0/docker-compose.networks.yml

@@ -1,23 +0,0 @@
-version: '3.8'
-
-networks:
-  dmz:
-    name: dmz
-  blog-frontend:
-    name: blog-frontend
-  blog-backend:
-    name: blog-backend
-  glances-frontend:
-    name: glances-frontend
-  portainer-frontend:
-    name: portainer-frontend
-  selfoss-frontend:
-    name: selfoss-frontend  
-  shaarli-frontend:
-    name: shaarli-frontend
-  source-frontend:
-    name: source-frontend  
-  wallabag-frontend:
-    name: wallabag-frontend
-  wwww-frontend:
-    name: wwww-frontend

baikal/docker-compose.baikal.yml

@@ -0,0 +1,28 @@
+version: '3.8'
+
+services:
+  baikal:
+    container_name: baikal
+    image: ckulka/baikal:nginx
+    networks:
+      - baikal-frontend    
+    expose:
+      - 80
+    restart: unless-stopped
+    volumes:
+      - baikal_data:/var/www/baikal/Specific:rw
+      - baikal_config:/var/www/baikal/config:rw
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.baikal.rule=Host(`${HOST_BAIKAL}.${DOMAIN}`)
+      - traefik.http.routers.baikal.entrypoints=https
+      - traefik.http.routers.baikal.tls=true
+      - traefik.docker.network=baikal-frontend
+
+networks:
+  baikal-frontend:
+     name: baikal-frontend
+
+volumes:
+  baikal_config: 
+  baikal_data: 

deluge/docker-compose.deluge.yml

@@ -0,0 +1,55 @@
+version: '3.8'
+
+services:
+  deluge:
+    container_name: deluge
+    image: linuxserver/deluge
+    restart: unless-stopped
+    networks:
+      - deluge-frontend
+    environment:
+      DELUGE_LOGLEVEL: info
+      TZ: ${TZ}    
+    expose:
+      - 8112
+    ports:
+      - ${DELUGE_TORRENT_PORT}:${DELUGE_TORRENT_PORT}/tcp
+      - ${DELUGE_TORRENT_PORT}:${DELUGE_TORRENT_PORT}/udp
+    volumes:
+      - deluge_config:/config:rw
+      - deluge_downloads:/downloads:rw      
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.deluge.rule=Host(`${HOST_WWW}.${DOMAIN}`) && PathPrefix(`${PATH_DELUGE}`) 
+      - traefik.http.routers.deluge.entrypoints=https
+      - traefik.http.routers.deluge.tls=true
+      - traefik.http.services.deluge.loadbalancer.server.port=8112
+      - traefik.http.routers.deluge.middlewares=delugeHeader,sameOriginHeader,delugeRedir,delugePStrip
+      - traefik.http.middlewares.delugeHeader.headers.customrequestheaders.X-Deluge-Base=${PATH_DELUGE}/
+      - traefik.http.middlewares.sameOriginHeader.headers.customrequestheaders.X-Frame-Options=SAMEORIGIN
+      - traefik.http.middlewares.delugePStrip.stripprefix.prefixes=${PATH_DELUGE}
+      - traefik.http.middlewares.delugeRedir.redirectregex.regex=^(.*)${PATH_DELUGE}$$
+      - traefik.http.middlewares.delugeRedir.redirectregex.replacement=$${1}${PATH_DELUGE}/
+      - traefik.docker.network=deluge-frontend
+
+  torrent:
+    container_name: torrent
+    image: kianby/nginx-streaming
+    restart: unless-stopped
+    networks:
+      - dmz
+    volumes:
+      - deluge_downloads:/downloads:ro
+    expose:
+      - 80
+    # shortcut to bypass traefik limitation
+    ports:
+      - ${DOWNLOAD_HTTP_PORT}:80
+
+networks:
+  deluge-frontend:
+    name: deluge-frontend
+
+volumes:
+  deluge_config:
+  deluge_downloads:

dokuwiki/docker-compose.dokuwiki.yml

@@ -0,0 +1,26 @@
+version: '3.8'
+
+services:
+  dokuwiki:
+    image: linuxserver/dokuwiki
+    container_name: dokuwiki
+    restart: unless-stopped
+    expose:
+      - 80
+    environment:
+      - TZ=${TZ}
+      - APP_URL=/ #optional      
+    volumes:
+      - ${ROOT_INSTALL}/data/dokuwiki:/config
+    networks:
+      - dokuwiki-frontend    
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.dokuwiki.rule=Host(`${HOST_DOKUWIKI}.${DOMAIN}`)
+      - traefik.http.routers.dokuwiki.entrypoints=https
+      - traefik.http.routers.dokuwiki.tls=true
+      - traefik.docker.network=dokuwiki-frontend
+
+networks:
+  dokuwiki-frontend:
+    name: dokuwiki-frontend

netdata/docker-compose.netdata.yml

@@ -0,0 +1,57 @@
+version: '3.8'
+services:
+  netdata:
+    image: netdata/netdata
+    container_name: netdata
+    hostname: ${HOST_NETDATA}.${DOMAIN}
+    expose:
+      - 19999
+    restart: unless-stopped
+    cap_add:
+      - SYS_PTRACE
+    security_opt:
+      - apparmor:unconfined
+    environment:
+      - DOCKER_HOST=docker-proxy:2375      
+    volumes:
+      - netdataconfig:/etc/netdata
+      - netdatalib:/var/lib/netdata
+      - netdatacache:/var/cache/netdata
+      - /etc/passwd:/host/etc/passwd:ro
+      - /etc/group:/host/etc/group:ro
+      - /proc:/host/proc:ro
+      - /sys:/host/sys:ro
+      - /etc/os-release:/host/etc/os-release:ro
+    networks:
+      - netdata-frontend
+      - netdata-backend       
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.netdata.rule=Host(`${HOST_NETDATA}.${DOMAIN}`)
+      - traefik.http.routers.netdata.entrypoints=https
+      - traefik.http.routers.netdata.tls=true
+      - traefik.http.routers.netdata.middlewares=auth
+      - traefik.http.middlewares.auth.basicauth.users=${BASIC_AUTH}
+      - traefik.docker.network=netdata-frontend
+    healthcheck:
+      disable: true
+  docker-proxy:
+    image: tecnativa/docker-socket-proxy
+    container_name: docker-proxy
+    volumes:
+     - /var/run/docker.sock:/var/run/docker.sock:ro
+    environment:
+      - CONTAINERS=1
+    networks:
+      - netdata-backend 
+
+networks:
+  netdata-frontend:
+    name: netdata-frontend
+  netdata-backend:
+    name: netdata-backend
+
+volumes:
+  netdataconfig:
+  netdatalib:
+  netdatacache:

photo/docker-compose.lychee.yml

@@ -0,0 +1,35 @@
+version: '3.8'
+
+services:
+  lychee:
+    container_name: lychee
+    environment:
+      - PHP_TZ=${TZ}
+      - TIMEZONE=${TZ}        
+    image: lycheeorg/lychee
+    networks:
+      - photo-frontend     
+    expose:
+      - 80
+    restart: unless-stopped
+    volumes:
+      - lychee_conf:/conf
+      - lychee_uploads:/uploads
+      - lychee_sym:/sym 
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.photo.rule=Host(`${HOST_LYCHEE}.${DOMAIN}`)
+      - traefik.http.routers.photo.entrypoints=https
+      - traefik.http.routers.photo.tls=true
+      - traefik.docker.network=photo-frontend
+
+networks:
+  photo-frontend:
+    name: photo-frontend
+  photo-backend:
+    name: photo-backend
+
+volumes:
+  lychee_conf:
+  lychee_uploads:
+  lychee_sym:

photo/docker-compose.photonix.yml

@@ -0,0 +1,71 @@
+version: '3.8'
+
+services:
+  postgres:
+    container_name: photonix-postgres
+    image: postgres:11.1-alpine
+    environment:
+      POSTGRES_DB: photonix
+      POSTGRES_PASSWORD: password
+    volumes:
+      - photonix_db:/var/lib/postgresql/data
+    networks:
+      - photo-backend 
+
+  redis:
+    container_name: photonix-redis
+    image: redis:6.2.2
+    networks:
+      - photo-backend 
+
+  photonix:
+    container_name: photonix
+    image: photonixapp/photonix:latest
+    expose:
+      - 80      
+    environment:
+      ENV: prd
+      POSTGRES_HOST: postgres
+      POSTGRES_DB: photonix
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: password
+      REDIS_HOST: redis
+      ALLOWED_HOSTS: '*'
+      # More configuration options here: https://photonix.org/docs/configuration/
+    volumes:
+#      - ./data/photos:/data/photos
+      - photonix_raw_photos:/data/raw-photos-processed
+      - photonix_cache:/data/cache
+      - photonix_models:/data/models
+      - type: bind
+        source: ${ROOT_INSTALL}/data/seafile-fuse
+        target: /seahub
+        bind:
+          propagation: rslave
+    privileged: true
+    cap_add:
+      - SYS_ADMIN       
+    depends_on:
+      - postgres
+      - redis
+    networks:
+      - photo-backend 
+      - photo-frontend
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.photo.rule=Host(`${HOST_PHOTONIX}.${DOMAIN}`)
+      - traefik.http.routers.photo.entrypoints=https
+      - traefik.http.routers.photo.tls=true
+      - traefik.docker.network=photo-frontend
+
+networks:
+  photo-frontend:
+    name: photo-frontend
+  photo-backend:
+    name: photo-backend
+
+volumes:
+  photonix_raw_photos:
+  photonix_cache:
+  photonix_models: 
+  photonix_db:

photo/docker-compose.photoview.yml

@@ -0,0 +1,77 @@
+version: '3.8'
+
+services:
+  photoview-db:
+    container_name: photoview-db
+    image: mariadb:10.5
+    restart: unless-stopped
+    environment:
+      - MYSQL_DATABASE=photoview
+      - MYSQL_USER=photoview
+      - MYSQL_PASSWORD=photosecret
+      - MYSQL_RANDOM_ROOT_PASSWORD=1
+    volumes:
+      - photoview_db_data:/var/lib/mysql
+    networks:
+      - photo-backend 
+
+  photoview:
+    container_name: photoview
+    image: viktorstrate/photoview:2
+    restart: unless-stopped
+    expose:
+      - 80
+    depends_on:
+      - photoview-db
+    networks:
+      - photo-backend
+      - photo-frontend 
+    environment:
+      - PHOTOVIEW_DATABASE_DRIVER=mysql
+      - PHOTOVIEW_MYSQL_URL=photoview:photosecret@tcp(photoview-db)/photoview
+      - PHOTOVIEW_LISTEN_IP=photoview
+      - PHOTOVIEW_LISTEN_PORT=80
+      - PHOTOVIEW_MEDIA_CACHE=/app/cache
+      
+      # Optional: If you are using Samba/CIFS-Share and experience problems with "directory not found"
+      # Enable the following Godebug
+      # - GODEBUG=asyncpreemptoff=1
+      
+      
+      # Optional: To enable map related features, you need to create a mapbox token.
+      # A token can be generated for free here https://account.mapbox.com/access-tokens/
+      # It's a good idea to limit the scope of the token to your own domain, to prevent others from using it.
+      - MAPBOX_TOKEN=${MAPBOX_TOKEN}
+
+    volumes:
+      - photoview_api_cache:/app/cache
+
+      # Change This: to the directory where your photos are located on your server.
+      # If the photos are located at `/home/user/photos`, then change this value
+      # to the following: `/home/user/photos:/photos:ro`.
+      # You can mount multiple paths, if your photos are spread across multiple directories.
+      #- ./photos_path:/photos:ro
+      - type: bind
+        source: ${ROOT_INSTALL}/data/seafile-fuse
+        target: /photos        
+        bind:
+          propagation: rslave
+    privileged: true
+    cap_add:
+      - SYS_ADMIN 
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.photo.rule=Host(`${HOST_PHOTOVIEW}.${DOMAIN}`)
+      - traefik.http.routers.photo.entrypoints=https
+      - traefik.http.routers.photo.tls=true
+      - traefik.docker.network=photo-frontend
+
+networks:
+  photo-frontend:
+    name: photo-frontend
+  photo-backend:
+    name: photo-backend
+
+volumes:
+  photoview_db_data:
+  photoview_api_cache:

photo/docker-compose.pigallery.yml

@@ -0,0 +1,45 @@
+version: '3.8'
+
+services:
+  pigallery2:
+    container_name: pigallery2
+    environment:
+      NODE_ENV: production
+    image: bpatrik/pigallery2:1.9.0-alpine
+    networks:
+      - photo-frontend     
+    expose:
+      - 80
+    restart: unless-stopped
+    volumes:
+    #/app/data/images
+    - pigallery_config:/app/data/config:rw
+    - pigallerydb_data:/app/data/db:rw
+    - pigallery_tmp:/app/data/tmp:rw
+    - type: bind
+      source: ${ROOT_INSTALL}/data/seafile-fuse
+      target: /seahub
+      bind:
+        propagation: rslave
+    privileged: true
+    cap_add:
+      - SYS_ADMIN
+    healthcheck:
+      disable: true    
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.photo.rule=Host(`${HOST_PIGALLERY}.${DOMAIN}`)
+      - traefik.http.routers.photo.entrypoints=https
+      - traefik.http.routers.photo.tls=true
+      - traefik.docker.network=photo-frontend
+
+networks:
+  photo-frontend:
+    name: photo-frontend
+  photo-backend:
+    name: photo-backend
+
+volumes:
+  pigallerydb_data:
+  pigallery_tmp:
+  pigallery_config:

posteio/docker-compose.posteio.yml

@@ -0,0 +1,32 @@
+version: '3.8'
+
+services:
+  poste-io:
+    container_name: poste-io
+    image: analogic/poste.io
+    volumes:
+      - ${ROOT_INSTALL}/data/poste.io:/data
+    environment:
+      - TZ=${TZ}
+      - HTTPS=OFF
+    restart: unless-stopped
+    ports:
+      - "465:465"
+      - "993:993"
+      - "25:25"
+    expose:
+      - 80
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.posteio.rule=Host(`${HOST_MAIL}.${DOMAIN}`)
+      - traefik.http.routers.posteio.entrypoints=https
+      - traefik.http.routers.posteio.tls=true
+      - traefik.docker.network=posteio-frontend
+    networks:
+      - posteio-frontend
+    healthcheck:
+      disable: true       
+
+networks:
+  posteio-frontend:
+    name: portainer-frontend

seafile/docker-compose.seafile.yml

@@ -0,0 +1,68 @@
+version: '3.8'
+
+services:
+  seafile-db:
+    container_name: seafile-db
+    environment:
+      MYSQL_LOG_CONSOLE: "true"
+      MYSQL_ROOT_PASSWORD: ${SEAFILE_DB_ROOT_PASSWORD}
+    image: mariadb:10.1
+    networks:
+      - seafile-backend
+    volumes:
+      - seafile_db:/var/lib/mysql:rw
+    restart: unless-stopped
+  seafile-memcached:
+    container_name: seafile-memcached
+    entrypoint: memcached -m 256
+    image: memcached:1.5.6
+    networks:
+      - seafile-backend
+    restart: unless-stopped
+  seafile:
+    container_name: seafile
+    depends_on:
+      - seafile-db
+      - seafile-memcached
+    environment:
+      DB_HOST: seafile-db
+      DB_ROOT_PASSWD: ${SEAFILE_DB_ROOT_PASSWORD}
+      SEAFILE_ADMIN_EMAIL: ${SEAFILE_ADMIN_EMAIL}
+      SEAFILE_ADMIN_PASSWORD: ${SEAFILE_ADMIN_PASSWORD}
+      SEAFILE_SERVER_HOSTNAME: ${HOST_SEAFILE}.${DOMAIN}
+      SEAFILE_SERVER_LETSENCRYPT: "false"
+      TIME_ZONE: ${TZ}
+    image: seafileltd/seafile-mc:latest
+    networks:
+      - seafile-backend
+      - seafile-frontend
+    restart: unless-stopped
+    expose:
+      - 80
+    volumes:
+      - ${ROOT_INSTALL}/selfhosting/seafile/start.py:/scripts/start.py
+      - seafile_data:/shared:rw
+      - type: bind
+        source: ${ROOT_INSTALL}/data/seafile-fuse
+        target: /seafile-fuse
+        bind:
+          propagation: rshared
+    privileged: true
+    cap_add:
+      - SYS_ADMIN     
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.seafile.rule=Host(`${HOST_SEAFILE}.${DOMAIN}`)
+      - traefik.http.routers.seafile.entrypoints=https
+      - traefik.http.routers.seafile.tls=true
+      - traefik.docker.network=seafile-frontend
+
+networks:
+  seafile-frontend:
+    name: seafile-frontend
+  seafile-backend:
+    name: seafile-backend
+
+volumes:
+  seafile_db:
+  seafile_data:

seafile/start.py

@@ -0,0 +1,88 @@
+#!/usr/bin/env python3
+#coding: UTF-8
+
+"""
+Starts the seafile/seahub server and watches the controller process. It is
+the entrypoint command of the docker container.
+"""
+
+import json
+import os
+from os.path import abspath, basename, exists, dirname, join, isdir
+import shutil
+import sys
+import time
+
+from utils import (
+    call, get_conf, get_install_dir, get_script, get_command_output,
+    render_template, wait_for_mysql, setup_logging
+)
+from upgrade import check_upgrade
+from bootstrap import init_seafile_server, is_https, init_letsencrypt, generate_local_nginx_conf
+
+
+shared_seafiledir = '/shared/seafile'
+ssl_dir = '/shared/ssl'
+generated_dir = '/bootstrap/generated'
+installdir = get_install_dir()
+topdir = dirname(installdir)
+
+def watch_controller():
+    maxretry = 4
+    retry = 0
+    while retry < maxretry:
+        controller_pid = get_command_output('ps aux | grep seafile-controller | grep -v grep || true').strip()
+        garbage_collector_pid = get_command_output('ps aux | grep /scripts/gc.sh | grep -v grep || true').strip()
+        if not controller_pid and not garbage_collector_pid:
+            retry += 1
+        else:
+            retry = 0
+        time.sleep(5)
+    print('seafile controller exited unexpectedly.')
+    sys.exit(1)
+
+def main():
+    if not exists(shared_seafiledir):
+        os.mkdir(shared_seafiledir)
+    if not exists(generated_dir):
+        os.makedirs(generated_dir)
+
+    if is_https():
+        init_letsencrypt()
+    generate_local_nginx_conf()
+    call('nginx -s reload')
+
+    wait_for_mysql()
+    init_seafile_server()
+
+    check_upgrade()
+    os.chdir(installdir)
+
+    admin_pw = {
+        'email': get_conf('SEAFILE_ADMIN_EMAIL', 'me@example.com'),
+        'password': get_conf('SEAFILE_ADMIN_PASSWORD', 'asecret'),
+    }
+    password_file = join(topdir, 'conf', 'admin.txt')
+    with open(password_file, 'w') as fp:
+        json.dump(admin_pw, fp)
+
+
+    try:
+        call('{} start'.format(get_script('seafile.sh')))
+        call('{} start'.format(get_script('seahub.sh')))
+        call('{} start /seafile-fuse'.format(get_script('seaf-fuse.sh')))
+    finally:
+        if exists(password_file):
+            os.unlink(password_file)
+
+    print('seafile server is running now.')
+    try:
+        watch_controller()
+    except KeyboardInterrupt:
+        print('Stopping seafile server.')
+        sys.exit(0)
+
+if __name__ == '__main__':
+    setup_logging()
+    main()
+

traefik/docker-compose.traefik-infomaniak.yml

@@ -42,9 +42,16 @@ services:
       - 443:443
     networks:
       - dmz
+      - baikal-frontend
       - blog-frontend
+      - deluge-frontend
+      - dokuwiki-frontend
       - glances-frontend
+      - netdata-frontend
+      - photo-frontend
       - portainer-frontend
+      - posteio-frontend
+      - seafile-frontend
       - selfoss-frontend
       - shaarli-frontend
       - source-frontend

traefik/docker-compose.traefik-local.yml

@@ -15,9 +15,16 @@ services:
       - traefik.enable=true      
     networks:
       - dmz
+      - baikal-frontend
       - blog-frontend
+      - deluge-frontend
+      - dokuwiki-frontend
       - glances-frontend
+      - netdata-frontend
+      - photo-frontend
       - portainer-frontend
+      - posteio-frontend
+      - seafile-frontend
       - selfoss-frontend
       - shaarli-frontend
       - source-frontend

www/docker-compose.dashy.yml

@@ -0,0 +1,40 @@
+version: '3.8'
+
+services:
+  dashy:
+    # To build from source, replace 'image: lissy93/dashy' with 'build: .'
+    # build: .
+    image: lissy93/dashy
+    container_name: dashy
+    # Pass in your config file below, by specifying the path on your host machine
+    volumes:
+      - ${ROOT_INSTALL}/data/dashy/config.yml:/app/public/conf.yml
+    # Set any environmental variables
+    environment:
+      - NODE_ENV=production
+    # Specify your user ID and group ID. You can find this by running `id -u` and `id -g`
+    #  - UID=1000
+    #  - GID=1000
+    # Specify restart policy
+    restart: unless-stopped
+    # Configure healthchecks
+    #healthcheck:
+    #  test: ['CMD', 'node', '/app/services/healthcheck']
+    #  interval: 1m30s
+    #  timeout: 10s
+    #  retries: 3
+    #  start_period: 40s
+    networks:
+      - wwww-frontend      
+    expose:
+      - 80
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.dashy.rule=Host(`${FQDN_DASHBOARD}`) 
+      - traefik.http.routers.dashy.entrypoints=https
+      - traefik.http.routers.dashy.tls=true
+      - traefik.docker.network=wwww-frontend      
+  
+networks:
+  wwww-frontend:
+    name: wwww-frontend