Compare commits

...

10 Commits

Author SHA1 Message Date
eneller
fce313d45c sonarqube 2025-07-25 12:15:23 +02:00
eneller
7484aca1b2 freqtrade 2025-06-17 12:10:31 +02:00
eneller
cb89cb1668 rustdesk 2025-06-02 19:29:41 +02:00
jojo
c79bf1a90c chore: remove version entry from docker-compose 2024-07-28 18:59:14 +02:00
jojo
02e358c3f5 .gitignore 2024-07-06 17:33:37 +02:00
jojo
c18b363d86 vaultwarden setup 2024-07-06 17:30:44 +02:00
jojo
2d78d3c423 nextcloud caldav/carddav 2024-07-06 17:00:19 +02:00
jojo
ede00b5f81 minor deployment tweaks 2024-05-25 13:33:51 +02:00
eneller
fc27b5ebbd add nginx example conf 2023-12-30 15:40:00 +01:00
eneller
ee484249ee feat: add gitea-act-runner 2023-11-15 22:51:37 +01:00
16 changed files with 233 additions and 9 deletions

41
.gitignore vendored Normal file
View File

@@ -0,0 +1,41 @@
.env
.docker
# Created by https://www.toptal.com/developers/gitignore/api/archives
# Edit at https://www.toptal.com/developers/gitignore?templates=archives
### Archives ###
# It's better to unpack these files and commit the raw source because
# git has its own built in compression methods.
*.7z
*.jar
*.rar
*.zip
*.gz
*.gzip
*.tgz
*.bzip
*.bzip2
*.bz2
*.xz
*.lzma
*.cab
*.xar
# Packing-only formats
*.iso
*.tar
# Package management formats
*.dmg
*.xpi
*.gem
*.egg
*.deb
*.rpm
*.msi
*.msm
*.msp
*.txz
# End of https://www.toptal.com/developers/gitignore/api/archives

View File

@@ -1,4 +1,3 @@
version: '3.2'
services: services:
changedetection: changedetection:
image: dgtlmoon/changedetection.io:latest image: dgtlmoon/changedetection.io:latest

View File

@@ -0,0 +1,34 @@
---
services:
freqtrade:
image: freqtradeorg/freqtrade:stable
# # Enable GPU Image and GPU Resources (only relevant for freqAI)
# # Make sure to uncomment the whole deploy section
# deploy:
# resources:
# reservations:
# devices:
# - driver: nvidia
# count: 1
# capabilities: [gpu]
# Build step - only needed when additional dependencies are needed
# build:
# context: .
# dockerfile: "./docker/Dockerfile.custom"
restart: unless-stopped
container_name: freqtrade
volumes:
- "./.docker/freqtrade:/freqtrade/user_data"
# Expose api on port 8080 (localhost only)
# Please read the https://www.freqtrade.io/en/stable/rest-api/ documentation
# for more information.
ports:
- "127.0.0.1:8080:8080"
# Default command used when running `docker compose up`
command: >
trade
--logfile /freqtrade/user_data/logs/freqtrade.log
--db-url sqlite:////freqtrade/user_data/tradesv3.sqlite
--config /freqtrade/user_data/config.json
--strategy SampleStrategy

View File

@@ -0,0 +1,14 @@
# find documentation at https://docs.gitea.com/usage/actions/act-runner
services:
runner:
image: gitea/act_runner:latest
environment:
CONFIG_FILE: /config.yaml
GITEA_INSTANCE_URL: "${INSTANCE_URL}"
GITEA_RUNNER_REGISTRATION_TOKEN: "${REGISTRATION_TOKEN}"
GITEA_RUNNER_NAME: "${RUNNER_NAME}"
GITEA_RUNNER_LABELS: "${RUNNER_LABELS}"
volumes:
- ./config.yaml:/config.yaml
- ./data:/data
- /var/run/docker.sock:/var/run/docker.sock # needed to create a separate docker container for each job

View File

@@ -1,5 +1,3 @@
version: '3'
services: services:
db: db:
image: postgres:14 image: postgres:14

3
nextcloud/.gitignore vendored Normal file
View File

@@ -0,0 +1,3 @@
db
nextcloud
env

View File

@@ -9,7 +9,7 @@ services:
- env - env
app: app:
image: nextcloud:27 image: nextcloud
restart: always restart: always
ports: ports:
- 50000:80 - 50000:80

View File

@@ -13,6 +13,12 @@ server {
} }
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
listen [::]:443 ssl ipv6only=on; # managed by Certbot listen [::]:443 ssl ipv6only=on; # managed by Certbot
listen 443 ssl; # managed by Certbot listen 443 ssl; # managed by Certbot

16
nginx/example.com Normal file
View File

@@ -0,0 +1,16 @@
server {
server_name example.com;
location / {
proxy_pass "http://127.0.0.1:50001/";
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Scheme $scheme;
proxy_set_header X-Forwarded-Proto $scheme;
}
listen 80;
listen [::]:80;
}

View File

@@ -1,4 +1,3 @@
version: "3"
services: services:
rancher: rancher:
image: rancher/rancher:stable image: rancher/rancher:stable

View File

@@ -0,0 +1,21 @@
services:
hbbs:
container_name: hbbs
image: rustdesk/rustdesk-server:latest
command: hbbs
volumes:
- ./data:/root
network_mode: "host"
depends_on:
- hbbr
restart: unless-stopped
hbbr:
container_name: hbbr
image: rustdesk/rustdesk-server:latest
command: hbbr
volumes:
- ./data:/root
network_mode: "host"
restart: unless-stopped

View File

@@ -0,0 +1,63 @@
# https://github.com/dependency-check/dependency-check-sonar-plugin
services:
sonarqube:
image: sonarqube:community
hostname: sonarqube
container_name: sonarqube
read_only: true
depends_on:
db:
condition: service_healthy
environment:
SONAR_JDBC_URL: jdbc:postgresql://db:5432/sonar
SONAR_JDBC_USERNAME: sonar
SONAR_JDBC_PASSWORD: sonar
volumes:
- sonarqube_data:/opt/sonarqube/data
- sonarqube_extensions:/opt/sonarqube/extensions
- sonarqube_logs:/opt/sonarqube/logs
- sonarqube_temp:/opt/sonarqube/temp
ports:
- "50002:9000"
networks:
- ${NETWORK_TYPE:-ipv4}
db:
image: postgres:17
healthcheck:
test: [ "CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}" ]
interval: 10s
timeout: 5s
retries: 5
hostname: postgresql
container_name: postgresql
environment:
POSTGRES_USER: sonar
POSTGRES_PASSWORD: sonar
POSTGRES_DB: sonar
volumes:
- postgresql:/var/lib/postgresql
- postgresql_data:/var/lib/postgresql/data
networks:
- ${NETWORK_TYPE:-ipv4}
volumes:
sonarqube_data:
sonarqube_temp:
sonarqube_extensions:
sonarqube_logs:
postgresql:
postgresql_data:
networks:
ipv4:
driver: bridge
enable_ipv6: false
dual:
driver: bridge
enable_ipv6: true
ipam:
config:
- subnet: "192.168.2.0/24"
gateway: "192.168.2.1"
- subnet: "2001:db8:2::/64"
gateway: "2001:db8:2::1"

1
vaultwarden/.env.example Normal file
View File

@@ -0,0 +1 @@
ADMIN_TOKEN=''

1
vaultwarden/.gitignore vendored Normal file
View File

@@ -0,0 +1 @@
vw-data

View File

@@ -1,15 +1,13 @@
'3'
services: services:
vaultwarden: vaultwarden:
image: vaultwarden/server:latest image: vaultwarden/server:latest
container_name: vaultwarden container_name: vaultwarden
restart: always restart: always
env_file:
- ./.env
environment: environment:
WEBSOCKET_ENABLED: "true" # Enable WebSocket notifications. WEBSOCKET_ENABLED: "true" # Enable WebSocket notifications.
SIGNUPS_ALLOWED: "false" SIGNUPS_ALLOWED: "false"
# TODO create an admin token
ADMIN_TOKEN: "abc"
volumes: volumes:
- ./vw-data:/data - ./vw-data:/data
ports: ports:

View File

@@ -0,0 +1,30 @@
server {
server_name vault.example.com;
listen [::]:80;
listen 80;
location / {
proxy_pass "http://127.0.0.1:50002/";
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Scheme $scheme;
proxy_set_header X-Forwarded-Proto $scheme;
}
location /notifications/hub {
proxy_pass http://127.0.0.1:50003;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location /notifications/hub/negotiate {
proxy_pass http://127.0.0.1:50002;
}
client_max_body_size 128M; # allow larger uploads
}