Archived
beatzaplentyandClaude Sonnet 4.6
f85c65870f
Consolidates nixos, docker, raspi, and debian-configuration into a single infrastructure-as-code repo. Includes: - ansible/: full inventory + proxmox-hardening, freeipa, and raspberrypi roles (converted from debian-configuration bash scripts) - terraform/: Proxmox VMs, Dynu DNS, Pi-hole (decommissioned stub), Docker container catalog — migrated from docker/infrastructure/terraform/ - stacks/docker/, stacks/raspi/, nixos/: placeholder READMEs pending git subtree population (see implementation plan) - docs/: internal MkDocs site with architecture, network topology, runbooks, and drift-detection guide; external sanitized site - scripts/: drift-detect.sh, docs-build.sh, install-hooks.sh, check-secrets.sh - CI: secret-scan (push/PR), drift-detect (daily), docs-build (on change) - Pi-hole removed throughout — DNS is FreeIPA, DHCP is router See docs/internal/implementation-plan.md for the phased rollout after pushing to Gitea. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UvNjoxTWEDkhXsd1Dq2ETP
614 lines
33 KiB
Terraform
614 lines
33 KiB
Terraform
locals {
|
|
docker_containers = {
|
|
"authelia" = {
|
|
terraform_resource = "docker_container.authelia"
|
|
compose_project = "core"
|
|
compose_service = "authelia"
|
|
compose_file = "core/authelia/docker-compose.yml"
|
|
container_name = "authelia"
|
|
image = "authelia/authelia"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = ["bind:/home/nixos/docker/core/authelia->/config"]
|
|
published_ports = []
|
|
build_context = "/home/nixos/docker/core/authelia"
|
|
build_dockerfile = "Dockerfile"
|
|
useful_labels = {
|
|
"traefik.enable" = "true"
|
|
"traefik.http.middlewares.authelia.forwardauth.address" = "http://authelia:9091/api/verify?rd=https://auth.lan.ddnsgeek.com/"
|
|
"traefik.http.middlewares.authelia.forwardauth.authResponseHeaders" = "Remote-User,Remote-Groups"
|
|
"traefik.http.middlewares.authelia.forwardauth.maxResponseBodySize" = "2097152"
|
|
"traefik.http.middlewares.authelia.forwardauth.trustForwardHeader" = "true"
|
|
"traefik.http.routers.authelia.entrypoints" = "websecure"
|
|
"traefik.http.routers.authelia.rule" = "Host(`auth.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.authelia.tls" = "true"
|
|
"traefik.http.routers.authelia.tls.certresolver" = "myresolver"
|
|
}
|
|
}
|
|
"crowdsec" = {
|
|
terraform_resource = "docker_container.crowdsec"
|
|
compose_project = "core"
|
|
compose_service = "crowdsec"
|
|
compose_file = "core/crowdsec/docker-compose.yml"
|
|
container_name = "crowdsec"
|
|
image = "core-crowdsec"
|
|
image_source = "compose_build_inferred"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = ["bind:/home/nixos/docker/core/crowdsec/logs->/logs:ro", "bind:/home/nixos/docker/core/crowdsec/data->/var/lib/crowdsec/data", "bind:/home/nixos/docker/core/crowdsec/config->/etc/crowdsec"]
|
|
published_ports = []
|
|
build_context = "/home/nixos/docker/core/crowdsec"
|
|
build_dockerfile = "Dockerfile"
|
|
useful_labels = {}
|
|
}
|
|
"docker-socket-proxy" = {
|
|
terraform_resource = "docker_container.docker_socket_proxy"
|
|
compose_project = "core"
|
|
compose_service = "docker-socket-proxy"
|
|
compose_file = "monitoring/docker-socket-proxy/docker-compose.yml"
|
|
container_name = "docker-socket-proxy"
|
|
image = "tecnativa/docker-socket-proxy:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor", "traefik"]
|
|
mounts = ["bind:/var/run/docker.sock->/var/run/docker.sock:ro"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"docker-update-exporter" = {
|
|
terraform_resource = "docker_container.docker_update_exporter"
|
|
compose_project = "core"
|
|
compose_service = "docker-update-exporter"
|
|
compose_file = "monitoring/docker-exporter/docker-compose.yml"
|
|
container_name = "docker-update-exporter"
|
|
image = "core-docker-update-exporter"
|
|
image_source = "compose_build_inferred"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor"]
|
|
mounts = ["bind:/root/.docker/config.json->/root/.docker/config.json:ro", "bind:/home/nixos/docker/monitoring/docker-exporter/data->/data", "bind:/home/nixos/docker->/compose:ro"]
|
|
published_ports = []
|
|
build_context = "/home/nixos/docker/monitoring/docker-exporter"
|
|
build_dockerfile = "Dockerfile"
|
|
useful_labels = {}
|
|
}
|
|
"error-pages" = {
|
|
terraform_resource = "docker_container.error_pages"
|
|
compose_project = "core"
|
|
compose_service = "error-pages"
|
|
compose_file = "core/error-pages/docker-compose.yml"
|
|
container_name = "error-pages"
|
|
image = "tarampampam/error-pages:3"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = []
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.enable" = "true"
|
|
"traefik.http.middlewares.error-pages-middleware.errors.query" = "/{status}.html"
|
|
"traefik.http.middlewares.error-pages-middleware.errors.service" = "error-pages-service"
|
|
"traefik.http.middlewares.error-pages-middleware.errors.status" = "400-599"
|
|
"traefik.http.routers.error-pages-router.entrypoints" = "web"
|
|
"traefik.http.routers.error-pages-router.middlewares" = "error-pages-middleware"
|
|
"traefik.http.routers.error-pages-router.rule" = "HostRegexp(`{host:.+}`)"
|
|
"traefik.http.services.error-pages-service.loadbalancer.server.port" = "8080"
|
|
}
|
|
}
|
|
"gitea" = {
|
|
terraform_resource = "docker_container.gitea"
|
|
compose_project = "core"
|
|
compose_service = "gitea"
|
|
compose_file = "apps/gitea/docker-compose.yml"
|
|
container_name = "gitea"
|
|
image = "gitea/gitea:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = ["bind:/home/nixos/docker/apps/gitea/data->/data"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.gitea.entrypoints" = "websecure"
|
|
"traefik.http.routers.gitea.rule" = "Host(`gitea.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.gitea.tls" = "true"
|
|
"traefik.http.routers.gitea.tls.certresolver" = "myresolver"
|
|
"traefik.http.services.gitea.loadbalancer.server.port" = "3000"
|
|
}
|
|
}
|
|
"gotify" = {
|
|
terraform_resource = "docker_container.gotify"
|
|
compose_project = "core"
|
|
compose_service = "gotify"
|
|
compose_file = "monitoring/gotify/docker-compose.yml"
|
|
container_name = "gotify"
|
|
image = "gotify/server:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/gotify/data->/app/data"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.gotify.entrypoints" = "websecure"
|
|
"traefik.http.routers.gotify.rule" = "Host(`gotify.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.gotify.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.gotify.tls.options" = "mtls-private-admin@file"
|
|
"traefik.http.services.gotify.loadbalancer.server.port" = "80"
|
|
}
|
|
}
|
|
"grafana" = {
|
|
terraform_resource = "docker_container.grafana"
|
|
compose_project = "core"
|
|
compose_service = "grafana"
|
|
compose_file = "monitoring/grafana/docker-compose.yml"
|
|
container_name = "grafana"
|
|
image = "grafana/grafana:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/grafana/data->/var/lib/grafana"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.grafana.entrypoints" = "websecure"
|
|
"traefik.http.routers.grafana.rule" = "Host(`grafana.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.grafana.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.grafana.tls.options" = "mtls-private-admin@file"
|
|
"traefik.http.services.grafana.loadbalancer.server.port" = "3000"
|
|
}
|
|
}
|
|
"gramps-redis" = {
|
|
terraform_resource = "docker_container.gramps_redis"
|
|
compose_project = "core"
|
|
compose_service = "gramps-redis"
|
|
compose_file = "apps/gramps/docker-compose.yml"
|
|
container_name = "gramps-redis"
|
|
image = "valkey/valkey:8-alpine"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["gramps"]
|
|
mounts = []
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"gramps-web" = {
|
|
terraform_resource = "docker_container.gramps_web"
|
|
compose_project = "core"
|
|
compose_service = "grampsweb"
|
|
compose_file = "apps/gramps/docker-compose.yml"
|
|
container_name = "gramps-web"
|
|
image = "ghcr.io/gramps-project/grampsweb:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["gramps", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/apps/gramps/data/users->/app/users", "bind:/home/nixos/docker/apps/gramps/data/index->/app/indexdir", "bind:/home/nixos/docker/apps/gramps/data/thumbnail_cache->/app/thumbnail_cache", "bind:/home/nixos/docker/apps/gramps/data/cache->/app/cache", "bind:/home/nixos/docker/apps/gramps/data/secret->/app/secret", "bind:/home/nixos/docker/apps/gramps/data/db->/root/.gramps/grampsdb", "bind:/home/nixos/docker/apps/gramps/data/media->/app/media", "bind:/home/nixos/docker/apps/gramps/data/tmp->/tmp"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.gramps.entrypoints" = "websecure"
|
|
"traefik.http.routers.gramps.rule" = "Host(`familytree.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.gramps.tls.certresolver" = "myresolver"
|
|
"traefik.http.services.gramps.loadbalancer.server.port" = "5000"
|
|
}
|
|
}
|
|
"gramps-web-celery" = {
|
|
terraform_resource = "docker_container.gramps_web_celery"
|
|
compose_project = "core"
|
|
compose_service = "grampsweb_celery"
|
|
compose_file = "apps/gramps/docker-compose.yml"
|
|
container_name = "gramps-web-celery"
|
|
image = "ghcr.io/gramps-project/grampsweb:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["gramps"]
|
|
mounts = ["bind:/home/nixos/docker/apps/gramps/data/users->/app/users", "bind:/home/nixos/docker/apps/gramps/data/index->/app/indexdir", "bind:/home/nixos/docker/apps/gramps/data/thumbnail_cache->/app/thumbnail_cache", "bind:/home/nixos/docker/apps/gramps/data/cache->/app/cache", "bind:/home/nixos/docker/apps/gramps/data/secret->/app/secret", "bind:/home/nixos/docker/apps/gramps/data/db->/root/.gramps/grampsdb", "bind:/home/nixos/docker/apps/gramps/data/media->/app/media", "bind:/home/nixos/docker/apps/gramps/data/tmp->/tmp"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"influxdb" = {
|
|
terraform_resource = "docker_container.influxdb"
|
|
compose_project = "core"
|
|
compose_service = "influxdb"
|
|
compose_file = "monitoring/influxdb/docker-compose.yml"
|
|
container_name = "influxdb"
|
|
image = "influxdb:2.7"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/influxdb->/var/lib/influxdb2"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.influxdb.entrypoints" = "websecure"
|
|
"traefik.http.routers.influxdb.middlewares" = "authelia"
|
|
"traefik.http.routers.influxdb.rule" = "Host(`influxdb.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.influxdb.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.influxdb.tls.options" = "mtls-private-admin@file"
|
|
"traefik.http.services.influxdb.loadbalancer.server.port" = "8086"
|
|
}
|
|
}
|
|
"monitor-kuma" = {
|
|
terraform_resource = "docker_container.monitor_kuma"
|
|
compose_project = "core"
|
|
compose_service = "monitor-kuma"
|
|
compose_file = "monitoring/uptime-kuma/docker-compose.yml"
|
|
container_name = "monitor-kuma"
|
|
image = "louislam/uptime-kuma:2.1.1"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["monitor", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/uptime-kuma/data->/app/data"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.monitor.entrypoints" = "websecure"
|
|
"traefik.http.routers.monitor.rule" = "Host(`monitor-kuma.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.monitor.tls" = "true"
|
|
"traefik.http.routers.monitor.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.monitor.tls.options" = "mtls-private-admin@file"
|
|
"traefik.http.services.monitor.loadbalancer.server.port" = "3001"
|
|
}
|
|
}
|
|
"mtls-bridge" = {
|
|
terraform_resource = "docker_container.mtls_bridge"
|
|
compose_project = "core"
|
|
compose_service = "mtls-bridge"
|
|
compose_file = "monitoring/mtls-bridge/docker-compose.yml"
|
|
container_name = "mtls-bridge"
|
|
image = "core-mtls-bridge"
|
|
image_source = "compose_build_inferred"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/core/traefik/certs->/certs:ro"]
|
|
published_ports = []
|
|
build_context = "/home/nixos/docker/monitoring/mtls-bridge"
|
|
build_dockerfile = "Dockerfile"
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.middlewares.mtls-bridge-auth.basicauth.users" = ""
|
|
"traefik.http.middlewares.mtls-bridge-cors.headers.accesscontrolallowcredentials" = "true"
|
|
"traefik.http.middlewares.mtls-bridge-cors.headers.accesscontrolallowheaders" = "authorization,content-type,x-grafana-action,x-grafana-device-id"
|
|
"traefik.http.middlewares.mtls-bridge-cors.headers.accesscontrolallowmethods" = "GET,POST,PUT,PATCH,DELETE,OPTIONS"
|
|
"traefik.http.middlewares.mtls-bridge-cors.headers.accesscontrolalloworiginlist" = "https://grafana.lan.ddnsgeek.com"
|
|
"traefik.http.middlewares.mtls-bridge-cors.headers.addvaryheader" = "true"
|
|
"traefik.http.routers.mtls-bridge-preflight.entrypoints" = "websecure"
|
|
"traefik.http.routers.mtls-bridge-preflight.middlewares" = "mtls-bridge-cors"
|
|
"traefik.http.routers.mtls-bridge-preflight.priority" = "100"
|
|
"traefik.http.routers.mtls-bridge-preflight.rule" = "Host(`mtls-bridge.lan.ddnsgeek.com`) && Method(`OPTIONS`)"
|
|
"traefik.http.routers.mtls-bridge-preflight.service" = "mtls-bridge"
|
|
"traefik.http.routers.mtls-bridge-preflight.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.mtls-bridge.entrypoints" = "websecure"
|
|
"traefik.http.routers.mtls-bridge.middlewares" = "mtls-bridge-auth,mtls-bridge-cors"
|
|
"traefik.http.routers.mtls-bridge.rule" = "Host(`mtls-bridge.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.mtls-bridge.tls.certresolver" = "myresolver"
|
|
"traefik.http.services.mtls-bridge.loadbalancer.server.port" = "8080"
|
|
}
|
|
}
|
|
"nextcloud-db" = {
|
|
terraform_resource = "docker_container.nextcloud_db"
|
|
compose_project = "core"
|
|
compose_service = "nextcloud-db"
|
|
compose_file = "apps/nextcloud/docker-compose.yml"
|
|
container_name = "nextcloud-db"
|
|
image = "mariadb:11.4"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["nextcloud"]
|
|
mounts = ["bind:/home/nixos/docker/apps/nextcloud/database->/var/lib/mysql"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"nextcloud-redis" = {
|
|
terraform_resource = "docker_container.nextcloud_redis"
|
|
compose_project = "core"
|
|
compose_service = "nextcloud-redis"
|
|
compose_file = "apps/nextcloud/docker-compose.yml"
|
|
container_name = "nextcloud-redis"
|
|
image = "redis"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["nextcloud"]
|
|
mounts = ["bind:/home/nixos/docker/apps/nextcloud/data/redis->/data"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"nextcloud-webapp" = {
|
|
terraform_resource = "docker_container.nextcloud_webapp"
|
|
compose_project = "core"
|
|
compose_service = "nextcloud-webapp"
|
|
compose_file = "apps/nextcloud/docker-compose.yml"
|
|
container_name = "nextcloud-webapp"
|
|
image = "core-nextcloud-webapp"
|
|
image_source = "compose_build_inferred"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["nextcloud", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/apps/nextcloud/data->/var/www/html/data", "bind:/home/nixos/docker/apps/nextcloud/config->/var/www/html/config", "tmpfs:->/tmp:exec"]
|
|
published_ports = []
|
|
build_context = "/home/nixos/docker/apps/nextcloud"
|
|
build_dockerfile = "Dockerfile"
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.middlewares.nextcloud-dav.replacepathregex.regex" = "^/.well-known/ca(l|rd)dav"
|
|
"traefik.http.middlewares.nextcloud-dav.replacepathregex.replacement" = "/remote.php/dav/"
|
|
"traefik.http.middlewares.nextcloud-nodeinfo.replacepathregex.regex" = "^/.well-known/nodeinfo"
|
|
"traefik.http.middlewares.nextcloud-nodeinfo.replacepathregex.replacement" = "/nextcloud/index.php/.well-known/nodeinfo/"
|
|
"traefik.http.middlewares.nextcloud-webfinger.redirectregex.permanent" = "true"
|
|
"traefik.http.middlewares.nextcloud-webfinger.redirectregex.regex" = "https://(.*)/.well-known/webfinger"
|
|
"traefik.http.middlewares.nextcloud-webfinger.redirectregex.replacement" = "https://$${1}/nextcloud/index.php/.well-known/webfinger"
|
|
"traefik.http.routers.nextcloud.entrypoints" = "websecure"
|
|
"traefik.http.routers.nextcloud.middlewares" = "nextcloud-dav, nextcloud-webfinger"
|
|
"traefik.http.routers.nextcloud.rule" = "Host(`nextcloud.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.nextcloud.tls.certresolver" = "myresolver"
|
|
}
|
|
}
|
|
"node-exporter" = {
|
|
terraform_resource = "docker_container.node_exporter"
|
|
compose_project = "core"
|
|
compose_service = "node-exporter"
|
|
compose_file = "monitoring/node-exporter/docker-compose.yml"
|
|
container_name = "node-exporter"
|
|
image = "prom/node-exporter:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor"]
|
|
mounts = ["bind:/proc->/host/proc:ro", "bind:/sys->/host/sys:ro", "bind:/->/rootfs:ro"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"node-red" = {
|
|
terraform_resource = "docker_container.node_red"
|
|
compose_project = "core"
|
|
compose_service = "node-red"
|
|
compose_file = "monitoring/node-red/docker-compose.yml"
|
|
container_name = "node-red"
|
|
image = "core-node-red"
|
|
image_source = "compose_build_inferred"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/node-red/data->/data", "bind:/home/nixos/docker->/compose/docker:ro", "bind:/home/nixos/raspi->/compose/raspi:ro"]
|
|
published_ports = []
|
|
build_context = "/home/nixos/docker/monitoring/node-red"
|
|
build_dockerfile = "Dockerfile"
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.node-red.entrypoints" = "websecure"
|
|
"traefik.http.routers.node-red.middlewares" = "authelia"
|
|
"traefik.http.routers.node-red.rule" = "Host(`node-red.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.node-red.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.node-red.tls.options" = "mtls-private-admin@file"
|
|
"traefik.http.services.node-red.loadbalancer.server.port" = "1880"
|
|
}
|
|
}
|
|
"passbolt-db" = {
|
|
terraform_resource = "docker_container.passbolt_db"
|
|
compose_project = "core"
|
|
compose_service = "passbolt-db"
|
|
compose_file = "apps/passbolt/docker-compose.yml"
|
|
container_name = "passbolt-db"
|
|
image = "mariadb:12"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["passbolt"]
|
|
mounts = ["bind:/home/nixos/docker/apps/passbolt/data/database->/var/lib/mysql"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"passbolt-webapp" = {
|
|
terraform_resource = "docker_container.passbolt_webapp"
|
|
compose_project = "core"
|
|
compose_service = "passbolt-webapp"
|
|
compose_file = "apps/passbolt/docker-compose.yml"
|
|
container_name = "passbolt-webapp"
|
|
image = "passbolt/passbolt:latest-ce"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["passbolt", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/apps/passbolt/data/gpg->/etc/passbolt/gpg", "bind:/home/nixos/docker/apps/passbolt/data/jwt->/etc/passbolt/jwt"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.passbolt.entrypoints" = "websecure"
|
|
"traefik.http.routers.passbolt.rule" = "Host(`passbolt.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.passbolt.tls.certresolver" = "myresolver"
|
|
}
|
|
}
|
|
"pihole-exporter" = {
|
|
terraform_resource = "docker_container.pihole_exporter"
|
|
compose_project = "core"
|
|
compose_service = "pihole-exporter"
|
|
compose_file = "monitoring/pihole-exporter/docker-compose.yml"
|
|
container_name = "pihole-exporter"
|
|
image = "ekofr/pihole-exporter:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor"]
|
|
mounts = []
|
|
published_ports = ["9617:9617/tcp"]
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"portainer" = {
|
|
terraform_resource = "docker_container.portainer"
|
|
compose_project = "core"
|
|
compose_service = "portainer"
|
|
compose_file = "monitoring/portainer/docker-compose.yml"
|
|
container_name = "portainer"
|
|
image = "portainer/portainer-ce:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/portainer/data->/data"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.portainer.entrypoints" = "websecure"
|
|
"traefik.http.routers.portainer.rule" = "Host(`portainer.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.portainer.tls" = "true"
|
|
"traefik.http.routers.portainer.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.portainer.tls.options" = "mtls-private-admin@file"
|
|
"traefik.http.services.portainer.loadbalancer.server.port" = "9000"
|
|
}
|
|
}
|
|
"prometheus" = {
|
|
terraform_resource = "docker_container.prometheus"
|
|
compose_project = "core"
|
|
compose_service = "prometheus"
|
|
compose_file = "monitoring/prometheus/docker-compose.yml"
|
|
container_name = "prometheus"
|
|
image = "prom/prometheus:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor", "traefik"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/prometheus/prometheus.yml->/etc/prometheus/prometheus.yml:ro", "bind:/home/nixos/docker/monitoring/prometheus/data->/prometheus", "bind:/home/nixos/docker/monitoring/prometheus/rules->/etc/prometheus/rules:ro", "bind:/home/nixos/docker/secrets/prometheus_kuma_basic_auth_password.txt->/run/secrets/prometheus_kuma_basic_auth_password:ro"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.prometheus.entrypoints" = "websecure"
|
|
"traefik.http.routers.prometheus.middlewares" = "authelia"
|
|
"traefik.http.routers.prometheus.rule" = "Host(`prometheus.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.prometheus.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.prometheus.tls.options" = "mtls-private-admin@file"
|
|
"traefik.http.services.prometheus.loadbalancer.server.port" = "9090"
|
|
}
|
|
}
|
|
"searxng-webapp" = {
|
|
terraform_resource = "docker_container.searxng-webapp"
|
|
compose_project = "core"
|
|
compose_service = "searxng-webapp"
|
|
compose_file = "apps/searxng/docker-compose.yml"
|
|
container_name = "searxng-webapp"
|
|
image = "searxng/searxng"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = []
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.searxng.entrypoints" = "websecure"
|
|
"traefik.http.routers.searxng.rule" = "Host(`searxng.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.searxng.tls.certresolver" = "myresolver"
|
|
"traefik.http.services.searxng.loadbalancer.server.port" = "8080"
|
|
}
|
|
}
|
|
"telegraf" = {
|
|
terraform_resource = "docker_container.telegraf"
|
|
compose_project = "core"
|
|
compose_service = "telegraf"
|
|
compose_file = "monitoring/telegraf/docker-compose.yml"
|
|
container_name = "telegraf"
|
|
image = "telegraf:latest"
|
|
image_source = "declared_image"
|
|
restart_policy = "unless-stopped"
|
|
network_mode = null
|
|
networks = ["monitor"]
|
|
mounts = ["bind:/home/nixos/docker/monitoring/telegraf/telegraf.conf->/etc/telegraf/telegraf.conf:ro", "bind:/home/nixos/docker/monitoring/node-red/data->/var/log/node-red:ro"]
|
|
published_ports = []
|
|
build_context = null
|
|
build_dockerfile = null
|
|
useful_labels = {}
|
|
}
|
|
"traefik" = {
|
|
terraform_resource = "docker_container.traefik"
|
|
compose_project = "core"
|
|
compose_service = "traefik"
|
|
compose_file = "core/traefik/docker-compose.yml"
|
|
container_name = "traefik"
|
|
image = "traefik:3"
|
|
image_source = "declared_image"
|
|
restart_policy = "always"
|
|
network_mode = null
|
|
networks = ["traefik"]
|
|
mounts = ["bind:/home/nixos/docker/core/traefik/data/letsencrypt->/letsencrypt", "bind:/home/nixos/docker/core/traefik/data/logs->/logs", "bind:/home/nixos/docker/core/traefik/certs->/etc/traefik/certs:ro", "bind:/home/nixos/docker/core/traefik/dynamic.yml->/etc/traefik/dynamic.yml:ro", "bind:/home/nixos/docker/core/traefik/traefik.yml->/etc/traefik/traefik.yml:ro", "bind:/home/nixos/docker/core/traefik/data/plugins->/plugins-storage"]
|
|
published_ports = ["80:80/tcp", "443:443/tcp"]
|
|
build_context = "/home/nixos/docker/core"
|
|
build_dockerfile = "Dockerfile"
|
|
useful_labels = {
|
|
"traefik.docker.network" = "core_traefik"
|
|
"traefik.enable" = "true"
|
|
"traefik.http.routers.traefik.entrypoints" = "websecure"
|
|
"traefik.http.routers.traefik.middlewares" = "authelia"
|
|
"traefik.http.routers.traefik.observability.tracing" = "true"
|
|
"traefik.http.routers.traefik.rule" = "Host(`traefik.lan.ddnsgeek.com`)"
|
|
"traefik.http.routers.traefik.service" = "api@internal"
|
|
"traefik.http.routers.traefik.tls.certresolver" = "myresolver"
|
|
"traefik.http.routers.traefik.tls.options" = "mtls-private-admin@file"
|
|
}
|
|
}
|
|
}
|
|
}
|