archive rpi hosts

This commit is contained in:
2024-07-02 11:07:15 -05:00
parent 318990ce84
commit a2dceb8a63
30 changed files with 0 additions and 728 deletions

View File

@@ -1,9 +0,0 @@
USER_UID=1000
USER_GID=1000
GITEA__database__DB_TYPE=postgres
GITEA__database__HOST=gitea-postgres:5432
GITEA__database__NAME=gitea
GITEA__database__USER=gitea
GITEA__database__PASSWD=""
GITEA__webhook__ALLOWED_HOST_LIST="*.alexlebens.net, 192.168.*.*, 172.27.*.*"
DISABLE_REGISTRATION=true

View File

@@ -1,3 +0,0 @@
POSTGRES_USER=gitea
POSTGRES_PASSWORD=""
POSTGRES_DB=gitea

View File

@@ -1,58 +0,0 @@
services:
gitea:
container_name: gitea
depends_on:
- postgresql
dns:
- 127.0.0.1
- 192.168.1.147
env_file:
- .env
image: docker.io/gitea/gitea:latest
labels:
traefik.docker.network: traefik
traefik.enable: true
traefik.http.routers.gitea.entrypoints: websecure
traefik.http.routers.gitea.rule: Host(`gitea-ps08rp.alexlebens.net`)
traefik.http.routers.gitea.service: gitea
traefik.http.services.gitea.loadbalancer.server.port: 3000
networks:
traefik: null
ports:
- 2222:22
restart: always
volumes:
- gitea_data:/data
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
postgresql:
container_name: gitea-postgres
env_file:
- .postgresql.env
image: docker.io/postgres:16
networks:
traefik: null
restart: always
volumes:
- postgresql:/var/lib/postgresql/data
networks:
traefik:
name: traefik
external: true
volumes:
postgresql:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/gitea/postgresql
gitea_data:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/gitea/data

View File

@@ -1,14 +0,0 @@
services:
portainer:
container_name: portainer-agent
dns:
- 127.0.0.1
- 192.168.1.147
image: portainer/agent:latest
ports:
- 9001:9001
privileged: true
restart: always
volumes:
- /var/lib/docker/volumes:/var/lib/docker/volumes
- /var/run/docker.sock:/var/run/docker.sock

View File

@@ -1,5 +0,0 @@
TS_AUTHKEY=""
TS_HOSTNAME=ps08rp
TS_ROUTES=192.168.1.0/24
TS_STATE_DIR=/var/lib/tailscale
TS_EXTRA_ARGS=--stateful-filtering=false --snat-subnet-routes=false

View File

@@ -1,27 +0,0 @@
services:
tailscaled:
cap_add:
- NET_ADMIN
- NET_RAW
container_name: tailscaled
dns:
- 127.0.0.1
- 192.168.1.147
env_file:
- .env
hostname: ps08rp
image: tailscale/tailscale:stable
network_mode: host
privileged: true
restart: always
volumes:
- tailscale:/var/lib/tailscale
- /dev/net/tun:/dev/net/tun
volumes:
tailscale:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/tailscale

View File

@@ -1,3 +0,0 @@
DNS_SERVER_DOMAIN=alexlebens.net
DNS_SERVER_ADMIN_PASSWORD=""
DNS_SERVER_FORWARDERS=1.1.1.1, 1.0.0.1

View File

@@ -1,40 +0,0 @@
services:
technitium:
container_name: technitium
dns:
- 127.0.0.1
- 192.168.1.147
env_file:
- .env
image: technitium/dns-server:latest
labels:
traefik.docker.network: traefik
traefik.enable: true
traefik.http.routers.technitium.entrypoints: websecure
traefik.http.routers.technitium.rule: Host(`technitium-ps08rp.alexlebens.net`)
traefik.http.routers.technitium.service: technitium
traefik.http.services.technitium.loadbalancer.server.port: 5380
networks:
traefik: null
ports:
- 53:53/udp
- 53:53/tcp
- 67:67/udp
restart: always
sysctls:
- net.ipv4.ip_local_port_range=1024 65000
volumes:
- config:/etc/dns
networks:
traefik:
name: traefik
external: true
volumes:
config:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/technitium/config

View File

@@ -1,3 +0,0 @@
CF_API_EMAIL=alexanderlebens@gmail.com
CF_API_KEY=""
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

View File

@@ -1,48 +0,0 @@
services:
traefik:
command: traefik
container_name: traefik
dns:
- 127.0.0.1
- 192.168.1.147
env_file:
- .env
image: docker.io/traefik:v3.0
labels:
traefik.docker.network: traefik
traefik.enable: true
traefik.http.routers.dashboard.entrypoints: websecure
traefik.http.routers.dashboard.rule: (Host(`traefik-ps08rp.alexlebens.net`) && (PathPrefix(`/api/`) || PathPrefix(`/dashboard/`)))
traefik.http.routers.dashboard.service: api@internal
traefik.http.routers.dashboard.tls: true
traefik.http.routers.dashboard.tls.certresolver: cloudflare
networks:
traefik: null
ports:
- 80:80
- 443:443
privileged: true
restart: always
volumes:
- config:/etc/traefik
- log:/log
- /var/run/docker.sock:/var/run/docker.sock:ro
networks:
traefik:
name: traefik
volumes:
config:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/traefik/config
log:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/traefik/log

View File

@@ -1,15 +0,0 @@
http:
middlewares:
ip-local:
IPAllowList:
sourceRange:
- "192.168.1.1/16"
- "172.27.0.0/16"
tcp:
middlewares:
ip-local:
IPAllowList:
sourceRange:
- "192.168.1.1/16"
- "172.27.0.0/16"

View File

@@ -1,8 +0,0 @@
http:
routers:
prometheus:
rule: "(Host(`traefik-ps08rp.alexlebens.net`) && Path(`/metrics`))"
entryPoints: websecure
service: prometheus@internal
middlewares:
- "ip-local@file"

View File

@@ -1,113 +0,0 @@
################################################################
# Global
################################################################
global:
checkNewVersion: true
sendAnonymousUsage: false
################################################################
# EntryPoints
################################################################
entryPoints:
web:
address: :80
http:
redirections:
entryPoint:
to: websecure
scheme: https
websecure:
address: :443
forwardedHeaders:
trustedIPs:
- "192.168.1.1/16"
proxyProtocol:
trustedIPs:
- "192.168.1.1/16"
http:
tls:
options: default
certResolver: cloudflare
domains:
- main: "*.alexlebens.net"
sans:
- "alexlebens.net"
middlewares:
- ip-local@file
################################################################
# Certificate Resolvers
################################################################
certificatesResolvers:
cloudflare:
acme:
email: alexanderlebens@gmail.com
storage: /etc/traefik/acme/acme.json
preferredChain: "ISRG Root X1"
dnsChallenge:
provider: cloudflare
delayBeforeCheck: "3"
resolvers:
- "1.1.1.1"
- "1.0.0.1"
################################################################
# Traefik logs
################################################################
log:
level: INFO
################################################################
# Access logs
################################################################
accessLog: {}
################################################################
# API and Dashboard
################################################################
api:
insecure: false
dashboard: true
################################################################
# Ping
################################################################
# ping:
################################################################
# Metrics
################################################################
metrics:
prometheus:
addEntryPointsLabels: true
addRoutersLabels: true
addServicesLabels: true
buckets:
- 0.1
- 0.3
- 1.2
- 5.0
entryPoint: websecure
manualRouting: true
################################################################
# Providers
################################################################
providers:
docker:
endpoint: "unix:///var/run/docker.sock"
exposedByDefault: false
file:
directory: "/etc/traefik/conf"
watch: true

View File

@@ -1,5 +0,0 @@
TZ=US/Central
WATCHTOWER_HTTP_API_METRICS=true
WATCHTOWER_HTTP_API_TOKEN=token
WATCHTOWER_CLEANUP=true
WATCHTOWER_POLL_INTERVAL=3600

View File

@@ -1,13 +0,0 @@
services:
watchtower:
container_name: watchtower
dns:
- 127.0.0.1
- 192.168.1.147
env_file:
- .env
image: containrrr/watchtower:latest
privileged: true
restart: always
volumes:
- /var/run/docker.sock:/var/run/docker.sock

View File

@@ -1,9 +0,0 @@
USER_UID=1000
USER_GID=1000
GITEA__database__DB_TYPE=postgres
GITEA__database__HOST=gitea-postgres:5432
GITEA__database__NAME=gitea
GITEA__database__USER=gitea
GITEA__database__PASSWD=""
GITEA__webhook__ALLOWED_HOST_LIST="*.alexlebens.net, 192.168.*.*, 172.27.*.*"
DISABLE_REGISTRATION=true

View File

@@ -1,3 +0,0 @@
POSTGRES_USER=gitea
POSTGRES_PASSWORD=""
POSTGRES_DB=gitea

View File

@@ -1,58 +0,0 @@
services:
gitea:
container_name: gitea
depends_on:
- postgresql
dns:
- 127.0.0.1
- 192.168.1.134
env_file:
- .env
image: docker.io/gitea/gitea:latest
labels:
traefik.docker.network: traefik
traefik.enable: true
traefik.http.routers.gitea.entrypoints: websecure
traefik.http.routers.gitea.rule: Host(`gitea-ps09rp.alexlebens.net`)
traefik.http.routers.gitea.service: gitea
traefik.http.services.gitea.loadbalancer.server.port: 3000
networks:
traefik: null
ports:
- 2222:22
restart: always
volumes:
- gitea_data:/data
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
postgresql:
container_name: gitea-postgres
env_file:
- .postgresql.env
image: docker.io/postgres:16
networks:
traefik: null
restart: always
volumes:
- postgresql:/var/lib/postgresql/data
networks:
traefik:
name: traefik
external: true
volumes:
postgresql:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/gitea/postgresql
gitea_data:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/gitea/data

View File

@@ -1,14 +0,0 @@
services:
portainer:
container_name: portainer-agent
dns:
- 127.0.0.1
- 192.168.1.134
image: portainer/agent:latest
ports:
- 9001:9001
privileged: true
restart: always
volumes:
- /var/lib/docker/volumes:/var/lib/docker/volumes
- /var/run/docker.sock:/var/run/docker.sock

View File

@@ -1,5 +0,0 @@
TS_AUTHKEY=""
TS_HOSTNAME=ps09rp
TS_ROUTES=192.168.1.0/24
TS_STATE_DIR=/var/lib/tailscale
TS_EXTRA_ARGS=--stateful-filtering=false --snat-subnet-routes=false

View File

@@ -1,27 +0,0 @@
services:
tailscaled:
cap_add:
- NET_ADMIN
- NET_RAW
container_name: tailscaled
dns:
- 127.0.0.1
- 192.168.1.134
env_file:
- .env
hostname: ps09rp
image: tailscale/tailscale:stable
network_mode: host
privileged: true
restart: always
volumes:
- tailscale:/var/lib/tailscale
- /dev/net/tun:/dev/net/tun
volumes:
tailscale:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/tailscale

View File

@@ -1,3 +0,0 @@
DNS_SERVER_DOMAIN=alexlebens.net
DNS_SERVER_ADMIN_PASSWORD=""
DNS_SERVER_FORWARDERS=1.1.1.1, 1.0.0.1

View File

@@ -1,40 +0,0 @@
services:
technitium:
container_name: technitium
dns:
- 127.0.0.1
- 192.168.1.134
env_file:
- .env
image: technitium/dns-server:latest
labels:
traefik.docker.network: traefik
traefik.enable: true
traefik.http.routers.technitium.entrypoints: websecure
traefik.http.routers.technitium.rule: Host(`technitium-ps09rp.alexlebens.net`)
traefik.http.routers.technitium.service: technitium
traefik.http.services.technitium.loadbalancer.server.port: 5380
networks:
traefik: null
ports:
- 53:53/udp
- 53:53/tcp
- 67:67/udp
restart: always
sysctls:
- net.ipv4.ip_local_port_range=1024 65000
volumes:
- config:/etc/dns
networks:
traefik:
name: traefik
external: true
volumes:
config:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/technitium/config

View File

@@ -1,3 +0,0 @@
CF_API_EMAIL=alexanderlebens@gmail.com
CF_API_KEY=""
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

View File

@@ -1,48 +0,0 @@
services:
traefik:
command: traefik
container_name: traefik
dns:
- 127.0.0.1
- 192.168.1.134
env_file:
- .env
image: docker.io/traefik:v3.0
labels:
traefik.docker.network: traefik
traefik.enable: true
traefik.http.routers.dashboard.entrypoints: websecure
traefik.http.routers.dashboard.rule: (Host(`traefik-ps09rp.alexlebens.net`) && (PathPrefix(`/api/`) || PathPrefix(`/dashboard/`)))
traefik.http.routers.dashboard.service: api@internal
traefik.http.routers.dashboard.tls: true
traefik.http.routers.dashboard.tls.certresolver: cloudflare
networks:
traefik: null
ports:
- 80:80
- 443:443
privileged: true
restart: always
volumes:
- config:/etc/traefik
- log:/log
- /var/run/docker.sock:/var/run/docker.sock:ro
networks:
traefik:
name: traefik
volumes:
config:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/traefik/config
log:
driver: local
driver_opts:
type: none
o: bind
device: /opt/containers/traefik/log

View File

@@ -1,15 +0,0 @@
http:
middlewares:
ip-local:
IPAllowList:
sourceRange:
- "192.168.1.1/16"
- "172.27.0.0/16"
tcp:
middlewares:
ip-local:
IPAllowList:
sourceRange:
- "192.168.1.1/16"
- "172.27.0.0/16"

View File

@@ -1,8 +0,0 @@
http:
routers:
prometheus:
rule: "(Host(`traefik-ps09rp.alexlebens.net`) && Path(`/metrics`))"
entryPoints: websecure
service: prometheus@internal
middlewares:
- "ip-local@file"

View File

@@ -1,113 +0,0 @@
################################################################
# Global
################################################################
global:
checkNewVersion: true
sendAnonymousUsage: false
################################################################
# EntryPoints
################################################################
entryPoints:
web:
address: :80
http:
redirections:
entryPoint:
to: websecure
scheme: https
websecure:
address: :443
forwardedHeaders:
trustedIPs:
- "192.168.1.1/16"
proxyProtocol:
trustedIPs:
- "192.168.1.1/16"
http:
tls:
options: default
certResolver: cloudflare
domains:
- main: "*.alexlebens.net"
sans:
- "alexlebens.net"
middlewares:
- ip-local@file
################################################################
# Certificate Resolvers
################################################################
certificatesResolvers:
cloudflare:
acme:
email: alexanderlebens@gmail.com
storage: /etc/traefik/acme/acme.json
preferredChain: "ISRG Root X1"
dnsChallenge:
provider: cloudflare
delayBeforeCheck: "3"
resolvers:
- "1.1.1.1"
- "1.0.0.1"
################################################################
# Traefik logs
################################################################
log:
level: INFO
################################################################
# Access logs
################################################################
accessLog: {}
################################################################
# API and Dashboard
################################################################
api:
insecure: false
dashboard: true
################################################################
# Ping
################################################################
# ping:
################################################################
# Metrics
################################################################
metrics:
prometheus:
addEntryPointsLabels: true
addRoutersLabels: true
addServicesLabels: true
buckets:
- 0.1
- 0.3
- 1.2
- 5.0
entryPoint: websecure
manualRouting: true
################################################################
# Providers
################################################################
providers:
docker:
endpoint: "unix:///var/run/docker.sock"
exposedByDefault: false
file:
directory: "/etc/traefik/conf"
watch: true

View File

@@ -1,5 +0,0 @@
TZ=US/Central
WATCHTOWER_HTTP_API_METRICS=true
WATCHTOWER_HTTP_API_TOKEN=token
WATCHTOWER_CLEANUP=true
WATCHTOWER_POLL_INTERVAL=3600

View File

@@ -1,13 +0,0 @@
services:
watchtower:
container_name: watchtower
dns:
- 127.0.0.1
- 192.168.1.134
env_file:
- .env
image: containrrr/watchtower:latest
privileged: true
restart: always
volumes:
- /var/run/docker.sock:/var/run/docker.sock