Homelab-Ansible/ansible/assets/docker-int/compose.yml.j2

---
version: '3.3'
services:
    traefik:
        container_name: traefik
        # The official v2 Traefik docker image
        image: traefik:v2.11
        # Enables the web UI and tells Traefik to listen to docker
        command:
            - --api.insecure=true
            - --providers.docker
            - "--log.filePath=/var/log/traefik/traefik.log"
            - "--entryPoints.web.address=:80"
            - "--entryPoints.websecure.address=:443"
            - "--certificatesresolvers.myresolver.acme.dnschallenge=true"
            - "--certificatesresolvers.myresolver.acme.dnschallenge.provider=cloudflare"
            # - "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
            - "--certificatesresolvers.myresolver.acme.email=jg@justus.ws"
            - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
        ports:
            # The HTTP port
            - "80:80"
            - "443:443"
            # The Web UI (enabled by --api.insecure=true)
            - "8080:8080"
        volumes:
            # So that Traefik can listen to the Docker events
            - /var/run/docker.sock:/var/run/docker.sock
            - "./letsencrypt:/letsencrypt"
            - "./logsTraefik:/var/log/traefik"
        environment:
            - "CF_API_KEY=4fa4711ae24bd19c1c17a06ce2ec6b3fa7629"
            - "CF_API_EMAIL=jg@justus.ws"
    # squid:
    #    container_name: squid
    #    volumes:
    #        # - '/root/docker/squid/logs:/var/log/squid'
    #        #  - '/root/docker/squid/data:/var/spool/squid'
    #        - '/root/docker/squid/squid.conf:/etc/squid/squid.conf'
    #        #  - '/rood/docker/squid/config-snippet:/etc/squid/conf.d/snippet.conf'
    #    environment:
    #        - TZ=America/Thunder_Bay
    #    ports:
    #        - '3128:3128'
    #    image: 'ubuntu/squid:5.2-22.04_beta'
    #      # yacy_search_server:
    #      #    container_name: yacy
    #      #    ports:
    #      #        - '8090:8090'
    #      #        - '8443:8443'
    #      #    logging:
    #      #        options:
    #      #          max-size: 200
    #      #          max-file: 2
    #      #    image: 'yacy/yacy_search_server:latest'
    paperless-broker:
        image: docker.io/library/redis:7
        container_name: paperless-broker
        restart: unless-stopped
        volumes:
            - redisdata:/data
            #    db:
            #      image: docker.io/library/postgres:15
            #      restart: unless-stopped
            #      volumes:
            #        - pgdata:/var/lib/postgresql/data
            #      environment:
            #        POSTGRES_DB: paperless
            #        POSTGRES_USER: paperless
            #        POSTGRES_PASSWORD: paperless
    paperless-webserver:
        image: ghcr.io/paperless-ngx/paperless-ngx:latest
        container_name: paperless-webserver
        restart: unless-stopped
        depends_on:
            #        - db
            - paperless-broker
        ports:
            - "8000:8000"
        volumes:
            - data:/usr/src/paperless/data
            - media:/usr/src/paperless/media
            - export:/usr/src/paperless/export
            - consume:/usr/src/paperless/consume
        env_file: docker-compose.env
        # environment:
        labels:
            - "traefik.http.routers.paperless.rule=Host(`paperless.injust.us`)"
            - "traefik.http.routers.paperless.entrypoints=websecure"
            - traefik.http.routers.paperless.tls=true
            - "traefik.http.routers.paperless.tls.certresolver=myresolver"
    webdav:
        container_name: webdav
        image: ionelmc/webdav
        restart: unless-stopped
        ports:
            - "8081:8080"
        environment:
            WEBDAV_USERNAME: alice
            WEBDAV_PASSWORD: secret1234
            UID: 1001
        volumes:
            - ./consume:/media
              # webdav:
              #  container_name: webdav
              #  image: bytemark/webdav
              #  restart: unless-stopped
              #  ports:
              #    - "8081:80"
              #  environment:
              #    AUTH_TYPE: Digest
              #    USERNAME: alice
              #    PASSWORD: secret1234
              #  volumes:
              #    - consume:/var/lib/dav/data/ScannerPro
        labels:
            - "traefik.http.routers.webdav.rule=Host(`webdav.injust.us`)"
    testweb:
        image: httpd:2.4
        ports:
            - "8008:80"
        volumes:
            - ./htdocs:/usr/local/apache2/htdocs/
        labels:
            - "traefik.http.routers.testweb.rule=Host(`testweb.injust.us`)"
            - traefik.http.routers.testweb.tls=true
            - "traefik.http.routers.testweb.entrypoints=websecure"
            - "traefik.http.routers.testweb.tls.certresolver=myresolver"
    actual_server:
        image: docker.io/actualbudget/actual-server:latest
        ports:
            # This line makes Actual available at port 5006 of the device you run the server on,
            # i.e. http://localhost:5006. You can change the first number to change the port, if you want.
            - '5006:5006'
            # environment:
            # Uncomment any of the lines below to set configuration options.
            # - ACTUAL_HTTPS_KEY=/data/selfhost.key
            # - ACTUAL_HTTPS_CERT=/data/selfhost.crt
            # - ACTUAL_PORT=5006
            # - ACTUAL_UPLOAD_FILE_SYNC_SIZE_LIMIT_MB=20
            # - ACTUAL_UPLOAD_SYNC_ENCRYPTED_FILE_SYNC_SIZE_LIMIT_MB=50
            # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
            # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
            # !! If you are not using any of these options, remove the 'environment:' tag entirely.
        volumes:
            # Change './actual-data' below to the path to the folder you want Actual to store its data in on your server.
            # '/data' is the path Actual will look for its files in by default, so leave that as-is.
            - ./actual-data:/data
        labels:
            - "traefik.http.routers.actual.rule=Host(`actual.injust.us`)"
            - traefik.http.routers.actual.tls=true
            - "traefik.http.routers.actual.entrypoints=websecure"
            - "traefik.http.routers.actual.tls.certresolver=myresolver"
        restart: unless-stopped

volumes:
    data:
    media:
    pgdata:
    redisdata:
    consume:
        driver_opts:
            type: "nfs"
            o: "addr=omv.injust.us,nolock,soft,rw"
            device: ":/export/Paperless"
    export:
        driver_opts:
            type: "nfs"
            o: "addr=omv.injust.us,nolock,soft,rw"
            device: ":/export/Paperless_Export"