Compare commits

...

72 Commits

Author SHA1 Message Date
derekc 80561ccbc0 created invoice ninja 2026-06-23 00:31:50 -07:00
derekc 2c4545fb15 added arr network to containers 2026-06-18 16:04:40 -07:00
derekc 835815e349 updated seerr nfs compose file to work with new settings 2026-06-18 16:01:35 -07:00
derekc a3fc70c41b added the auto clear back in and change the delete file on trashcan to false 2026-06-08 13:13:10 -07:00
derekc 2fa0a4c334 fixed the clearing issue 2026-06-08 12:57:36 -07:00
derekc 37bdfbebe1 added a different health check and changed container name 2026-06-06 00:27:50 -07:00
derekc a6adeb1077 removed health check 2026-06-06 00:25:04 -07:00
derekc 0bdbde5c5b created unpoller 2026-06-06 00:20:32 -07:00
derekc fadf170e88 added example dashboards 2026-06-05 01:03:34 -07:00
derekc 606ee32813 corrected name of containers 2026-06-05 00:46:35 -07:00
derekc 48dd3d44eb fixed the other health checks 2026-06-05 00:44:30 -07:00
derekc 60db8be1f2 fixed grafana health check 2026-06-05 00:43:12 -07:00
derekc 51b330586f fixed loki health check again 2026-06-05 00:39:49 -07:00
derekc 3131f9318b fixed loki health check 2026-06-05 00:31:42 -07:00
derekc e540abcbbd Update Monitor-Stack/docker-compose-volume.yaml 2026-06-05 00:26:06 -07:00
derekc d403d6a8a2 Update Monitor-Stack/docker-compose-volume.yaml 2026-06-05 00:24:40 -07:00
derekc 873998e43f included information on just pulling individual app files 2026-06-04 10:51:12 -07:00
derekc 51b2bac037 created monitoring stack 2026-06-03 00:28:45 -07:00
derekc 57d779d5d1 fixed healthcheck again 2026-05-31 01:26:38 -07:00
derekc b014955412 fixed the healthcheck 2026-05-31 01:24:06 -07:00
derekc 9d1a04757e fixed resource limit 2026-05-31 01:21:04 -07:00
derekc 80c3e28eea increased resource limit 2026-05-31 01:19:20 -07:00
derekc 3816b6090b created manyfold 2026-05-31 01:01:07 -07:00
derekc 032fd3e909 changed memory limit 2026-05-28 23:53:34 -07:00
derekc 4ae37498ea changed the name of the volume 2026-05-28 22:49:58 -07:00
derekc 46267155ce updated with new compose files 2026-05-28 22:47:38 -07:00
derekc d06ffe3bbe added trilium 2026-05-28 22:35:08 -07:00
derekc c8e0eac985 fixed app name 2026-05-28 00:57:25 -07:00
derekc e9c08e1419 created bind mount compose file 2026-05-27 23:20:25 -07:00
derekc f93d7b2825 fixed order of deploy 2026-05-27 23:00:10 -07:00
derekc 84a6fb42f1 created tautulli 2026-05-27 22:56:34 -07:00
derekc b8848eefe5 testing running odoo as a different user 2026-05-26 22:20:28 -07:00
derekc f1105be330 added odoo config file 2026-05-26 22:03:41 -07:00
derekc cd9e739961 created odoo 2026-05-26 00:44:38 -07:00
derekc 0e4ae0df6a created vaultwarden 2026-05-24 01:01:51 -07:00
derekc c16adc4c38 updated container list 2026-05-24 00:09:57 -07:00
derekc e382343f4c created transmission-openvpn 2026-05-24 00:07:27 -07:00
derekc bd3a21a9ea created flaresolverr 2026-05-23 23:50:45 -07:00
derekc 618e976e81 created Jackett 2026-05-23 23:41:03 -07:00
derekc 11e96df3eb created mealie 2026-05-21 00:45:37 -07:00
derekc c8cf83a1c9 Added new containers 2026-05-20 23:35:57 -07:00
derekc ec828c185d created metube 2026-05-20 23:05:43 -07:00
derekc 8309328890 removed memory limit 2026-05-19 10:04:30 -07:00
derekc 1b1d058ded added bind mount and updated env examples 2026-05-19 09:52:21 -07:00
derekc 472a09ea5c fixed healthcheck 2026-05-19 09:39:56 -07:00
derekc 068ccd6b4d increased the memory limit 2026-05-19 09:32:57 -07:00
derekc 44c1de67cd added healthchecks and resource limits. Also changed a variable 2026-05-19 09:28:51 -07:00
derekc 80f173ebc5 created pinchflat 2026-05-19 09:13:04 -07:00
derekc a4ec975fff set volume names 2026-05-16 01:07:38 -07:00
derekc 12f661980e added resource limits and healthchecks 2026-05-16 00:59:53 -07:00
derekc 58c2c96c54 changed default timezone 2026-05-16 00:59:38 -07:00
derekc 4d8d3be954 created n8n 2026-05-16 00:28:26 -07:00
derekc 9115f4a859 updated with new compose files 2026-05-13 00:18:31 -07:00
derekc a7a5b952d2 fixed health check 2026-05-12 23:58:17 -07:00
derekc 73761df7ef created omnitools 2026-05-12 23:54:15 -07:00
derekc 696d82f7ca created linkstack 2026-05-11 23:49:44 -07:00
derekc 250a54e736 created kanboard 2026-05-11 23:25:44 -07:00
derekc 4aaf6365c9 created filegator 2026-05-11 22:57:15 -07:00
derekc 455dfc9251 changed container name 2026-05-11 10:46:57 -07:00
derekc 119a0bb551 fixed the variables again 2026-05-11 10:45:01 -07:00
derekc 5edac1fd2a fixed the name and variables 2026-05-11 10:43:12 -07:00
derekc cbc3fb6010 changed container name and restructured file 2026-05-11 10:33:12 -07:00
derekc a83a620958 updated Readme file 2026-05-11 09:27:33 -07:00
derekc 086656c622 added bytestash 2026-05-11 08:54:07 -07:00
derekc 167e38310d fixed the nfs variable names 2026-05-11 08:53:58 -07:00
derekc b698029d7e added babybuddy 2026-05-11 01:13:33 -07:00
derekc f05abb67dd changed the container name 2026-05-11 01:05:42 -07:00
derekc 998e7da6e4 added env example file 2026-05-11 00:51:39 -07:00
derekc 896d845256 added babybuddy 2026-05-11 00:48:50 -07:00
derekc 97581d9241 added searxng and updated article links 2026-05-10 23:48:43 -07:00
derekc ef6449f23c created env example file 2026-05-10 23:15:38 -07:00
derekc 5a242d7d18 created SearXNG 2026-05-10 23:13:56 -07:00
58 changed files with 3032 additions and 17 deletions
+30
View File
@@ -0,0 +1,30 @@
# -----------------------------------------------
# BabyBuddy - Docker Compose Environment Variables
# -----------------------------------------------
# Image version tag (e.g. "latest" or a pinned version like "2.5.1")
BABYBUDDY_VERSION=latest
# Host port to expose the BabyBuddy web UI on
BABYBUDDY_PORT=8000
# User and group ID the container process runs as (match your host user to avoid permission issues)
BABYBUDDY_PUID=1000
BABYBUDDY_PGID=1000
# Timezone for the container (e.g. America/New_York, Europe/London)
BABYBUDDY_TZ=America/Los_Angeles
# Comma-separated list of trusted origins for Django CSRF protection
# Must include the scheme and host/port you access the app from
BABYBUDDY_ORIGINS=http://127.0.0.1:8000
# -----------------------------------------------
# NFS Volume Configuration
# -----------------------------------------------
# IP address or hostname of the NFS server
BABYBUDDY_NFS_SERVER=192.168.1.x
# NFS export path on the server (e.g. /mnt/pool/docker/babybuddy)
BABYBUDDY_NFS_DEVICE=:/mnt/pool/docker/babybuddy
+33
View File
@@ -0,0 +1,33 @@
services:
app:
image: lscr.io/linuxserver/babybuddy:${BABYBUDDY_VERSION:-latest}
container_name: babybuddy-app
environment:
- PUID=${BABYBUDDY_PUID:-1000}
- PGID=${BABYBUDDY_PGID:-1000}
- TZ=${BABYBUDDY_TZ:-America/Los_Angeles}
- CSRF_TRUSTED_ORIGINS=${BABYBUDDY_ORIGINS:-http://127.0.0.1:8046}
volumes:
- babybuddy-app:/config
ports:
- ${BABYBUDDY_PORT:-8000}:8000
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8000/login/"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
babybuddy-app:
name: babybuddy-app
driver: local
driver_opts:
type: nfs
o: "addr=${BABYBUDDY_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${BABYBUDDY_NFS_DEVICE}"
+13
View File
@@ -0,0 +1,13 @@
# ByteStash Docker Compose Environment Variables
# Container image version tag (e.g. "1.5.4" or "latest")
BYTESTASH_VERSION=latest
# Host port to expose the ByteStash web UI on
BYTESTASH_PORT=5000
# IP address or hostname of the NFS server
BYTESTASH_NFS_SERVER=192.168.1.100
# NFS export path on the server (e.g. "/mnt/pool/bytestash")
BYTESTASH_NFS_DEVICE=/mnt/pool/bytestash
+28
View File
@@ -0,0 +1,28 @@
services:
app:
image: ghcr.io/jordan-dalby/bytestash:${BYTESTASH_VERSION:-latest}
container_name: bytestash-app
ports:
- ${BYTESTASH_PORT:-5000}:5000
volumes:
- bytestash-app:/data/snippets:rw
healthcheck:
test: ["CMD", "wget", "-q", "--spider", "http://localhost:5000/"]
interval: 30s
timeout: 10s
retries: 3
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
bytestash-app:
name: bytestash-app
driver: local
driver_opts:
type: nfs
o: "addr=${BYTESTASH_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${BYTESTASH_NFS_DEVICE}"
+1 -1
View File
@@ -1,7 +1,7 @@
services:
app:
image: jgraph/drawio:${DRAWIO_VERSION:-latest}
container_name: draw-io
container_name: draw-io-app
ports:
- ${DRAWIO_PORT:-8080}:8080
environment:
+18
View File
@@ -0,0 +1,18 @@
# FileGator Docker Compose - Environment Variables
# Docker image tag to use for FileGator. Defaults to "latest" if not set.
FILEGATOR_VERSION=latest
# Host port to expose the FileGator web UI on. Maps to container port 8080.
FILEGATOR_PORT=8080
# IP address or hostname of the NFS server used for both volumes.
FILEGATOR_NFS_SERVER=192.168.1.100
# NFS export path for the FileGator config volume (private app data).
# Example: :/mnt/pool/filegator/config
FILEGATOR_CONFIG_NFS_DEVICE=:/mnt/pool/filegator/config
# NFS export path for the FileGator repository volume (user file storage).
# Example: :/mnt/pool/filegator/repository
FILEGATOR_REPOSITORY_NFS_DEVICE=:/mnt/pool/filegator/repository
+36
View File
@@ -0,0 +1,36 @@
services:
app:
image: filegator/filegator:${FILEGATOR_VERSION:-latest}
container_name: filegator-app
ports:
- ${FILEGATOR_PORT:-8080}:8080
volumes:
- filegator-config:/var/www/filegator/private
- filegator-repository:/var/www/filegator/repository
healthcheck:
test: ["CMD", "timeout", "10s", "bash", "-c", ":> /dev/tcp/127.0.0.1/8080 || exit 1"]
interval: 10s
timeout: 5s
retries: 3
start_period: 90s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
filegator-config:
name: filegator-config
driver: local
driver_opts:
type: nfs
o: "addr=${FILEGATOR_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${FILEGATOR_CONFIG_NFS_DEVICE}"
filegator-repository:
name: filegator-repository
driver: local
driver_opts:
type: nfs
o: "addr=${FILEGATOR_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${FILEGATOR_REPOSITORY_NFS_DEVICE}"
+22
View File
@@ -0,0 +1,22 @@
# FlareSolverr Docker Compose Environment Variables
# Image version tag (default: latest)
FLARESOLVERR_VERSION=latest
# Timezone (default: America/Los_Angeles)
FLARESOLVERR_TZ=America/Los_Angeles
# Host port to expose the FlareSolverr API (default: 8191)
FLARESOLVERR_PORT=8191
# Log verbosity level: info, debug, warning, error (default: info)
FLARESOLVERR_LOG_LEVEL=info
# Captcha solver to use; set to none if not using one (default: none)
FLARESOLVERR_CAPTCHA_SOLVER=none
# NFS server hostname or IP address
FLARESOLVERR_NFS_SERVER=
# NFS device path for FlareSolverr config storage (e.g. :/mnt/pool/flaresolverr/config)
FLARESOLVERR_NFS_DEVICE=
+39
View File
@@ -0,0 +1,39 @@
services:
app:
image: ghcr.io/flaresolverr/flaresolverr:${FLARESOLVERR_VERSION:-latest}
container_name: flaresolverr
environment:
- LOG_LEVEL=${FLARESOLVERR_LOG_LEVEL:-info}
- LOG_HTML=false
- CAPTCHA_SOLVER=${FLARESOLVERR_CAPTCHA_SOLVER:-none}
- TZ=${FLARESOLVERR_TZ:-America/Los_Angeles}
volumes:
- flaresolverr-config:/config
ports:
- ${FLARESOLVERR_PORT:-8191}:8191
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8191/health"]
interval: 30s
timeout: 10s
retries: 3
start_period: 20s
deploy:
resources:
limits:
memory: 512m
networks:
- arr_network
restart: unless-stopped
volumes:
flaresolverr-config:
name: flaresolverr-config
driver: local
driver_opts:
type: nfs
o: "addr=${FLARESOLVERR_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${FLARESOLVERR_NFS_DEVICE}"
networks:
arr_network:
external: true
+7 -2
View File
@@ -1,2 +1,7 @@
# Main interface port for accessing the application
IT_TOOLS_PORT="8000"
# IT-Tools Docker Compose Environment Variables
# Container image version tag (e.g. "latest" or a specific release tag)
IT_TOOLS_VERSION=latest
# Host port to expose the IT-Tools web UI on
IT_TOOLS_PORT=8000
+7 -7
View File
@@ -1,17 +1,17 @@
services:
app:
image: corentinth/it-tools:latest
container_name: it-tools
image: corentinth/it-tools:${IT_TOOLS_VERSION:-latest}
container_name: it-tools-app
ports:
- ${IT_TOOLS_PORT}:80
deploy:
resources:
limits:
memory: 512m
- ${IT_TOOLS_PORT:-8000}:80
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1/ || exit 1"]
interval: 30s
timeout: 10s
retries: 3
start_period: 15s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
+42
View File
@@ -0,0 +1,42 @@
# === Invoice Ninja ===
# Compose infrastructure (image versions, port, NFS)
IN_VERSION=5
IN_NGINX_VERSION=alpine
IN_DB_VERSION=8
IN_PORT=8080
IN_NFS_SERVER=your-nfs-server-ip
IN_NFS_PUBLIC_DEVICE=:/path/to/invoice-ninja/public
IN_NFS_STORAGE_DEVICE=:/path/to/invoice-ninja/storage
IN_NFS_DB_DEVICE=:/path/to/invoice-ninja/db
# Application
# Generate with: docker compose run --rm app php artisan key:generate --show
APP_KEY=base64:REPLACE_WITH_GENERATED_KEY
APP_URL=https://invoices.yourdomain.com
NINJA_ENVIRONMENT=selfhosted
# Database
DB_HOST=db
DB_PORT=3306
DB_ROOT_PASSWORD=changeme
DB_DATABASE=invoiceninja
DB_USERNAME=invoiceninja
DB_PASSWORD=changeme
# Queue / Cache (defaults work for most self-hosted setups)
QUEUE_CONNECTION=database
CACHE_DRIVER=file
SESSION_DRIVER=file
PDF_GENERATOR=snappdf
LOG_CHANNEL=stderr
# Mail (SMTP)
MAIL_MAILER=smtp
MAIL_HOST=smtp.yourdomain.com
MAIL_PORT=587
MAIL_USERNAME=your@email.com
MAIL_PASSWORD=changeme
MAIL_ENCRYPTION=tls
MAIL_FROM_ADDRESS=invoices@yourdomain.com
MAIL_FROM_NAME=Invoice Ninja
+126
View File
@@ -0,0 +1,126 @@
services:
db:
image: mysql:${IN_DB_VERSION:-8}
container_name: invoice-ninja-db
environment:
MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASSWORD}
MYSQL_DATABASE: ${DB_DATABASE:-invoiceninja}
MYSQL_USER: ${DB_USERNAME:-invoiceninja}
MYSQL_PASSWORD: ${DB_PASSWORD}
volumes:
- in-db:/var/lib/mysql
healthcheck:
test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${DB_ROOT_PASSWORD}"]
interval: 10s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
app:
image: invoiceninja/invoiceninja:${IN_VERSION:-5}
container_name: invoice-ninja-app
env_file: .env
volumes:
- in-public:/var/www/app/public
- in-storage:/var/www/app/storage
depends_on:
db:
condition: service_healthy
healthcheck:
test: ["CMD", "php", "artisan", "--version"]
interval: 30s
timeout: 15s
retries: 5
start_period: 90s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
scheduler:
image: invoiceninja/invoiceninja:${IN_VERSION:-5}
container_name: invoice-ninja-scheduler
env_file: .env
entrypoint: ""
command: ["sh", "-c", "while true; do php /var/www/app/artisan schedule:run --no-interaction; sleep 60; done"]
volumes:
- in-public:/var/www/app/public
- in-storage:/var/www/app/storage
depends_on:
app:
condition: service_healthy
deploy:
resources:
limits:
memory: 256m
restart: unless-stopped
queue:
image: invoiceninja/invoiceninja:${IN_VERSION:-5}
container_name: invoice-ninja-queue
env_file: .env
entrypoint: ""
command: ["php", "/var/www/app/artisan", "queue:work", "--sleep=3", "--tries=3"]
volumes:
- in-public:/var/www/app/public
- in-storage:/var/www/app/storage
depends_on:
app:
condition: service_healthy
deploy:
resources:
limits:
memory: 256m
restart: unless-stopped
nginx:
image: nginx:${IN_NGINX_VERSION:-alpine}
container_name: invoice-ninja-nginx
volumes:
- in-public:/var/www/app/public
- ./nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro
ports:
- ${IN_PORT:-8080}:80
depends_on:
app:
condition: service_healthy
healthcheck:
test: ["CMD-SHELL", "[ -f /var/run/nginx.pid ] && kill -0 $(cat /var/run/nginx.pid) || exit 1"]
interval: 30s
timeout: 10s
retries: 3
start_period: 30s
deploy:
resources:
limits:
memory: 128m
restart: unless-stopped
volumes:
in-public:
name: invoice-ninja-public
driver: local
driver_opts:
type: nfs
o: "addr=${IN_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${IN_NFS_PUBLIC_DEVICE}"
in-storage:
name: invoice-ninja-storage
driver: local
driver_opts:
type: nfs
o: "addr=${IN_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${IN_NFS_STORAGE_DEVICE}"
in-db:
name: invoice-ninja-db
driver: local
driver_opts:
type: nfs
o: "addr=${IN_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${IN_NFS_DB_DEVICE}"
+33
View File
@@ -0,0 +1,33 @@
server {
listen 80;
server_name _;
root /var/www/app/public;
index index.php;
client_max_body_size 100M;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
charset utf-8;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
error_page 404 /index.php;
location ~ \.php$ {
fastcgi_pass app:9000;
fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
include fastcgi_params;
}
location ~ /\.(?!well-known).* {
deny all;
}
}
+26
View File
@@ -0,0 +1,26 @@
# Jackett Docker Compose Environment Variables
# Image version tag (default: latest)
JACKETT_VERSION=latest
# User and group ID for file permissions (default: 1000)
JACKETT_PUID=1000
JACKETT_PGID=1000
# Timezone (default: America/Los_Angeles)
JACKETT_TZ=America/Los_Angeles
# Enable Jackett auto-updates (default: false)
JACKETT_UPDATE=false
# Host port to expose the Jackett web UI (default: 9117)
JACKETT_PORT=9117
# NFS server hostname or IP address
JACKETT_NFS_SERVER=
# NFS device path for Jackett config storage (e.g. :/mnt/pool/jackett/config)
JACKETT_CONFIG_NFS_DEVICE=
# NFS device path for Jackett downloads storage (e.g. :/mnt/pool/jackett/downloads)
JACKETT_DOWNLOADS_NFS_DEVICE=
+47
View File
@@ -0,0 +1,47 @@
services:
app:
image: linuxserver/jackett:${JACKETT_VERSION:-latest}
container_name: jackett-app
environment:
- PUID=${JACKETT_PUID:-1000}
- PGID=${JACKETT_PGID:-1000}
- TZ=${JACKETT_TZ:-America/Los_Angeles}
- AUTO_UPDATE=${JACKETT_UPDATE:-false}
volumes:
- jackett-config:/config
- jackett-downloads:/downloads
ports:
- ${JACKETT_PORT:-9117}:9117
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:9117/UI/Dashboard"]
interval: 30s
timeout: 10s
retries: 3
start_period: 20s
deploy:
resources:
limits:
memory: 512m
networks:
- arr_network
restart: unless-stopped
volumes:
jackett-config:
name: jackett-config
driver: local
driver_opts:
type: nfs
o: "addr=${JACKETT_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${JACKETT_CONFIG_NFS_DEVICE}"
jackett-downloads:
name: jackett-downloads
driver: local
driver_opts:
type: nfs
o: "addr=${JACKETT_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${JACKETT_DOWNLOADS_NFS_DEVICE}"
networks:
arr_network:
external: true
+14
View File
@@ -0,0 +1,14 @@
# Kanboard Docker Compose - Environment Variables
# Docker image tag to use for Kanboard. Defaults to "latest" if not set.
KANBOARD_VERSION=latest
# Host port to expose the Kanboard web UI on. Maps to container port 80.
KANBOARD_PORT=8080
# IP address or hostname of the NFS server used for the app volume.
KANBOARD_NFS_SERVER=192.168.1.100
# NFS export path for the Kanboard app volume (data, plugins, and SSL certs).
# Example: :/mnt/pool/kanboard/app
KANBOARD_NFS_DEVICE=:/mnt/pool/kanboard/app
+32
View File
@@ -0,0 +1,32 @@
services:
app:
image: kanboard/kanboard:${KANBOARD_VERSION:-latest}
container_name: kanboard-app
ports:
- ${KANBOARD_PORT}:80
environment:
- PLUGIN_INSTALLER=true
volumes:
- kanboard-app:/var/www/app/data
- kanboard-app:/var/www/app/plugins
- kanboard-app:/etc/nginx/ssl
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost/healthcheck.php"]
interval: 10s
timeout: 5s
retries: 3
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
kanboard-app:
name: kanboard-app
driver: local
driver_opts:
type: nfs
o: "addr=${KANBOARD_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${KANBOARD_NFS_DEVICE}"
+21
View File
@@ -0,0 +1,21 @@
# LinkStack Docker Compose - Environment Variables
# Docker image tag to use for LinkStack. Defaults to "latest" if not set.
LINKSTACK_VERSION=latest
# Timezone for the container. Defaults to "America/Los_Angeles" if not set.
# Full list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
LINKSTACK_TZ=America/Los_Angeles
# Email address for the Apache server admin. Used in error pages and logs.
LINKSTACK_ADMIN_EMAIL=admin@example.com
# Host port to expose the LinkStack web UI on. Maps to container port 443 (HTTPS).
LINKSTACK_PORT=443
# IP address or hostname of the NFS server used for the app volume.
LINKSTACK_NFS_SERVER=192.168.1.100
# NFS export path for the LinkStack app volume (stores all application data).
# Example: :/mnt/pool/linkstack/app
LINKSTACK_NFS_DEVICE=:/mnt/pool/linkstack/app
+26
View File
@@ -0,0 +1,26 @@
services:
app:
image: linkstackorg/linkstack:${LINKSTACK_VERSION:-latest}
container_name: linkstack-app
environment:
TZ: ${LINKSTACK_TZ:-America/Los_Angeles}
SERVER_ADMIN: ${LINKSTACK_ADMIN_EMAIL}
UPLOAD_MAX_FILESIZE: 8M
volumes:
- linkstack-app:/htdocs
ports:
- ${LINKSTACK_PORT:-443}:443
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
linkstack-app:
name: linkstack-app
driver: local
driver_opts:
type: nfs
o: "addr=${LINKSTACK_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${LINKSTACK_NFS_DEVICE}"
+51
View File
@@ -0,0 +1,51 @@
# -----------------------------------------------
# Manyfold - Docker Compose Environment Variables
# -----------------------------------------------
# Copy this file to .env and fill in your values.
# ----------------------------
# App
# ----------------------------
# Docker image tag for Manyfold
MANYFOLD_APP_VERSION=latest
# Host port to expose the Manyfold web UI on
MANYFOLD_PORT=3214
# User and group ID the app process runs as (match your host user for volume permission compatibility)
MANYFOLD_PUID=1000
MANYFOLD_PGID=1000
# Long random string used to sign sessions — generate with: openssl rand -hex 64
MANYFOLD_SECRET_KEY=
# ----------------------------
# Database (PostgreSQL)
# ----------------------------
# Postgres image tag
MANYFOLD_DB_VERSION=15
# Database credentials — must match between app and db services
MANYFOLD_DB_USERNAME=manyfold
MANYFOLD_DB_PASSWORD=
# ----------------------------
# Redis
# ----------------------------
# Redis image tag
MANYFOLD_REDIS_VERSION=7
# ----------------------------
# NFS Volumes
# ----------------------------
# IP address or hostname of the NFS server
MANYFOLD_NFS_SERVER=
# NFS export paths for each volume (e.g. :/mnt/pool/manyfold/app)
MANYFOLD_APP_NFS_DEVICE=
MANYFOLD_DB_NFS_DEVICE=
MANYFOLD_REDIS_NFS_DEVICE=
+104
View File
@@ -0,0 +1,104 @@
services:
app:
image: ghcr.io/manyfold3d/manyfold:${MANYFOLD_APP_VERSION:-latest}
container_name: manyfold-app
ports:
- ${MANYFOLD_PORT:-3214}:3214
volumes:
- manyfold-app:/libraries
environment:
PUID: ${MANYFOLD_PUID:-1000}
PGID: ${MANYFOLD_PGID:-1000}
SECRET_KEY_BASE: ${MANYFOLD_SECRET_KEY:-a_nice_long_random_string}
DATABASE_ADAPTER: postgresql
DATABASE_HOST: db
DATABASE_PORT: 5432
DATABASE_USER: ${MANYFOLD_DB_USERNAME:-manyfold}
DATABASE_PASSWORD: ${MANYFOLD_DB_PASSWORD:-changeme}
DATABASE_NAME: manyfold
REDIS_URL: redis://redis:6379/1
depends_on:
db:
condition: service_healthy
redis:
condition: service_healthy
networks:
- manyfold
healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:3214/health"]
interval: 30s
timeout: 10s
retries: 5
start_period: 60s
deploy:
resources:
limits:
memory: 1G
restart: unless-stopped
db:
image: postgres:${MANYFOLD_DB_VERSION:-15}
container_name: manyfold-db
volumes:
- manyfold-db:/var/lib/postgresql/data
environment:
POSTGRES_USER: ${MANYFOLD_DB_USERNAME:-manyfold}
POSTGRES_PASSWORD: ${MANYFOLD_DB_PASSWORD:-changeme}
networks:
- manyfold
healthcheck:
test: ["CMD-SHELL", "pg_isready -U ${MANYFOLD_DB_USERNAME:-manyfold}"]
interval: 10s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 512M
restart: unless-stopped
redis:
image: redis:${MANYFOLD_REDIS_VERSION:-7}
container_name: manyfold-redis
volumes:
- manyfold-redis:/data
networks:
- manyfold
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 10s
timeout: 5s
retries: 5
start_period: 20s
deploy:
resources:
limits:
memory: 512M
restart: unless-stopped
volumes:
manyfold-app:
name: manyfold-app
driver: local
driver_opts:
type: nfs
o: "addr=${MANYFOLD_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${MANYFOLD_APP_NFS_DEVICE}"
manyfold-db:
name: manyfold-db
driver: local
driver_opts:
type: nfs
o: "addr=${MANYFOLD_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${MANYFOLD_DB_NFS_DEVICE}"
manyfold-redis:
name: manyfold-redis
driver: local
driver_opts:
type: nfs
o: "addr=${MANYFOLD_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${MANYFOLD_REDIS_NFS_DEVICE}"
networks:
manyfold:
+40
View File
@@ -0,0 +1,40 @@
# Mealie Docker Compose (NFS) - Environment Variables
# Copy this file to .env and fill in your values
# --- Image ---
# Mealie image tag (use a specific version for stability, or 'latest')
MEALIE_VERSION=latest
# --- Permissions ---
# User and group ID that Mealie runs as (match your host user to avoid permission issues)
MEALIE_PUID=1000
MEALIE_PGID=1000
# --- Network ---
# Host port to expose the Mealie web UI on
MEALIE_PORT=9000
# --- Application ---
# Full public URL where Mealie is accessible (used for links in emails and API responses)
MEALIE_BASE_URL=https://mealie.yourdomain.com
# Timezone for the container (affects scheduled tasks and timestamps)
MEALIE_TZ=America/Los_Angeles
# Allow new users to self-register (true/false)
MEALIE_ALLOW_SIGNUP=false
# Number of concurrent worker processes for the API server (tune to available CPU cores)
MEALIE_UVICORN_WORKERS=4
# --- NFS Volume ---
# IP address or hostname of the NFS server
MEALIE_NFS_SERVER=192.168.1.x
# NFS export path on the server (e.g. /mnt/pool/mealie)
MEALIE_NFS_DEVICE=:/path/to/nfs/export
+29
View File
@@ -0,0 +1,29 @@
services:
app:
image: ghcr.io/mealie-recipes/mealie:${MEALIE_VERSION:-latest}
container_name: mealie-app
ports:
- ${MEALIE_PORT:-9000}:9000
volumes:
- mealie-app:/app/data/
environment:
- ALLOW_SIGNUP=${MEALIE_ALLOW_SIGNUP:-false}
- PUID=${MEALIE_PUID:-1000}
- PGID=${MEALIE_PGID:-1000}
- TZ=${MEALIE_TZ:-America/Los_Angeles}
- BASE_URL=${MEALIE_BASE_URL}
- UVICORN_WORKERS=${MEALIE_UVICORN_WORKERS:-4}
deploy:
resources:
limits:
memory: 1G
restart: unless-stopped
volumes:
mealie-app:
name: mealie-app
driver: local
driver_opts:
type: nfs
o: "addr=${MEALIE_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${MEALIE_NFS_DEVICE}"
+34
View File
@@ -0,0 +1,34 @@
# MeTube Docker Compose - Environment Variables
# Copy this file to .env and fill in your values
# --- Image ---
# MeTube image tag (use a specific version for stability, or 'latest')
METUBE_VERSION=latest
# --- Permissions ---
# User and group ID that MeTube runs as (match your host user to avoid permission issues)
METUBE_PUID=1000
METUBE_PGID=1000
# File permission mask applied to downloaded files (022 = owner rw, group/others r)
METUBE_UMASK=022
# --- Storage ---
# Host path where downloaded files will be saved
METUBE_DOWNLOAD=/path/to/downloads
# --- Network ---
# Host port to expose the MeTube web UI on
METUBE_PORT=8081
# --- Download Behavior ---
# Delete the file from disk when trashed in the UI (true/false)
METUBE_DELETE_FILE_ON_TRASHCAN=false
# Seconds after completion before a finished download is removed from the queue (3600 = 1 hour, 0 = disabled)
METUBE_CLEAR_COMPLETED_AFTER=3600
+25
View File
@@ -0,0 +1,25 @@
services:
app:
image: alexta69/metube:${METUBE_VERSION:-latest}
container_name: metube-app
environment:
- PUID=${METUBE_PUID:-1000}
- PGID=${METUBE_PGID:-1000}
- UMASK=${METUBE_UMASK:-022}
- DELETE_FILE_ON_TRASHCAN=${METUBE_DELETE_FILE_ON_TRASHCAN:-false}
- CLEAR_COMPLETED_AFTER=${METUBE_CLEAR_COMPLETED_AFTER:-3600}
volumes:
- ${METUBE_DOWNLOAD}:/downloads
ports:
- ${METUBE_PORT}:8081
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8081/"]
interval: 30s
timeout: 10s
retries: 3
start_period: 10s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
+71
View File
@@ -0,0 +1,71 @@
# ============================================================
# Monitor Stack - Environment Variables
# Copy this file to .env and fill in your values.
# ============================================================
# ------------------------------------------------------------
# Image Versions
# Pin to specific versions to avoid unexpected upgrades.
# ------------------------------------------------------------
# Grafana Loki version (https://github.com/grafana/loki/releases)
LOKI_VERSION=3.7.2
# Prometheus version (https://github.com/prometheus/prometheus/releases)
PROMETHEUS_VERSION=3.12.0
# Alertmanager version (https://github.com/prometheus/alertmanager/releases)
ALERTMANAGER_VERSION=0.32.1
# Grafana version (https://github.com/grafana/grafana/releases)
GRAFANA_VERSION=13.0.1
# ------------------------------------------------------------
# Paths
# ------------------------------------------------------------
# Absolute path to the directory containing your config files:
# loki-config.yml, prometheus.yml, alertmanager.yml
MONITOR_STACK_CONFIG_PATH=/path/to/monitor-stack/config
# ------------------------------------------------------------
# Ports
# Host port mappings for services that expose a UI or API.
# ------------------------------------------------------------
# Prometheus web UI and API
PROMETHEUS_PORT=9090
# Alertmanager web UI and API
ALERTMANAGER_PORT=9093
# Grafana web UI
GRAFANA_PORT=3000
# ------------------------------------------------------------
# Grafana
# ------------------------------------------------------------
# Initial admin username (set on first boot only)
GRAFANA_ADMIN_USER=admin
# Initial admin password — change this before first boot
GRAFANA_ADMIN_PASSWORD=changeme
# Secret key used to sign sessions and cookies.
# Changing this after first boot will invalidate all active sessions.
# Generate with: openssl rand -hex 32
GRAFANA_SECRET_KEY=
# ------------------------------------------------------------
# Timezone
# Applied to all containers for consistent log timestamps.
# Use a valid tz database name: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
# ------------------------------------------------------------
TZ=America/Los_Angeles
+19
View File
@@ -0,0 +1,19 @@
global:
resolve_timeout: 5m
route:
group_by: ['alertname', 'job']
group_wait: 30s
group_interval: 5m
repeat_interval: 1h
receiver: 'default'
receivers:
- name: 'default'
inhibit_rules:
- source_matchers:
- severity="critical"
target_matchers:
- severity="warning"
equal: ['alertname', 'job']
+127
View File
@@ -0,0 +1,127 @@
services:
loki:
image: grafana/loki:${LOKI_VERSION:-3.7.2}
container_name: monitor-loki
volumes:
- ${MONITOR_STACK_CONFIG_PATH}/loki-config.yml:/etc/loki/local-config.yaml
- loki_data:/loki
command: -config.file=/etc/loki/local-config.yaml
environment:
- TZ=${TZ:-America/Los_Angeles}
networks:
- monitor_network
healthcheck:
test: ["CMD", "/usr/bin/loki", "-health"]
interval: 15s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
prometheus:
image: prom/prometheus:${PROMETHEUS_VERSION:-v3.12.0}
container_name: monitor-prometheus
ports:
- "${PROMETHEUS_PORT:-9090}:9090"
volumes:
- ${MONITOR_STACK_CONFIG_PATH}/prometheus.yml:/etc/prometheus/prometheus.yml
- prometheus_data:/prometheus
command:
- '--config.file=/etc/prometheus/prometheus.yml'
- '--storage.tsdb.path=/prometheus'
- '--storage.tsdb.retention.time=30d'
- '--web.enable-lifecycle'
environment:
- TZ=${TZ:-America/Los_Angeles}
networks:
- monitor_network
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:9090/-/healthy || exit 1"]
interval: 15s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
alertmanager:
image: prom/alertmanager:${ALERTMANAGER_VERSION:-v0.32.1}
container_name: monitor-alertmanager
ports:
- "${ALERTMANAGER_PORT:-9093}:9093"
volumes:
- ${MONITOR_STACK_CONFIG_PATH}/alertmanager.yml:/etc/alertmanager/alertmanager.yml
- alertmanager_data:/alertmanager
command:
- '--config.file=/etc/alertmanager/alertmanager.yml'
- '--storage.path=/alertmanager'
environment:
- TZ=${TZ:-America/Los_Angeles}
networks:
- monitor_network
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:9093/-/healthy || exit 1"]
interval: 15s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
grafana:
image: grafana/grafana:${GRAFANA_VERSION:-13.0.1}
container_name: monitor-grafana
ports:
- "${GRAFANA_PORT:-3000}:3000"
volumes:
- grafana_data:/var/lib/grafana
environment:
- TZ=${TZ:-America/Los_Angeles}
- GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER:-admin}
- GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:-changeme}
- GF_SECURITY_SECRET_KEY=${GRAFANA_SECRET_KEY}
- GF_LOG_MODE=console
depends_on:
loki:
condition: service_healthy
prometheus:
condition: service_healthy
alertmanager:
condition: service_healthy
networks:
- monitor_network
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:3000/api/health || exit 1"]
interval: 15s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
loki_data:
name: loki_data
prometheus_data:
name: prometheus_data
alertmanager_data:
name: alertmanager_data
grafana_data:
name: grafana_data
networks:
monitor_network:
external: true
@@ -0,0 +1,566 @@
{
"annotations": {
"list": [
{
"builtIn": 1,
"datasource": {
"type": "grafana",
"uid": "-- Grafana --"
},
"enable": true,
"hide": true,
"iconColor": "rgba(0, 211, 255, 1)",
"name": "Annotations & Alerts",
"type": "dashboard"
}
]
},
"editable": true,
"fiscalYearStartMonth": 0,
"graphTooltip": 0,
"id": 3,
"links": [],
"panels": [
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "palette-classic"
},
"custom": {
"axisBorderShow": false,
"axisCenteredZero": false,
"axisColorMode": "text",
"axisLabel": "",
"axisPlacement": "auto",
"barAlignment": 0,
"barWidthFactor": 0.6,
"drawStyle": "line",
"fillOpacity": 0,
"gradientMode": "none",
"hideFrom": {
"legend": false,
"tooltip": false,
"viz": false
},
"insertNulls": false,
"lineInterpolation": "linear",
"lineWidth": 1,
"pointSize": 5,
"scaleDistribution": {
"type": "linear"
},
"showPoints": "auto",
"spanNulls": false,
"stacking": {
"group": "A",
"mode": "none"
},
"thresholdsStyle": {
"mode": "off"
}
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
},
"unit": "percent"
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 0
},
"id": 1,
"options": {
"legend": {
"calcs": [],
"displayMode": "list",
"placement": "bottom",
"showLegend": true
},
"tooltip": {
"hideZeros": false,
"mode": "single",
"sort": "none"
}
},
"pluginVersion": "11.6.0",
"targets": [
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"editorMode": "code",
"expr": "avg by (id) (pve_cpu_usage_ratio{id=~\"node/.*\"}) * 100",
"legendFormat": "{{id}}",
"range": true,
"refId": "A"
}
],
"title": "CPU Usage",
"type": "timeseries"
},
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "palette-classic"
},
"custom": {
"axisBorderShow": false,
"axisCenteredZero": false,
"axisColorMode": "text",
"axisLabel": "",
"axisPlacement": "auto",
"barAlignment": 0,
"barWidthFactor": 0.6,
"drawStyle": "line",
"fillOpacity": 0,
"gradientMode": "none",
"hideFrom": {
"legend": false,
"tooltip": false,
"viz": false
},
"insertNulls": false,
"lineInterpolation": "linear",
"lineWidth": 1,
"pointSize": 5,
"scaleDistribution": {
"type": "linear"
},
"showPoints": "auto",
"spanNulls": false,
"stacking": {
"group": "A",
"mode": "none"
},
"thresholdsStyle": {
"mode": "off"
}
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
},
"unit": "percent"
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 0
},
"id": 6,
"options": {
"legend": {
"calcs": [],
"displayMode": "list",
"placement": "bottom",
"showLegend": true
},
"tooltip": {
"hideZeros": false,
"mode": "single",
"sort": "none"
}
},
"pluginVersion": "11.6.0",
"targets": [
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"editorMode": "code",
"exemplar": false,
"expr": "avg by (id, name) (\r\n pve_cpu_usage_ratio{id=~\"qemu/.*\"} * on(id) group_left(name) pve_guest_info\r\n) * 100",
"format": "time_series",
"instant": false,
"legendFormat": "{{name}}",
"range": true,
"refId": "A"
}
],
"title": "VM CPU Usage",
"type": "timeseries"
},
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "palette-classic"
},
"custom": {
"axisBorderShow": false,
"axisCenteredZero": false,
"axisColorMode": "text",
"axisLabel": "",
"axisPlacement": "auto",
"barAlignment": 0,
"barWidthFactor": 0.6,
"drawStyle": "line",
"fillOpacity": 0,
"gradientMode": "none",
"hideFrom": {
"legend": false,
"tooltip": false,
"viz": false
},
"insertNulls": false,
"lineInterpolation": "linear",
"lineWidth": 1,
"pointSize": 5,
"scaleDistribution": {
"type": "linear"
},
"showPoints": "auto",
"spanNulls": false,
"stacking": {
"group": "A",
"mode": "none"
},
"thresholdsStyle": {
"mode": "off"
}
},
"mappings": [],
"max": 100,
"min": 0,
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
},
"unit": "percent"
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 8
},
"id": 2,
"options": {
"legend": {
"calcs": [],
"displayMode": "list",
"placement": "bottom",
"showLegend": true
},
"tooltip": {
"hideZeros": false,
"mode": "single",
"sort": "none"
}
},
"pluginVersion": "11.6.0",
"targets": [
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"editorMode": "code",
"expr": "(pve_memory_usage_bytes{id=~\"node/.*\"} / pve_memory_size_bytes{id=~\"node/.*\"}) * 100",
"legendFormat": "{{id}}",
"range": true,
"refId": "A"
}
],
"title": "Host Memory Usage",
"type": "timeseries"
},
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "thresholds"
},
"custom": {
"align": "auto",
"cellOptions": {
"type": "auto"
},
"inspect": false
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 22,
"w": 12,
"x": 12,
"y": 8
},
"id": 5,
"options": {
"cellHeight": "sm",
"footer": {
"countRows": false,
"fields": "",
"reducer": [
"sum"
],
"show": false
},
"showHeader": true,
"sortBy": [
{
"desc": true,
"displayName": "Memory %"
}
]
},
"pluginVersion": "11.6.0",
"targets": [
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"editorMode": "code",
"exemplar": false,
"expr": "avg by (id, node) (pve_cpu_usage_ratio{id=~\"(qemu|lxc)/.*\"}) * 100",
"format": "table",
"hide": false,
"instant": true,
"legendFormat": "__auto",
"range": false,
"refId": "A"
},
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"editorMode": "code",
"exemplar": false,
"expr": "avg by (id, node) (pve_memory_usage_bytes{id=~\"(qemu|lxc)/.*\"} / pve_memory_size_bytes{id=~\"(qemu|lxc)/.*\"}) * 100",
"format": "table",
"hide": false,
"instant": true,
"legendFormat": "__auto",
"range": false,
"refId": "B"
},
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"editorMode": "code",
"exemplar": false,
"expr": "pve_guest_info{id=~\"(qemu|lxc)/.*\"}",
"format": "table",
"hide": false,
"instant": true,
"legendFormat": "__auto",
"range": false,
"refId": "C"
}
],
"title": "VM / Container Status",
"transformations": [
{
"id": "merge",
"options": {}
},
{
"id": "organize",
"options": {
"excludeByName": {
"Time": true,
"Value": false,
"Value #C": true,
"__name__": true,
"id": true,
"instance": true,
"job": true,
"tags": true,
"template": true,
"type": true
},
"includeByName": {},
"indexByName": {
"Time": 0,
"Value #A": 3,
"Value #B": 4,
"Value #C": 12,
"__name__": 6,
"id": 5,
"instance": 7,
"job": 8,
"name": 1,
"node": 2,
"tags": 9,
"template": 10,
"type": 11
},
"renameByName": {
"Time": "",
"Value": "CPU %",
"Value #A": "CPU %",
"Value #B": "Memory %",
"id": "",
"name": "VM",
"node": "Host"
}
}
}
],
"type": "table"
},
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "thresholds"
},
"mappings": [],
"max": 100,
"min": 0,
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "#EAB839",
"value": 70
},
{
"color": "red",
"value": 85
}
]
},
"unit": "percent"
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 16
},
"id": 3,
"options": {
"minVizHeight": 75,
"minVizWidth": 75,
"orientation": "auto",
"reduceOptions": {
"calcs": [
"lastNotNull"
],
"fields": "",
"values": false
},
"showThresholdLabels": false,
"showThresholdMarkers": true,
"sizing": "auto"
},
"pluginVersion": "11.6.0",
"targets": [
{
"datasource": {
"type": "prometheus",
"uid": "efju049lg02dcf"
},
"editorMode": "code",
"expr": "(pve_disk_usage_bytes{id=~\"node/.*\"} / pve_disk_size_bytes{id=~\"node/.*\"}) * 100",
"instant": false,
"legendFormat": "{{id}}",
"range": true,
"refId": "A"
}
],
"title": "Host Storage Usage",
"type": "gauge"
}
],
"preload": false,
"schemaVersion": 41,
"tags": [],
"templating": {
"list": []
},
"time": {
"from": "now-6h",
"to": "now"
},
"timepicker": {},
"timezone": "browser",
"title": "Proxmox Dashboard",
"uid": "dfju0fjx3e9s0f",
"version": 15
}
@@ -0,0 +1,627 @@
{
"annotations": {
"list": [
{
"builtIn": 1,
"datasource": {
"type": "grafana",
"uid": "-- Grafana --"
},
"enable": true,
"hide": true,
"iconColor": "rgba(0, 211, 255, 1)",
"name": "Annotations & Alerts",
"type": "dashboard"
}
]
},
"editable": true,
"fiscalYearStartMonth": 0,
"graphTooltip": 0,
"id": 2,
"links": [],
"panels": [
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"description": "This panel shows a time series graph of how many block events are occurring over time. Useful for spotting spikes that might indicate something is misconfigured or something is actively scanning your network.",
"fieldConfig": {
"defaults": {
"color": {
"mode": "palette-classic"
},
"custom": {
"axisBorderShow": false,
"axisCenteredZero": false,
"axisColorMode": "text",
"axisLabel": "Blocks/min",
"axisPlacement": "auto",
"barAlignment": 0,
"barWidthFactor": 0.6,
"drawStyle": "line",
"fillOpacity": 0,
"gradientMode": "none",
"hideFrom": {
"legend": false,
"tooltip": false,
"viz": false
},
"insertNulls": false,
"lineInterpolation": "linear",
"lineWidth": 1,
"pointSize": 5,
"scaleDistribution": {
"type": "linear"
},
"showPoints": "auto",
"spanNulls": false,
"stacking": {
"group": "A",
"mode": "none"
},
"thresholdsStyle": {
"mode": "off"
}
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 0
},
"id": 2,
"options": {
"legend": {
"calcs": [],
"displayMode": "list",
"placement": "bottom",
"showLegend": false
},
"tooltip": {
"hideZeros": false,
"mode": "single",
"sort": "none"
}
},
"pluginVersion": "11.6.0",
"targets": [
{
"direction": "backward",
"editorMode": "code",
"expr": "sum(rate({job=\"unifi\"} |= \"DESCR=\" |= \"Drop All\" [1m]))",
"queryType": "range",
"refId": "A"
}
],
"title": "Blocks Per Minute Over Time",
"type": "timeseries"
},
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "palette-classic"
},
"custom": {
"axisBorderShow": false,
"axisCenteredZero": false,
"axisColorMode": "text",
"axisLabel": "",
"axisPlacement": "auto",
"fillOpacity": 80,
"gradientMode": "none",
"hideFrom": {
"legend": false,
"tooltip": false,
"viz": false
},
"lineWidth": 1,
"scaleDistribution": {
"type": "linear"
},
"thresholdsStyle": {
"mode": "off"
}
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 0
},
"id": 5,
"options": {
"barRadius": 0,
"barWidth": 0.97,
"fullHighlight": false,
"groupWidth": 0.7,
"legend": {
"calcs": [],
"displayMode": "list",
"placement": "bottom",
"showLegend": true
},
"orientation": "auto",
"showValue": "auto",
"stacking": "none",
"tooltip": {
"hideZeros": false,
"mode": "single",
"sort": "none"
},
"xTickLabelRotation": 0,
"xTickLabelSpacing": 100
},
"pluginVersion": "11.6.0",
"targets": [
{
"direction": "backward",
"editorMode": "code",
"expr": "topk(10,\r\n sum by (dst_port) (\r\n count_over_time(\r\n {job=\"unifi\"}\r\n |= \"DESCR=\" |= \"Drop All\"\r\n | regexp \"DPT=(?P<dst_port>\\\\d+)\"\r\n [$__range]\r\n )\r\n )\r\n)",
"queryType": "range",
"refId": "A"
}
],
"title": "Blocked Traffic by Destination Port",
"type": "barchart"
},
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"description": "This panel extracts the source IP from each block event and aggregates them into a table so you can see which devices are generating the most blocked traffic.",
"fieldConfig": {
"defaults": {
"color": {
"mode": "thresholds"
},
"custom": {
"align": "left",
"cellOptions": {
"type": "auto"
},
"filterable": false,
"inspect": false
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 6,
"x": 0,
"y": 8
},
"id": 4,
"options": {
"cellHeight": "sm",
"footer": {
"countRows": false,
"enablePagination": false,
"fields": "",
"reducer": [
"sum"
],
"show": false
},
"frameIndex": 0,
"showHeader": false
},
"pluginVersion": "11.6.0",
"targets": [
{
"direction": "backward",
"editorMode": "code",
"expr": "topk(10,\r\n sum by (src_ip) (\r\n count_over_time(\r\n {job=\"unifi\"}\r\n |= \"DESCR=\" |= \"Drop All\"\r\n | regexp \"SRC=(?P<src_ip>[\\\\d.]+)\"\r\n [$__range]\r\n )\r\n )\r\n)",
"queryType": "instant",
"refId": "A"
}
],
"title": "Top Blocked Source IPs",
"transformations": [
{
"id": "organize",
"options": {
"excludeByName": {
"Time": true
},
"includeByName": {},
"indexByName": {},
"renameByName": {
"Time": "",
"src_ip": ""
}
}
},
{
"id": "sortBy",
"options": {
"fields": {},
"sort": [
{
"desc": true,
"field": "Value #A"
}
]
}
}
],
"type": "table"
},
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "thresholds"
},
"custom": {
"align": "left",
"cellOptions": {
"type": "auto"
},
"inspect": false
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 6,
"x": 6,
"y": 8
},
"id": 6,
"options": {
"cellHeight": "sm",
"footer": {
"countRows": false,
"fields": "",
"reducer": [
"sum"
],
"show": false
},
"showHeader": false
},
"pluginVersion": "11.6.0",
"targets": [
{
"direction": "backward",
"editorMode": "code",
"expr": "topk(10,\r\n sum by (dst_ip) (\r\n count_over_time(\r\n {job=\"unifi\"}\r\n |= \"DESCR=\" |= \"Drop All\"\r\n | regexp \"DST=(?P<dst_ip>[\\\\d.]+)\"\r\n [$__range]\r\n )\r\n )\r\n)",
"queryType": "instant",
"refId": "A"
}
],
"title": "Top Blocked Destination IPs",
"transformations": [
{
"id": "organize",
"options": {
"excludeByName": {
"Time": true
},
"includeByName": {},
"indexByName": {},
"renameByName": {}
}
},
{
"id": "sortBy",
"options": {
"fields": {},
"sort": [
{
"desc": true,
"field": "Value #A"
}
]
}
}
],
"type": "table"
},
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "thresholds"
},
"custom": {
"align": "left",
"cellOptions": {
"type": "auto"
},
"inspect": false
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 6,
"x": 12,
"y": 8
},
"id": 7,
"options": {
"cellHeight": "sm",
"footer": {
"countRows": false,
"fields": "",
"reducer": [
"sum"
],
"show": false
},
"showHeader": true
},
"pluginVersion": "11.6.0",
"targets": [
{
"direction": "backward",
"editorMode": "code",
"expr": "topk(10,\r\n sum by (src_vlan, dst_vlan) (\r\n count_over_time(\r\n {job=\"unifi\"}\r\n |= \"DESCR=\" |= \"Drop All\"\r\n | regexp \"IN=(?P<src_vlan>\\\\S+)\\\\s+OUT=(?P<dst_vlan>\\\\S+)\"\r\n [$__range]\r\n )\r\n )\r\n)",
"queryType": "instant",
"refId": "A"
}
],
"title": "VLAN-to-VLAN Block Matrix",
"transformations": [
{
"id": "organize",
"options": {
"excludeByName": {
"Time": true
},
"includeByName": {},
"indexByName": {
"Time": 0,
"Value #A": 3,
"dst_vlan": 2,
"src_vlan": 1
},
"renameByName": {
"Value #A": "Total",
"dst_vlan": "Destination VLAN",
"src_vlan": "Source VLAN"
}
}
},
{
"id": "sortBy",
"options": {
"fields": {},
"sort": [
{
"desc": true,
"field": "Total"
}
]
}
}
],
"type": "table"
},
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"description": "A simple stat panel showing the total block count for context.",
"fieldConfig": {
"defaults": {
"color": {
"mode": "thresholds"
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green"
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 6,
"x": 18,
"y": 8
},
"id": 3,
"options": {
"colorMode": "value",
"graphMode": "area",
"justifyMode": "auto",
"orientation": "auto",
"percentChangeColorMode": "inverted",
"reduceOptions": {
"calcs": [
"lastNotNull"
],
"fields": "",
"values": false
},
"showPercentChange": true,
"textMode": "auto",
"wideLayout": true
},
"pluginVersion": "11.6.0",
"targets": [
{
"direction": "backward",
"editorMode": "code",
"expr": "sum(count_over_time({job=\"unifi\"} |= \"DESCR=\" |= \"Drop All\" [$__range]))",
"queryType": "range",
"refId": "A"
}
],
"title": "Total Blocks",
"type": "stat"
},
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"fieldConfig": {
"defaults": {},
"overrides": []
},
"gridPos": {
"h": 10,
"w": 24,
"x": 0,
"y": 16
},
"id": 1,
"options": {
"dedupStrategy": "none",
"enableInfiniteScrolling": false,
"enableLogDetails": true,
"prettifyLogMessage": false,
"showCommonLabels": false,
"showLabels": false,
"showTime": true,
"sortOrder": "Descending",
"wrapLogMessage": false
},
"pluginVersion": "11.6.0",
"targets": [
{
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"direction": "backward",
"editorMode": "code",
"expr": "{job=\"unifi\"} |= \"DESCR=\" |= \"Drop All\"",
"queryType": "range",
"refId": "A"
}
],
"title": "Live Firewall Block Log",
"type": "logs"
}
],
"preload": false,
"schemaVersion": 41,
"tags": [],
"templating": {
"list": [
{
"baseFilters": [],
"datasource": {
"type": "loki",
"uid": "dfiqoqgt06arkc"
},
"filters": [],
"name": "Filters",
"type": "adhoc"
}
]
},
"time": {
"from": "now-1h",
"to": "now"
},
"timepicker": {},
"timezone": "browser",
"title": "Unifi - Internal Blocking",
"uid": "efixvpefee60wa",
"version": 15
}
+37
View File
@@ -0,0 +1,37 @@
auth_enabled: false
server:
http_listen_port: 3100
common:
instance_addr: 127.0.0.1
path_prefix: /loki
storage:
filesystem:
chunks_directory: /loki/chunks
rules_directory: /loki/rules
replication_factor: 1
ring:
kvstore:
store: inmemory
schema_config:
configs:
- from: 2020-10-24
store: tsdb
object_store: filesystem
schema: v13
index:
prefix: index_
period: 24h
limits_config:
retention_period: 30d
compactor:
working_directory: /loki/compactor
compaction_interval: 10m
retention_enabled: true
retention_delete_delay: 2h
retention_delete_worker_count: 150
delete_request_store: filesystem
+17
View File
@@ -0,0 +1,17 @@
global:
scrape_interval: 15s
evaluation_interval: 15s
alerting:
alertmanagers:
- static_configs:
- targets:
- alertmanager:9093
rule_files:
# - alert-rules.yml
scrape_configs:
- job_name: 'prometheus'
static_configs:
- targets: ['localhost:9090']
+35
View File
@@ -0,0 +1,35 @@
# -------------------------------------------------------
# Odoo Docker Compose - Environment Variables
# Copy this file to .env and fill in your values
# -------------------------------------------------------
# --- PostgreSQL ---
# PostgreSQL image version tag
ODOO_DB_VERSION=15
# Host path for PostgreSQL data directory (bind mount)
ODOO_DB_PATH=/path/to/postgres/data
# Password for the 'odoo' PostgreSQL user
ODOO_DB_PASSWORD=change_me
# --- Odoo App ---
# Odoo image version tag (15+ required for /web/health endpoint)
ODOO_APP_VERSION=17
# Host port to expose the Odoo web interface on
ODOO_PORT=8069
# Host path for Odoo file store and sessions (bind mount)
ODOO_DATA_PATH=/path/to/odoo/data
# Host path for odoo.conf config file directory (bind mount)
ODOO_CONFIG_PATH=/path/to/odoo/config
# Host path for custom/extra addons (bind mount)
ODOO_ADDONS_PATH=/path/to/odoo/addons
# Timezone for the Odoo container (IANA format)
ODOO_TZ=America/Los_Angeles
+52
View File
@@ -0,0 +1,52 @@
services:
db:
image: postgres:${ODOO_DB_VERSION:-15}
container_name: odoo-db
volumes:
- ${ODOO_DB_PATH}:/var/lib/postgresql/data
environment:
- POSTGRES_DB=postgres
- POSTGRES_USER=odoo
- POSTGRES_PASSWORD=${ODOO_DB_PASSWORD:-odoo_db_password}
healthcheck:
test: ["CMD", "pg_isready", "-U", "odoo"]
interval: 5s
timeout: 5s
retries: 5
start_period: 10s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
app:
image: odoo:${ODOO_APP_VERSION:-17}
container_name: odoo-app
depends_on:
db:
condition: service_healthy
ports:
- ${ODOO_PORT:-8069}:8069
volumes:
- ${ODOO_DATA_PATH}:/var/lib/odoo
- ${ODOO_CONFIG_PATH}:/etc/odoo
- ${ODOO_ADDONS_PATH}:/mnt/extra-addons
user: "1000:1000"
environment:
- TZ=${ODOO_TZ:-America/Los_Angeles}
- HOST=db
- PORT=5432
- USER=odoo
- PASSWORD=${ODOO_DB_PASSWORD:-odoo_db_password}
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8069/web/health"]
interval: 30s
timeout: 5s
retries: 3
start_period: 40s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
+8
View File
@@ -0,0 +1,8 @@
[options]
addons_path = /mnt/extra-addons
data_dir = /var/lib/odoo
admin_passwd = changeme
db_host = db
db_port = 5432
db_user = odoo
db_password = odoo_db_password
+8
View File
@@ -0,0 +1,8 @@
# OmniTools - Docker Compose Environment Variables
# Docker image tag to use for the omni-tools container
# Find available tags at: https://hub.docker.com/r/iib0011/omni-tools/tags
OMNITOOLS_VERSION=latest
# Host port to expose the web UI on
OMNITOOLS_PORT=8000
+19
View File
@@ -0,0 +1,19 @@
services:
app:
image: iib0011/omni-tools:${OMNITOOLS_VERSION:-latest}
container_name: omnitools-app
security_opt:
- no-new-privileges:true
ports:
- ${OMNITOOLS_PORT:-8000}:80
healthcheck:
test: ["CMD", "wget", "--spider", "-q", "http://127.0.0.1:80"]
interval: 30s
timeout: 10s
retries: 3
start_period: 10s
deploy:
resources:
limits:
memory: 512M
restart: unless-stopped
+41
View File
@@ -0,0 +1,41 @@
# Pinchflat
# Docker image tag to use (e.g. "latest" or a pinned version like "v2024.5.30")
PINCHFLAT_VERSION=latest
# IANA timezone name for the container (e.g. America/Chicago, America/New_York)
PINCHFLAT_TZ=America/Los_Angeles
# Host port to expose the Pinchflat web UI on
PINCHFLAT_PORT=8945
# Host path where downloaded media will be stored
PINCHFLAT_DOWNLOAD=/path/to/downloads
# Auth - required for production
# Username for HTTP basic auth on the web UI
PINCHFLAT_AUTH_USER=admin
# Password for HTTP basic auth — use a strong random value
PINCHFLAT_AUTH_PASS=changeme
# Secret used to sign/encrypt session cookies — generate with: openssl rand -hex 64
# Changing this will invalidate all active sessions
PINCHFLAT_SECRET_KEY=
# Controls default permissions on created files (022 = owner rw, group/other r)
PINCHFLAT_UMASK=022
# Bind mount only
# Host path for the config directory (SQLite DB, logs, metadata)
PINCHFLAT_CONFIG=/path/to/config
# NFS only
# IP address or hostname of the NFS server
PINCHFLAT_NFS_SERVER=192.168.1.x
# NFS export path on the server (e.g. :/mnt/pool/pinchflat)
PINCHFLAT_NFS_DEVICE=:/path/to/nfs/share
+22
View File
@@ -0,0 +1,22 @@
services:
app:
image: keglin/pinchflat:${PINCHFLAT_VERSION:-latest}
container_name: pinchflat-app
environment:
- TZ=${PINCHFLAT_TZ:-America/Los_Angeles}
- LOG_LEVEL=info
- YT_DLP_WORKER_CONCURRENCY=1
- BASIC_AUTH_USERNAME=${PINCHFLAT_AUTH_USER:-admin}
- BASIC_AUTH_PASSWORD=${PINCHFLAT_AUTH_PASS:-changeme}
- SECRET_KEY_BASE=${PINCHFLAT_SECRET_KEY}
- UMASK=${PINCHFLAT_UMASK:-022}
ports:
- ${PINCHFLAT_PORT:-8945}:8945
volumes:
- ${PINCHFLAT_CONFIG}:/config
- ${PINCHFLAT_DOWNLOAD}:/downloads
healthcheck:
test: ["CMD-SHELL", "curl --fail http://localhost:8945/healthcheck || exit 1"]
interval: 30s
start_period: 15s
restart: unless-stopped
+36
View File
@@ -0,0 +1,36 @@
services:
app:
image: keglin/pinchflat:${PINCHFLAT_VERSION:-latest}
container_name: pinchflat-app
environment:
- TZ=${PINCHFLAT_TZ:-America/Los_Angeles}
- LOG_LEVEL=info
- JOURNAL_MODE=delete
- YT_DLP_WORKER_CONCURRENCY=1
- BASIC_AUTH_USERNAME=${PINCHFLAT_AUTH_USER:-admin}
- BASIC_AUTH_PASSWORD=${PINCHFLAT_AUTH_PASS:-changeme}
- SECRET_KEY_BASE=${PINCHFLAT_SECRET_KEY}
- UMASK=${PINCHFLAT_UMASK:-022}
ports:
- ${PINCHFLAT_PORT:-8945}:8945
volumes:
- pinchflat-app:/config
- ${PINCHFLAT_DOWNLOAD}:/downloads
healthcheck:
test: ["CMD-SHELL", "curl --fail http://localhost:8945/healthcheck || exit 1"]
interval: 30s
start_period: 15s
deploy:
resources:
limits:
memory: 1G
restart: unless-stopped
volumes:
pinchflat-app:
name: pinchflat-app
driver: local
driver_opts:
type: nfs
o: "addr=${PINCHFLAT_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${PINCHFLAT_NFS_DEVICE}"
+32 -3
View File
@@ -11,20 +11,38 @@ Feel free to use any of these as a starting point for your own setup. Each appli
| Application | Description | Files | Walkthrough |
|-------------|-------------|-------|-------------|
| Airtrail | Self-hosted personal flight tracking and logbook application | [NFS](./Airtrail/docker-compose-nfs.yaml) | [Read the article](https://chns.tech/posts/2024/10-06-airtrail-airline-flight-history-tracker-and-map/) |
| BabyBuddy | Self-hosted baby tracking app for sleep, feeding, diaper changes, and milestones | [NFS](./BabyBuddy/docker-compose-nfs.yaml) | [Read the article](#) |
| ByteStash | Self-hosted code snippet manager with tagging, search, and syntax highlighting | [NFS](./ByteStash/docker-compose-nfs.yaml) | [Read the article](https://chns.tech/posts/2024/10-27-bytestash-code-snippet-organizer/) |
| Discourse | Open-source community discussion platform and forum software | [Compose](./Discourse/docker-compose.yaml) | [Read the article](#) |
| Dockhand | Self-hosted Docker stack management dashboard with remote agent support | [Volume](./Dockhand/docker-compose-volume.yaml) | [Read the article](https://chns.tech/posts/2026/05-01-dockhand-docker-management-dashboard/) |
| Doku | Docker volume backup and management tool | [Compose](./Doku/docker-compose.yaml) | [Read the article](https://chns.tech/posts/2024/02-18-doku-docker-disk-usage-dashboard/) |
| Draw.io | Self-hosted diagramming and flowchart tool | [Compose](./Draw.io/docker-compose.yaml) | [Read the article](https://chns.tech/posts/2024/10-20-draw-io-whiteboarding-diagramming-web-application/) |
| FileGator | Self-hosted web-based file manager with multi-user support | [NFS](./FileGator/docker-compose-nfs.yaml) | [Read the article](#) |
| FlareSolverr | Proxy server to bypass Cloudflare and DDoS-GUARD protection for automated requests | [NFS](./FlareSolverr/docker-compose-nfs.yaml) | [Read the article](#) |
| Formbricks | Open-source survey and forms platform | [Compose](./Formbricks/docker-compose.yaml) | [Read the article](#) |
| Gitea | Lightweight self-hosted Git service | [Compose](./Gitea/docker-compose.yaml) | [Read the article](#) |
| Hawser-Edge | Remote Docker agent (edge mode) connecting back to a central Dockhand server | [Bind](./Hawser-Edge/docker-compose-bind.yaml) | [Read the article](#) |
| Hawser-Standard | Standalone remote Docker agent for Dockhand management | [Bind](./Hawser-Standard/docker-compose-bind.yaml) | [Read the article](#) |
| Hawser-Edge | Remote Docker agent (edge mode) connecting back to a central Dockhand server | [Bind](./Hawser-Edge/docker-compose-bind.yaml) | [Read the article](https://chns.tech/posts/2026/05-01-dockhand-docker-management-dashboard/) |
| Hawser-Standard | Standalone remote Docker agent for Dockhand management | [Bind](./Hawser-Standard/docker-compose-bind.yaml) | [Read the article](https://chns.tech/posts/2026/05-01-dockhand-docker-management-dashboard/) |
| Homepage | Customizable application dashboard for self-hosted services | [Bind](./Homepage/docker-compose-bind.yaml) | [Read the article](#) |
| IT-Tools | Collection of handy tools for developers and sysadmins | [Compose](./IT-Tools/docker-compose.yaml) | [Read the article](https://chns.tech/posts/2023/10-22-it-tools-handy-tools-for-developers/) |
| Ntfy | Self-hosted push notification service via HTTP | [Bind](./Ntfy/docker-compose-bind.yaml) | [Read the article](#) |
| Jackett | API proxy that translates torrent tracker queries for use with download clients | [NFS](./Jackett/docker-compose-nfs.yaml) | [Read the article](#) |
| Kanboard | Self-hosted Kanban project management board | [NFS](./Kanboard/docker-compose-nfs.yaml) | [Read the article](https://chns.tech/posts/2024/04-28-kanboard-project-management-software/) |
| LinkStack | Self-hosted link-in-bio page builder | [NFS](./LinkStack/docker-compose-nfs.yaml) | [Read the article](https://chns.tech/posts/2024/02-04-linkstack-social-media-link-page/) |
| Mealie | Self-hosted recipe manager and meal planner with shopping list and import support | [NFS](./Mealie/docker-compose-nfs.yaml) | [Read the article](#) |
| MeTube | Self-hosted web UI for yt-dlp — download video and audio from YouTube and hundreds of other sites | [Compose](./Metube/docker-compose.yaml) | [Read the article](https://chns.tech/posts/2024/01-14-metube-youtube-downloader/) |
| n8n | Open-source workflow automation platform with a visual node-based editor | [Volume](./n8n/docker-compose-volume.yaml) | [Read the article](#) |
| Ntfy | Self-hosted push notification service via HTTP | [Bind](./Ntfy/docker-compose-bind.yaml) | [Read the article](https://chns.tech/posts/2026/05-08-ntfy-self-hosted-push-notifications/) |
| Odoo | Open-source ERP and business management platform | [Bind](./Odoo/docker-compose-bind.yaml) | [Read the article](#) |
| OmniTools | Self-hosted collection of web-based utility tools | [Compose](./OmniTools/docker-compose.yaml) | [Read the article](#) |
| Pinchflat | Self-hosted YouTube subscription manager that downloads content automatically like a podcast feed | [NFS](./Pinchflat/docker-compose-nfs.yaml) · [Bind](./Pinchflat/docker-compose-bind.yaml) | [Read the article](https://chns.tech/posts/2024/06-30-pinchflat-channel-monitoring-youtube-downloader/) |
| Seerr | Media request management tool for self-hosted media servers | [Compose](./Seerr/docker-compose.yaml) · [NFS](./Seerr/docker-compose-nfs.yaml) | [Read the article](#) |
| SearXNG | Privacy-respecting, self-hosted metasearch engine | [Bind](./SearXNG/docker-compose-bind.yaml) | [Read the article](https://chns.tech/posts/2024/06-23-searxng-internet-metasearch-engine/) |
| Tautulli | Monitoring and statistics tracker for Plex Media Server activity | [Bind](./Tautulli/docker-compose-bind.yaml) · [NFS](./Tautulli/docker-compose-nfs.yaml) | [Read the article](#) |
| Transmission-OpenVPN | Transmission BitTorrent client running through an OpenVPN tunnel for private downloading | [NFS](./Transmission-OpenVPN/docker-compose-nfs.yaml) | [Read the article](#) |
| Trilium | Self-hosted hierarchical note-taking application with rich text and scripting support | [NFS](./Trilium/docker-compose-nfs.yaml) | [Read the article](#) |
| Unifi-Network-Application | UniFi Network controller for managing Ubiquiti network devices | [NFS](./Unifi-Network-Application/docker-compose-nfs.yaml) | [Read the article](#) |
| Uptime-Kuma | Self-hosted uptime and status monitoring tool | [Bind](./Uptime-Kuma/docker-compose-bind.yaml) · [Volume](./Uptime-Kuma/docker-compose-volume.yaml) | [Read the article](https://chns.tech/posts/2022/04-29-uptime-kuma-monitoring-tool/) |
| VaultWarden | Lightweight self-hosted Bitwarden-compatible password manager server | [NFS](./VaultWarden/docker-compose-nfs.yaml) | [Read the article](#) |
| Watchtower | Automatically keeps Docker container images up to date | [Compose](./Watchtower/docker-compose.yaml) | [Read the article](https://chns.tech/posts/2024/07-14-watchtower-automatic-docker-container-updater/) |
| Wireguard-Gateway | Self-hosted WireGuard VPN server with peer management | [Bind](./Wireguard-Gateway/docker-compose-bind.yaml) | [Read the article](https://chns.tech/posts/2024/03-17-wireguard-server-vpn-docker-container/) |
@@ -45,7 +63,18 @@ Each application lives in its own folder with a `docker-compose.yaml` file. You
3. Set any required environment variables and deploy
**Docker Compose CLI**
Clone only the app folder you need using a sparse checkout, then deploy:
```bash
# 1. Clone the repo without checking out all files
git clone --filter=blob:none --sparse https://git.chns.tech/CHNS/Docker-Compose.git
cd Docker-Compose
# 2. Pull down only the app folder you want (e.g. Uptime-Kuma)
git sparse-checkout set <AppName>
# 3. Copy and fill in the environment file, then deploy
cd <AppName>
cp .env.example .env
# Edit .env and fill in your values
+11
View File
@@ -0,0 +1,11 @@
# Docker image tag to use for the SearXNG container
# See available tags at: https://hub.docker.com/r/searxng/searxng/tags
SEARXNG_VERSION=latest
# Linux username whose home directory holds the SearXNG config and cache volumes
# Config: /home/<SEARXNG_USERNAME>/searxng/config
# Cache: /home/<SEARXNG_USERNAME>/searxng/cache
SEARXNG_USERNAME=searxng
# Host port to expose SearXNG on (maps to container port 8080)
SEARXNG_PORT=8080
+20
View File
@@ -0,0 +1,20 @@
services:
app:
image: searxng/searxng:${SEARXNG_VERSION:-latest}
container_name: searxng-app
volumes:
- /home/${SEARXNG_USERNAME:-searxng}/searxng/config:/etc/searxng:rw
- /home/${SEARXNG_USERNAME:-searxng}/searxng/cache:/var/cache/searxng
ports:
- ${SEARXNG_PORT:-8080}:8080
healthcheck:
test: ["CMD", "wget", "-q", "--spider", "--proxy=off", "http://localhost:8080/healthz"]
interval: 30s
timeout: 10s
retries: 3
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
+25 -4
View File
@@ -1,17 +1,38 @@
services:
app:
image: seerr/seerr:latest
image: seerr/seerr:${SEERR_VERSON:-latest}
init: true
environment:
- LOG_LEVEL=debug
- TZ=${SEERR_TZ}
- TZ=${SEERR_TZ:-America/Los_Angeles}
- PORT=5055
ports:
- ${SEERR_PORT}:5055
volumes:
- seerr:/app/config
- seerr-app:/app/config
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:5055/api/v1/settings/public || exit 1"]
start_period: 20s
timeout: 3s
interval: 15s
retries: 3
deploy:
resources:
limits:
memory: 512M
networks:
- arr_network
restart: unless-stopped
volumes:
seerr:
seerr-app:
name: seerr-app
driver: local
driver_opts:
type: nfs
o: "addr=${SEERR_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${SEERR_NFS_DEVICE}"
networks:
arr_network:
external: true
+23
View File
@@ -0,0 +1,23 @@
# Tautulli Docker Compose Environment Variables
# Image version tag (e.g. "latest", "v2.14.6")
TAUTULLI_VERSION=latest
# User and group ID the container runs as (match your host user to avoid permission issues)
TAUTULLI_PUID=1000
TAUTULLI_PGID=1000
# Timezone for the container (e.g. America/Los_Angeles, America/New_York)
TAUTULLI_TZ=America/Los_Angeles
# Host port to expose the Tautulli web UI on
TAUTULLI_PORT=8181
# Bind mount path on the host for the Tautulli config directory (e.g. /opt/tautulli/config)
TAUTULLI_CONFIG_PATH=
# NFS server hostname or IP address
TAUTULLI_NFS_SERVER=
# NFS export path on the server (e.g. :/mnt/pool/tautulli/config)
TAUTULLI_NFS_DEVICE=
+23
View File
@@ -0,0 +1,23 @@
services:
app:
image: lscr.io/linuxserver/tautulli:${TAUTULLI_VERSION:-latest}
container_name: tautulli-app
environment:
- PUID=${TAUTULLI_PUID:-1000}
- PGID=${TAUTULLI_PGID:-1000}
- TZ=${TAUTULLI_TZ:-America/Los_Angeles}
volumes:
- ${TAUTULLI_CONFIG_PATH}:/config
ports:
- ${TAUTULLI_PORT:-8181}:8181
healthcheck:
test: ["CMD", "curl", "-ILfSs", "http://localhost:8181/status"]
start_period: 90s
interval: 30s
timeout: 10s
retries: 3
deploy:
resources:
limits:
memory: 512M
restart: unless-stopped
+32
View File
@@ -0,0 +1,32 @@
services:
app:
image: lscr.io/linuxserver/tautulli:${TAUTULLI_VERSION:-latest}
container_name: tautulli-app
environment:
- PUID=${TAUTULLI_PUID:-1000}
- PGID=${TAUTULLI_PGID:-1000}
- TZ=${TAUTULLI_TZ:-America/Los_Angeles}
volumes:
- tautulli-config:/config
ports:
- ${TAUTULLI_PORT:-8181}:8181
healthcheck:
test: ["CMD", "curl", "-ILfSs", "http://localhost:8181/status"]
start_period: 90s
interval: 30s
timeout: 10s
retries: 3
deploy:
resources:
limits:
memory: 512M
restart: unless-stopped
volumes:
tautulli-config:
name: tautulli-config
driver: local
driver_opts:
type: nfs
o: "addr=${TAUTULLI_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${TAUTULLI_NFS_DEVICE}"
+30
View File
@@ -0,0 +1,30 @@
# Transmission-OpenVPN Docker Compose Environment Variables
# Image version tag (default: latest)
TRANSMISSION_OPENVPN_VERSION=latest
# Transmission web UI theme (default: transmission-web-control)
TRANSMISSION_WEB_UI=transmission-web-control
# Transmission RPC credentials
TRANSMISSION_RPC_USERNAME=
TRANSMISSION_RPC_PASSWORD=
# Host port to expose the Transmission web UI (default: 9091)
TRANSMISSION_OPENVPN_PORT=9091
# Host path or NFS mount path for downloaded data
TRANSMISSION_OPENVPN_DATA=
# VPN provider name (e.g. PIA, MULLVAD, NORDVPN)
OPENVPN_PROVIDER=
# VPN server/region config name (e.g. ca_vancouver)
OPENVPN_CONFIG=
# VPN provider credentials
OPENVPN_USERNAME=
OPENVPN_PASSWORD=
# Local network CIDR to allow LAN access through the VPN (default: 172.16.0.0/16)
LOCAL_NETWORK=172.16.0.0/16
@@ -0,0 +1,54 @@
services:
app:
image: haugene/transmission-openvpn:${TRANSMISSION_OPENVPN_VERSION:-latest}
container_name: transmission-openvpn-app
environment:
- TRANSMISSION_WEB_UI=${TRANSMISSION_WEB_UI:-transmission-web-control}
- TRANSMISSION_RPC_AUTHENTICATION_REQUIRED=true
- TRANSMISSION_RPC_USERNAME=${TRANSMISSION_RPC_USERNAME}
- TRANSMISSION_RPC_PASSWORD=${TRANSMISSION_RPC_PASSWORD}
- TRANSMISSION_DOWNLOAD_DIR=/data
- TRANSMISSION_INCOMPLETE_DIR=/data
- OPENVPN_PROVIDER=${OPENVPN_PROVIDER}
- OPENVPN_CONFIG=${OPENVPN_CONFIG}
- OPENVPN_USERNAME=${OPENVPN_USERNAME}
- OPENVPN_PASSWORD=${OPENVPN_PASSWORD}
- OPENVPN_OPTS=--inactive 3600 --ping 10 --ping-exit 60
- LOCAL_NETWORK=${LOCAL_NETWORK}
volumes:
- transmission-openvpn-config:/config
- ${TRANSMISSION_OPENVPN_DATA}:/data
ports:
- ${TRANSMISSION_OPENVPN_PORT:-9091}:9091
cap_add:
- NET_ADMIN
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:9091/transmission/web/"]
interval: 30s
timeout: 10s
retries: 3
start_period: 30s
logging:
driver: json-file
options:
max-size: 10m
deploy:
resources:
limits:
memory: 512m
networks:
- arr_network
restart: unless-stopped
volumes:
transmission-openvpn-config:
name: transmission-openvpn-config
driver: local
driver_opts:
type: nfs
o: "addr=${TRANSMISSION_OPENVPN_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${TRANSMISSION_OPENVPN_NFS_DEVICE}"
networks:
arr_network:
external: true
+13
View File
@@ -0,0 +1,13 @@
# Trilium Notes - Environment Variables
# Docker image tag to deploy (e.g. latest, v0.90.12)
TRILIUM_VERSION=latest
# Host port to expose the Trilium web UI on
TRILIUM_PORT=8080
# IP address or hostname of the NFS server hosting the Trilium data volume
TRILIUM_NFS_SERVER=192.168.1.100
# NFS export path on the server (e.g. /mnt/pool/trilium-data)
TRILIUM_NFS_DEVICE=:/mnt/pool/trilium-data
+30
View File
@@ -0,0 +1,30 @@
services:
app:
image: triliumnext/trilium:${TRILIUM_VERSION:-latest}
container_name: trilium-app
environment:
- TRILIUM_DATA_DIR=/home/node/trilium-data
ports:
- ${TRILIUM_PORT:-8080}:8080
volumes:
- trilium-data:/home/node/trilium-data
healthcheck:
test: ["CMD-SHELL", "nc -z 127.0.0.1 8080 || exit 1"]
interval: 10s
timeout: 5s
retries: 3
start_period: 90s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
trilium-data:
name: trilium-data
driver: local
driver_opts:
type: nfs
o: "addr=${TRILIUM_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${TRILIUM_NFS_DEVICE}"
+10
View File
@@ -0,0 +1,10 @@
# Unpoller Docker Compose Environment Variables
# Version of the unpoller image to use
# See: https://github.com/unpoller/unpoller/releases
UNPOLLER_VERSION=latest
# Absolute path on the host to the unpoller config file (up.conf)
# This file configures the UniFi controller connection(s) and output plugins (Prometheus/InfluxDB)
# See: https://unpoller.com/docs/install/configuration/
UNPOLLER_UP_CONF_PATH=/path/to/up.conf
+23
View File
@@ -0,0 +1,23 @@
services:
app:
image: ghcr.io/unpoller/unpoller:${UNPOLLER_VERSION:-latest}
container_name: monitor-unifi-poller
volumes:
- ${UNPOLLER_UP_CONF_PATH}:/etc/unpoller/up.conf
networks:
- monitor_network
healthcheck:
test: ["CMD", "/usr/bin/unpoller", "--health"]
interval: 15s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
networks:
monitor_network:
external: true
+24
View File
@@ -0,0 +1,24 @@
# Vaultwarden Docker Compose Environment Variables
# Image version tag (default: latest)
VAULTWARDEN_VERSION=latest
# Public URL Vaultwarden is served from — required for web vault and some features to work (e.g. https://vault.example.com)
VAULTWARDEN_DOMAIN=
# Admin panel token — leave empty to disable the admin panel
# Must be a bcrypt hash, not plain text. Generate with:
# echo -n "your-password" | htpasswd -niBC 10 "" | tr -d ':\n'
VAULTWARDEN_ADMIN_TOKEN=
# Allow new user registrations (default: false — disable after initial setup)
VAULTWARDEN_SIGNUPS_ALLOWED=false
# Host port to expose the Vaultwarden web UI (default: 80)
VAULTWARDEN_PORT=80
# NFS server hostname or IP address
VAULTWARDEN_NFS_SERVER=
# NFS device path for Vaultwarden data storage (e.g. :/mnt/pool/vaultwarden/data)
VAULTWARDEN_NFS_DEVICE=
+32
View File
@@ -0,0 +1,32 @@
services:
app:
image: vaultwarden/server:${VAULTWARDEN_VERSION:-latest}
container_name: vaultwarden-app
environment:
- DOMAIN=${VAULTWARDEN_DOMAIN}
- ADMIN_TOKEN=${VAULTWARDEN_ADMIN_TOKEN}
- SIGNUPS_ALLOWED=${VAULTWARDEN_SIGNUPS_ALLOWED:-false}
volumes:
- vaultwarden-data:/data/
ports:
- ${VAULTWARDEN_PORT:-80}:80
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:80/alive"]
interval: 30s
timeout: 10s
retries: 3
start_period: 20s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
vaultwarden-data:
name: vaultwarden-data
driver: local
driver_opts:
type: nfs
o: "addr=${VAULTWARDEN_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
device: "${VAULTWARDEN_NFS_DEVICE}"
+22
View File
@@ -0,0 +1,22 @@
# n8n Docker Compose Environment Variables
# n8n application image version (e.g. 1.47.1, or "latest")
N8N_APP_VERSION=latest
# PostgreSQL image version
N8N_DB_VERSION=16
# Timezone for the n8n container (IANA format)
N8N_TZ=America/Los_Angeles
# Password for the PostgreSQL n8n user (used by both app and db services)
N8N_DB_PASSWORD=changeme
# Encryption key used to encrypt saved credentials — generate with: openssl rand -hex 32
N8N_ENCRYPTION_KEY=changeme_random_string
# Public-facing URL n8n uses to construct webhook URLs (include trailing path if needed)
N8N_URL=https://n8n.yourdomain.com
# Host port to expose the n8n web UI on
N8N_PORT=5678
+59
View File
@@ -0,0 +1,59 @@
services:
app:
image: n8nio/n8n:${N8N_APP_VERSION:-latest}
container_name: n8n-app
environment:
- TZ=${N8N_TZ:-America/Los_Angeles}
- DB_TYPE=postgresdb
- DB_POSTGRESDB_HOST=n8n-db
- DB_POSTGRESDB_PORT=5432
- DB_POSTGRESDB_DATABASE=n8n
- DB_POSTGRESDB_USER=n8n
- DB_POSTGRESDB_PASSWORD=${N8N_DB_PASSWORD:-changeme}
- N8N_ENCRYPTION_KEY=${N8N_ENCRYPTION_KEY:-changeme_random_string}
- WEBHOOK_URL=${N8N_URL:-https://n8n.yourdomain.com}
volumes:
- n8n-app:/home/node/.n8n
ports:
- ${N8N_PORT:-5678}:5678
depends_on:
db:
condition: service_healthy
healthcheck:
test: ["CMD-SHELL", "wget -qO- http://localhost:5678/healthz || exit 1"]
interval: 30s
timeout: 10s
retries: 3
start_period: 30s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
db:
image: postgres:${N8N_DB_VERSION:-16}
container_name: n8n-db
environment:
- POSTGRES_DB=n8n
- POSTGRES_USER=n8n
- POSTGRES_PASSWORD=${N8N_DB_PASSWORD:-changeme}
volumes:
- n8n-db:/var/lib/postgresql/data
healthcheck:
test: ["CMD-SHELL", "pg_isready -U n8n -d n8n"]
interval: 10s
timeout: 5s
retries: 5
start_period: 10s
deploy:
resources:
limits:
memory: 512m
restart: unless-stopped
volumes:
n8n-app:
name: n8n-app
n8n-db:
name: n8n-db