add home assistant

project/media/immich/immich.yml

@@ -13,7 +13,7 @@ services:
       DB_DATABASE_NAME: immich
       REDIS_HOSTNAME: redis
     volumes:
-      - ${IMMICH_EXTERNAL_PATH}:/usr/src/app/external
+      - ${IMMICH_EXTERNAL_PATH}:/usr/src/app/external:ro
       - ${MEDIA_PATH}/immich/data/library:/usr/src/app/upload
       - /etc/localtime:/etc/localtime:ro
     ports:

project/service/home-assistant/home-assistant.yml

@@ -0,0 +1,21 @@
+services:
+  home-assistant:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    image: ghcr.io/home-assistant/home-assistant:stable
+    container_name: home-assistant
+    ports:
+      - 4012:8123
+    volumes:
+      - ${SERVICE_PATH}/home-assistant/config:/config
+      - /etc/localtime:/etc/localtime:ro
+      - /run/dbus:/run/dbus:ro
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=true"
+      # Traefik
+      - "traefik.enable=true"
+      - "traefik.http.routers.home-assistant.rule=Host(`ha.${LOCAL_DOMAIN}`)"
+      - "traefik.http.routers.home-assistant.entrypoints=https"
+      - "traefik.http.routers.home-assistant.tls=true"

project/service/it-tools/it-tools.yml

@@ -14,6 +14,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.it-tools.rule=Host(`it-tools.${LOCAL_DOMAIN}`)"
       - "traefik.http.routers.it-tools.entrypoints=https"
-      - "traefik.http.routers.it-tools.tls=true"
-      # Middlewares
-      - "traefik.http.routers.it-tools.middlewares=crowdsec-bouncer@file"
+      - "traefik.http.routers.it-tools.tls=true"