206 lines
7.3 KiB
Django/Jinja
206 lines
7.3 KiB
Django/Jinja
---
|
|
services:
|
|
traefik:
|
|
container_name: traefik
|
|
# The official v2 Traefik docker image
|
|
image: traefik:v3.4
|
|
# Enables the web UI and tells Traefik to listen to docker
|
|
restart: unless-stopped
|
|
command:
|
|
- --api.insecure=true
|
|
- --providers.docker
|
|
- "--log.filePath=/var/log/traefik/traefik.log"
|
|
- "--entryPoints.web.address=:80"
|
|
- "--entryPoints.websecure.address=:443"
|
|
- "--certificatesresolvers.myresolver.acme.dnschallenge=true"
|
|
- "--certificatesresolvers.myresolver.acme.dnschallenge.provider=cloudflare"
|
|
# - "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
|
|
- "--certificatesresolvers.myresolver.acme.email=jg@justus.ws"
|
|
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
|
|
ports:
|
|
# The HTTP port
|
|
- "80:80"
|
|
- "443:443"
|
|
# The Web UI (enabled by --api.insecure=true)
|
|
- "8080:8080"
|
|
volumes:
|
|
# So that Traefik can listen to the Docker events
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- "./letsencrypt:/letsencrypt"
|
|
- "./logsTraefik:/var/log/traefik"
|
|
environment:
|
|
- "CF_API_KEY={{ cf_api_key }}"
|
|
- "CF_API_EMAIL=jg@justus.ws"
|
|
# squid:
|
|
# container_name: squid
|
|
# volumes:
|
|
# # - '/root/docker/squid/logs:/var/log/squid'
|
|
# # - '/root/docker/squid/data:/var/spool/squid'
|
|
# - '/root/docker/squid/squid.conf:/etc/squid/squid.conf'
|
|
# # - '/rood/docker/squid/config-snippet:/etc/squid/conf.d/snippet.conf'
|
|
# environment:
|
|
# - TZ=America/Thunder_Bay
|
|
# ports:
|
|
# - '3128:3128'
|
|
# image: 'ubuntu/squid:5.2-22.04_beta'
|
|
# # yacy_search_server:
|
|
# # container_name: yacy
|
|
# # ports:
|
|
# # - '8090:8090'
|
|
# # - '8443:8443'
|
|
# # logging:
|
|
# # options:
|
|
# # max-size: 200
|
|
# # max-file: 2
|
|
# # image: 'yacy/yacy_search_server:latest'
|
|
paperless-broker:
|
|
image: docker.io/library/redis:7
|
|
container_name: paperless-broker
|
|
restart: unless-stopped
|
|
volumes:
|
|
- redisdata:/data
|
|
paperless-webserver:
|
|
image: ghcr.io/paperless-ngx/paperless-ngx:2.16.3
|
|
container_name: paperless-webserver
|
|
restart: unless-stopped
|
|
depends_on:
|
|
# - db
|
|
- paperless-broker
|
|
ports:
|
|
- "8000:8000"
|
|
volumes:
|
|
- data:/usr/src/paperless/data
|
|
- media:/usr/src/paperless/media
|
|
- export:/usr/src/paperless/export
|
|
- consume:/usr/src/paperless/consume
|
|
#env_file: docker-compose.env
|
|
environment:
|
|
PAPERLESS_DATE_ORDER: MDY
|
|
labels:
|
|
- "traefik.http.routers.paperless.rule=Host(`paperless.injust.us`)"
|
|
- "traefik.http.routers.paperless.entrypoints=websecure"
|
|
- traefik.http.routers.paperless.tls=true
|
|
- "traefik.http.routers.paperless.tls.certresolver=myresolver"
|
|
webdav:
|
|
container_name: webdav
|
|
image: ionelmc/webdav
|
|
restart: unless-stopped
|
|
ports:
|
|
- "8081:8080"
|
|
environment:
|
|
WEBDAV_USERNAME: alice
|
|
WEBDAV_PASSWORD: "{{ webdav_password }}"
|
|
UID: 1001
|
|
volumes:
|
|
- ./consume:/media
|
|
labels:
|
|
- "traefik.http.routers.webdav.rule=Host(`webdav.injust.us`)"
|
|
testweb:
|
|
image: httpd:2.4
|
|
ports:
|
|
- "8008:80"
|
|
volumes:
|
|
- ./htdocs:/usr/local/apache2/htdocs/
|
|
labels:
|
|
- "traefik.http.routers.testweb.rule=Host(`testweb.injust.us`)"
|
|
- traefik.http.routers.testweb.tls=true
|
|
- "traefik.http.routers.testweb.entrypoints=websecure"
|
|
- "traefik.http.routers.testweb.tls.certresolver=myresolver"
|
|
actual_server:
|
|
image: docker.io/actualbudget/actual-server:25.3.1
|
|
ports:
|
|
# This line makes Actual available at port 5006 of the device you run the server on,
|
|
# i.e. http://localhost:5006. You can change the first number to change the port, if you want.
|
|
- '5006:5006'
|
|
# environment:
|
|
# Uncomment any of the lines below to set configuration options.
|
|
# - ACTUAL_HTTPS_KEY=/data/selfhost.key
|
|
# - ACTUAL_HTTPS_CERT=/data/selfhost.crt
|
|
# - ACTUAL_PORT=5006
|
|
# - ACTUAL_UPLOAD_FILE_SYNC_SIZE_LIMIT_MB=20
|
|
# - ACTUAL_UPLOAD_SYNC_ENCRYPTED_FILE_SYNC_SIZE_LIMIT_MB=50
|
|
# - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
|
|
# See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
|
|
# !! If you are not using any of these options, remove the 'environment:' tag entirely.
|
|
volumes:
|
|
# Change './actual-data' below to the path to the folder you want Actual to store its data in on your server.
|
|
# '/data' is the path Actual will look for its files in by default, so leave that as-is.
|
|
- ./actual-data:/data
|
|
labels:
|
|
- "traefik.http.routers.actual.rule=Host(`actual.injust.us`)"
|
|
- traefik.http.routers.actual.tls=true
|
|
- "traefik.http.routers.actual.entrypoints=websecure"
|
|
- "traefik.http.routers.actual.tls.certresolver=myresolver"
|
|
restart: unless-stopped
|
|
|
|
immich-server:
|
|
container_name: immich_server
|
|
image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
|
|
# extends:
|
|
# file: hwaccel.transcoding.yml
|
|
# service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
|
|
volumes:
|
|
# Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
|
|
- immich:/usr/src/app/upload
|
|
- /etc/localtime:/etc/localtime:ro
|
|
env_file:
|
|
- .env-immich
|
|
ports:
|
|
- 2283:2283
|
|
depends_on:
|
|
- redis
|
|
#- database
|
|
restart: always
|
|
healthcheck:
|
|
disable: false
|
|
labels:
|
|
- "traefik.http.routers.immich.rule=Host(`immich.mycomputer.party`)"
|
|
- traefik.http.routers.immich.tls=true
|
|
- "traefik.http.routers.immich.entrypoints=websecure"
|
|
- "traefik.http.routers.immich.tls.certresolver=myresolver"
|
|
|
|
redis:
|
|
container_name: immich_redis
|
|
image: docker.io/redis:6.2-alpine@sha256:55cf0a66a4baed7d5801ffacfbb91aa523cdaeb79cb8661dbc9673e0412eb879
|
|
healthcheck:
|
|
test: redis-cli ping || exit 1
|
|
restart: always
|
|
|
|
immich-machine-learning:
|
|
container_name: immich_machine_learning
|
|
# For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
|
|
# Example tag: ${IMMICH_VERSION:-release}-cuda
|
|
image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
|
|
# extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
|
|
# file: hwaccel.ml.yml
|
|
# service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
|
|
volumes:
|
|
- model-cache:/cache
|
|
env_file:
|
|
- .env-immich
|
|
restart: always
|
|
healthcheck:
|
|
disable: false
|
|
|
|
volumes:
|
|
data:
|
|
media:
|
|
pgdata:
|
|
redisdata:
|
|
consume:
|
|
driver_opts:
|
|
type: "nfs"
|
|
o: "addr=omv.injust.us,nolock,soft,rw"
|
|
device: ":/export/Paperless"
|
|
export:
|
|
driver_opts:
|
|
type: "nfs"
|
|
o: "addr=omv.injust.us,nolock,soft,rw"
|
|
device: ":/export/Paperless_Export"
|
|
immich:
|
|
driver_opts:
|
|
type: "nfs"
|
|
o: "addr=omv.injust.us,nolock,soft,rw"
|
|
device: ":/export/Immich"
|
|
model-cache:
|