chriswin/home-server-docker
1
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

renovate workflow and replace all by latest version

Browse Source
This commit is contained in:
chriswin23
2025-12-29 01:55:59 +01:00
parent d4061164a6
commit 8b9b0e9853
46 changed files with 227 additions and 239 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
project/infrastructure/authelia/authelia.yml
View File

@@ -13,14 +13,15 @@ services:
file: ${TEMPLATES_PATH}
service: default
container_name: authelia
image: authelia/authelia:latest
image: authelia/authelia:4.39.15
ports:
- 9959:9959 # metrics prometheus
networks:
networks:
- ip6net
expose:
- 9091
secrets: [JWT_SECRET, SESSION_SECRET, STORAGE_PASSWORD, STORAGE_ENCRYPTION_KEY]
secrets:
[JWT_SECRET, SESSION_SECRET, STORAGE_PASSWORD, STORAGE_ENCRYPTION_KEY]
environment:
AUTHELIA_JWT_SECRET_FILE: /run/secrets/JWT_SECRET
AUTHELIA_SESSION_SECRET_FILE: /run/secrets/SESSION_SECRET
@@ -32,15 +33,13 @@ services:
- ${INFRA_PATH}/authelia/config:/config
- "/var/log/authelia/:/config/log"
labels:
# Watchtower
- "com.centurylinklabs.watchtower.enable=true"
# Traefik
- 'traefik.enable=true'
- 'traefik.http.routers.authelia.rule=Host(`auth.${PUBLIC_DOMAIN}`)'
- "traefik.enable=true"
- "traefik.http.routers.authelia.rule=Host(`auth.${PUBLIC_DOMAIN}`)"
- "traefik.http.routers.authelia.tls.certresolver=myresolver"
- 'traefik.http.routers.authelia.entryPoints=https'
- 'traefik.http.routers.authelia.tls=true'
- 'traefik.http.routers.authelia.service=authelia-svc'
- 'traefik.http.services.authelia-svc.loadbalancer.server.port=9091'
- "traefik.http.routers.authelia.entryPoints=https"
- "traefik.http.routers.authelia.tls=true"
- "traefik.http.routers.authelia.service=authelia-svc"
- "traefik.http.services.authelia-svc.loadbalancer.server.port=9091"
# Middleware
- "traefik.http.routers.authelia.middlewares=crowdsec-bouncer@file"

7
project/infrastructure/crowdsec/crowdsec.yml
View File

@@ -4,7 +4,7 @@ services:
file: ${TEMPLATES_PATH}
service: default
container_name: crowdsec
image: crowdsecurity/crowdsec:latest
image: crowdsecurity/crowdsec:1.7.4
environment:
COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules crowdsecurity/http-cve
CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY}
@@ -12,7 +12,7 @@ services:
ports:
- 6061:8080
- 6060:6060
networks:
networks:
- ip4net
- ip6net
volumes:
@@ -22,6 +22,3 @@ services:
- /var/log/crowdsec:/var/log/crowdsec:ro
- /var/log/syslog:/var/log/syslog:ro
- /var/log/kern.log:/var/log/kern.log:ro
labels:
# Watchtower
- "com.centurylinklabs.watchtower.enable=true"

6
project/infrastructure/homepage/homepage.yml
View File

@@ -3,11 +3,11 @@ services:
extends:
file: ${TEMPLATES_PATH}
service: default
image: ghcr.io/gethomepage/homepage:latest
image: ghcr.io/gethomepage/homepage:v1.8.0
container_name: homepage
ports:
- 3030:3000
networks:
networks:
- ip4net
environment:
HOMEPAGE_VAR_LOCAL_DOMAIN: ${LOCAL_DOMAIN}
@@ -20,8 +20,6 @@ services:
- ${EXTERNAL_STORAGE}:/disks/e
- /var/run/docker.sock:/var/run/docker.sock:ro # optional, for docker integrations
labels:
# Watchtower
- "com.centurylinklabs.watchtower.enable=true"
# Traefik
- "traefik.enable=true"
- "traefik.http.routers.homepage.rule=Host(`homepage.${LOCAL_DOMAIN}`)"

16
project/infrastructure/ntfy/ntfy.yml
View File

@@ -3,11 +3,11 @@ services:
extends:
file: ${TEMPLATES_PATH}
service: default
container_name: ntfy
image: binwiederhier/ntfy
container_name: ntfy
image: binwiederhier/ntfy:2.15.0
ports:
- "4023:80"
networks:
networks:
- ip4net
command:
- serve
@@ -16,12 +16,10 @@ services:
- ${INFRA_PATH}/ntfy/config:/etc/ntfy
- ${INFRA_PATH}/ntfy/data:/var/lib/ntfy
labels:
# Watchtower
- 'com.centurylinklabs.watchtower.enable=true'
# Traefik
- 'traefik.enable=true'
- 'traefik.http.routers.ntfy.rule=Host(`ntfy.${PUBLIC_DOMAIN}`)'
- 'traefik.http.routers.ntfy.entrypoints=https'
- 'traefik.http.routers.ntfy.tls=true'
- "traefik.enable=true"
- "traefik.http.routers.ntfy.rule=Host(`ntfy.${PUBLIC_DOMAIN}`)"
- "traefik.http.routers.ntfy.entrypoints=https"
- "traefik.http.routers.ntfy.tls=true"
# Middlewares
- "traefik.http.routers.ntfy.middlewares=crowdsec-bouncer@file"

16
project/infrastructure/speedtest/speedtest.yml
View File

@@ -4,18 +4,16 @@ services:
file: ${TEMPLATES_PATH}
service: default
container_name: speedtest
image: openspeedtest/latest
image: openspeedtest/latest:2.0.6
ports:
- "4001:3001" # webport mapping (host:container)
- "3999:3001" # webport mapping (host:container)
networks:
networks:
- ip4net
labels:
# Watchtower
- 'com.centurylinklabs.watchtower.enable=true'
# Traefik
- 'traefik.enable=true'
- 'traefik.http.routers.speedtest.rule=Host(`speedtest.${LOCAL_DOMAIN}`)'
- 'traefik.http.routers.speedtest.entrypoints=https'
- 'traefik.http.routers.speedtest.tls=true'
- 'traefik.http.middlewares.limit.buffering.maxRequestBodyBytes=10000000000'
- "traefik.enable=true"
- "traefik.http.routers.speedtest.rule=Host(`speedtest.${LOCAL_DOMAIN}`)"
- "traefik.http.routers.speedtest.entrypoints=https"
- "traefik.http.routers.speedtest.tls=true"
- "traefik.http.middlewares.limit.buffering.maxRequestBodyBytes=10000000000"

6
project/infrastructure/syncthing/syncthing.yml
View File

@@ -3,7 +3,7 @@ services:
extends:
file: ${TEMPLATES_PATH}
service: default
image: syncthing/syncthing
image: syncthing/syncthing:2.0.12
container_name: syncthing
volumes:
- ${EXTERNAL_STORAGE}/notes/Obsidian-sync:/var/syncthing-data/Obsidian-sync
@@ -14,12 +14,10 @@ services:
- 22000:22000/tcp # TCP file transfers
- 22000:22000/udp # QUIC file transfers
- 21027:21027/udp # Receive local discovery broadcasts
networks:
networks:
- ip4net
- ip6net
labels:
# Watchtower
- "com.centurylinklabs.watchtower.enable=true"
# Traefik
- "traefik.enable=true"
- "traefik.http.routers.syncthing.rule=Host(`syncthing.${LOCAL_DOMAIN}`)"

16
project/infrastructure/traefik/traefik.yml
View File

@@ -3,8 +3,8 @@ services:
extends:
file: ${TEMPLATES_PATH}
service: default
image: "traefik:latest"
container_name: "traefik"
image: traefik:3.6.5
container_name: traefik
ports:
- "80:80"
- "443:443"
@@ -28,8 +28,6 @@ services:
- "${INFRA_PATH}/traefik/html/ban.html:/ban.html"
- "${INFRA_PATH}/traefik/html/captcha.html:/captcha.html"
labels:
# Watchtower
- "com.centurylinklabs.watchtower.enable=true"
# Traefik
- "traefik.enable=true"
- "traefik.http.routers.traefik.service=api@internal"
@@ -41,15 +39,13 @@ services:
extends:
file: ${TEMPLATES_PATH}
service: default
image: traefik/whoami:latest
container_name: "traefik-whoami"
networks:
image: traefik/whoami:1.11
container_name: traefik-whoami
networks:
- ip4net
labels:
# Watchtower
- "com.centurylinklabs.watchtower.enable=true"
# traefik
- "traefik.enable=true"
- "traefik.http.routers.whoami.rule=Host(`whoami.${LOCAL_DOMAIN}`)"
- "traefik.http.routers.whoami.entrypoints=https"
- 'traefik.http.routers.whoami.tls=true'
- "traefik.http.routers.whoami.tls=true"

4
project/infrastructure/uptime-kuma/uptime-kuma.yml
View File

@@ -5,7 +5,7 @@ services:
# extends:
# file: ${TEMPLATES_PATH}
# service: default
image: louislam/uptime-kuma
image: louislam/uptime-kuma:2.0.2
container_name: uptime-kuma
restart: unless-stopped
security_opt:
@@ -21,8 +21,6 @@ services:
- ip4net
- ip6net
labels:
# Watchtower
- "com.centurylinklabs.watchtower.enable=true"
# Traefik
- "traefik.enable=true"
- "traefik.http.routers.uptime-kuma.rule=Host(`uptime-kuma.${LOCAL_DOMAIN}`)"