remove unused services

clusters/cl01tl/services/blocky/values.yaml

@@ -37,6 +37,74 @@ blocky:
 
           connectIPVersion: v4
 
+          customDNS:
+            zone: |
+              $ORIGIN alexlebens.net.
+              $TTL 86400
+              @                               IN      SOA     patryk.ns.cloudflare.com. alexanderlebens.gmail.com. (
+                                                                  2025011001  ; serial
+                                                                  3H          ; refresh after 3 hours
+                                                                  1H          ; retry after 1 hour
+                                                                  1W          ; expire after 1 week
+                                                                  1D)         ; minimum TTL of 1 day
+
+              ;; Name Server
+                                              IN      NS      patryk.ns.cloudflare.com.
+                                              IN      NS      veda.ns.cloudflare.com.
+                                              IN      NS      dns1.alexlebens.net.
+                                              IN      NS      dns2.alexlebens.net.
+
+              dns1                            IN      A       192.168.1.134
+              dns2                            IN      A       192.168.1.15
+
+
+              ;; Computer Names
+              nw01un                          IN      A       192.168.1.1
+
+              ps08rp                          IN      A       192.168.1.134
+              ps09rp                          IN      A       192.168.1.15
+              ps02sn                          IN      A       192.168.1.55  ; Synology Web
+              ps02sn-bond                     IN      A       192.168.1.194 ; Synology Bond for Storage
+
+              pd05wd                          IN      A       192.168.1.115 ; Desktop
+              pl02mc                          IN      A       192.168.1.116 ; Laptop
+
+              dv01hr                          IN      A       192.168.1.213 ; HD Homerun
+              dv02kv                          IN      A       192.168.1.57  ; Pi KVM
+
+              it01ag                          IN      A       192.168.1.100 ; Airgradient
+              it02ph                          IN      A       192.168.1.145 ; Phillips Hue
+              it03tb                          IN      A       192.168.1.193 ; TubesZB ZigBee
+              it04tb                          IN      A       192.168.1.135 ; TubesZB Z-Wave
+
+              ;; Common Names
+              synology                        IN      CNAME   ps02sn.alexlebens.net
+              synologybond                    IN      CNAME   ps02sn-bond.alexlebens.net
+              unifi                           IN      CNAME   nw01un.alexlebens.net
+              airgradient                     IN      CNAME   it01ag.alexlebens.net
+              hdhr                            IN      CNAME   dv01hr.alexlebens.net
+              pikvm                           IN      CNAME   dv02kv.alexlebens.net
+
+
+              ;; Service Names
+              cl01tl                          IN      A       192.168.1.35
+              cl01tl                          IN      A       192.168.1.36
+              cl01tl                          IN      A       192.168.1.37
+
+              cl01tl-endpoint                 IN      A       192.168.1.15
+              cl01tl-endpoint                 IN      A       192.168.1.16
+              cl01tl-endpoint                 IN      A       192.168.1.17
+
+              traefik-cl01tl                  IN      A       192.168.1.16
+              blocky                          IN      A       192.168.1.15
+
+
+              ;; Application Names
+              argocd                          IN      CNAME   cl01tl-endpoint.alexlebens.net
+              authentik                       IN      CNAME   cl01tl-endpoint.alexlebens.net
+              gitea                           IN      CNAME   cl01tl-endpoint.alexlebens.net
+              vault                           IN      CNAME   cl01tl-endpoint.alexlebens.net
+
           blocking:
             denylists:
               sus:

hosts/ps08rp/blocky/compose.yaml

@@ -0,0 +1,37 @@
+---
+version: "3.7"
+
+services:
+    tailscale-blocky:
+        image: ghcr.io/tailscale/tailscale:v1.78.3
+        container_name: tailscale-blocky
+        hostname: blocky-ps08rp
+        cap_add:
+            - net_admin
+            - sys_module
+        environment:
+            - TS_STATE_DIR=/var/lib/tailscale
+        restart: always
+        volumes:
+            - tailscale:/var/lib/tailscale
+        devices:
+            - /dev/net/tun:/dev/net/tun
+
+    blocky:
+        image: ghcr.io/0xerr0r/blocky:v0.24
+        container_name: blocky
+        environment:
+            - TZ=America/Chicago
+        network_mode: service:tailscale-blocky
+        ports:
+            - 53:53/tcp
+            - 53:53/udp
+            - 4000:4000/tcp
+        restart: always
+        volumes:
+            - ./config.yml:/app/config.yml
+        devices:
+            - /etc/localtime:/etc/localtime:ro
+
+volumes:
+    tailscale:

hosts/ps08rp/blocky/config.yml

@@ -0,0 +1,155 @@
+upstreams:
+  init:
+    strategy: fast
+  groups:
+    default:
+      - tcp-tls:1.1.1.1:853
+      - tcp-tls:1.0.0.1:853
+  strategy: parallel_best
+  timeout: 2s
+
+connectIPVersion: v4
+
+customDNS:
+  zone: |
+    $ORIGIN alexlebens.net.
+    $TTL 86400
+    @                               IN      SOA     patryk.ns.cloudflare.com. alexanderlebens.gmail.com. (
+                                                        2025011001  ; serial
+                                                        3H          ; refresh after 3 hours
+                                                        1H          ; retry after 1 hour
+                                                        1W          ; expire after 1 week
+                                                        1D)         ; minimum TTL of 1 day
+
+    ;; Name Server
+                                    IN      NS      patryk.ns.cloudflare.com.
+                                    IN      NS      veda.ns.cloudflare.com.
+                                    IN      NS      dns1.alexlebens.net.
+                                    IN      NS      dns2.alexlebens.net.
+
+    dns1                            IN      A       192.168.1.134
+    dns2                            IN      A       192.168.1.15
+
+
+    ;; Computer Names
+    nw01un                          IN      A       192.168.1.1
+
+    ps08rp                          IN      A       192.168.1.134
+    ps09rp                          IN      A       192.168.1.15
+    ps02sn                          IN      A       192.168.1.55  ; Synology Web
+    ps02sn-bond                     IN      A       192.168.1.194 ; Synology Bond for Storage
+
+    pd05wd                          IN      A       192.168.1.115 ; Desktop
+    pl02mc                          IN      A       192.168.1.116 ; Laptop
+
+    dv01hr                          IN      A       192.168.1.213 ; HD Homerun
+    dv02kv                          IN      A       192.168.1.57  ; Pi KVM
+
+    it01ag                          IN      A       192.168.1.100 ; Airgradient
+    it02ph                          IN      A       192.168.1.145 ; Phillips Hue
+    it03tb                          IN      A       192.168.1.193 ; TubesZB ZigBee
+    it04tb                          IN      A       192.168.1.135 ; TubesZB Z-Wave
+
+    ;; Common Names
+    synology                        IN      CNAME   ps02sn.alexlebens.net
+    synologybond                    IN      CNAME   ps02sn-bond.alexlebens.net
+    unifi                           IN      CNAME   nw01un.alexlebens.net
+    airgradient                     IN      CNAME   it01ag.alexlebens.net
+    hdhr                            IN      CNAME   dv01hr.alexlebens.net
+    pikvm                           IN      CNAME   dv02kv.alexlebens.net
+
+
+    ;; Service Names
+    cl01tl                          IN      A       192.168.1.35
+    cl01tl                          IN      A       192.168.1.36
+    cl01tl                          IN      A       192.168.1.37
+
+    cl01tl-endpoint                 IN      A       192.168.1.15
+    cl01tl-endpoint                 IN      A       192.168.1.16
+    cl01tl-endpoint                 IN      A       192.168.1.17
+
+    traefik-cl01tl                  IN      A       192.168.1.16
+    blocky                          IN      A       192.168.1.15
+
+
+    ;; Application Names
+    argocd                          IN      CNAME   cl01tl-endpoint.alexlebens.net
+    authentik                       IN      CNAME   cl01tl-endpoint.alexlebens.net
+    gitea                           IN      CNAME   cl01tl-endpoint.alexlebens.net
+    vault                           IN      CNAME   cl01tl-endpoint.alexlebens.net
+
+
+
+blocking:
+  denylists:
+    sus:
+      - https://v.firebog.net/hosts/static/w3kbl.txt
+    ads:
+      - https://v.firebog.net/hosts/AdguardDNS.txt
+      - https://v.firebog.net/hosts/Admiral.txt
+      - https://v.firebog.net/hosts/Easylist.txt
+      - https://adaway.org/hosts.txt
+    priv:
+      - https://v.firebog.net/hosts/Easyprivacy.txt
+      - https://v.firebog.net/hosts/Prigent-Ads.txt
+    mal:
+      - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
+    pro:
+      - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
+  allowlists:
+    radarr:
+      - |
+        *.video
+  clientGroupsBlock:
+    default:
+      - sus
+      - ads
+      - priv
+      - mal
+      - pro
+      - radarr
+  blockType: zeroIp
+  blockTTL: 1m
+  loading:
+    refreshPeriod: 24h
+    downloads:
+      timeout: 60s
+      attempts: 5
+      cooldown: 10s
+    concurrency: 16
+    strategy: fast
+    maxErrorsPerSource: 5
+
+caching:
+  minTime: 5m
+  maxTime: 30m
+  maxItemsCount: 0
+  prefetching: true
+  prefetchExpires: 2h
+  prefetchThreshold: 5
+  prefetchMaxItemsCount: 0
+  cacheTimeNegative: 30m
+
+prometheus:
+  enable: true
+  path: /metrics
+
+queryLog:
+  type: console
+  logRetentionDays: 7
+  creationAttempts: 1
+  creationCooldown: 2s
+  flushInterval: 30s
+
+minTlsServeVersion: 1.3
+
+ports:
+  dns: 53
+  http: 4000
+
+log:
+  level: info
+  format: text
+  timestamp: true
+  privacy: false

hosts/ps08rp/traefik/.env

@@ -1 +0,0 @@
-PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

hosts/ps08rp/traefik/compose.yaml

@@ -63,6 +63,10 @@ services:
 networks:
     internal:
         name: internal
+        driver: bridge
+        ipam:
+            config:
+                - subnet: 172.18.0.0/16
 
 volumes:
     letsencrypt:

hosts/ps09rp/blocky/compose.yaml

@@ -0,0 +1,37 @@
+---
+version: "3.7"
+
+services:
+    tailscale-blocky:
+        image: ghcr.io/tailscale/tailscale:v1.78.3
+        container_name: tailscale-blocky
+        hostname: blocky-ps09rp
+        cap_add:
+            - net_admin
+            - sys_module
+        environment:
+            - TS_STATE_DIR=/var/lib/tailscale
+        restart: always
+        volumes:
+            - tailscale:/var/lib/tailscale
+        devices:
+            - /dev/net/tun:/dev/net/tun
+
+    blocky:
+        image: ghcr.io/0xerr0r/blocky:v0.24
+        container_name: blocky
+        environment:
+            - TZ=America/Chicago
+        network_mode: service:tailscale-blocky
+        ports:
+            - 53:53/tcp
+            - 53:53/udp
+            - 4000:4000/tcp
+        restart: always
+        volumes:
+            - ./config.yml:/app/config.yml
+        devices:
+            - /etc/localtime:/etc/localtime:ro
+
+volumes:
+    tailscale:

hosts/ps09rp/blocky/config.yml

@@ -0,0 +1,155 @@
+upstreams:
+  init:
+    strategy: fast
+  groups:
+    default:
+      - tcp-tls:1.1.1.1:853
+      - tcp-tls:1.0.0.1:853
+  strategy: parallel_best
+  timeout: 2s
+
+connectIPVersion: v4
+
+customDNS:
+  zone: |
+    $ORIGIN alexlebens.net.
+    $TTL 86400
+    @                               IN      SOA     patryk.ns.cloudflare.com. alexanderlebens.gmail.com. (
+                                                        2025011001  ; serial
+                                                        3H          ; refresh after 3 hours
+                                                        1H          ; retry after 1 hour
+                                                        1W          ; expire after 1 week
+                                                        1D)         ; minimum TTL of 1 day
+
+    ;; Name Server
+                                    IN      NS      patryk.ns.cloudflare.com.
+                                    IN      NS      veda.ns.cloudflare.com.
+                                    IN      NS      dns1.alexlebens.net.
+                                    IN      NS      dns2.alexlebens.net.
+
+    dns1                            IN      A       192.168.1.134
+    dns2                            IN      A       192.168.1.15
+
+
+    ;; Computer Names
+    nw01un                          IN      A       192.168.1.1
+
+    ps08rp                          IN      A       192.168.1.134
+    ps09rp                          IN      A       192.168.1.15
+    ps02sn                          IN      A       192.168.1.55  ; Synology Web
+    ps02sn-bond                     IN      A       192.168.1.194 ; Synology Bond for Storage
+
+    pd05wd                          IN      A       192.168.1.115 ; Desktop
+    pl02mc                          IN      A       192.168.1.116 ; Laptop
+
+    dv01hr                          IN      A       192.168.1.213 ; HD Homerun
+    dv02kv                          IN      A       192.168.1.57  ; Pi KVM
+
+    it01ag                          IN      A       192.168.1.100 ; Airgradient
+    it02ph                          IN      A       192.168.1.145 ; Phillips Hue
+    it03tb                          IN      A       192.168.1.193 ; TubesZB ZigBee
+    it04tb                          IN      A       192.168.1.135 ; TubesZB Z-Wave
+
+    ;; Common Names
+    synology                        IN      CNAME   ps02sn.alexlebens.net
+    synologybond                    IN      CNAME   ps02sn-bond.alexlebens.net
+    unifi                           IN      CNAME   nw01un.alexlebens.net
+    airgradient                     IN      CNAME   it01ag.alexlebens.net
+    hdhr                            IN      CNAME   dv01hr.alexlebens.net
+    pikvm                           IN      CNAME   dv02kv.alexlebens.net
+
+
+    ;; Service Names
+    cl01tl                          IN      A       192.168.1.35
+    cl01tl                          IN      A       192.168.1.36
+    cl01tl                          IN      A       192.168.1.37
+
+    cl01tl-endpoint                 IN      A       192.168.1.15
+    cl01tl-endpoint                 IN      A       192.168.1.16
+    cl01tl-endpoint                 IN      A       192.168.1.17
+
+    traefik-cl01tl                  IN      A       192.168.1.16
+    blocky                          IN      A       192.168.1.15
+
+
+    ;; Application Names
+    argocd                          IN      CNAME   cl01tl-endpoint.alexlebens.net
+    authentik                       IN      CNAME   cl01tl-endpoint.alexlebens.net
+    gitea                           IN      CNAME   cl01tl-endpoint.alexlebens.net
+    vault                           IN      CNAME   cl01tl-endpoint.alexlebens.net
+
+
+
+blocking:
+  denylists:
+    sus:
+      - https://v.firebog.net/hosts/static/w3kbl.txt
+    ads:
+      - https://v.firebog.net/hosts/AdguardDNS.txt
+      - https://v.firebog.net/hosts/Admiral.txt
+      - https://v.firebog.net/hosts/Easylist.txt
+      - https://adaway.org/hosts.txt
+    priv:
+      - https://v.firebog.net/hosts/Easyprivacy.txt
+      - https://v.firebog.net/hosts/Prigent-Ads.txt
+    mal:
+      - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
+    pro:
+      - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
+  allowlists:
+    radarr:
+      - |
+        *.video
+  clientGroupsBlock:
+    default:
+      - sus
+      - ads
+      - priv
+      - mal
+      - pro
+      - radarr
+  blockType: zeroIp
+  blockTTL: 1m
+  loading:
+    refreshPeriod: 24h
+    downloads:
+      timeout: 60s
+      attempts: 5
+      cooldown: 10s
+    concurrency: 16
+    strategy: fast
+    maxErrorsPerSource: 5
+
+caching:
+  minTime: 5m
+  maxTime: 30m
+  maxItemsCount: 0
+  prefetching: true
+  prefetchExpires: 2h
+  prefetchThreshold: 5
+  prefetchMaxItemsCount: 0
+  cacheTimeNegative: 30m
+
+prometheus:
+  enable: true
+  path: /metrics
+
+queryLog:
+  type: console
+  logRetentionDays: 7
+  creationAttempts: 1
+  creationCooldown: 2s
+  flushInterval: 30s
+
+minTlsServeVersion: 1.3
+
+ports:
+  dns: 53
+  http: 4000
+
+log:
+  level: info
+  format: text
+  timestamp: true
+  privacy: false

hosts/ps09rp/traefik/.env

@@ -1 +0,0 @@
-PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

hosts/ps09rp/traefik/compose.yaml

@@ -63,6 +63,10 @@ services:
 networks:
     internal:
         name: internal
+        driver: bridge
+        ipam:
+            config:
+                - subnet: 172.18.0.0/16
 
 volumes:
     letsencrypt:

hosts/ps10rp/pihole/.env

@@ -1,5 +0,0 @@
-TZ=US/Central
-WEBPASSWORD=""
-RATE_LIMIT=0/0
-FTLCONF_MAXDBDAYS=14
-WEB_PORT=8080

hosts/ps10rp/pihole/.exporter.env

@@ -1,6 +0,0 @@
-PIHOLE_HOSTNAME=pihole
-PIHOLE_API_TOKEN=""
-PIHOLE_PROTOCOL=http
-PIHOLE_PORT=8080
-INTERVAL=90s
-PORT=9617

hosts/ps10rp/pihole/docker-compose.yml

@@ -1,70 +0,0 @@
-services:
-    pihole:
-        container_name: pihole
-        dns:
-            - 127.0.0.1
-            - 1.1.1.1
-        env_file:
-            - .env
-        image: docker.io/pihole/pihole:latest
-        labels:
-            traefik.docker.network: traefik
-            traefik.enable: true
-            traefik.http.routers.pihole.entrypoints: websecure
-            traefik.http.routers.pihole.rule: Host(`pihole.lebens-home.net`)
-            traefik.http.routers.pihole.service: pihole
-            traefik.http.services.pihole.loadbalancer.server.port: 8080
-        networks:
-            traefik:
-                ipv4_address: 172.19.0.3
-        ports:
-            - 53:53/tcp
-            - 53:53/udp
-            - 8080:8080
-        privileged: true
-        restart: always
-        volumes:
-            - config:/etc/pihole
-            - dnsmasq:/etc/dnsmasq.d
-            - logs:/var/log
-
-    pihole_exporter:
-        container_name: pihole-exporter
-        depends_on:
-            - pihole
-        dns:
-            - 127.0.0.1
-            - 1.1.1.1
-        env_file:
-            - .exporter.env
-        image: docker.io/ekofr/pihole-exporter:latest
-        networks:
-            traefik: null
-        restart: always
-
-networks:
-    traefik:
-        name: traefik
-        external: true
-
-volumes:
-    config:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /mnt/data/containers/pihole/config
-
-    dnsmasq:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /mnt/data/containers/pihole/dnsmasq
-
-    logs:
-        driver: local
-        driver_opts:
-            type: none
-            o: bind
-            device: /mnt/data/containers/pihole/logs

hosts/ps10rp/portainer-agent/docker-compose.yml

@@ -1,14 +0,0 @@
-services:
-    portainer:
-        container_name: portainer-agent
-        dns:
-            - 172.19.0.3
-            - 1.1.1.1
-        image: docker.io/portainer/agent:latest
-        ports:
-            - 9001:9001
-        privileged: true
-        restart: always
-        volumes:
-            - /var/lib/docker/volumes:/var/lib/docker/volumes
-            - /var/run/docker.sock:/var/run/docker.sock