first commit from PC

This commit is contained in:
2025-07-20 13:28:12 +10:00
parent a2971879f0
commit a27c86ffe9
42 changed files with 1551 additions and 0 deletions
+172
View File
@@ -0,0 +1,172 @@
version: "2.1"
services:
keeweb:
container_name: keeweb.alm.lan
restart: always
image: antelle/keeweb:latest
command: nginx
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.212
nagios.docker.lan:
ipv4_address: 192.168.249.212
searxng:
container_name: searxng.alm.lan
restart: always
build:
context: /home/${USER}/docker/builds/searxng
image: searxng
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.210
nagios.docker.lan:
ipv4_address: 192.168.249.210
tor-relay1:
container_name: tor-relay1.alm.lan
restart: always
env_file: /home/${USER}/docker/builds/relay1.env
build:
context: /home/${USER}/docker/builds/tor-relay
image: tor-relay
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.211
nagios.docker.lan:
ipv4_address: 192.168.249.211
tor-relay2:
container_name: tor-relay2.alm.lan
restart: always
env_file: /home/${USER}/docker/builds/relay2.env
build:
context: /home/${USER}/docker/builds/tor-relay
image: tor-relay
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.213
nagios.docker.lan:
ipv4_address: 192.168.249.213
webdav:
container_name: webdav.alm.lan
restart: always
build:
context: /home/${USER}/docker/builds/webdav
image: webdav
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.214
nagios.docker.lan:
ipv4_address: 192.168.249.214
volumes:
- /mnt/stream/docker/webdav:/var/www/html:rw
squid:
container_name: squid.alm.lan
restart: always
image: ubuntu/squid
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.216
nagios.docker.lan:
ipv4_address: 192.168.249.216
nagios:
container_name: nagios.alm.lan
restart: always
build:
context: /home/${USER}/docker/builds/my-nagios
image: my-nagios
volumes:
- /mnt/stream/docker/nagios:/usr/local/nagios/etc
- /mnt/3cx-backup:/mnt/3cx-backup
- /home/${USER}/.ssh:/home/nagios/.ssh
extra_hosts:
- "vhost.docker.lan:192.168.250.254"
networks:
alm.lan:
ipv4_address: 192.168.8.215
docker.lan:
ipv4_address: 192.168.250.215
nagios.docker.lan:
ipv4_address: 192.168.249.215
devices:
- "/dev/net/tun:/dev/net/tun"
cap_add:
- "net_admin"
portainer:
container_name: portainer.alm.lan
restart: always
image: portainer/portainer-ce
ports:
- 9443:443
- 9000:80
- 8000:8000
volumes:
- /var/run/docker.sock:/var/run/docker.sock
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.231
nagios.docker.lan:
ipv4_address: 192.168.249.231
pihole2:
container_name: pihole2.alm.lan
restart: always
build:
context: /home/${USER}/docker/builds/pihole
image: pihole-new
volumes:
- /mnt/stream/docker/openvpn/server.conf:/etc/openvpn
- /mnt/stream/docker/ovpns:/home/pi/ovpns
- /home/${USER}/.ssh:/home/pi/.ssh
extra_hosts:
- "stream.docker.lan:192.168.250.254"
networks:
alm.lan:
ipv4_address: 192.168.8.252
docker.lan:
ipv4_address: 192.168.250.252
environment:
TZ: 'Australia/Brisbane'
devices:
- "/dev/net/tun:/dev/net/tun"
cap_add:
- "net_admin"
networks:
alm.lan:
name: alm.lan
driver: ipvlan
driver_opts:
com.docker.network.enable_ipv6: "false"
parent: "enp0s3"
ipam:
driver: default
config:
- subnet: 192.168.8.0/24
gateway: 192.168.8.254
docker.lan:
name: docker.lan
driver_opts:
com.docker.network.enable_ipv6: "false"
ipam:
config:
- subnet: 192.168.250.0/24
gateway: 192.168.250.254
nagios.docker.lan:
name: nagios.docker.lan
driver_opts:
com.docker.network.enable_ipv6: "false"
ipam:
config:
- subnet: 192.168.249.0/24
gateway: 192.168.249.254
+134
View File
@@ -0,0 +1,134 @@
version: "2.1"
services:
tor-relay1:
container_name: tor-relay1.alm.lan
restart: always
env_file: /home/${USER}/docker/builds/relay1.env
image: registry.alm.lan/tor-relay
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
volumes:
- "/etc/timezone:/etc/timezone:ro"
- "/etc/localtime:/etc/localtime:ro"
networks:
alm.lan:
ipv4_address: 192.168.8.211
nagios.docker.lan:
ipv4_address: 192.168.249.211
tor-relay2:
container_name: tor-relay2.alm.lan
restart: always
env_file: /home/${USER}/docker/builds/relay2.env
image: registry.alm.lan/tor-relay
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
volumes:
- "/etc/timezone:/etc/timezone:ro"
- "/etc/localtime:/etc/localtime:ro"
networks:
alm.lan:
ipv4_address: 192.168.8.213
nagios.docker.lan:
ipv4_address: 192.168.249.213
nagios:
container_name: nagios.alm.lan
restart: always
image: registry.alm.lan/nagios
volumes:
- /mnt/stream/docker/nagios:/usr/local/nagios/etc
- /mnt/3cx-backup:/mnt/3cx-backup
- /home/${USER}/.ssh:/home/nagios/.ssh
- "/etc/timezone:/etc/timezone:ro"
- "/etc/localtime:/etc/localtime:ro"
extra_hosts:
- "vhost.docker.lan:192.168.250.254"
networks:
alm.lan:
ipv4_address: 192.168.8.215
docker.lan:
ipv4_address: 192.168.250.215
nagios.docker.lan:
ipv4_address: 192.168.249.215
devices:
- "/dev/net/tun:/dev/net/tun"
cap_add:
- "net_admin"
pihole2:
container_name: pihole2.alm.lan
restart: always
image: registry.alm.lan/pihole
volumes:
- pivpn-etc:/etc/openvpn
- pivpn-ovpns:/home/pi/ovpns
- /home/${USER}/.ssh:/home/pi/.ssh
- "/etc/timezone:/etc/timezone:ro"
- "/etc/localtime:/etc/localtime:ro"
- pihole-dnsmasq:/etc/dnsmasq.d
- pihole-etc:/etc/pihole
extra_hosts:
- "stream.docker.lan:192.168.250.254"
networks:
alm.lan:
ipv4_address: 192.168.8.252
docker.lan:
ipv4_address: 192.168.250.252
environment:
TZ: 'Australia/Brisbane'
devices:
- "/dev/net/tun:/dev/net/tun"
cap_add:
- "net_admin"
volumes:
pihole-etc:
driver: local
driver_opts:
type: nfs
device: ":/srv/docker/volumes/pihole/etc"
o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
pihole-dnsmasq:
driver: local
driver_opts:
type: nfs
device: ":/srv/docker/volumes/pihole/dnsmasq.d"
o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
pivpn-ovpns:
driver: local
driver_opts:
type: nfs
device: ":/srv/docker/volumes/pivpn/ovpns"
o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
pivpn-etc:
driver: local
driver_opts:
type: nfs
device: ":/srv/docker/volumes/pivpn/etc"
o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
networks:
alm.lan:
name: alm.lan
driver: ipvlan
driver_opts:
com.docker.network.enable_ipv6: "false"
parent: "enp0s3"
ipam:
driver: default
config:
- subnet: 192.168.8.0/24
gateway: 192.168.8.254
docker.lan:
name: docker.lan
driver_opts:
com.docker.network.enable_ipv6: "false"
ipam:
config:
- subnet: 192.168.250.0/24
gateway: 192.168.250.254
nagios.docker.lan:
name: nagios.docker.lan
driver_opts:
com.docker.network.enable_ipv6: "false"
ipam:
config:
- subnet: 192.168.249.0/24
gateway: 192.168.249.254
+44
View File
@@ -0,0 +1,44 @@
version: '3.2'
services:
agent:
image: portainer/agent
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /var/lib/docker/volumes:/var/lib/docker/volumes
networks:
- agent_network
deploy:
mode: global
placement:
constraints: [node.platform.os == linux]
portainer:
image: portainer/portainer-ce
command: -H tcp://tasks.agent:9001 --tlsskipverify
ports:
- "9443:9443"
- "9000:9000"
- "8000:8000"
volumes:
- portainer-data:/data:rw
- "/var/run/docker.sock:/var/run/docker.sock"
networks:
- agent_network
deploy:
mode: replicated
placement:
constraints: [node.role == manager]
networks:
agent_network:
driver: overlay
attachable: true
volumes:
portainer-data:
driver: local
driver_opts:
type: nfs
device: ":/srv/docker/volumes/portainer"
o: "addr=192.168.8.231,rw,nfsvers=4,async"
+48
View File
@@ -0,0 +1,48 @@
version: "2.1"
services:
portainer:
container_name: portainer.alm.lan
restart: always
image: portainer/portainer-ce
ports:
- 9443:443
- 9000:80
- 8000:8000
volumes:
- /var/run/docker.sock:/var/run/docker.sock
extra_hosts:
- "nagios.docker.lan:192.168.249.215"
networks:
alm.lan:
ipv4_address: 192.168.8.231
nagios.docker.lan:
ipv4_address: 192.168.249.231
networks:
alm.lan:
name: alm.lan
driver: ipvlan
driver_opts:
com.docker.network.enable_ipv6: "false"
parent: "enp0s3"
ipam:
driver: default
config:
- subnet: 192.168.8.0/24
gateway: 192.168.8.254
docker.lan:
name: docker.lan
driver_opts:
com.docker.network.enable_ipv6: "false"
ipam:
config:
- subnet: 192.168.250.0/24
gateway: 192.168.250.254
nagios.docker.lan:
name: nagios.docker.lan
driver_opts:
com.docker.network.enable_ipv6: "false"
ipam:
config:
- subnet: 192.168.249.0/24
gateway: 192.168.249.254
+40
View File
@@ -0,0 +1,40 @@
#!/bin/bash
APP="app"
QM=0
usage() {
echo "Usage: $0 [-p project name. default is app] and [-q quiet mode optional list compose services to recreate]" 1>&2
exit 1
}
while getopts "p:q:h" o; do
case "${o}" in
p)
APP=${OPTARG}
;;
q)
SERVICES=${OPTARG}
QM=1
;;
h)
usage
;;
esac
done
shift $((OPTIND-1))
#if [[ $QM == 1 ]] && [ -z "${q}" ]; then
# usage
#fi
pushd ~/docker
if [ $QM = 0 ]; then
docker-compose ps --services
read -p "Enter services to recreate... " SERVICES
fi
for SERVICE in $SERVICES
do
docker-compose -p $APP stop $SERVICE
docker-compose -p $APP rm -f $SERVICE
docker-compose -p $APP up -d $SERVICE
done
popd
+3
View File
@@ -0,0 +1,3 @@
#!/bin/bash
/mnt/docker-persistent-data/recreate-containers.sh -q "nextcloud nextcloud_db"
+3
View File
@@ -0,0 +1,3 @@
#!/bin/bash
/mnt/docker-persistent-data/recreate-containers.sh -q "passbolt passbolt_db"
+6
View File
@@ -0,0 +1,6 @@
#!/bin/bash
pushd ~/docker
docker-compose pull
docker-compose -p app up -d
docker system prune -f
popd