This commit is contained in:
2026-03-01 12:24:02 +02:00
parent 53cf652a49
commit 2faed0defe
5 changed files with 273 additions and 0 deletions

View File

@@ -0,0 +1,82 @@
##### SYSTEM
PUID=1001
PGID=995
TZ=Europe/HelsinkI
USERDIR=/home/gurulandia
DOCKERDIR=/gurulandia/data/docker
SECRETSDIR=/gurulandia/data/docker/secrets
DOCKER_ENDPOINT=tcp://socket-proxy:2375
##### SUBNETS
PROXY_SUBNET=192.168.91.0/24
SOCKET_PROXY_SUBNET=192.168.92.0/24
##### GATEWAYS
PROXY_GATEWAY=192.168.91.1
SOCKET_PROXY_GATEWAY=192.168.92.1
##### IP ADDRESSES
HEIMDALL_IP=192.168.91.2
VSCODE_IP=192.168.91.3
YOURLS_IP=192.168.91.4
LIBRESPEED_IP=192.168.91.5
ADMINER_IP=192.168.91.6
DOZZLE_IP0=192.168.91.7
GLANCES_IP0=192.168.91.8
CLOUDDNS_IP=192.168.91.9
CERTDUMPER_IP=192.168.91.10
AUTHELIA_IP=192.168.91.252
PORTAINER_IP0=192.168.91.253
TRAEFIK_IP0=192.168.91.254
DOZZLE_IP1=192.168.92.7
GLANCES_IP1=192.168.92.8
TRAEFIK_IP1=192.168.92.252
PORTAINER_IP1=192.168.92.253
SOCKET_PROXY_IP=192.168.92.254
#SERVER_IP=
#PIHOLE_IP=
#LOCAL_NETWORK=
##### PORTS
LIBRESPEED_PORT=30001
##### DOMAIN
DOMAINNAME0=gurulandia.eu
DOMAINNAME1=local.gurulandia.eu
CLOUDFLARE_EMAIL=gurulandia@outlook.com
CLOUDFLARE_IP_RANGES=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,172.64.0.0/13,131.0.72.0/22,104.16.0.0/13,104.24.0.0/14
##### DUCKDNS
DUCKDNSDOMAIN0=gurulandia.duckdns.org
DUCKDNS_TOKEN=99636f9f-46d7-4d80-b171-6ae486d1bc7b
##### Certificate
CERTRESOLVER=dns-cloudflare
DNS_PROVIDER=cloudflare
RESOLVER0=1.1.1.1:53
RESOLVER1=1.0.0.1:53
##### DATABASE
DB_HOST=192.168.99.60
DB_PORT=3306
MYSQL_ROOT_PASSWORD=
VSCODE_PASSWORD=glvscode
EMAIL=gurulandia@outlook.com
GUAC_MYSQL_USER=guacamole
GUAC_MYSQL_PASSWORD=guacamole

View File

@@ -0,0 +1,53 @@
version: "3.7"
########################### NETWORKS
# There is no need to create any networks outside this docker-compose file.
# You may customize the network subnets (192.168.90.0/24 and 91.0/24) below as you please.
# Docker Compose version 3.5 or higher required to define networks this way.
networks:
gl_proxy:
name: gl_proxy
driver: bridge
ipam:
config:
- subnet: $GL_PROXY_SUBNET
- gateway: $GL_PROXY_GATEWAY
default:
driver: bridge
gl_socket_proxy:
name: gl_socket_proxy
driver: bridge
ipam:
config:
- subnet: $GL_SOCKET_PROXY_SUBNET
- gateway: $GL_SOCKET_PROXY_GATEWAY
########################### SERVICES
services:
# Heimdall - Unified Frontend Alternative
heimdall:
container_name: gl-heimdall
image: linuxserver/heimdall:latest
restart: unless-stopped
networks:
gl_proxy:
ipv4_address: $HEIMDALL_IP
security_opt:
- no-new-privileges:true
# ports:
# - "$HEIMDALL_PORT:80"
volumes:
- $DOCKERDIR/appdata/heimdall:/config
environment:
- PUID=$PUID
- PGID=$PGID
- TZ=$TZ
labels:
- "traefik.enable=true"
## HTTP Routers
- "traefik.http.routers.heimdall-rtr.entrypoints=https"
- "traefik.http.routers.heimdall-rtr.rule=Host(`home.$DOMAINNAME0`)"
## Middlewares
- "traefik.http.routers.heimdall-rtr.middlewares=chain-authelia@file"
## HTTP Services
- "traefik.http.routers.heimdall-rtr.service=heimdall-svc"
- "traefik.http.services.heimdall-svc.loadbalancer.server.port=80"

View File

@@ -0,0 +1,74 @@
version: "3.7"
########################### NETWORKS
# There is no need to create any networks outside this docker-compose file.
# You may customize the network subnets (192.168.90.0/24 and 91.0/24) below as you please.
# Docker Compose version 3.5 or higher required to define networks this way.
networks:
gl_proxy:
name: gl_proxy
driver: bridge
ipam:
config:
- subnet: $GL_PROXY_SUBNET
- gateway: $GL_PROXY_GATEWAY
default:
driver: bridge
gl_socket_proxy:
name: gl_socket_proxy
driver: bridge
ipam:
config:
- subnet: $GL_SOCKET_PROXY_SUBNET
- gateway: $GL_SOCKET_PROXY_GATEWAY
########################### SECRETS
#secrets:
# htpasswd:
# file: $SECRETSDIR/htpasswd
# authelia_jwt_secret:
# file: $SECRETSDIR/authelia_jwt_secret
# authelia_session_secret:
# file: $SECRETSDIR/authelia_session_secret
# authelia_storage_mysql_password:
# file: $DOCKERDIR/secrets/authelia_storage_mysql_password
# authelia_notifier_smtp_password:
# file: $DOCKERDIR/secrets/authelia_notifier_smtp_password
# authelia_duo_api_secret_key:
# file: $DOCKERDIR/secrets/authelia_duo_api_secret_key
########################### SERVICES
services:
librespeed:
container_name: gl-librespeed
image: linuxserver/librespeed:latest
restart: unless-stopped
networks:
gl_proxy:
ipv4_address: $LIBRESPEED_IP
security_opt:
- no-new-privileges:true
#ports:
# - "$LIBRESPEED_PORT:80"
volumes:
- /$DOCKERDIR/appdata/librespeed:/config
environment:
- PUID=$PUID
- PGID=$PGID
- TZ=$TZ
#- DB_TYPE=mysql
#- DB_HOSTNAME=192.168.99.60
#- DB_PORT=3306
#- DB_NAME=GL_LibreSpeed
#- DB_USERNAME=librespeed
#- DB_PASSWORD=librespeed
- PASSWORD=librespeed
- CUSTOM_RESULTS=true
labels:
- "traefik.enable=true"
## HTTP Routers
- "traefik.http.routers.librespeed-rtr.entrypoints=https"
- "traefik.http.routers.librespeed-rtr.rule=HostHeader(`speedtest.$DOMAINNAME0`)"
## Middlewares
- "traefik.http.routers.librespeed-rtr.middlewares=chain-authelia@file"
## HTTP Services
- "traefik.http.routers.librespeed-rtr.service=librespeed-svc"
- "traefik.http.services.librespeed-svc.loadbalancer.server.port=80"

View File

@@ -0,0 +1,12 @@
---
version: "3.1"
services:
ntp:
image: cturra/ntp:latest
container_name: ntp
environment:
- NTP_SERVERS=time.mikes.fi,time1.mikes.fi,time2.mikes.fi # be sure this is external
restart: unless-stopped
ports:
- "192.168.99.30:123:123/udp"

View File

@@ -0,0 +1,52 @@
version: "3.7"
########################### NETWORKS
# There is no need to create any networks outside this docker-compose file.
# You may customize the network subnets (192.168.90.0/24 and 91.0/24) below as you please.
# Docker Compose version 3.5 or higher required to define networks this way.
networks:
gl_proxy:
name: gl_proxy
driver: bridge
ipam:
config:
- subnet: $GL_PROXY_SUBNET
- gateway: $GL_PROXY_GATEWAY
default:
driver: bridge
gl_socket_proxy:
name: gl_socket_proxy
driver: bridge
ipam:
config:
- subnet: $GL_SOCKET_PROXY_SUBNET
- gateway: $GL_SOCKET_PROXY_GATEWAY
########################### SERVICES
services:
# Portainer - WebUI for Containers
portainer:
container_name: gl-portainer
image: portainer/portainer-ce:latest
restart: unless-stopped
command: -H $DOCKER_ENDPOINT # Use Docker Socket Proxy instead for improved security
networks:
gl_proxy:
ipv4_address: $PORTAINER_IP0
gl_socket_proxy:
ipv4_address: $PORTAINER_IP1
security_opt:
- no-new-privileges:true
volumes:
- $DOCKERDIR/appdata/portainer/data:/data # Change to local directory if you want to save/transfer config locally
environment:
- TZ=$TZ
labels:
- "traefik.enable=true"
## HTTP Routers
- "traefik.http.routers.portainer-rtr.entrypoints=https"
- "traefik.http.routers.portainer-rtr.rule=Host(`portainer.$DOMAINNAME0`)"
## Middlewares
- "traefik.http.routers.portainer-rtr.middlewares=chain-authelia@file"
## HTTP Services
- "traefik.http.routers.portainer-rtr.service=portainer-svc"
- "traefik.http.services.portainer-svc.loadbalancer.server.port=9000"