    volumes:
+      - $DOCKERDIR/appdata/baikal/config:/var/www/baikal/config
+      - $DOCKERDIR/appdata/baikal/data:/var/www/baikal/Specific
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.baikal-rtr.entrypoints=websecure"
+      - "traefik.http.routers.baikal-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.baikal-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      ## HTTP Services
+      - "traefik.http.routers.baikal-rtr.service=baikal-svc"
+      - "traefik.http.services.baikal-svc.loadbalancer.server.port=80"
diff --git a/archives/deployarr_v4/compose/bazarr.yml b/archives/deployarr_v4/compose/bazarr.yml
@@ -0,0 +1,32 @@
+services:
+  # Bazarr - Subtitle Management
+  bazarr:
+    image: lscr.io/linuxserver/bazarr
+    container_name: bazarr
+    security_opt:
+      - no-new-privileges:true
+    restart: "no"
+    profiles: ["media", "starr", "all"]
+    networks:
+      - t3_proxy
+    # ports:
+    #   - "6767:6767"
+    volumes:
+      - $DOCKERDIR/appdata/bazarr:/config
+      # - $MEDIADIR1:/data/media1
+      # - $MEDIADIR2:/data/media2
+      # - $MEDIADIR3:/data/media3
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+    labels:
+      - "traefik.enable=true"
+      # HTTP Routers Auth
+      - "traefik.http.routers.bazarr-rtr.entrypoints=websecure"
+      - "traefik.http.routers.bazarr-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      # Middlewares
+      - "traefik.http.routers.bazarr-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      # HTTP Services
+      - "traefik.http.routers.bazarr-rtr.service=bazarr-svc"
+      - "traefik.http.services.bazarr-svc.loadbalancer.server.port=6767"
diff --git a/archives/deployarr_v4/compose/cadvisor.yml b/archives/deployarr_v4/compose/cadvisor.yml
@@ -0,0 +1,32 @@
+services:
+  # cAdvisor - Container Advisor
+  cadvisor:
+    container_name: cadvisor
+    image: gcr.io/cadvisor/cadvisor:latest
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - t3_proxy
+    # ports:
+    #   - "$CADVISOR_PORT:8080"
+    # privileged: true # Only needed for CentOS, Fedora, Red Hat, etc.
+    # devices:
+    #   - /dev/kmsg
+    volumes:
+      - /:/rootfs:ro
+      - /var/run:/var/run:rw
+      - /sys:/sys:ro
+      - /var/lib/docker/:/var/lib/docker:ro
+      - /dev/disk/:/dev/disk:ro
+    labels:
+      - "traefik.enable=true"
+      # HTTP Routers
+      - "traefik.http.routers.cadvisor-rtr.entrypoints=websecure"
+      - "traefik.http.routers.cadvisor-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      # Middlewares
+      - "traefik.http.routers.cadvisor-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      # HTTP Services
+      - "traefik.http.routers.cadvisor-rtr.service=cadvisor-svc"
+      - "traefik.http.services.cadvisor-svc.loadbalancer.server.port=8080"
diff --git a/archives/deployarr_v4/compose/change-detection.yml b/archives/deployarr_v4/compose/change-detection.yml
@@ -0,0 +1,31 @@
+services:
+  # Change-Detection - Webpage Change Monitoring and Notification
+  change-detection:
+    image: lscr.io/linuxserver/changedetection.io:latest
+    container_name: change-detection
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - t3_proxy
+    # ports:
+    #  - "5000:5000"
+    volumes:
+      - $DOCKERDIR/appdata/change-detection:/config
+    environment:
+      PUID: $PUID
+      PGID: $PGID
+      TZ: $TZ
+      BASE_URL: /change-detection #optional
+      # PLAYWRIGHT_DRIVER_URL: #optional
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.change-detection-rtr.entrypoints=websecure"
+      - "traefik.http.routers.change-detection-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.change-detection-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      ## HTTP Services
+      - "traefik.http.routers.change-detection-rtr.service=change-detection-svc"
+      - "traefik.http.services.change-detection-svc.loadbalancer.server.port=5000"
diff --git a/archives/deployarr_v4/compose/chromium.yml b/archives/deployarr_v4/compose/chromium.yml
@@ -0,0 +1,33 @@
+services:
+  # Chromium - Web Browser
+  chromium:
+    image: lscr.io/linuxserver/chromium:latest
+    container_name: chromium
+    security_opt:
+      - no-new-privileges:true
+      - seccomp:unconfined #optional
+    restart: "unless-stopped"
+    profiles: ["apps", "all"]
+    shm_size: "1gb"
+    networks:
+      - t3_proxy
+    # ports:
+    #   - 3000:3000
+    #   - 3001:3001
+    volumes:
+      - $DOCKERDIR/appdata/chromium:/config
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+      # CHROME_CLI: https://www.deployarr.app/ #optional
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.chromium-rtr.entrypoints=websecure"
+      - "traefik.http.routers.chromium-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.chromium-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      ## HTTP Services
+      - "traefik.http.routers.chromium-rtr.service=chromium-svc"
+      - "traefik.http.services.chromium-svc.loadbalancer.server.port=3000"
diff --git a/archives/deployarr_v4/compose/custom.yml b/archives/deployarr_v4/compose/custom.yml
@@ -0,0 +1,4 @@
+# Add all your custom docker compose snippets here. Auto-Traefik will not modify this.
+# Uncomment services and the compose below it, following yaml syntax.
+
+# services:
diff --git a/archives/deployarr_v4/compose/cyberchef.yml b/archives/deployarr_v4/compose/cyberchef.yml
@@ -0,0 +1,23 @@
+services:
+  # CyberChef - Encryption, encoding, compression and data analysis
+  cyberchef:
+    image: mpepping/cyberchef:latest
+    container_name: cyberchef
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - t3_proxy
+    # ports:
+    #   - 8000:8000
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.cyberchef-rtr.entrypoints=websecure"
+      - "traefik.http.routers.cyberchef-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.cyberchef-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      ## HTTP Services
+      - "traefik.http.routers.cyberchef-rtr.service=cyberchef-svc"
+      - "traefik.http.services.cyberchef-svc.loadbalancer.server.port=8000"
diff --git a/archives/deployarr_v4/compose/dashy.yml b/archives/deployarr_v4/compose/dashy.yml
@@ -0,0 +1,36 @@
+services:
+  # Dashy - Application Dashboard
+  dashy:
+    container_name: dashy
+    image: lissy93/dashy
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - t3_proxy
+    healthcheck:
+      test: ['CMD', 'node', '/app/services/healthcheck']
+      interval: 1m30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    # ports:
+    #   - $DASHY_PORT:8080
+    volumes:
+      - $DOCKERDIR/appdata/dashy/conf.yml:/app/public/conf.yml
+      - $DOCKERDIR/appdata/dashy/item-icons:/app/public/item-icons
+    environment:
+      - NODE_ENV=production
+      - UID=$PUID
+      - GID=$PGID
+    labels:
+      - "traefik.enable=true"
+      # HTTP Routers
+      - "traefik.http.routers.dashy-rtr.entrypoints=websecure"
+      - "traefik.http.routers.dashy-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      # Middlewares
+      - "traefik.http.routers.dashy-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      # HTTP Services
+      - "traefik.http.routers.dashy-rtr.service=dashy-svc"
+      - "traefik.http.services.dashy-svc.loadbalancer.server.port=8080"
diff --git a/archives/deployarr_v4/compose/ddns-updater.yml b/archives/deployarr_v4/compose/ddns-updater.yml
@@ -0,0 +1,41 @@
+services:
+  # Cloudflare DDNS - Dynamic DNS Updater
+  ddns-updater:
+    image: qmcgaw/ddns-updater
+    container_name: ddns-updater
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "all"]
+    networks:
+      - t3_proxy
+    # ports:
+    #   - 8000:8000/tcp
+    volumes:
+      - $DOCKERDIR/appdata/ddns-updater:/updater/data # Owned by UID 1000
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+      PERIOD: 12h
+      UPDATE_COOLDOWN_PERIOD: 5m
+      PUBLICIP_DNS_TIMEOUT: 3s
+      HTTP_TIMEOUT: 10s
+      # Web UI
+      LISTENING_PORT: 8000
+      # Backup
+      BACKUP_PERIOD: 96h # 0 to disable
+      BACKUP_DIRECTORY: /updater/data/backups
+      # Other
+      LOG_LEVEL: info
+      # SHOUTRRR_ADDRESSES: $DISCORD_SHOUTRRR_ADDRESS
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.ddns-updater-rtr.entrypoints=websecure"
+      - "traefik.http.routers.ddns-updater-rtr.rule=Host(`SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.ddns-updater-rtr.middlewares=CHAIN-PLACEHOLDER@file"
+      ## HTTP Services
+      - "traefik.http.routers.ddns-updater-rtr.service=ddns-updater-svc"
+      - "traefik.http.services.ddns-updater-svc.loadbalancer.server.port=8000"
diff --git a/archives/deployarr_v4/compose/deunhealth.yml b/archives/deployarr_v4/compose/deunhealth.yml
@@ -0,0 +1,16 @@
+services:
+  # DeUnhealth - Restart your unhealthy containers safely (e.g. containers depending on VPN and VPN reconnects)
+  deunhealth:
+    image: qmcgaw/deunhealth
+    container_name: deunhealth
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]    
+    networks:
+      - socket_proxy
+    environment:
+      LOG_LEVEL: info
+      HEALTH_SERVER_ADDRESS: 127.0.0.1:9999
+      TZ: $TZ
+      DOCKER_HOST: tcp://socket-proxy:2375