ei23 Community-Forum

Code: Alles auswählen

cat ~/ei23-docker/docker-compose.yml

Code: Alles auswählen

networks:
  default:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 172.22.0.0/24
# custom_networks_here
  nextcloud:
    driver: bridge
    internal: true

services:

  # MQTT-Broker
  mosquitto:
    container_name: mosquitto
    image: eclipse-mosquitto
    restart: unless-stopped
    user: "1883"
    ports:
      - "1883:1883"
      - "9001:9001"
    volumes:
      - ./volumes/mosquitto/data:/mosquitto/data
      - ./volumes/mosquitto/log:/mosquitto/log
      - ./volumes/mosquitto/config:/mosquitto/config
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  bitwarden:
    image: vaultwarden/server:latest
    container_name: bitwarden
    restart: unless-stopped
    ports:
      - 2223:80
    # labels:
      # - traefik.enable=true
      # - traefik.http.routers.bitwarden.rule=Host(`example.com`)
      # - traefik.http.routers.bitwarden.entrypoints=web-secured
      # - traefik.http.routers.bitwarden.tls=true
      # - traefik.http.routers.bitwarden.tls.certresolver=letsEncrypt
    volumes:
      - ./volumes/bitwarden:/data
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  esphome:
    container_name: esphome
    image: ghcr.io/esphome/esphome
    # ports:
    #   - 6052:6052
    #   - 6053:6053
    #   - 6123:6123
    volumes:
      - ./volumes/esphome:/config:rw
      - /etc/localtime:/etc/localtime:ro
      - /var/run/dbus:/var/run/dbus
      - /var/run/avahi-daemon/socket:/var/run/avahi-daemon/socket
    restart: unless-stopped
    network_mode: host
    # environment:
    #   - ESPHOME_DASHBOARD_USE_PING="true"
    privileged: true
    # command: config/ dashboard

  grafana:
    container_name: grafana
    image: grafana/grafana:latest
    restart: unless-stopped
    user: "0"
    ports:
      - "3000:3000"
    volumes:
      - ./volumes/grafana/data:/var/lib/grafana
      - ./volumes/grafana/log:/var/log/grafana
      - ./volumes/grafana/provisioning:/etc/grafana/provisioning
    labels:
      - traefik.enable=true
      - traefik.http.routers.grafana.rule=Host(`grafana.example.com`)
      - traefik.http.services.grafana.loadbalancer.server.port=3000
      - traefik.http.routers.grafana.entrypoints=web-secured
      - traefik.http.routers.grafana.tls=true
      - traefik.http.routers.grafana.tls.certresolver=letsEncrypt
    environment:
      - GF_PATHS_DATA=/var/lib/grafana
      - GF_PATHS_LOGS=/var/log/grafana
    # Uncomment this if open access is wanted
      # - GF_AUTH_ANONYMOUS_ENABLED=true
      # - GF_AUTH_ANONYMOUS_ORG_NAME=org
      # - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
      # - GF_SECURITY_ALLOW_EMBEDDING=true
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  homeassistant:
    container_name: homeassistant
    image: homeassistant/home-assistant:stable
    restart: unless-stopped
    network_mode: host
    # ports:
    #   - "8123:8123"
    volumes:
      # - /run/dbus:/run/dbus:ro # Bluetooth
      - ./volumes/homeassistant/config:/config
      # - /home/pi/media:/media
    # devices:
    #  - /dev/video0:/dev/video0
    #  - /dev/ttyACM0 # ConBee 2
    environment:
      - "TZ=Europe/Berlin"

  influxdb:
    container_name: influxdb
    image: influxdb:1.8 # i know, this is way to old...
    restart: unless-stopped
    ports:
    - "8086:8086"
    - "8083:8083"
    - "2003:2003"
    environment:
    - "INFLUXDB_DB=MAIN"
    # - "INFLUXDB_DATA_ENGINE=tsm1"
    - "INFLUXDB_REPORTING_DISABLED=false"
    - "INFLUXDB_STORE_ENABLED=false"
    - "INFLUXDB_QUERY_LOG_ENABLED=false"
    - "INFLUXDB_ADMIN_ENABLED=true"
      # -  "INFLUXDB_HTTP_AUTH_ENABLED=true"
      # -  "INFLUXDB_ADMIN_USER=admin"
      # -  "INFLUXDB_ADMIN_PASSWORD=bHFTTT1ndU773YY"
    - "INFLUXDB_USER=admin"
    - "INFLUXDB_USER_PASSWORD=raspberry"
      # -  "INFLUXDB_READ_USER=readuser"
      # -  "INFLUXDB_READ_USER_PASSWORD=18tZkmDyEOJq2l4"
      # -  "INFLUXDB_WRITE_USER=writeuser"
      # -  "INFLUXDB_WRITE_USER_PASSWORD=HWoz4hfeePJBO9n"
    # # Enable Traefik Log
    # - "INFLUXDB_UDP_ENABLED=true"
    # - "INFLUXDB_UDP_BIND_ADDRESS=0.0.0.0:8089"
    # - "INFLUXDB_UDP_DATABASE=traefik"
    volumes:
    - ./volumes/influxdb/data:/var/lib/influxdb
    - ./backups/influxdb/db:/var/lib/influxdb/backup
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  influxdb2:
    container_name: influxdb2
    image: influxdb:2.7
    restart: unless-stopped
    ports:
    - "8087:8086"
    environment:
    # - "DOCKER_INFLUXDB_INIT_MODE=upgrade" # use this for upgrade
    - "DOCKER_INFLUXDB_INIT_USERNAME=ei23"
    - "DOCKER_INFLUXDB_INIT_PASSWORD=ei23password"
    - "DOCKER_INFLUXDB_INIT_ORG=ei23"
    - "DOCKER_INFLUXDB_INIT_BUCKET=myBucket"
    volumes:
    - ./volumes/influxdb2/data:/var/lib/influxdb2
    - ./volumes/influxdb2/config:/etc/influxdb2
    - ./volumes/influxdb2/v1/data:/var/lib/influxdb
    - ./volumes/influxdb2/v1/config:/etc/influxdb

  motioneye:
    container_name: motioneye
    hostname: HomePi
    image: ccrisan/motioneye:master-armhf
    restart: unless-stopped
    ports:
      - "8765:8765"
      # - "18081:8081" # additional camera ports
      # - "18082:8082"
    # devices:
    #  - /dev/video0:/dev/video0
    volumes:
      - ./volumes/motioneye/data:/etc/motioneye
      - ./volumes/motioneye/lib:/var/lib/motioneye
      - /etc/localtime:/etc/localtime:ro


  mqtt-explorer:
    container_name: mqtt-explorer
    image: smeagolworms4/mqtt-explorer
    restart: unless-stopped
    ports:
      - 4000:4000
    volumes:
      - ./volumes/mqtt-explorer/data:/mosquitto/data
      - ./volumes/mqtt-explorer/log:/mqtt-explorer/log
      - ./volumes/mqtt-explorer/config:/mqtt-explorer/config

  # you may add nextcloud-network.yml content at the top
  # Aendere die Passwoerter - change the passwords (P4ssw0rt1 & P4ssw0rt2)
  nextcloud:
    image: nextcloud
    container_name: nextcloud
    ports:
      - "8080:80"
    # labels:
    #   - traefik.enable=true
    #   - traefik.http.routers.nextcloud.middlewares=nextcloud,nextcloud_rediret
    #   - traefik.http.routers.nextcloud.tls.certresolver=letsEncrypt
    #   - traefik.http.routers.nextcloud.rule=Host(`example.com`)
    #   - traefik.http.routers.nextcloud.entrypoints=web, web-secured
    #   - traefik.http.routers.nextcloud.tls=true
    #   - traefik.http.middlewares.nextcloud.headers.stsSeconds=15552000
    #   - traefik.http.middlewares.nextcloud.headers.stsPreload=true
    #   - traefik.http.middlewares.nextcloud_redirect.redirectregex.permanent=tue
    #   - traefik.http.middlewares.nextcloud_redirect.redirectregex.regex=^http://(.*)/.well-known/(card|cal)dav
    #   - traefik.http.middlewares.nextcloud_redirect.redirectregex.replacementhttps://$${1}/remote.php/dav/
    volumes:
      - ./volumes/nextcloud/html:/var/www/html
    restart: unless-stopped
    depends_on:
      - nextcloud_db
    links:
      - nextcloud_db
    networks:
      - default
      - nextcloud
    environment:
      - MYSQL_HOST=nextcloud_db
      - MYSQL_PASSWORD=xx
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - TRUSTED_PROXIES=172.18.0.0/16
      # - OVERWRITEPROTOCOL=https
      # - OVERWRITEHOST=example.com
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  nextcloud_db:
    image: yobasystems/alpine-mariadb:10.4.17
    container_name: nextcloud_db
    volumes:
      - ./volumes/nextcloud/db:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=xx
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - MYSQL_PASSWORD=xx
    restart: unless-stopped
    networks:
      - nextcloud
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  nginx-proxy-manager:
    container_name: nginx-proxy-manager
    image: docker.io/jc21/nginx-proxy-manager:latest
    restart: unless-stopped
    ports:
      - '591:80'
      - '81:81'
      - '443:443'
    volumes:
      - ./volumes/nginx-proxy-manager/data:/data
      - ./volumes/nginx-proxy-manager/letsencrypt:/etc/letsencrypt

  paperless_broker:
    image: docker.io/library/redis:7
    container_name: paperless_broker
    restart: unless-stopped

  paperless_db:
    image: docker.io/library/mariadb:10
    container_name: paperless_db
    restart: unless-stopped
    volumes:
      - ./volumes/paperlessngx/db:/var/lib/mysql
    environment:
      MARIADB_HOST: paperless
      MARIADB_DATABASE: paperless
      MARIADB_USER: paperless
      MARIADB_PASSWORD: paperless
      MARIADB_ROOT_PASSWORD: paperless


  paperless_web:
    image: ghcr.io/paperless-ngx/paperless-ngx:latest
    container_name: paperless_web
    restart: unless-stopped
    depends_on:
      - paperless_db
      - paperless_broker
    ports:
      - 2226:8000
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000"]
      interval: 30s
      timeout: 10s
      retries: 5
    volumes:
      - ./volumes/paperlessngx/data:/usr/src/paperless/data
      - ./volumes/paperlessngx/media:/usr/src/paperless/media
      - ./volumes/paperlessngx/export:/usr/src/paperless/export
      - ./volumes/paperlessngx/consume:/usr/src/paperless/consume
    environment:
      PAPERLESS_REDIS: redis://paperless_broker:6379
      PAPERLESS_DBENGINE: mariadb
      PAPERLESS_DBHOST: paperless_db
      PAPERLESS_DBUSER: paperless # only needed if non-default username
      PAPERLESS_DBPASS: paperless # only needed if non-default password
      PAPERLESS_DBPORT: 3306
      USERMAP_UID: 1000
      USERMAP_GID: 1000
      PAPERLESS_OCR_LANGUAGE: deu+eng
      PAPERLESS_TIME_ZONE: Europe/Berlin
      # PAPERLESS_SECRET_KEY: SuperS4FE!123456
      # PAPERLESS_ADMIN_USER: bitteaendern
      # PAPERLESS_ADMIN_PASSWORD: p4sswort


  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    hostname: HomePi
    restart: unless-stopped
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "67:67/udp"
      - "8008:80/tcp"
      # - "443:443/tcp"
    environment:
      TZ: 'Europe/Berlin'
      WEBPASSWORD: 'ewddhHjxKvv3bBB'
      # ServerIP: REPLACEME
      # ServerIPv6: REPLACEME
      # IPv6: 'true'
    volumes:
      - ./volumes/pihole/etc-pihole/:/etc/pihole/
      - ./volumes/pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/
      - ./volumes/pihole/hosts:/etc/hosts
    dns:
      - 127.0.0.1
      - 1.1.1.1
    # Recommended but not required (DHCP needs NET_ADMIN)
    #   https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
    cap_add:
      - NET_ADMIN
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  portainer:
    container_name: portainer
    image: portainer/portainer-ce
    restart: unless-stopped
    ports:
      - "8000:8000"
      - "9000:9000"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./volumes/portainer/data:/data

  tasmoadmin:
    container_name: tasmoadmin
    image: raymondmm/tasmoadmin
    restart: unless-stopped
    ports:
      - "8089:80"
    volumes:
      - ./volumes/tasmoadmin/data:/data

  timescaledb:
    container_name: timescaledb
    image: timescale/timescaledb:latest-pg12
    restart: unless-stopped
    environment:
      - POSTGRES_USER=timescaleuser
      - POSTGRES_PASSWORD=O4x13mfTKuatJ99
      - POSTGRES_DB=postdb
    ports:
      - "5432:5432"
    volumes:
      - ./volumes/timescaledb/data:/var/lib/postgresql/data

  traefik:
    image: traefik:v2.4
    container_name: traefik
    restart: unless-stopped
    ports:
      # - "80:80" # as internal http
      - "591:591" # as external http
      - "2280:8080" # config port
      # - "443:443" # external https
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./volumes/traefik/traefik/:/etc/traefik/
      - ./volumes/traefik/letsencrypt:/letsencrypt
    logging:
      options:
        max-size: "5m"
        max-file: "3"

  vscode:
    image: lscr.io/linuxserver/code-server
    container_name: vscode
    restart: unless-stopped
    ports:
      - 2222:8443
    environment:
      - PUID=0
      - GUID=0
      - TZ=Europe/Berlin
      # - PASSWORD=2hEB7YtzKHdGccc
    volumes:
      - ./volumes/vscode/config:/config
      - ./:/ei23-docker

  wireguard:
    image: ghcr.io/wg-easy/wg-easy
    container_name: wireguard
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - LANG=de
      - WG_HOST=your-domain-or-ip.org
      - PASSWORD=yourpassword
      - PORT=51821
      - WG_PORT=51820
      - WG_DEFAULT_ADDRESS=10.8.8.x
      - WG_DEFAULT_DNS= # left empty on purpose
      - WG_ALLOWED_IPS=0.0.0.0/1, 128.0.0.0/1, ::/1 # Full VPN
      # - WG_ALLOWED_IPS=10.8.8.0/24, 172.18.0.0/24 # only local VPN
      # - WG_MTU=1420
      # - WG_PERSISTENT_KEEPALIVE=25
      # - WG_PRE_UP=echo "Pre Up" > /etc/wireguard/pre-up.txt
      # - WG_POST_UP=echo "Post Up" > /etc/wireguard/post-up.txt
      # - WG_PRE_DOWN=echo "Pre Down" > /etc/wireguard/pre-down.txt
      # - WG_POST_DOWN=echo "Post Down" > /etc/wireguard/post-down.txt
    volumes:
      - ./volumes/wireguard:/etc/wireguard
    ports:
      - "51820:51820/udp"
      - "51821:51821/tcp"
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1