Compare commits

...

5 Commits

14 changed files with 11 additions and 62 deletions

View File

@@ -1,6 +1,6 @@
services: services:
actual_server: actual_server:
image: ghcr.io/actualbudget/actual:latest image: ghcr.io/actualbudget/actual:v26.2.0
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- ${DATA_DIR}:/data - ${DATA_DIR}:/data

View File

@@ -1,3 +0,0 @@
DATA_DIR="./crowdsec"
COLLECTIONS="crowdsecurity/traefik crowdsecurity/http-cve crowdsecurity/base-http-scenarios crowdsecurity/sshd crowdsecurity/linux crowdsecurity/appsec-generic-rules crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-crs"
GID=1000

View File

@@ -1,24 +0,0 @@
services:
crowdsec:
image: crowdsecurity/crowdsec
restart: unless-stopped
ports:
- 127.0.0.1:9876:8080
expose:
- 8080
- 6060
- 7422
environment:
COLLECTIONS: "${COLLECTIONS}"
GID: "${GID-1000}"
volumes:
- "${DATA_ROOT}/crowdsec/data:/var/lib/crowdsec/data/"
- "${DATA_ROOT}/crowdsec/config:/etc/crowdsec/"
- "${DATA_ROOT}/traefik/logs:/var/log/traefik:ro"
- /var/log/auth.log:/var/log/auth.log:ro
- /var/log/syslog:/var/log/syslog:ro
networks:
- traefik
networks:
traefik:
external: true

View File

@@ -1,6 +1,6 @@
services: services:
cloudflare-ddns: cloudflare-ddns:
image: favonia/cloudflare-ddns:latest image: favonia/cloudflare-ddns:1.15.1
restart: always restart: always
user: "1000:1000" user: "1000:1000"
read_only: true read_only: true

View File

@@ -1,6 +1,6 @@
services: services:
gitea: gitea:
image: gitea/gitea:latest image: gitea/gitea:1.25.4
restart: unless-stopped restart: unless-stopped
environment: environment:
USER_UID: ${USER_UID} USER_UID: ${USER_UID}
@@ -13,7 +13,7 @@ services:
- gitea-db - gitea-db
runner: runner:
image: gitea/act_runner:latest image: gitea/act_runner:0.2.13
restart: unless-stopped restart: unless-stopped
environment: environment:
CONFIG_FILE: /config/config.yaml CONFIG_FILE: /config/config.yaml

View File

@@ -1,6 +1,6 @@
services: services:
jellyfin: jellyfin:
image: jellyfin/jellyfin image: jellyfin/jellyfin:10
restart: "unless-stopped" restart: "unless-stopped"
user: 1000:1000 user: 1000:1000
volumes: volumes:

View File

@@ -1,6 +1,6 @@
services: services:
kavita: kavita:
image: jvmilazz0/kavita:latest image: jvmilazz0/kavita:0.7.8
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- "${MEDIA_BOOKS}:/books" - "${MEDIA_BOOKS}:/books"

View File

@@ -1,6 +1,6 @@
services: services:
miniflux: miniflux:
image: miniflux/miniflux:latest image: miniflux/miniflux:2.2.17
depends_on: depends_on:
db: db:
condition: service_healthy condition: service_healthy
@@ -20,6 +20,6 @@ services:
volumes: volumes:
- ${DATA_DIR}:/var/lib/postgresql - ${DATA_DIR}:/var/lib/postgresql
healthcheck: healthcheck:
test: ["CMD", "pg_isready", "-U", "miniflux"] test: ["CMD", "pg_isready", "-U", "${POSTGRES_USER}"]
interval: 10s interval: 10s
start_period: 30s start_period: 30s

View File

@@ -1,6 +1,6 @@
services: services:
navidrome: navidrome:
image: deluan/navidrome:latest image: deluan/navidrome:0.60.3
user: 1000:1000 user: 1000:1000
restart: unless-stopped restart: unless-stopped
environment: environment:

View File

@@ -1,6 +1,6 @@
services: services:
qbittorrent: qbittorrent:
image: lscr.io/linuxserver/qbittorrent:latest image: lscr.io/linuxserver/qbittorrent:5.1.4
environment: environment:
- PUID=${PUID} - PUID=${PUID}
- PGID=${PGID} - PGID=${PGID}

View File

@@ -1,4 +1,4 @@
services: services:
speedtest: speedtest:
image: openspeedtest/latest image: openspeedtest/latest:v2.0.6
restart: unless-stopped restart: unless-stopped

View File

@@ -3,4 +3,3 @@ DYNAMIC_DIR="./dynamic"
CF_API_EMAIL=email@example.com CF_API_EMAIL=email@example.com
CF_DNS_API_TOKEN=secret CF_DNS_API_TOKEN=secret
CROWDSEC_LAPI_KEY="secret"

View File

@@ -12,25 +12,3 @@ http:
replacePathRegex: replacePathRegex:
regex: ^/$ regex: ^/$
replacement: /admin/ replacement: /admin/
crowdsec:
plugin:
bouncer:
enabled: true
defaultDecisionSeconds: 60
crowdsecMode: live
crowdsecAppsecEnabled: true
crowdsecAppsecHost: crowdsec:7422
crowdsecAppsecFailureBlock: true
crowdsecAppsecUnreachableBlock: true
crowdsecLapiKey: mvBM8BzhJ1/P8Lcb72gsIn5JNgQCzwsRSKNuBJqJ/0Q
crowdsecLapiHost: crowdsec:8080
crowdsecLapiScheme: http
crowdsecLapiTLSInsecureVerify: false
forwardedHeadersTrustedIPs:
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16
clientTrustedIPs:
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16

View File

@@ -1,4 +1,3 @@
version: "3"
services: services:
db: db:
image: mariadb image: mariadb