archive rpi hosts

hosts/ps08rp/gitea/.env

@@ -1,9 +0,0 @@
-USER_UID=1000
-USER_GID=1000
-GITEA__database__DB_TYPE=postgres
-GITEA__database__HOST=gitea-postgres:5432
-GITEA__database__NAME=gitea
-GITEA__database__USER=gitea
-GITEA__database__PASSWD=""
-GITEA__webhook__ALLOWED_HOST_LIST="*.alexlebens.net, 192.168.*.*, 172.27.*.*"
-DISABLE_REGISTRATION=true

hosts/ps08rp/gitea/.postgresql.env

@@ -1,3 +0,0 @@
-POSTGRES_USER=gitea
-POSTGRES_PASSWORD=""
-POSTGRES_DB=gitea

hosts/ps08rp/gitea/docker-compose.yml

@@ -1,58 +0,0 @@
-services:
-    gitea:
-        container_name: gitea
-        depends_on:
-            - postgresql
-        dns:
-            - 127.0.0.1
-            - 192.168.1.147
-        env_file:
-            - .env
-        image: docker.io/gitea/gitea:latest
-        labels:
-            traefik.docker.network: traefik
-            traefik.enable: true
-            traefik.http.routers.gitea.entrypoints: websecure
-            traefik.http.routers.gitea.rule: Host(`gitea-ps08rp.alexlebens.net`)
-            traefik.http.routers.gitea.service: gitea
-            traefik.http.services.gitea.loadbalancer.server.port: 3000
-        networks:
-            traefik: null
-        ports:
-            - 2222:22
-        restart: always
-        volumes:
-            - gitea_data:/data
-            - /etc/timezone:/etc/timezone:ro
-            - /etc/localtime:/etc/localtime:ro
-
-    postgresql:
-        container_name: gitea-postgres
-        env_file:
-            - .postgresql.env
-        image: docker.io/postgres:16
-        networks:
-            traefik: null
-        restart: always
-        volumes:
-            - postgresql:/var/lib/postgresql/data
-
-networks:
-    traefik:
-        name: traefik
-        external: true
-
-volumes:
-    postgresql:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/gitea/postgresql
-
-    gitea_data:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/gitea/data

hosts/ps08rp/portainer-agent/docker-compose.yml

@@ -1,14 +0,0 @@
-services:
-    portainer:
-        container_name: portainer-agent
-        dns:
-            - 127.0.0.1
-            - 192.168.1.147
-        image: portainer/agent:latest
-        ports:
-            - 9001:9001
-        privileged: true
-        restart: always
-        volumes:
-            - /var/lib/docker/volumes:/var/lib/docker/volumes
-            - /var/run/docker.sock:/var/run/docker.sock

hosts/ps08rp/tailscale/.env

@@ -1,5 +0,0 @@
-TS_AUTHKEY=""
-TS_HOSTNAME=ps08rp
-TS_ROUTES=192.168.1.0/24
-TS_STATE_DIR=/var/lib/tailscale
-TS_EXTRA_ARGS=--stateful-filtering=false --snat-subnet-routes=false

hosts/ps08rp/tailscale/docker-compose.yml

@@ -1,27 +0,0 @@
-services:
-    tailscaled:
-        cap_add:
-            - NET_ADMIN
-            - NET_RAW
-        container_name: tailscaled
-        dns:
-            - 127.0.0.1
-            - 192.168.1.147
-        env_file:
-            - .env
-        hostname: ps08rp
-        image: tailscale/tailscale:stable
-        network_mode: host
-        privileged: true
-        restart: always
-        volumes:
-            - tailscale:/var/lib/tailscale
-            - /dev/net/tun:/dev/net/tun
-
-volumes:
-    tailscale:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/tailscale

hosts/ps08rp/technitium/.env

@@ -1,3 +0,0 @@
-DNS_SERVER_DOMAIN=alexlebens.net
-DNS_SERVER_ADMIN_PASSWORD=""
-DNS_SERVER_FORWARDERS=1.1.1.1, 1.0.0.1

hosts/ps08rp/technitium/docker-compose.yml

@@ -1,40 +0,0 @@
-services:
-    technitium:
-        container_name: technitium
-        dns:
-            - 127.0.0.1
-            - 192.168.1.147
-        env_file:
-            - .env
-        image: technitium/dns-server:latest
-        labels:
-            traefik.docker.network: traefik
-            traefik.enable: true
-            traefik.http.routers.technitium.entrypoints: websecure
-            traefik.http.routers.technitium.rule: Host(`technitium-ps08rp.alexlebens.net`)
-            traefik.http.routers.technitium.service: technitium
-            traefik.http.services.technitium.loadbalancer.server.port: 5380
-        networks:
-            traefik: null
-        ports:
-            - 53:53/udp
-            - 53:53/tcp
-            - 67:67/udp
-        restart: always
-        sysctls:
-            - net.ipv4.ip_local_port_range=1024 65000
-        volumes:
-            - config:/etc/dns
-
-networks:
-    traefik:
-        name: traefik
-        external: true
-
-volumes:
-    config:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/technitium/config

hosts/ps08rp/traefik/.env

@@ -1,3 +0,0 @@
-CF_API_EMAIL=alexanderlebens@gmail.com
-CF_API_KEY=""
-PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

hosts/ps08rp/traefik/docker-compose.yml

@@ -1,48 +0,0 @@
-services:
-    traefik:
-        command: traefik
-        container_name: traefik
-        dns:
-            - 127.0.0.1
-            - 192.168.1.147
-        env_file:
-            - .env
-        image: docker.io/traefik:v3.0
-        labels:
-            traefik.docker.network: traefik
-            traefik.enable: true
-            traefik.http.routers.dashboard.entrypoints: websecure
-            traefik.http.routers.dashboard.rule: (Host(`traefik-ps08rp.alexlebens.net`) && (PathPrefix(`/api/`) || PathPrefix(`/dashboard/`)))
-            traefik.http.routers.dashboard.service: api@internal
-            traefik.http.routers.dashboard.tls: true
-            traefik.http.routers.dashboard.tls.certresolver: cloudflare
-        networks:
-            traefik: null
-        ports:
-            - 80:80
-            - 443:443
-        privileged: true
-        restart: always
-        volumes:
-            - config:/etc/traefik
-            - log:/log
-            - /var/run/docker.sock:/var/run/docker.sock:ro
-
-networks:
-    traefik:
-        name: traefik
-
-volumes:
-    config:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/traefik/config
-
-    log:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/traefik/log

hosts/ps08rp/traefik/traefik_config/conf/iplocal.yml

@@ -1,15 +0,0 @@
-http:
-  middlewares:
-    ip-local:
-      IPAllowList:
-        sourceRange:
-          - "192.168.1.1/16"
-          - "172.27.0.0/16"
-
-tcp:
-  middlewares:
-    ip-local:
-      IPAllowList:
-        sourceRange:
-          - "192.168.1.1/16"
-          - "172.27.0.0/16"

hosts/ps08rp/traefik/traefik_config/conf/metrics.yml

@@ -1,8 +0,0 @@
-http:
-  routers:
-    prometheus:
-      rule: "(Host(`traefik-ps08rp.alexlebens.net`) && Path(`/metrics`))"
-      entryPoints: websecure
-      service: prometheus@internal
-      middlewares:
-        - "ip-local@file"

hosts/ps08rp/traefik/traefik_config/traefik.yml

@@ -1,113 +0,0 @@
-################################################################
-# Global
-################################################################
-
-global:
-  checkNewVersion: true
-  sendAnonymousUsage: false
-
-################################################################
-# EntryPoints
-################################################################
-
-entryPoints:
-  web:
-    address: :80
-    http:
-      redirections:
-        entryPoint:
-          to: websecure
-          scheme: https
-
-  websecure:
-    address: :443
-    forwardedHeaders:
-      trustedIPs:
-        - "192.168.1.1/16"
-    proxyProtocol:
-      trustedIPs:
-        - "192.168.1.1/16"
-    http:
-      tls:
-        options: default
-        certResolver: cloudflare
-        domains:
-          - main: "*.alexlebens.net"
-            sans:
-              - "alexlebens.net"
-      middlewares:
-        - ip-local@file
-
-################################################################
-# Certificate Resolvers
-################################################################
-
-certificatesResolvers:
-  cloudflare:
-    acme:
-      email: alexanderlebens@gmail.com
-      storage: /etc/traefik/acme/acme.json
-      preferredChain: "ISRG Root X1"
-      dnsChallenge:
-        provider: cloudflare
-        delayBeforeCheck: "3"
-        resolvers:
-          - "1.1.1.1"
-          - "1.0.0.1"
-
-################################################################
-# Traefik logs
-################################################################
-
-log:
-  level: INFO
-
-################################################################
-# Access logs
-################################################################
-
-accessLog: {}
-
-################################################################
-# API and Dashboard
-################################################################
-
-api:
-  insecure: false
-  dashboard: true
-
-################################################################
-# Ping
-################################################################
-
-# ping:
-
-################################################################
-# Metrics
-################################################################
-
-metrics:
-  prometheus:
-    addEntryPointsLabels: true
-    addRoutersLabels: true
-    addServicesLabels: true
-    buckets:
-      - 0.1
-      - 0.3
-      - 1.2
-      - 5.0
-    entryPoint: websecure
-    manualRouting: true
-
-################################################################
-# Providers
-################################################################
-
-providers:
-  docker:
-    endpoint: "unix:///var/run/docker.sock"
-    exposedByDefault: false
-
-  file:
-    directory: "/etc/traefik/conf"
-    watch: true

hosts/ps08rp/watchtower/.env

@@ -1,5 +0,0 @@
-TZ=US/Central
-WATCHTOWER_HTTP_API_METRICS=true
-WATCHTOWER_HTTP_API_TOKEN=token
-WATCHTOWER_CLEANUP=true
-WATCHTOWER_POLL_INTERVAL=3600

hosts/ps08rp/watchtower/docker-compose.yml

@@ -1,13 +0,0 @@
-services:
-    watchtower:
-        container_name: watchtower
-        dns:
-            - 127.0.0.1
-            - 192.168.1.147
-        env_file:
-            - .env
-        image: containrrr/watchtower:latest
-        privileged: true
-        restart: always
-        volumes:
-            - /var/run/docker.sock:/var/run/docker.sock

hosts/ps09rp/gitea/.env

@@ -1,9 +0,0 @@
-USER_UID=1000
-USER_GID=1000
-GITEA__database__DB_TYPE=postgres
-GITEA__database__HOST=gitea-postgres:5432
-GITEA__database__NAME=gitea
-GITEA__database__USER=gitea
-GITEA__database__PASSWD=""
-GITEA__webhook__ALLOWED_HOST_LIST="*.alexlebens.net, 192.168.*.*, 172.27.*.*"
-DISABLE_REGISTRATION=true

hosts/ps09rp/gitea/.postgresql.env

@@ -1,3 +0,0 @@
-POSTGRES_USER=gitea
-POSTGRES_PASSWORD=""
-POSTGRES_DB=gitea

hosts/ps09rp/gitea/docker-compose.yml

@@ -1,58 +0,0 @@
-services:
-    gitea:
-        container_name: gitea
-        depends_on:
-            - postgresql
-        dns:
-            - 127.0.0.1
-            - 192.168.1.134
-        env_file:
-            - .env
-        image: docker.io/gitea/gitea:latest
-        labels:
-            traefik.docker.network: traefik
-            traefik.enable: true
-            traefik.http.routers.gitea.entrypoints: websecure
-            traefik.http.routers.gitea.rule: Host(`gitea-ps09rp.alexlebens.net`)
-            traefik.http.routers.gitea.service: gitea
-            traefik.http.services.gitea.loadbalancer.server.port: 3000
-        networks:
-            traefik: null
-        ports:
-            - 2222:22
-        restart: always
-        volumes:
-            - gitea_data:/data
-            - /etc/timezone:/etc/timezone:ro
-            - /etc/localtime:/etc/localtime:ro
-
-    postgresql:
-        container_name: gitea-postgres
-        env_file:
-            - .postgresql.env
-        image: docker.io/postgres:16
-        networks:
-            traefik: null
-        restart: always
-        volumes:
-            - postgresql:/var/lib/postgresql/data
-
-networks:
-    traefik:
-        name: traefik
-        external: true
-
-volumes:
-    postgresql:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/gitea/postgresql
-
-    gitea_data:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/gitea/data

hosts/ps09rp/portainer-agent/docker-compose.yml

@@ -1,14 +0,0 @@
-services:
-    portainer:
-        container_name: portainer-agent
-        dns:
-            - 127.0.0.1
-            - 192.168.1.134
-        image: portainer/agent:latest
-        ports:
-            - 9001:9001
-        privileged: true
-        restart: always
-        volumes:
-            - /var/lib/docker/volumes:/var/lib/docker/volumes
-            - /var/run/docker.sock:/var/run/docker.sock

hosts/ps09rp/tailscale/.env

@@ -1,5 +0,0 @@
-TS_AUTHKEY=""
-TS_HOSTNAME=ps09rp
-TS_ROUTES=192.168.1.0/24
-TS_STATE_DIR=/var/lib/tailscale
-TS_EXTRA_ARGS=--stateful-filtering=false --snat-subnet-routes=false

hosts/ps09rp/tailscale/docker-compose.yml

@@ -1,27 +0,0 @@
-services:
-    tailscaled:
-        cap_add:
-            - NET_ADMIN
-            - NET_RAW
-        container_name: tailscaled
-        dns:
-            - 127.0.0.1
-            - 192.168.1.134
-        env_file:
-            - .env
-        hostname: ps09rp
-        image: tailscale/tailscale:stable
-        network_mode: host
-        privileged: true
-        restart: always
-        volumes:
-            - tailscale:/var/lib/tailscale
-            - /dev/net/tun:/dev/net/tun
-
-volumes:
-    tailscale:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/tailscale

hosts/ps09rp/technitium/.env

@@ -1,3 +0,0 @@
-DNS_SERVER_DOMAIN=alexlebens.net
-DNS_SERVER_ADMIN_PASSWORD=""
-DNS_SERVER_FORWARDERS=1.1.1.1, 1.0.0.1

hosts/ps09rp/technitium/docker-compose.yml

@@ -1,40 +0,0 @@
-services:
-    technitium:
-        container_name: technitium
-        dns:
-            - 127.0.0.1
-            - 192.168.1.134
-        env_file:
-            - .env
-        image: technitium/dns-server:latest
-        labels:
-            traefik.docker.network: traefik
-            traefik.enable: true
-            traefik.http.routers.technitium.entrypoints: websecure
-            traefik.http.routers.technitium.rule: Host(`technitium-ps09rp.alexlebens.net`)
-            traefik.http.routers.technitium.service: technitium
-            traefik.http.services.technitium.loadbalancer.server.port: 5380
-        networks:
-            traefik: null
-        ports:
-            - 53:53/udp
-            - 53:53/tcp
-            - 67:67/udp
-        restart: always
-        sysctls:
-            - net.ipv4.ip_local_port_range=1024 65000
-        volumes:
-            - config:/etc/dns
-
-networks:
-    traefik:
-        name: traefik
-        external: true
-
-volumes:
-    config:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/technitium/config

hosts/ps09rp/traefik/.env

@@ -1,3 +0,0 @@
-CF_API_EMAIL=alexanderlebens@gmail.com
-CF_API_KEY=""
-PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

hosts/ps09rp/traefik/docker-compose.yml

@@ -1,48 +0,0 @@
-services:
-    traefik:
-        command: traefik
-        container_name: traefik
-        dns:
-            - 127.0.0.1
-            - 192.168.1.134
-        env_file:
-            - .env
-        image: docker.io/traefik:v3.0
-        labels:
-            traefik.docker.network: traefik
-            traefik.enable: true
-            traefik.http.routers.dashboard.entrypoints: websecure
-            traefik.http.routers.dashboard.rule: (Host(`traefik-ps09rp.alexlebens.net`) && (PathPrefix(`/api/`) || PathPrefix(`/dashboard/`)))
-            traefik.http.routers.dashboard.service: api@internal
-            traefik.http.routers.dashboard.tls: true
-            traefik.http.routers.dashboard.tls.certresolver: cloudflare
-        networks:
-            traefik: null
-        ports:
-            - 80:80
-            - 443:443
-        privileged: true
-        restart: always
-        volumes:
-            - config:/etc/traefik
-            - log:/log
-            - /var/run/docker.sock:/var/run/docker.sock:ro
-
-networks:
-    traefik:
-        name: traefik
-
-volumes:
-    config:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/traefik/config
-
-    log:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /opt/containers/traefik/log

hosts/ps09rp/traefik/traefik_config/conf/iplocal.yml

@@ -1,15 +0,0 @@
-http:
-  middlewares:
-    ip-local:
-      IPAllowList:
-        sourceRange:
-          - "192.168.1.1/16"
-          - "172.27.0.0/16"
-
-tcp:
-  middlewares:
-    ip-local:
-      IPAllowList:
-        sourceRange:
-          - "192.168.1.1/16"
-          - "172.27.0.0/16"

hosts/ps09rp/traefik/traefik_config/conf/metrics.yml

@@ -1,8 +0,0 @@
-http:
-  routers:
-    prometheus:
-      rule: "(Host(`traefik-ps09rp.alexlebens.net`) && Path(`/metrics`))"
-      entryPoints: websecure
-      service: prometheus@internal
-      middlewares:
-        - "ip-local@file"

hosts/ps09rp/traefik/traefik_config/traefik.yml

@@ -1,113 +0,0 @@
-################################################################
-# Global
-################################################################
-
-global:
-  checkNewVersion: true
-  sendAnonymousUsage: false
-
-################################################################
-# EntryPoints
-################################################################
-
-entryPoints:
-  web:
-    address: :80
-    http:
-      redirections:
-        entryPoint:
-          to: websecure
-          scheme: https
-
-  websecure:
-    address: :443
-    forwardedHeaders:
-      trustedIPs:
-        - "192.168.1.1/16"
-    proxyProtocol:
-      trustedIPs:
-        - "192.168.1.1/16"
-    http:
-      tls:
-        options: default
-        certResolver: cloudflare
-        domains:
-          - main: "*.alexlebens.net"
-            sans:
-              - "alexlebens.net"
-      middlewares:
-        - ip-local@file
-
-################################################################
-# Certificate Resolvers
-################################################################
-
-certificatesResolvers:
-  cloudflare:
-    acme:
-      email: alexanderlebens@gmail.com
-      storage: /etc/traefik/acme/acme.json
-      preferredChain: "ISRG Root X1"
-      dnsChallenge:
-        provider: cloudflare
-        delayBeforeCheck: "3"
-        resolvers:
-          - "1.1.1.1"
-          - "1.0.0.1"
-
-################################################################
-# Traefik logs
-################################################################
-
-log:
-  level: INFO
-
-################################################################
-# Access logs
-################################################################
-
-accessLog: {}
-
-################################################################
-# API and Dashboard
-################################################################
-
-api:
-  insecure: false
-  dashboard: true
-
-################################################################
-# Ping
-################################################################
-
-# ping:
-
-################################################################
-# Metrics
-################################################################
-
-metrics:
-  prometheus:
-    addEntryPointsLabels: true
-    addRoutersLabels: true
-    addServicesLabels: true
-    buckets:
-      - 0.1
-      - 0.3
-      - 1.2
-      - 5.0
-    entryPoint: websecure
-    manualRouting: true
-
-################################################################
-# Providers
-################################################################
-
-providers:
-  docker:
-    endpoint: "unix:///var/run/docker.sock"
-    exposedByDefault: false
-
-  file:
-    directory: "/etc/traefik/conf"
-    watch: true

hosts/ps09rp/watchtower/.env

@@ -1,5 +0,0 @@
-TZ=US/Central
-WATCHTOWER_HTTP_API_METRICS=true
-WATCHTOWER_HTTP_API_TOKEN=token
-WATCHTOWER_CLEANUP=true
-WATCHTOWER_POLL_INTERVAL=3600

hosts/ps09rp/watchtower/docker-compose.yml

@@ -1,13 +0,0 @@
-services:
-    watchtower:
-        container_name: watchtower
-        dns:
-            - 127.0.0.1
-            - 192.168.1.134
-        env_file:
-            - .env
-        image: containrrr/watchtower:latest
-        privileged: true
-        restart: always
-        volumes:
-            - /var/run/docker.sock:/var/run/docker.sock