Compare commits
88 Commits
ee71fccc58
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
| fac196aa60 | |||
| 93cc0f7bd7 | |||
| d4bf0f044a | |||
| 2c00f40150 | |||
| 026fd46004 | |||
| f107c1ba5e | |||
| 32fccb8683 | |||
| 6a2e2eb7dd | |||
| df22fcc717 | |||
| a839a51074 | |||
| 8ab6ecfac1 | |||
| 72a03d0101 | |||
| 86a9de8e6b | |||
| f229a25d5e | |||
| e91097ebc2 | |||
| 64320b3677 | |||
| f9efbd8784 | |||
| e38018afaf | |||
| 47c481d1b4 | |||
| a376705962 | |||
| f3a53fd823 | |||
| a2a80f7c0f | |||
| 14fec7bbe6 | |||
| c828653341 | |||
| 15d3d4570c | |||
| 9605daed02 | |||
| 18080290a9 | |||
| b8576d11d0 | |||
| 0a95868b36 | |||
| 538aad2dd1 | |||
| ab701a11bd | |||
| d4d5b2a6b3 | |||
| 844b83a3f2 | |||
| 8dcc755222 | |||
| 65eed74dfb | |||
| e266a78843 | |||
| 9c6aa40453 | |||
| ca33fc6d1f | |||
| ff9f3d3749 | |||
| fcd88276c7 | |||
| c76e8ce3f1 | |||
| 635baf2362 | |||
| a0f63ab43f | |||
| 5d2a44b419 | |||
| 0315ae7043 | |||
| 159373354f | |||
| 221b262562 | |||
| 067e616c70 | |||
| af5b6eb840 | |||
| 97aa13c6b3 | |||
| fe292f9a0e | |||
| fb00e72650 | |||
| 6831ad1f03 | |||
| d12926dda8 | |||
| b24fa2e13d | |||
| 9ac1707617 | |||
| e442576391 | |||
| 38cf7ddd0a | |||
| 564f4938fa | |||
| db9b42d8b3 | |||
| 084bf8bba8 | |||
| 1f73b62605 | |||
| 2280ef9fef | |||
| bc99ef25b5 | |||
| 1353a8ff29 | |||
| 67bbec9f83 | |||
| 721c3e23e7 | |||
| 98a029dc37 | |||
| 6f070216b7 | |||
| 438b6d950e | |||
| e8b70e7d48 | |||
| a8c81cef12 | |||
| 65ca5f4a82 | |||
| 84ee914bea | |||
| ee8a96f0cf | |||
| 221932f90e | |||
| d7a1e900d9 | |||
| 88ea22caa0 | |||
| 8df7afa511 | |||
| cda41d6055 | |||
| 52e8cd2da6 | |||
| e323e4b3b4 | |||
| b8ddf52633 | |||
| e7eae03a9d | |||
| 5adee23135 | |||
| 9cd773dd63 | |||
| d78da41a47 | |||
| 3b862362fe |
@@ -1,13 +1,15 @@
|
||||
######### AKTUELL DOWN ##########
|
||||
version: "3.8"
|
||||
|
||||
services:
|
||||
caddy:
|
||||
image: caddy:latest
|
||||
container_name: caddy
|
||||
restart: unless-stopped
|
||||
network_mode: host
|
||||
ports:
|
||||
- "80:80"
|
||||
- "443:443"
|
||||
volumes:
|
||||
- /docker/caddy/config/Caddyfile:/etc/caddy/Caddyfile:ro
|
||||
- /docker/caddy/data:/data
|
||||
- /docker/caddy/ca/rootCA.crt:/etc/ssl/certs/rootCA.crt
|
||||
- /docker/caddy/ca/rootCA.key:/etc/ssl/private/rootCA.key
|
||||
- /srv/docker/daten/caddy/Caddyfile:/etc/caddy/Caddyfile
|
||||
- /srv/docker/daten/caddy/data:/data
|
||||
- /srv/docker/daten/caddy/config:/config
|
||||
76
compose/docker-compose.yml
Normal file
76
compose/docker-compose.yml
Normal file
@@ -0,0 +1,76 @@
|
||||
#
|
||||
# WARNING: To install Immich, follow our guide: https://docs.immich.app/install/docker-compose
|
||||
#
|
||||
# Make sure to use the docker-compose.yml of the current release:
|
||||
#
|
||||
# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
|
||||
#
|
||||
# The compose file on main may not be compatible with the latest release.
|
||||
|
||||
name: immich
|
||||
|
||||
services:
|
||||
immich-server:
|
||||
container_name: immich_server
|
||||
image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
|
||||
# extends:
|
||||
# file: hwaccel.transcoding.yml
|
||||
# service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
|
||||
volumes:
|
||||
# Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
|
||||
- ${UPLOAD_LOCATION}:/data
|
||||
- /etc/localtime:/etc/localtime:ro
|
||||
env_file:
|
||||
- .env
|
||||
ports:
|
||||
- '2283:2283'
|
||||
depends_on:
|
||||
- redis
|
||||
- database
|
||||
restart: always
|
||||
healthcheck:
|
||||
disable: false
|
||||
|
||||
immich-machine-learning:
|
||||
container_name: immich_machine_learning
|
||||
# For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
|
||||
# Example tag: ${IMMICH_VERSION:-release}-cuda
|
||||
image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
|
||||
# extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
|
||||
# file: hwaccel.ml.yml
|
||||
# service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
|
||||
volumes:
|
||||
- model-cache:/cache
|
||||
env_file:
|
||||
- .env
|
||||
restart: always
|
||||
healthcheck:
|
||||
disable: false
|
||||
|
||||
redis:
|
||||
container_name: immich_redis
|
||||
image: docker.io/valkey/valkey:9@sha256:3eeb09785cd61ec8e3be35f8804c8892080f3ca21934d628abc24ee4ed1698f6
|
||||
healthcheck:
|
||||
test: redis-cli ping || exit 1
|
||||
restart: always
|
||||
|
||||
database:
|
||||
container_name: immich_postgres
|
||||
image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
|
||||
environment:
|
||||
POSTGRES_PASSWORD: ${DB_PASSWORD}
|
||||
POSTGRES_USER: ${DB_USERNAME}
|
||||
POSTGRES_DB: ${DB_DATABASE_NAME}
|
||||
POSTGRES_INITDB_ARGS: '--data-checksums'
|
||||
# Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
|
||||
# DB_STORAGE_TYPE: 'HDD'
|
||||
volumes:
|
||||
# Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
|
||||
- ${DB_DATA_LOCATION}:/var/lib/postgresql/data
|
||||
shm_size: 128mb
|
||||
restart: always
|
||||
healthcheck:
|
||||
disable: false
|
||||
|
||||
volumes:
|
||||
model-cache:
|
||||
@@ -3,8 +3,8 @@ services:
|
||||
image: gitea/gitea:1.24
|
||||
container_name: gitea
|
||||
environment:
|
||||
- USER_UID=1000
|
||||
- USER_GID=1000
|
||||
- USER_UID=1001
|
||||
- USER_GID=1001
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- gitea
|
||||
|
||||
34
compose/homepage/docker-compose.yml
Normal file
34
compose/homepage/docker-compose.yml
Normal file
@@ -0,0 +1,34 @@
|
||||
version: "3.8"
|
||||
|
||||
services:
|
||||
|
||||
dockerproxy:
|
||||
image: ghcr.io/tecnativa/docker-socket-proxy:latest
|
||||
container_name: dockerproxy
|
||||
environment:
|
||||
- CONTAINERS=1 # Allow access to viewing containers
|
||||
- SERVICES=1 # Allow access to viewing services (necessary when using Docker Swarm)
|
||||
- TASKS=1 # Allow access to viewing tasks (necessary when using Docker Swarm)
|
||||
- POST=0 # Disallow any POST operations (effectively read-only)
|
||||
ports:
|
||||
- 127.0.0.1:2375:2375
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro # Mounted as read-only
|
||||
restart: unless-stopped
|
||||
|
||||
homepage:
|
||||
image: ghcr.io/gethomepage/homepage:latest
|
||||
container_name: homepage
|
||||
# network_mode: host
|
||||
ports:
|
||||
- "3004:3000"
|
||||
volumes:
|
||||
- /srv/docker/daten/homepage:/app/config
|
||||
- /srv/docker/daten/homepage/icons:/app/public/icons
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
environment:
|
||||
# - PORT=8080
|
||||
- NODE_TLS_REJECT_UNAUTHORIZED=0
|
||||
# - HOMEPAGE_ALLOWED_HOSTS=192.168.178.204:8080,192.168.178.204,localhost:8080,localhost,127.0.0.1
|
||||
- HOMEPAGE_ALLOWED_HOSTS=192.168.178.204,192.168.178.204:3004,localhost,127.0.0.1
|
||||
restart: unless-stopped
|
||||
84
compose/immich/docker-compose.yml
Normal file
84
compose/immich/docker-compose.yml
Normal file
@@ -0,0 +1,84 @@
|
||||
#
|
||||
# WARNING: To install Immich, follow our guide: https://docs.immich.app/install/docker-compose
|
||||
#
|
||||
# Make sure to use the docker-compose.yml of the current release:
|
||||
#
|
||||
# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
|
||||
#
|
||||
# The compose file on main may not be compatible with the latest release.
|
||||
|
||||
name: immich
|
||||
|
||||
services:
|
||||
immich-server:
|
||||
container_name: immich_server
|
||||
image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
|
||||
# extends:
|
||||
# file: hwaccel.transcoding.yml
|
||||
# service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
|
||||
#user: "1001:1001"
|
||||
volumes:
|
||||
# Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
|
||||
- ${UPLOAD_LOCATION}:/data
|
||||
- /etc/localtime:/etc/localtime:ro
|
||||
env_file:
|
||||
- .env
|
||||
ports:
|
||||
- '2283:2283'
|
||||
depends_on:
|
||||
- redis
|
||||
- database
|
||||
restart: always
|
||||
healthcheck:
|
||||
disable: false
|
||||
|
||||
immich-machine-learning:
|
||||
container_name: immich_machine_learning
|
||||
# For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
|
||||
# Example tag: ${IMMICH_VERSION:-release}-cuda
|
||||
image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
|
||||
# extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
|
||||
# file: hwaccel.ml.yml
|
||||
# service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
|
||||
#user: "1001:1001"
|
||||
environment:
|
||||
- MPLCONFIGDIR=/cache/.matplotlib
|
||||
- IMMICH_TEMP_DIR=/cache/temp
|
||||
volumes:
|
||||
- /srv/docker/daten/immich/model-cache:/cache
|
||||
- ${UPLOAD_LOCATION}:/data # <<< hier hinzufügen
|
||||
env_file:
|
||||
- .env
|
||||
restart: always
|
||||
healthcheck:
|
||||
disable: false
|
||||
|
||||
redis:
|
||||
container_name: immich_redis
|
||||
image: docker.io/valkey/valkey:9@sha256:3eeb09785cd61ec8e3be35f8804c8892080f3ca21934d628abc24ee4ed1698f6
|
||||
#user: "1001:1001"
|
||||
healthcheck:
|
||||
test: redis-cli ping || exit 1
|
||||
restart: always
|
||||
|
||||
database:
|
||||
container_name: immich_postgres
|
||||
image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
|
||||
#user: "1001:1001"
|
||||
environment:
|
||||
POSTGRES_PASSWORD: ${DB_PASSWORD}
|
||||
POSTGRES_USER: ${DB_USERNAME}
|
||||
POSTGRES_DB: ${DB_DATABASE_NAME}
|
||||
POSTGRES_INITDB_ARGS: '--data-checksums'
|
||||
# Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
|
||||
# DB_STORAGE_TYPE: 'HDD'
|
||||
volumes:
|
||||
# Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
|
||||
- ${DB_DATA_LOCATION}:/var/lib/postgresql/data
|
||||
shm_size: 128mb
|
||||
restart: always
|
||||
healthcheck:
|
||||
disable: false
|
||||
|
||||
volumes:
|
||||
model-cache:
|
||||
62
compose/monitoring/docker-compose.yml
Normal file
62
compose/monitoring/docker-compose.yml
Normal file
@@ -0,0 +1,62 @@
|
||||
services:
|
||||
prometheus:
|
||||
image: prom/prometheus:latest
|
||||
container_name: prometheus
|
||||
restart: unless-stopped
|
||||
user: "root" # Verhindert Permission-Probleme beim Lesen der Config
|
||||
volumes:
|
||||
- /srv/docker/daten/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
|
||||
- /srv/docker/daten/prometheus:/prometheus
|
||||
command:
|
||||
- '--config.file=/etc/prometheus/prometheus.yml'
|
||||
- '--storage.tsdb.path=/prometheus'
|
||||
ports:
|
||||
- "9090:9090"
|
||||
|
||||
grafana:
|
||||
image: grafana/grafana:latest
|
||||
container_name: grafana
|
||||
restart: unless-stopped
|
||||
environment:
|
||||
- GF_SECURITY_ADMIN_PASSWORD=admin
|
||||
volumes:
|
||||
- /srv/docker/daten/grafana:/var/lib/grafana
|
||||
ports:
|
||||
- "3000:3000"
|
||||
|
||||
node-exporter:
|
||||
image: prom/node-exporter:latest
|
||||
container_name: node-exporter
|
||||
restart: unless-stopped
|
||||
volumes:
|
||||
- /proc:/host/proc:ro
|
||||
- /sys:/host/sys:ro
|
||||
- /:/rootfs:ro
|
||||
command:
|
||||
- '--path.procfs=/host/proc'
|
||||
- '--path.rootfs=/rootfs'
|
||||
- '--path.sysfs=/host/sys'
|
||||
|
||||
cadvisor:
|
||||
image: gcr.io/cadvisor/cadvisor:v0.49.1
|
||||
container_name: cadvisor
|
||||
restart: unless-stopped
|
||||
privileged: true
|
||||
devices:
|
||||
- /dev/kmsg
|
||||
volumes:
|
||||
- /:/rootfs:ro
|
||||
- /var/run:/var/run:ro
|
||||
- /sys:/sys:ro
|
||||
- /var/lib/docker/:/var/lib/docker:ro
|
||||
- /dev/disk/:/dev/disk:ro
|
||||
|
||||
proxmox-exporter:
|
||||
image: ghcr.io/prometheus-pve/prometheus-pve-exporter:latest
|
||||
container_name: proxmox-exporter
|
||||
restart: unless-stopped
|
||||
volumes:
|
||||
# Wir mounten das VERZEICHNIS. Darin liegt die pve.yml
|
||||
- /srv/docker/daten/proxmox-exporter:/etc/prometheus:ro
|
||||
ports:
|
||||
- "9221:9221"
|
||||
@@ -19,7 +19,10 @@ services:
|
||||
restart: always
|
||||
volumes:
|
||||
- /srv/docker/daten/nextcloud/redis:/data
|
||||
|
||||
networks:
|
||||
- proxy
|
||||
- default
|
||||
|
||||
nextcloud:
|
||||
depends_on:
|
||||
- redis
|
||||
|
||||
@@ -5,8 +5,8 @@ services:
|
||||
network_mode: host
|
||||
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- PUID=1001
|
||||
- PGID=1001
|
||||
- TZ=Europe/Berlin
|
||||
|
||||
volumes:
|
||||
|
||||
11
compose/uptime-kuma/docker-compose.yml
Normal file
11
compose/uptime-kuma/docker-compose.yml
Normal file
@@ -0,0 +1,11 @@
|
||||
version: "3.8"
|
||||
|
||||
services:
|
||||
uptime-kuma:
|
||||
image: louislam/uptime-kuma:latest
|
||||
container_name: uptime-kuma
|
||||
ports:
|
||||
- "3006:3001"
|
||||
volumes:
|
||||
- /srv/docker/daten/uptime-kuma:/app/data
|
||||
restart: unless-stopped
|
||||
@@ -11,5 +11,7 @@ services:
|
||||
- WEBSOCKET_ENABLED=true
|
||||
ports:
|
||||
- 1380:80
|
||||
- 1443:443
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -6,11 +6,23 @@ services:
|
||||
ports:
|
||||
- "9001:9001"
|
||||
volumes:
|
||||
- /srv/docker:/workspace
|
||||
- /srv/docker/repo:/workspace
|
||||
- /srv/docker/scripts/webhook-deploy/hooks.json:/hooks/hooks.json:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- /root/.ssh:/root/.ssh:ro
|
||||
command: ["-hooks", "/hooks/hooks.json", "-verbose", "-port", "9001", "-ip", "0.0.0.0"]
|
||||
|
||||
# environment:
|
||||
# - WEBHOOK_ALLOWED_HOST_LIST=192.168.178.204,0.0.0.0,localhost
|
||||
# - WEBHOOK_VERBOSE=true
|
||||
# - WEBHOOK_PORT=9001
|
||||
# - WEBHOOK_IP=0.0.0.0
|
||||
|
||||
command: [
|
||||
"-hooks", "/hooks/hooks.json",
|
||||
"-verbose", "-port", "9001",
|
||||
"-ip", "0.0.0.0",
|
||||
# "-allowed-host-list", "0.0.0.0,192.168.178.204,localhost"
|
||||
]
|
||||
networks:
|
||||
- bruchtal-net
|
||||
|
||||
|
||||
@@ -8,10 +8,10 @@ services:
|
||||
- "8005:8000"
|
||||
|
||||
volumes:
|
||||
- /docker/Bruchtal:/docs
|
||||
- /srv/docker/repo:/docs
|
||||
|
||||
command: serve --dev-addr=0.0.0.0:8000
|
||||
|
||||
environment:
|
||||
- TZ=Europe/Berlin
|
||||
- WATCHDOG_FORCE_POLLING=true
|
||||
# - WATCHDOG_FORCE_POLLING=true
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
# Docker Backup
|
||||
|
||||
Docker läuft als VM unter Proxmox und wird dort täglich vollständig auf der Qnap gesichert [Proxmox_Backup:](/docs/backup_restore/proxmox/proxmox_backup.md)
|
||||
Docker läuft als VM unter Proxmox und wird dort täglich vollständig auf der Qnap gesichert
|
||||
[=> Proxmox_Backup:](../../backup_restore/proxmox/proxmox_backup.md)
|
||||
@@ -1 +1,18 @@
|
||||
# Homeassistent
|
||||
# Homeassistent
|
||||
|
||||
## läuft als VM unter Proxmox und wird dort täglich vollständig auf der Qnap gesichert
|
||||
[=> Proxmox_Backup:](../../backup_restore/proxmox/proxmox_backup.md)
|
||||
|
||||
## aus HA heraus
|
||||
=> Einstellungen => System => Speicher
|
||||
- Netzwerkspeicher
|
||||
- Verwendung: Backup
|
||||
- Server: 192.168.178.254 (Qnap)
|
||||
- Protokoll: NFS
|
||||
- Remote Freigabepfad: Backups_homeassistant
|
||||
|
||||
=> Einstellungen => System => Backups
|
||||
- Täglich und 7 Backups aufbewahren
|
||||
- zu sichernde Daten: HA Einstellungen, Verlauf
|
||||
- Speicherorte: Backups_homeassistant
|
||||
|
||||
|
||||
@@ -29,7 +29,4 @@ Backupsystem läuft auf 2 Ebenen:
|
||||
|
||||
## Restore
|
||||
- Gezielt Dateien: Archiv einhängen (Mountpunkt: /home/christina/borgbackupHetzner), Dateien kopierne
|
||||
- allgemeines Restore: ausgewähltes Archiv -> exctract
|
||||
|
||||
|
||||
|
||||
- allgemeines Restore: ausgewähltes Archiv -> exctract
|
||||
0
docs/backup_restore/workstations/opi-pc_backup.md
Normal file
0
docs/backup_restore/workstations/opi-pc_backup.md
Normal file
13
docs/backup_restore/workstations/workstation:backup.md
Normal file
13
docs/backup_restore/workstations/workstation:backup.md
Normal file
@@ -0,0 +1,13 @@
|
||||
# Backup Konfiguration Workstations
|
||||
## christian-linux-mint
|
||||
=> [christian-linux-mint](../workstations/christian-linux_backup.md)
|
||||
|
||||
## Christians Handy
|
||||
=> [christian-handy_backup.md](../workstations/christian-handy_backup.md)
|
||||
|
||||
## Dorotheas Labtop
|
||||
=> [dorothea-laptop_backup.md](../workstations/dorothea-laptop_backup.md)
|
||||
|
||||
## Opis PC
|
||||
=> [opi-pc_backup.md](../workstations/opi-pc_backup.md)
|
||||
|
||||
@@ -51,7 +51,39 @@ networks:
|
||||
```
|
||||
|
||||
## Mounts
|
||||
/etc/fstab:
|
||||
```
|
||||
Die Mount laufen nicht über die fstab. Grund: die QNAP geht seltsam mit Sonderzeichen in den credentials um.
|
||||
Lösung:
|
||||
sudo nano /etc/systemd/system/mnt-vaultwardenBackupOnQnap.mount:
|
||||
|
||||
```
|
||||
``` ini
|
||||
[Unit]
|
||||
After=network-online.target
|
||||
|
||||
[Mount]
|
||||
What=//192.168.178.254/Backups/docker_backups/vaultwarden
|
||||
Where=/mnt/vaultwardenBackupOnQnap
|
||||
Type=cifs
|
||||
Options=rw,vers=3.0,username=admin,password=!!Zazen17**,uid=1001,gid=1001
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
```
|
||||
dann
|
||||
|
||||
```
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl enable mnt-vaultwardenBackupOnQnap.mount
|
||||
|
||||
sudo systemctl start mnt-vaultwardenBackupOnQnap.mount #Mount wird auch beim booten gestartet
|
||||
sudo systemctl stop mnt-vaultwardenBackupOnQnap.mount #Mount wird gestoppt
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Docker Backup
|
||||
Docker läuft als VM unter Proxmox und wird dort täglich vollständig auf der Qnap gesichert
|
||||
[=> Proxmox_Backup:](../../backup_restore/proxmox/proxmox_backup.md)
|
||||
31
docs/docker/mkdocs/mkdocs.md
Normal file
31
docs/docker/mkdocs/mkdocs.md
Normal file
@@ -0,0 +1,31 @@
|
||||
# Mkdocs
|
||||
## Zweck:
|
||||
Dokumentation des Systems in Markdown
|
||||
|
||||
|
||||
## /ssrv/docker/docker-compose.yml
|
||||
-> liegt nicht in gesondertem Container.
|
||||
-> erwartet Verzeichnis docs und mkdocs.yml (diese Datei)
|
||||
|
||||
``` yaml
|
||||
services:
|
||||
bruchtal-docs:
|
||||
image: squidfunk/mkdocs-material:latest
|
||||
container_name: bruchtal-docs
|
||||
restart: unless-stopped
|
||||
|
||||
ports:
|
||||
- "8005:8000"
|
||||
|
||||
volumes:
|
||||
- /docker/Bruchtal:/docs
|
||||
|
||||
command: serve --dev-addr=0.0.0.0:8000
|
||||
|
||||
environment:
|
||||
- TZ=Europe/Berlin
|
||||
- WATCHDOG_FORCE_POLLING=true
|
||||
```
|
||||
|
||||
## Backup & Restore
|
||||
kein spezielles Backup notwendig.
|
||||
1
docs/docker/pihole/pihole.md
Normal file
1
docs/docker/pihole/pihole.md
Normal file
@@ -0,0 +1 @@
|
||||
testtest
|
||||
67
docs/homepage/homepage.md
Normal file
67
docs/homepage/homepage.md
Normal file
@@ -0,0 +1,67 @@
|
||||
# Homepage Stack
|
||||
|
||||
## dockerproxy
|
||||
um den Status von Dockercontainern direkt auslesen zu können
|
||||
|
||||
- Image: `ghcr.io/tecnativa/docker-socket-proxy:latest`
|
||||
- Port: `127.0.0.1:2375:2375`
|
||||
- Restart Policy: `unless-stopped`
|
||||
|
||||
## Homepage
|
||||
das eigentlich
|
||||
|
||||
|
||||
|
||||
## Volumes
|
||||
|
||||
| Host Path | Container Path | Zweck |
|
||||
|------------|----------------|--------|
|
||||
| /var/run/docker.sock:/var/run/docker.sock:ro | | |
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Deployment
|
||||
|
||||
```bash
|
||||
cd /docker/Bruchtal/compose/heimdall
|
||||
git pull
|
||||
docker compose pull
|
||||
docker compose up -d
|
||||
```
|
||||
|
||||
|
||||
## aktuelles Skript
|
||||
|
||||
```snippet
|
||||
--8<-- "/docs/docker/heimdall/docker-compose.yml"
|
||||
```
|
||||
|
||||
|
||||
dockerproxy:
|
||||
image: ghcr.io/tecnativa/docker-socket-proxy:latest
|
||||
container_name: dockerproxy
|
||||
environment:
|
||||
- CONTAINERS=1 # Allow access to viewing containers
|
||||
- SERVICES=1 # Allow access to viewing services (necessary when using Docker Swarm)
|
||||
- TASKS=1 # Allow access to viewing tasks (necessary when using Docker Swarm)
|
||||
- POST=0 # Disallow any POST operations (effectively read-only)
|
||||
ports:
|
||||
- 127.0.0.1:2375:2375
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro # Mounted as read-only
|
||||
restart: unless-stopped
|
||||
|
||||
homepage:
|
||||
image: ghcr.io/gethomepage/homepage:latest
|
||||
container_name: homepage
|
||||
ports:
|
||||
- "3004:3000"
|
||||
volumes:
|
||||
- /srv/docker/daten/homepage:/app/config
|
||||
- /srv/docker/daten/homepage/icons:/app/public/icons
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
environment:
|
||||
- HOMEPAGE_ALLOWED_HOSTS=192.168.178.204:3004,localhost
|
||||
restart: unless-stopped
|
||||
@@ -5,12 +5,12 @@
|
||||
- Range: 192.168.178.20 - 199
|
||||
|
||||
## feste IPs
|
||||
192.168.178.200: Proxmox
|
||||
192.168.178.203: vm-homeassistent
|
||||
192.168.178.204: vm-docker
|
||||
192.168.178.214: vm-jellyfin
|
||||
192.168.178.217: vm-docker-restore
|
||||
192.168.178.221: VM-paperless2
|
||||
192.168.178.254: QNAP
|
||||
|
||||
[192.168.178.200: Proxmox](http://192.168.178.200:8006)
|
||||
[192.168.178.201: vm-Pihole](http://192.168.178.201)
|
||||
[192.168.178.203: vm-homeassistent](http://192.168.178.203:8123)
|
||||
[192.168.178.204: vm-docker](http://192.168.178.204:9443)
|
||||
[192.168.178.214: vm-jellyfin]()
|
||||
[192.168.178.217: vm-docker-restore](http://192.168.178.221:9443)
|
||||
[192.168.178.221: vm-paperless2](http://192.168.178.221:8000)
|
||||
[192.168.178.254: QNAP](https://192.168.178.254)
|
||||
### Kea-dhcp4 + Adguard # caddy
|
||||
|
||||
@@ -15,4 +15,3 @@
|
||||
## Backup
|
||||
==>
|
||||
|
||||
-
|
||||
@@ -9,6 +9,9 @@
|
||||
- Docker-VM
|
||||
- Backup: tägliche Snapshots
|
||||
|
||||
## Root-Zugriff
|
||||
derzeit noch möglich: das übliche PW
|
||||
|
||||
## Crontab
|
||||
```snippet
|
||||
0 1 * * * /root/backup-pve-configs.sh
|
||||
|
||||
3
docs/workflows/backup_restore-Workstations.md
Normal file
3
docs/workflows/backup_restore-Workstations.md
Normal file
@@ -0,0 +1,3 @@
|
||||
siehe [Backups Workstaions](../backup_restore/workstations/workstation:backup.md)
|
||||
|
||||
|
||||
@@ -30,35 +30,37 @@ flowchart LR
|
||||
---
|
||||
|
||||
## Verzeichnisstruktur
|
||||
compose, scripts, docs sind im Repo. Daher als Unterordner, damit bei einem pull force die Daten nicht mit überschrieben werden
|
||||
```
|
||||
/srv/docker
|
||||
├─ compose/ # Docker-Compose Stacks für jeden Container
|
||||
│ ├─ nextcloud/
|
||||
│ │ └─ docker-compose.yml
|
||||
│ ├─ tvheadend/
|
||||
│ │ └─ docker-compose.yml
|
||||
│ ├─ signal-rest-api/
|
||||
│ │ └─ docker-compose.yml
|
||||
│ └─ ... (weitere aktive Container)
|
||||
│
|
||||
├─ scripts/ # Deploy-Scripts, Webhooks, Utilities
|
||||
│ ├─ deploy-changed-containers-final.sh
|
||||
│ ├─ webhook-deploy.sh
|
||||
│ └─ ... (weitere Scripts)
|
||||
│
|
||||
├─ docs/ # MkDocs / Markdown Dokumentation
|
||||
│ ├─ backup_restore
|
||||
│ | ├─ docker
|
||||
| | └─ docker_backup.md
|
||||
| | ├─ hetzner
|
||||
│ ├─ docker
|
||||
│ | ├─ adguardhome
|
||||
| | | └─ adguardhome.md
|
||||
│ | ├─ heimdall
|
||||
| | └─ heimdall.md
|
||||
| | └─ ... (weitere .md Dateien)
|
||||
│
|
||||
├─ mkdocs.yml # MkDocs Konfiguration
|
||||
/srv/docker/
|
||||
├─ repo
|
||||
│ ├─ compose # Docker-Compose Stacks für jeden Container
|
||||
│ │ ├─ nextcloud/
|
||||
│ │ │ └─ docker-compose.yml
|
||||
│ │ ├─ tvheadend/
|
||||
│ │ │ └─ docker-compose.yml
|
||||
│ │ ├─ signal-rest-api/
|
||||
│ │ │ └─ docker-compose.yml
|
||||
│ │ └─ ... (weitere aktive Container)
|
||||
│ │
|
||||
│ ├─ scripts/ # Deploy-Scripts, Webhooks, Utilities
|
||||
│ │ ├─ deploy-changed-containers-final.sh
|
||||
│ │ ├─ webhook-deploy.sh
|
||||
│ │ └─ ... (weitere Scripts)
|
||||
│ │
|
||||
│ ├─ docs/ # MkDocs / Markdown Dokumentation
|
||||
│ │ ├─ backup_restore
|
||||
│ │ | ├─ docker
|
||||
| │ | └─ docker_backup.md
|
||||
| │ | ├─ hetzner
|
||||
│ │ ├─ docker
|
||||
│ │ | ├─ adguardhome
|
||||
| │ | | └─ adguardhome.md
|
||||
│ │ | ├─ heimdall
|
||||
| │ │ └─ heimdall.md
|
||||
| │ └─ ... (weitere .md Dateien)
|
||||
│ │
|
||||
│ ├─ mkdocs.yml # MkDocs Konfiguration
|
||||
│
|
||||
├─ daten/ # Docker-Volumes / persistent data
|
||||
│ ├─ nextcloud/
|
||||
@@ -103,14 +105,3 @@ cd /docker/Bruchtal/<Containername>
|
||||
docker compose up -d
|
||||
```
|
||||
|
||||
## Repository-Struktur
|
||||
```
|
||||
Bruchtal/
|
||||
├── docker/
|
||||
│ └── <Containername>/
|
||||
│ └── docker-compose.yml
|
||||
└── docs/
|
||||
└── docker/
|
||||
└── <Containername>/
|
||||
└── <Containername>.md
|
||||
```
|
||||
|
||||
@@ -14,7 +14,7 @@ git push origin main --force
|
||||
|
||||
auf der VM:
|
||||
``` snippet
|
||||
cd /srv/docker
|
||||
cd /srv/docker/repo
|
||||
|
||||
|
||||
git fetch origin
|
||||
|
||||
12
mkdocs.yml
12
mkdocs.yml
@@ -19,26 +19,26 @@ nav:
|
||||
- Proxmox:
|
||||
- System: proxmox/proxmox.md
|
||||
- Paperless: proxmox/paperless/paperless.md
|
||||
- Homeassistant: proxmox/homeassistant/homeassistant.md
|
||||
- Homeassistant: proxmox/homeassistent/homeassistent.md
|
||||
|
||||
- Docker:
|
||||
- Architektur: docker/architecture.md
|
||||
- Architektur: docker/docker.md
|
||||
- Adguardhome: docker/adguardhome/adguardhome.md
|
||||
- Wikijs: docker/wikijs/wikijs.md
|
||||
- Heimdall: docker/heimdall/heimdall.md
|
||||
- It-Tools: docker/it-tools/it-tools.md
|
||||
- PiholeTests: docker/pihole/pihole.md
|
||||
- Portainer: docker/portainer/portainer.md
|
||||
- Vaultwarden: docker/vaultwarden/vaultwarden.md
|
||||
- Vaultwarden_Backup: docker/vaultwarden-backup/vaultwarden-backup.md
|
||||
- Vaultwarden_Backup: docker/vaultwarden_backup/vaultwarden_backup.md
|
||||
- Wikijs: docker/wikijs/wikijs.md
|
||||
|
||||
- Backup:
|
||||
- Docker: backup_restore/docker/docker_backup.md
|
||||
- christian-linux: backup_restore/workstations/christian-linux_backup.md
|
||||
- Docker: /docker/docker_backup.md
|
||||
- Hetzner: backup_restore/hetzner/hetzner_backup.md
|
||||
- Homeassistant: backup_restore/proxmox/homeassistant/homeassistant_backup.md
|
||||
- Paperless: backup_restore/proxmox/paperless/paperless_backup.md
|
||||
- Proxmox: backup_restore/proxmox/proxmox_backup.md
|
||||
- Workstation: backup_restore/workstation/workstation_backup.md
|
||||
|
||||
|
||||
markdown_extensions:
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
set -e
|
||||
# test XDG_RUNTIME_DIR
|
||||
|
||||
LOGFILE="/var/log/bruchtal-deploy.log"
|
||||
LOGFILE="/srv/docker/repo/scripts/bruchtal-deploy.log"
|
||||
cd /workspace
|
||||
|
||||
log() {
|
||||
@@ -34,7 +34,7 @@ git pull
|
||||
# -----------------------------
|
||||
# 3️⃣ Redeploy changed containers
|
||||
# -----------------------------
|
||||
/srv/docker/scripts/redeploy-containers.sh
|
||||
#/srv/docker/scripts/redeploy-containers.sh
|
||||
|
||||
|
||||
# -----------------------------
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{
|
||||
"id": "bruchtal-deploy",
|
||||
"execute-command": "/workspace/scripts/webhook-deploy/deploy-bruchtal.sh",
|
||||
|
||||
"command-working-directory": "/workspace"
|
||||
}
|
||||
]
|
||||
Reference in New Issue
Block a user