changed syntax
This commit is contained in:
parent
c39bb24c42
commit
5a771084c4
6 changed files with 0 additions and 0 deletions
|
|
@ -1,610 +0,0 @@
|
|||
Alpine Linux Musl += (btrfs + gummiboot) >> Eventually
|
||||
|
||||
Installation:
|
||||
{
|
||||
# alpine-setup: >> Will be replaced eventually with manual install with btrfs and gummiboot, instead of default ext4 and grub.
|
||||
{
|
||||
\
|
||||
}
|
||||
# reboot
|
||||
$ doas vim /etc/apk/repositories:
|
||||
{
|
||||
> {v3.15/main}
|
||||
> {v3.15/community}
|
||||
> {edge/main}
|
||||
> {edge/community}
|
||||
> {edge/testing}
|
||||
}
|
||||
}
|
||||
Post install:
|
||||
{
|
||||
Repositories:
|
||||
{
|
||||
# vim /etc/apk/repositories:
|
||||
{
|
||||
> {v3.15/main}
|
||||
> {v3.15/community}
|
||||
> {edge/main}
|
||||
> {edge/community}
|
||||
> {edge/testing}
|
||||
}
|
||||
# apk update
|
||||
}
|
||||
ups(client):
|
||||
{
|
||||
# apk add nut
|
||||
# mv ups /bin/ups << ups.c
|
||||
# mv exec_ups /bin/exec_ups << exec_ups.c
|
||||
# vim /etc/init.d/ups:
|
||||
{
|
||||
> #!/sbin/openrc-run
|
||||
> name="UPS"
|
||||
> command="/bin/exec_ups"
|
||||
}
|
||||
# rc-update add ups
|
||||
# rc-service ups start
|
||||
}
|
||||
acf:
|
||||
{
|
||||
# apk add acf
|
||||
$ setup-acf
|
||||
# vim /etc/mini_httpd/mini_httpd.conf:
|
||||
{
|
||||
> port=444
|
||||
}
|
||||
}
|
||||
rsnapshot: << May be substituted with duplicati!
|
||||
{
|
||||
# apk add rsnapshot
|
||||
# cp /etc/rsnapshot.conf.default /etc/rsnapshot.conf
|
||||
# vim /etc/rsnapshot.conf:
|
||||
{
|
||||
> snapshot_root /media/data/backup
|
||||
|
||||
> retain daily 7
|
||||
> retain weekly 4
|
||||
> retain monthly 12
|
||||
|
||||
> backup /home/ localhost/
|
||||
> backup /etc/ localhost/
|
||||
> backup /usr/local/ /localhost
|
||||
> backup /opt/ /localhost
|
||||
> backup /var/lib/docker/ /localhost
|
||||
}
|
||||
# vim /etc/periodic/{*}/rsnapshot:
|
||||
{
|
||||
#!/bin/sh
|
||||
exec /usr/bin/rsnapshot {*}
|
||||
}
|
||||
# chmod +x /etc/periodic/{*}/rsnapshot
|
||||
# rc-update add crond
|
||||
# rc-service crond start
|
||||
}
|
||||
apk-autoupdate:
|
||||
{
|
||||
# apk add apk-autoupdate
|
||||
# vim /etc/periodic/weekly/apk-autoupdate:
|
||||
{
|
||||
> #!/bin/sh
|
||||
> exec /usr/sbin/apk-autoupdate
|
||||
}
|
||||
}
|
||||
Samba:
|
||||
{
|
||||
# apk add samba
|
||||
# vim /etc/samba/samba.conf:
|
||||
{
|
||||
> [global]
|
||||
> allow insecure wide links = yes
|
||||
> dos charset = cp866
|
||||
> unix charset = utf-8
|
||||
> workgroup = WORKGROUP
|
||||
> server string = Samba Server
|
||||
|
||||
> [home{user}]
|
||||
> comment = homedir{user}
|
||||
> valid_users = {user}
|
||||
> path = /home/{user}
|
||||
> browseable = yes
|
||||
> writable = yes
|
||||
}
|
||||
# rc-update add samba
|
||||
# rc-service samba start
|
||||
}
|
||||
ssh:
|
||||
{
|
||||
# apk add openssh fail2ban
|
||||
# rc-update add sshd
|
||||
# rc-service sshd start
|
||||
# rc-update add fail2ban
|
||||
# rc-service fail2ban start
|
||||
}
|
||||
Docker:
|
||||
{
|
||||
# apk add docker docker-compose
|
||||
|
||||
portainer:
|
||||
{
|
||||
# vim /opt/docker-compose.yml: << portainer.yml
|
||||
$ docker-compose up -d
|
||||
}
|
||||
traefik:
|
||||
{
|
||||
+ Add stack << traefik.yml
|
||||
}
|
||||
|
||||
watchtower:
|
||||
{
|
||||
Image: containerrr/watchtower:latest
|
||||
Volumes:
|
||||
{
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
/var/run/docker.sock:/var/run/docker.sock
|
||||
}
|
||||
Network: bridge
|
||||
Environment:
|
||||
{
|
||||
WATCHTOWER_NOTIFICATION_EMAIL_FROM = info@{domain}
|
||||
WATCHTOWER_NOTIFICATION_EMAIL_TO=user@{domain}
|
||||
WATCHTOWER_NOTIFICATION_EMAIL_SERVER=mail.{domain}
|
||||
WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT=465
|
||||
WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER=info
|
||||
WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=
|
||||
WATCHTOWER_NOTIFICATION_EMAIL_DELAY=2
|
||||
WATCHTOWER_NOTIFICATIONS=email
|
||||
WATCHTOWER_SCHEDULE=0 0 0 * * 6
|
||||
WATCHTOWER_CLEANUP=true
|
||||
WATCHTOWER_DEBUG=true
|
||||
}
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
|
||||
duplicati:
|
||||
{
|
||||
Image: ghcr.io/linuxserver/duplicati:latest
|
||||
Ports: 8200:8200/tcp
|
||||
Volumes:
|
||||
{
|
||||
/backups:/var/backups
|
||||
/source:duplicati-source - local
|
||||
/config:/opt/duplicati
|
||||
/source/host_home:/home
|
||||
/source/host_etc:/etc
|
||||
/source/host_opt:/opt
|
||||
/source/host_usr_local:/usr/local
|
||||
}
|
||||
Network: bridge
|
||||
Environment:
|
||||
{
|
||||
PIUD=0
|
||||
PGID=0
|
||||
TZ=Europe/Amsterdam
|
||||
}
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
|
||||
webserver:
|
||||
{
|
||||
Image: httpd:latest
|
||||
Volumes:
|
||||
{
|
||||
/usr/local/apache2/htdocs
|
||||
/opt/{webserver}/html
|
||||
}
|
||||
Network: proxy
|
||||
Labels: << traefik.labels
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
|
||||
postgres:
|
||||
{
|
||||
Image: postgres:latest
|
||||
Volumes:
|
||||
{
|
||||
/backup:/opt/postgres
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
/var/lib/postgresql/data:postgres - local
|
||||
}
|
||||
Network: proxy
|
||||
Environment:
|
||||
{
|
||||
POSTGRES_PASSWORD={passwd}
|
||||
PGDATA=/var/lib/postgresql/data
|
||||
}
|
||||
Labels: com.centurylinklabs.watchtower.monitor-only: "true"
|
||||
Restart: Unless-stopped
|
||||
|
||||
Manual backup database:
|
||||
{
|
||||
$ docker exec -it postgres sh -c "pg_dump -U postgres -d {database} |gzip /backup/{database}.gz"
|
||||
}
|
||||
Manual reload database:
|
||||
{
|
||||
$ # docker exec -it postgres sh -c "gunzip -c {dbname.gz} | psql -U postgres -d {dbname}"
|
||||
}
|
||||
}
|
||||
|
||||
postgresbackup:
|
||||
{
|
||||
Image: prodrigestivill/postgres-backup-local:latest
|
||||
Volumes:
|
||||
{
|
||||
/backups:/opt/postgresbackup
|
||||
/var/lib/postgresql/data:/postgresbackup - local
|
||||
/etc/localtime:/etc/localtime
|
||||
}
|
||||
Network: proxy
|
||||
Environment:
|
||||
{
|
||||
POSTGRES_HOST=postgres
|
||||
POSTGRES_DB={db0,db1,...,db{n}}
|
||||
POSTGRES_USER=postgres
|
||||
SCHEDULE=@daily
|
||||
BACKUP_KEEP_DAYS=1
|
||||
BACKUP_KEEP_WEEKS=1
|
||||
BACKUP_KEEP_MONTHS=1
|
||||
BACKUP_DIR=/backups
|
||||
}
|
||||
Labels: com.centurylinklabs.watchtower.monitor-only: "true"
|
||||
Restart: Unless-stopped
|
||||
|
||||
Reload database:
|
||||
{
|
||||
# mv /opt/postgresbackup/{dbname.sql.gz} /opt/postgres
|
||||
$ docker exec -it postgres sh -c "zcat /backup/{dbname.sql.gz} | psql -U postgres -d {dbname}"
|
||||
}
|
||||
}
|
||||
|
||||
vaultwarden:
|
||||
{
|
||||
$ docker exec -it postgres /bin/bash
|
||||
# psql -U postgres:
|
||||
{
|
||||
> create database vaultwarden;
|
||||
}
|
||||
|
||||
Image: vaultwarden/server:latest
|
||||
Volumes:
|
||||
{
|
||||
/data:/opt/vaultwarden/data
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
}
|
||||
Network: proxy
|
||||
Environment:
|
||||
{
|
||||
ADMIN_TOKEN={admin_token}
|
||||
SIGNUPS_ALLOWED=true/false
|
||||
DATABASE_URL=postgresql://postgres:{passwd}@postgres/vaultwarden
|
||||
}
|
||||
Labels: << traefik.labels
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
|
||||
gitea:
|
||||
{
|
||||
$ docker exec -it postgres /bin/bash
|
||||
# psql -U postgres:
|
||||
{
|
||||
> create database gitea;
|
||||
}
|
||||
|
||||
Image: gitea/gitea:latest
|
||||
Volumes:
|
||||
{
|
||||
/data:/opt/gitea
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
/etc/timezone:/etc/timezone:ro
|
||||
}
|
||||
Network: proxy
|
||||
Environment:
|
||||
{
|
||||
USER_UID=1000
|
||||
USER_GID=1000
|
||||
GITEA__database__DB_TYPE=postgres
|
||||
GITEA__database__HOST=postgres
|
||||
GITEA__database__NAME=gitea
|
||||
GITEA__database__USER=postgres
|
||||
GITEA__database__PASSWD={passwd}
|
||||
USER=git
|
||||
GITEA_CUSTOM=/data/gitea
|
||||
}
|
||||
Labels: << traefik.labels
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
}
|
||||
matrix:
|
||||
{
|
||||
synapse:
|
||||
{
|
||||
$ docker exec -it postgres /bin/bash
|
||||
# psql -U postgres:
|
||||
{
|
||||
> create database synapse with encoding='UTF8' lc_collate='C' lc_ctype='C' template=template0;
|
||||
}
|
||||
|
||||
$ docker run -it --rm --mount type=volume,src=synapse-data,dst=/data -e SYNAPSE_SERVER_NAME=matrix.{domain} -e SYNAPSE_REPORT_STATS=no matrixdotorg/synapse:latest generate
|
||||
$ docker run -d --name synapse --mount type=volume,src=synapse-data,dst=/data matrixdotorg/synapse:latest
|
||||
>> May be improved!
|
||||
|
||||
Network: proxy
|
||||
Labels: << traefik.labels
|
||||
Restart: Unless-stopped
|
||||
|
||||
# vim /var/lib/docker/volumes/synapse-data/_data/homeserver.yaml:
|
||||
{
|
||||
> server_name: "matrix.{domain}"
|
||||
|
||||
> database:
|
||||
> name: psycopg2
|
||||
> password: "{passwd}"
|
||||
> database: synapse
|
||||
> host: postgres
|
||||
> cp_min: 5
|
||||
> cp_max: 10
|
||||
|
||||
> enable_registration: true/false
|
||||
> enable_registration_without_verification: true
|
||||
}
|
||||
}
|
||||
mautrix-whatsapp:
|
||||
{
|
||||
$ docker exec -it postgres /bin/bash
|
||||
# psql -U postgres:
|
||||
{
|
||||
> create database mautrixwhatsapp;
|
||||
}
|
||||
|
||||
Image: dock.mau.dev/mautrix/whatsapp:latest
|
||||
Volumes:
|
||||
{
|
||||
/data:/opt/matrix/mautrix-whatsapp
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
}
|
||||
Network: proxy
|
||||
Restart: Unless-stopped
|
||||
|
||||
# vim /opt/matrix/mautrix-whatsapp/config.yaml:
|
||||
{
|
||||
> homeserver:
|
||||
> address: http://synapse:8008
|
||||
> domain: matrix.{domain}
|
||||
|
||||
> appservice:
|
||||
> address: http://mautrix-whatsapp:29318
|
||||
> hostname: 0.0.0.0
|
||||
> port: 29318
|
||||
>
|
||||
> database:
|
||||
> type: postgres
|
||||
> uri: postgres://postgres:{passwd}@postgres/mautrixwhatsapp?sslmode=disable
|
||||
|
||||
> bridge:
|
||||
> private_chat_portal_meta: true
|
||||
> encryption:
|
||||
> allow: true
|
||||
> default: true
|
||||
>
|
||||
> permissions:
|
||||
> "*": relay
|
||||
> "matrix.{domain}": user
|
||||
> "@admin:matrix.{domain}: admin
|
||||
}
|
||||
# vim /opt/matrix/mautrix-signal/registration.yaml:
|
||||
{
|
||||
> url: http://mautrix-whatsapp:29318
|
||||
> regex: << matrix.{domain.bijl.us}
|
||||
}
|
||||
}
|
||||
mautrix-signal:
|
||||
{
|
||||
$ docker exec -it postgres /bin/bash
|
||||
# psql -U postgres:
|
||||
{
|
||||
> create database mautrixsignal;
|
||||
}
|
||||
|
||||
Image: dock.mau.dev/mautrix/signal:latest
|
||||
Volumes:
|
||||
{
|
||||
/data:/opt/matrix/mautrix-signal
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
}
|
||||
Network: proxy
|
||||
Restart: Unless-stopped
|
||||
|
||||
# vim /opt/matrix/mautrix-signal/config.yaml:
|
||||
{
|
||||
> homeserver:
|
||||
> address: http://synapse:8008
|
||||
> domain: matrix.{domain}
|
||||
|
||||
> appservice:
|
||||
> address: http://mautrix-signal:29328
|
||||
> hostname: 0.0.0.0
|
||||
> port: 29328
|
||||
>
|
||||
> database: postgres://postgres:{passwd}@postgres/mautrixsignal
|
||||
|
||||
> signal:
|
||||
> socket_path: /data/signald/signald.sock
|
||||
|
||||
> bridge:
|
||||
> private_chat_portal_meta: true
|
||||
> encryption:
|
||||
> allow: true
|
||||
> default: true
|
||||
>
|
||||
> permissions:
|
||||
> "*": relay
|
||||
> "matrix.{domain}": user
|
||||
> "@admin:matrix.{domain}: admin
|
||||
}
|
||||
# vim /opt/matrix/mautrix-signal/registration.yaml:
|
||||
{
|
||||
> regex: << matrix.{domain.bijl.us}
|
||||
> url: http://mautrix-signal:29328
|
||||
}
|
||||
}
|
||||
signald:
|
||||
{
|
||||
>> postgres database not yet available! (sqlite database)
|
||||
|
||||
Image:docker.io/signald/signald:latest
|
||||
Volumes:
|
||||
{
|
||||
/signald:/opt/matrix/mautrix-signal/signald
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
}
|
||||
Network: proxy
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
element:
|
||||
{
|
||||
Image: vectorim/element-web:latest
|
||||
Volumes:
|
||||
{
|
||||
/app/config.json:/opt/matrix/element/config.json
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
}
|
||||
Network: proxy
|
||||
Labels: << traefik.labels
|
||||
Restart: Unless-stopped
|
||||
|
||||
# vim /opt/matrix/element/config.json:
|
||||
{
|
||||
{
|
||||
"default_server_config": {
|
||||
"m.homeserver": {
|
||||
"base_url": "https://matrix.{domain}",
|
||||
"server_name": "matrix.{domain}"
|
||||
},
|
||||
"m.identity_server": {
|
||||
"base_url": "https://vector.im"
|
||||
}
|
||||
},
|
||||
"disable_custom_urls": true,
|
||||
"room_directory": {
|
||||
"servers": ["matrix.org", "matrix.{domain}"]
|
||||
},
|
||||
"default_theme": "dark"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
homeassistant:
|
||||
{
|
||||
mosquitto:
|
||||
{
|
||||
Image: eclipse-mosquitto:latest
|
||||
Volumes:
|
||||
{
|
||||
/mosquitto/data:/opt/mosquitto/data
|
||||
/mosquitto/log:/opt/mosquitto/log
|
||||
/mosquitto/config:/opt/mosquitto/config
|
||||
}
|
||||
Network:
|
||||
{
|
||||
proxy
|
||||
ipv4: 172.21.0.12
|
||||
}
|
||||
Restart: Unless-stopped
|
||||
|
||||
# vim /opt/mosquitto/config/password.txt:
|
||||
{
|
||||
> {username}:{passwd}
|
||||
}
|
||||
# vim /opt/mosquitto/config/mosquitto.conf:
|
||||
{
|
||||
> persistence true
|
||||
> persistence_location /mosquitto/data
|
||||
> log_dest file /mosquitto/log/mosquitto.log
|
||||
|
||||
> listener 9001
|
||||
> listener 1883
|
||||
> connection_messages true
|
||||
|
||||
> allow_anonymous false
|
||||
> password_file /mosquitto/config/password.txt
|
||||
}
|
||||
}
|
||||
ecowitt:
|
||||
{
|
||||
Image: bachya/ecowitt2mqtt:latest
|
||||
Ports: 8181:8181/tcp
|
||||
Network: proxy
|
||||
Environment:
|
||||
{
|
||||
COWITT2MQTT_MQTT_BROKER=mosquitto
|
||||
ECOWITT2MQTT_MQTT_USERNAME={username}
|
||||
ECOWITT2MQTT_MQTT_PASSWORD={passwd}
|
||||
ECOWITT2MQTT_PORT=8181
|
||||
ECOWITT2MQTT_HASS_DISCOVERY=true
|
||||
ECOWITT2MQTT_INPUT_UNIT_SYSTEM=imperial
|
||||
ECOWITT2MQTT_OUTPUT_UNIT_SYSTEM=metric
|
||||
}
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
esphome:
|
||||
{
|
||||
Image: esphome/esphome:latest
|
||||
Ports: 6052:6052/tcp
|
||||
Volumes:
|
||||
{
|
||||
/config:/opt/esphome
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
}
|
||||
Network: host
|
||||
Environment:
|
||||
{
|
||||
USERNAME={username}
|
||||
PASSWORD={passwd}
|
||||
}
|
||||
Restart: Unless-stopped
|
||||
}
|
||||
homeassistant:
|
||||
{
|
||||
$ docker exec -it postgres /bin/bash
|
||||
# psql -U postgres:
|
||||
{
|
||||
> create database homeassistant;
|
||||
}
|
||||
|
||||
Image: homeassistant
|
||||
Volumes:
|
||||
{
|
||||
/config:/opt/homeassistant/config
|
||||
/etc/localtime:/etc/localtime:ro
|
||||
}
|
||||
Network: proxy
|
||||
Labels: << traefik.labels
|
||||
Restart: Unless-stopped
|
||||
|
||||
# vim /opt/homeassistant/config/configuration.yaml:
|
||||
{
|
||||
> python_script:
|
||||
|
||||
> shell_command:
|
||||
|
||||
> http:
|
||||
> use_x_forwarded_for: true
|
||||
> trusted_proxies:
|
||||
> - 172.21.0.80
|
||||
|
||||
> panel_iframe:
|
||||
> portainer:
|
||||
> title: "Portainer"
|
||||
> url: "http://{ip}:9000/#/containers"
|
||||
> icon: mdi:docker
|
||||
> require_admin: true
|
||||
> esphome:
|
||||
> title: "ESPHome"
|
||||
> url: "http://{ip}:6052"
|
||||
> icon: mdi:chip
|
||||
> require_admin: true
|
||||
|
||||
> recorder:
|
||||
> db_url: postgresql://postgres:{passwd}@postgres/homeassistant
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue