Merge pull request 'Update ghcr.io/kiwix/kiwix-serve Docker tag to v3.8.2' (#186) from renovate/ghcr.io-kiwix-kiwix-serve-3.x into main

Reviewed-on: #186

.gitignore

@@ -0,0 +1,18 @@
+ # ignore ALL .log files
+*.env
+*.log
+
+# ignore submodules
+project/service/overleaf-toolkit
+project/service/superset
+
+# ignore ALL files in ANY directory named temp
+data/
+secrets/
+letsencrypt/ 
+config/
+certs/
+init/
+meili_data/
+log-dashboard/
+mousehole/

LICENSE

@@ -0,0 +1,7 @@
+Copyright 2025 chriswin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

README.md

@@ -0,0 +1,3 @@
+## Home network:
+
+![Alt text](Crescentec-network.excalidraw.svg?raw=true "Title")

docker-compose.yml

@@ -3,10 +3,11 @@
 
 # Here I will include all "child" docker compose files that I need.
 # The paths can relative to this file or absolue. I've used INCLUDE_PATH variable to make it more cofigurable.
-# Whenever I need to remove some service then I can comment out the lines here. 
+# Whenever I need to remove some service then I can comment out the lines here.
 include:
   - path:
       - ${DB_PATH}/adminer/adminer.yml
+      - ${DB_PATH}/databasus/databasus.yml
       - ${DB_PATH}/lldap/lldap.yml
       - ${DB_PATH}/mariadb/mariadb.yml
       - ${DB_PATH}/postgres/postgres.yml
@@ -16,14 +17,12 @@ include:
 
   - path:
       - ${INFRA_PATH}/authelia/authelia.yml
-      - ${INFRA_PATH}/crowdsec/crowdsec.yml
       - ${INFRA_PATH}/homepage/homepage.yml
       - ${INFRA_PATH}/ntfy/ntfy.yml
       - ${INFRA_PATH}/speedtest/speedtest.yml
       - ${INFRA_PATH}/syncthing/syncthing.yml
       - ${INFRA_PATH}/traefik/traefik.yml
       - ${INFRA_PATH}/uptime-kuma/uptime-kuma.yml
-      - ${INFRA_PATH}/watchtower/watchtower.yml
     env_file: ${INFRA_PATH}/.env
 
   - path:
@@ -78,7 +77,7 @@ networks:
     enable_ipv6: true
     ipam:
       driver: default
-      # config: 
+      # config:
       #   # - subnet: "2a04:ee41:86:9397::/64"
       #   - subnet: "2001:db8:2:/64"
       #   - gateway: "2001:db8:2::1"

project/db/adminer/adminer.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: adminer:5.4.1
+    image: adminer:5.4.2
     container_name: adminer
     ports:
       - 8085:8080

project/db/databasus/databasus.yml

@@ -0,0 +1,19 @@
+services:
+  databasus:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    image: databasus/databasus:v3.20.0
+    container_name: databasus
+    ports:
+      - 8086:4005
+    networks:
+      - ip4net
+    volumes:
+      - ${DB_PATH}/databasus/data:/databasus-data
+    labels:
+      # Traefik
+      - "traefik.enable=true"
+      - "traefik.http.routers.databasus.rule=Host(`databasus.${LOCAL_DOMAIN}`)"
+      - "traefik.http.routers.databasus.entrypoints=https"
+      - "traefik.http.routers.databasus.tls=true"

project/db/lldap/lldap.yml

@@ -39,9 +39,6 @@ services:
       - "traefik.http.routers.lldap.rule=Host(`ldap.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.lldap.entrypoints=https"
       - "traefik.http.routers.lldap.tls=true"
-      - "traefik.http.routers.lldap.tls.certresolver=myresolver"
       - "traefik.http.routers.lldap.service=lldap-service"
       - "traefik.http.services.lldap-service.loadbalancer.server.port=17170"
       - "traefik.http.services.lldap-service.loadbalancer.server.scheme=http"
-      # middlewares
-      - "traefik.http.routers.lldap.middlewares=crowdsec-bouncer@file"

project/db/mariadb/mariadb.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: mariadb:12.1.2
+    image: mariadb:12.2.2
     container_name: mariadb
     command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
     networks:

project/db/pgadmin/pgadmin.yml

@@ -7,7 +7,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: pgadmin
-    image: dpage/pgadmin4:9.11.0
+    image: dpage/pgadmin4:9.13.0
     ports:
       - 8082:80
     networks:

project/db/redis/redis.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: redis
-    image: redis:8.4.0
+    image: redis:8.6.1
     networks:
       - ip4net
       - ip6net

project/infrastructure/authelia/authelia.yml

@@ -36,10 +36,7 @@ services:
       # Traefik
       - "traefik.enable=true"
       - "traefik.http.routers.authelia.rule=Host(`auth.${PUBLIC_DOMAIN}`)"
-      - "traefik.http.routers.authelia.tls.certresolver=myresolver"
       - "traefik.http.routers.authelia.entryPoints=https"
       - "traefik.http.routers.authelia.tls=true"
       - "traefik.http.routers.authelia.service=authelia-svc"
       - "traefik.http.services.authelia-svc.loadbalancer.server.port=9091"
-      # Middleware
-      - "traefik.http.routers.authelia.middlewares=crowdsec-bouncer@file"

project/infrastructure/crowdsec/crowdsec.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: crowdsec
-    image: crowdsecurity/crowdsec:v1.7.4
+    image: crowdsecurity/crowdsec:v1.7.6
     environment:
       COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules crowdsecurity/http-cve
       CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY}

project/infrastructure/homepage/homepage.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ghcr.io/gethomepage/homepage:v1.8.0
+    image: ghcr.io/gethomepage/homepage:v1.10.1
     container_name: homepage
     ports:
       - 3030:3000
@@ -12,6 +12,7 @@ services:
     environment:
       HOMEPAGE_VAR_LOCAL_DOMAIN: ${LOCAL_DOMAIN}
       HOMEPAGE_VAR_PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}
+      HOMEPAGE_VAR_LOCAL_VPS_DOMAIN: ${VPS_DOMAIN}
       HOMEPAGE_ALLOWED_HOSTS: homepage.${LOCAL_DOMAIN}, 192.168.178.35:3030
     volumes:
       - ${INFRA_PATH}/homepage/config:/app/config

project/infrastructure/ntfy/ntfy.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: ntfy
-    image: binwiederhier/ntfy:v2.15.0
+    image: binwiederhier/ntfy:v2.18.0
     ports:
       - "4023:80"
     networks:
@@ -21,5 +21,3 @@ services:
       - "traefik.http.routers.ntfy.rule=Host(`ntfy.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.ntfy.entrypoints=https"
       - "traefik.http.routers.ntfy.tls=true"
-      # Middlewares
-      - "traefik.http.routers.ntfy.middlewares=crowdsec-bouncer@file"

project/infrastructure/syncthing/syncthing.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: syncthing/syncthing:2.0.12
+    image: syncthing/syncthing:2.0.15
     container_name: syncthing
     volumes:
       - ${EXTERNAL_STORAGE}/notes/Obsidian-sync:/var/syncthing-data/Obsidian-sync
@@ -25,5 +25,3 @@ services:
       - "traefik.http.routers.syncthing.tls=true"
       - "traefik.http.routers.syncthing.service=syncthing-svc"
       - "traefik.http.services.syncthing-svc.loadbalancer.server.port=8384"
-      # Middlewares
-      #- "traefik.http.routers.syncthing.middlewares=crowdsec-bouncer@file"

project/infrastructure/traefik/html/ban.html

@@ -1,329 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-
-<head>
-  <title>CrowdSec Access Forbidden</title>
-  <meta content="text/html; charset=utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <style>
-    /*! tailwindcss v3.2.7 | MIT License | https://tailwindcss.com*/
-    *,
-    :after,
-    :before {
-      border: 0 solid #e5e7eb;
-      box-sizing: border-box
-    }
-
-    :after,
-    :before {
-      --tw-content: ""
-    }
-
-    html {
-      -webkit-text-size-adjust: 100%;
-      font-feature-settings: normal;
-      font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;
-      line-height: 1.5;
-      -moz-tab-size: 4;
-      -o-tab-size: 4;
-      tab-size: 4
-    }
-
-    body {
-      line-height: inherit;
-      margin: 0
-    }
-
-    h1,
-    h2,
-    h3,
-    h4,
-    h5,
-    h6 {
-      font-size: inherit;
-      font-weight: inherit
-    }
-
-    a {
-      color: inherit;
-      text-decoration: inherit
-    }
-
-    h1,
-    h2,
-    h3,
-    h4,
-    h5,
-    h6,
-    hr,
-    p,
-    pre {
-      margin: 0
-    }
-
-    *,
-    ::backdrop,
-    :after,
-    :before {
-      --tw-border-spacing-x: 0;
-      --tw-border-spacing-y: 0;
-      --tw-translate-x: 0;
-      --tw-translate-y: 0;
-      --tw-rotate: 0;
-      --tw-skew-x: 0;
-      --tw-skew-y: 0;
-      --tw-scale-x: 1;
-      --tw-scale-y: 1;
-      --tw-pan-x: ;
-      --tw-pan-y: ;
-      --tw-pinch-zoom: ;
-      --tw-scroll-snap-strictness: proximity;
-      --tw-ordinal: ;
-      --tw-slashed-zero: ;
-      --tw-numeric-figure: ;
-      --tw-numeric-spacing: ;
-      --tw-numeric-fraction: ;
-      --tw-ring-inset: ;
-      --tw-ring-offset-width: 0px;
-      --tw-ring-offset-color: #fff;
-      --tw-ring-color: #3b82f680;
-      --tw-ring-offset-shadow: 0 0 #0000;
-      --tw-ring-shadow: 0 0 #0000;
-      --tw-shadow: 0 0 #0000;
-      --tw-shadow-colored: 0 0 #0000;
-      --tw-blur: ;
-      --tw-brightness: ;
-      --tw-contrast: ;
-      --tw-grayscale: ;
-      --tw-hue-rotate: ;
-      --tw-invert: ;
-      --tw-saturate: ;
-      --tw-sepia: ;
-      --tw-drop-shadow: ;
-      --tw-backdrop-blur: ;
-      --tw-backdrop-brightness: ;
-      --tw-backdrop-contrast: ;
-      --tw-backdrop-grayscale: ;
-      --tw-backdrop-hue-rotate: ;
-      --tw-backdrop-invert: ;
-      --tw-backdrop-opacity: ;
-      --tw-backdrop-saturate: ;
-      --tw-backdrop-sepia:
-    }
-
-    .flex {
-      display: flex
-    }
-
-    .flex-wrap {
-      flex-wrap: wrap
-    }
-
-    .inline-flex {
-      display: inline-flex
-    }
-
-    .h-24 {
-      height: 6rem
-    }
-
-    .h-6 {
-      height: 1.5rem
-    }
-
-    .h-full {
-      height: 100%
-    }
-
-    .h-screen {
-      height: 100vh
-    }
-
-    .text-center {
-      text-align: center
-    }
-
-    .w-24 {
-      width: 6rem
-    }
-
-    .w-6 {
-      width: 1.5rem
-    }
-
-    .w-full {
-      width: 100%
-    }
-
-    .w-screen {
-      width: 100vw
-    }
-
-    .my-3 {
-      margin-top: 0.75rem;
-      margin-bottom: 0.75rem
-    }
-
-    .flex-col {
-      flex-direction: column
-    }
-
-    .items-center {
-      align-items: center
-    }
-
-    .justify-center {
-      justify-content: center
-    }
-
-    .justify-between {
-      justify-content: space-between
-    }
-
-    .space-y-1>:not([hidden])~:not([hidden]) {
-      --tw-space-y-reverse: 0;
-      margin-bottom: calc(.25rem*var(--tw-space-y-reverse));
-      margin-top: calc(.25rem*(1 - var(--tw-space-y-reverse)))
-    }
-
-    .space-y-4>:not([hidden])~:not([hidden]) {
-      --tw-space-y-reverse: 0;
-      margin-bottom: calc(1rem*var(--tw-space-y-reverse));
-      margin-top: calc(1rem*(1 - var(--tw-space-y-reverse)))
-    }
-
-    .rounded-xl {
-      border-radius: .75rem
-    }
-
-    .border-2 {
-      border-width: 2px
-    }
-
-    .border-black {
-      --tw-border-opacity: 1;
-      border-color: rgb(0 0 0/var(--tw-border-opacity))
-    }
-
-    .p-4 {
-      padding: 1rem
-    }
-
-    .px-4 {
-      padding-left: 1rem;
-      padding-right: 1rem
-    }
-
-    .py-2 {
-      padding-bottom: .5rem;
-      padding-top: .5rem
-    }
-
-    .text-2xl {
-      font-size: 1.5rem;
-      line-height: 2rem
-    }
-
-    .text-sm {
-      font-size: .875rem;
-      line-height: 1.25rem
-    }
-
-    .text-xl {
-      font-size: 1.25rem;
-      line-height: 1.75rem
-    }
-
-    .font-bold {
-      font-weight: 700
-    }
-
-    .text-white {
-      --tw-text-opacity: 1;
-      color: rgb(255 255 255/var(--tw-text-opacity))
-    }
-
-    @media (min-width:640px) {
-      .sm\:w-2\/3 {
-        width: 66.666667%
-      }
-    }
-
-    @media (min-width:768px) {
-      .md\:flex-row {
-        flex-direction: row
-      }
-    }
-
-    @media (min-width:1024px) {
-      .lg\:w-1\/2 {
-        width: 50%
-      }
-
-      .lg\:text-3xl {
-        font-size: 1.875rem;
-        line-height: 2.25rem
-      }
-
-      .lg\:text-xl {
-        font-size: 1.25rem;
-        line-height: 1.75rem
-      }
-    }
-
-    @media (min-width:1280px) {
-      .xl\:text-4xl {
-        font-size: 2.25rem;
-        line-height: 2.5rem
-      }
-    }
-  </style>
-</head>
-
-<body class="h-screen w-screen p-4">
-  <div class="h-full w-full flex flex-col justify-center items-center">
-    <div class="border-2 border-black rounded-xl p-4 text-center w-full sm:w-2/3 lg:w-1/2">
-      <div class="flex flex-col items-center space-y-4">
-        <svg fill="black" class="h-24 w-24" aria-hidden="true" focusable="false" data-prefix="fas"
-          data-icon="exclamation-triangle" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"
-          class="warning">
-          <path
-            d="M569.517 440.013C587.975 472.007 564.806 512 527.94 512H48.054c-36.937 0-59.999-40.055-41.577-71.987L246.423 23.985c18.467-32.009 64.72-31.951 83.154 0l239.94 416.028zM288 354c-25.405 0-46 20.595-46 46s20.595 46 46 46 46-20.595 46-46-20.595-46-46-46zm-43.673-165.346l7.418 136c.347 6.364 5.609 11.346 11.982 11.346h48.546c6.373 0 11.635-4.982 11.982-11.346l7.418-136c.375-6.874-5.098-12.654-11.982-12.654h-63.383c-6.884 0-12.356 5.78-11.981 12.654z">
-          </path>
-        </svg>
-        <h1 class="text-2xl lg:text-3xl xl:text-4xl">CrowdSec Access Forbidden</h1>
-      </div>
-      <div class="flex justify-center flex-wrap">
-        <p class="my-3">This security check has been powered by</p>
-        <a href="https://crowdsec.net/" target="_blank" rel="noopener" class="inline-flex flex-col items-center">
-          <svg fill="black" width="33.92" height="33.76" viewBox="0 0 254.4 253.2">
-            <defs>
-              <clipPath id="a">
-                <path d="M0 52h84v201.2H0zm0 0" />
-              </clipPath>
-              <clipPath id="b">
-                <path d="M170 52h84.4v201.2H170zm0 0" />
-              </clipPath>
-            </defs>
-            <path
-              d="M59.3 128.4c1.4 2.3 2.5 4.6 3.4 7-1-4.1-2.3-8.1-4.3-12-3.1-6-7.8-5.8-10.7 0-2 4-3.2 8-4.3 12.1 1-2.4 2-4.8 3.4-7.1 3.4-5.8 8.8-6 12.5 0M207.8 128.4a42.9 42.9 0 013.4 7c-1-4.1-2.3-8.1-4.3-12-3.2-6-7.8-5.8-10.7 0-2 4-3.3 8-4.3 12.1.9-2.4 2-4.8 3.4-7.1 3.4-5.8 8.8-6 12.5 0M134.6 92.9c2 3.5 3.6 7 4.8 10.7-1.3-5.4-3-10.6-5.6-15.7-4-7.5-9.7-7.2-13.3 0a75.4 75.4 0 00-5.6 16c1.2-3.8 2.7-7.4 4.7-11 4.1-7.2 10.6-7.5 15 0M43.8 136.8c.9 4.6 3.7 8.3 7.3 9.2 0 2.7 0 5.5.2 8.2.3 3.3.4 6.6 1 9.6.3 2.3 1 2.2 1.3 0 .5-3 .6-6.3 1-9.6l.2-8.2c3.5-1 6.4-4.6 7.2-9.2a17.8 17.8 0 01-9 2.4c-3.5 0-6.6-1-9.2-2.4M192.4 136.8c.8 4.6 3.7 8.3 7.2 9.2 0 2.7 0 5.5.3 8.2.3 3.3.4 6.6 1 9.6.3 2.3.9 2.2 1.2 0 .6-3 .7-6.3 1-9.6.2-2.7.3-5.5.2-8.2 3.6-1 6.4-4.6 7.3-9.2a17.8 17.8 0 01-9.1 2.4c-3.4 0-6.6-1-9.1-2.4M138.3 104.6c-3.1 1.9-7 3-11.3 3-4.3 0-8.2-1.1-11.3-3 1 5.8 4.5 10.3 9 11.5 0 3.4 0 6.8.3 10.2.4 4.1.5 8.2 1.2 12 .4 2.9 1.2 2.7 1.6 0 .7-3.8.8-7.9 1.2-12 .3-3.4.3-6.8.3-10.2 4.5-1.2 8-5.7 9-11.5" />
-            <path
-              d="M51 146c0 2.7.1 5.5.3 8.2.3 3.3.4 6.6 1 9.6.3 2.3 1 2.2 1.3 0 .5-3 .6-6.3 1-9.6l.2-8.2c3.5-1 6.4-4.6 7.2-9.2a17.8 17.8 0 01-9 2.4c-3.5 0-6.6-1-9.2-2.4.9 4.6 3.7 8.3 7.3 9.2M143.9 105c-1.9-.4-3.5-1.2-4.9-2.3 1.4 5.6 2.5 11.3 4 17 1.2 5 2 10 2.4 15 .6 7.8-4.5 14.5-10.9 14.5h-15c-6.4 0-11.5-6.7-11-14.5.5-5 1.3-10 2.6-15 1.3-5.3 2.3-10.5 3.6-15.7-2.2 1.2-4.8 1.9-7.7 2-4.7.1-9.4-.3-14-1-4-.4-6.7-3-8-6.7-1.3-3.4-2-7-3.3-10.4-.5-1.5-1.6-2.8-2.4-4.2-.4-.6-.8-1.2-.9-1.8v-7.8a77 77 0 0124.5-3c6.1 0 12 1 17.8 3.2 4.7 1.7 9.7 1.8 14.4 0 9-3.4 18.2-3.8 27.5-3 4.9.5 9.8 1.6 14.8 2.4v8.2c0 .6-.3 1.5-.7 1.7-2 .9-2.2 2.7-2.7 4.5-.9 3.2-1.8 6.4-2.9 9.5a11 11 0 01-8.8 7.7 40.6 40.6 0 01-18.4-.2m29.4 80.6c-3.2-26.8-6.4-50-8.9-60.7a14.3 14.3 0 0014.1-14h.4a9 9 0 005.6-16.5 14.3 14.3 0 00-3.7-27.2 9 9 0 00-6.9-14.6c2.4-1.1 4.5-3 5.8-5 3.4-5.3 4-29-8-44.4-5-6.3-9.8-2.5-10 1.8-1 13.2-1.1 23-4.5 34.3a9 9 0 00-16-4.1 14.3 14.3 0 00-28.4 0 9 9 0 00-16 4.1c-3.4-11.2-3.5-21.1-4.4-34.3-.3-4.3-5.2-8-10-1.8-12 15.3-11.5 39-8.1 44.4 1.3 2 3.4 3.9 5.8 5a9 9 0 00-7 14.6 14.3 14.3 0 00-3.6 27.2A9 9 0 0075 111h.5a14.5 14.5 0 0014.3 14c-4 17.2-10 66.3-15 111.3l-1.3 13.4a1656.4 1656.4 0 01106.6 0l-1.4-12.7-5.4-51.3" />
-            <g clip-path="url(#a)">
-              <path
-                d="M83.5 136.6l-2.3.7c-5 1-9.8 1-14.8-.2-1.4-.3-2.7-1-3.8-1.9l3.1 13.7c1 4 1.7 8 2 12 .5 6.3-3.6 11.6-8.7 11.6H46.9c-5.1 0-9.2-5.3-8.7-11.6.3-4 1-8 2-12 1-4.2 1.8-8.5 2.9-12.6-1.8 1-3.9 1.5-6.3 1.6a71 71 0 01-11.1-.7 7.7 7.7 0 01-6.5-5.5c-1-2.7-1.6-5.6-2.6-8.3-.4-1.2-1.3-2.3-2-3.4-.2-.4-.6-1-.6-1.4v-6.3c6.4-2 13-2.6 19.6-2.5 4.9.1 9.6 1 14.2 2.6 3.9 1.4 7.9 1.5 11.7 0 1.8-.7 3.6-1.2 5.5-1.6a13 13 0 01-1.6-15.5A18.3 18.3 0 0159 73.1a11.5 11.5 0 00-17.4 8.1 7.2 7.2 0 00-12.9 3.3c-2.7-9-2.8-17-3.6-27.5-.2-3.4-4-6.5-8-1.4C7.5 67.8 7.9 86.9 10.6 91c1.1 1.7 2.8 3.1 4.7 4a7.2 7.2 0 00-5.6 11.7 11.5 11.5 0 00-2.9 21.9 7.2 7.2 0 004.5 13.2h.3c0 .6 0 1.1.2 1.7.9 5.4 5.6 9.5 11.3 9.5A1177.2 1177.2 0 0010 253.2c18.1-1.5 38.1-2.6 59.5-3.4.4-4.6.8-9.3 1.4-14 1.2-11.6 3.3-30.5 5.7-49.7 2.2-18 4.7-36.3 7-49.5" />
-            </g>
-            <g clip-path="url(#b)">
-              <path
-                d="M254.4 118.2c0-5.8-4.2-10.5-9.7-11.4a7.2 7.2 0 00-5.6-11.7c2-.9 3.6-2.3 4.7-4 2.7-4.2 3.1-23.3-6.5-35.5-4-5.1-7.8-2-8 1.4-.8 10.5-.9 18.5-3.6 27.5a7.2 7.2 0 00-12.8-3.3 11.5 11.5 0 00-17.8-7.9 18.4 18.4 0 01-4.5 22 13 13 0 01-1.3 15.2c2.4.5 4.8 1 7.1 2 3.8 1.3 7.8 1.4 11.6 0 7.2-2.8 14.6-3 22-2.4 4 .4 7.9 1.2 12 1.9l-.1 6.6c0 .5-.2 1.2-.5 1.3-1.7.7-1.8 2.2-2.2 3.7l-2.3 7.6a8.8 8.8 0 01-7 6.1c-5 1-10 1-14.9-.2-1.5-.3-2.8-1-3.9-1.9 1.2 4.5 2 9.1 3.2 13.7 1 4 1.6 8 2 12 .4 6.3-3.6 11.6-8.8 11.6h-12c-5.2 0-9.3-5.3-8.8-11.6.4-4 1-8 2-12 1-4.2 1.9-8.5 3-12.6-1.8 1-4 1.5-6.3 1.6-3.7 0-7.5-.3-11.2-.7a7.7 7.7 0 01-3.7-1.5c3.1 18.4 7.1 51.2 12.5 100.9l.6 5.3.8 7.9c21.4.7 41.5 1.9 59.7 3.4L243 243l-4.4-41.2a606 606 0 00-7-48.7 11.5 11.5 0 0011.2-11.2h.4a7.2 7.2 0 004.4-13.2c4-1.8 6.8-5.8 6.8-10.5" />
-            </g>
-            <path
-              d="M180 249.6h.4a6946 6946 0 00-7.1-63.9l5.4 51.3 1.4 12.6M164.4 125c2.5 10.7 5.7 33.9 8.9 60.7a570.9 570.9 0 00-8.9-60.7M74.8 236.3l-1.4 13.4 1.4-13.4" />
-          </svg>
-          <span>CrowdSec</span>
-        </a>
-      </div>
-    </div>
-  </div>
-</body>
-</html>

project/infrastructure/traefik/html/captcha.html

@@ -1,338 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-
-<head>
-  <title>CrowdSec Captcha</title>
-  <meta content="text/html; charset=utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <style>
-    /*! tailwindcss v3.2.7 | MIT License | https://tailwindcss.com*/
-    *,
-    :after,
-    :before {
-      border: 0 solid #e5e7eb;
-      box-sizing: border-box
-    }
-
-    :after,
-    :before {
-      --tw-content: ""
-    }
-
-    html {
-      -webkit-text-size-adjust: 100%;
-      font-feature-settings: normal;
-      font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;
-      line-height: 1.5;
-      -moz-tab-size: 4;
-      -o-tab-size: 4;
-      tab-size: 4
-    }
-
-    body {
-      line-height: inherit;
-      margin: 0
-    }
-
-    h1,
-    h2,
-    h3,
-    h4,
-    h5,
-    h6 {
-      font-size: inherit;
-      font-weight: inherit
-    }
-
-    a {
-      color: inherit;
-      text-decoration: inherit
-    }
-
-    h1,
-    h2,
-    h3,
-    h4,
-    h5,
-    h6,
-    hr,
-    p,
-    pre {
-      margin: 0
-    }
-
-    *,
-    ::backdrop,
-    :after,
-    :before {
-      --tw-border-spacing-x: 0;
-      --tw-border-spacing-y: 0;
-      --tw-translate-x: 0;
-      --tw-translate-y: 0;
-      --tw-rotate: 0;
-      --tw-skew-x: 0;
-      --tw-skew-y: 0;
-      --tw-scale-x: 1;
-      --tw-scale-y: 1;
-      --tw-pan-x: ;
-      --tw-pan-y: ;
-      --tw-pinch-zoom: ;
-      --tw-scroll-snap-strictness: proximity;
-      --tw-ordinal: ;
-      --tw-slashed-zero: ;
-      --tw-numeric-figure: ;
-      --tw-numeric-spacing: ;
-      --tw-numeric-fraction: ;
-      --tw-ring-inset: ;
-      --tw-ring-offset-width: 0px;
-      --tw-ring-offset-color: #fff;
-      --tw-ring-color: #3b82f680;
-      --tw-ring-offset-shadow: 0 0 #0000;
-      --tw-ring-shadow: 0 0 #0000;
-      --tw-shadow: 0 0 #0000;
-      --tw-shadow-colored: 0 0 #0000;
-      --tw-blur: ;
-      --tw-brightness: ;
-      --tw-contrast: ;
-      --tw-grayscale: ;
-      --tw-hue-rotate: ;
-      --tw-invert: ;
-      --tw-saturate: ;
-      --tw-sepia: ;
-      --tw-drop-shadow: ;
-      --tw-backdrop-blur: ;
-      --tw-backdrop-brightness: ;
-      --tw-backdrop-contrast: ;
-      --tw-backdrop-grayscale: ;
-      --tw-backdrop-hue-rotate: ;
-      --tw-backdrop-invert: ;
-      --tw-backdrop-opacity: ;
-      --tw-backdrop-saturate: ;
-      --tw-backdrop-sepia:
-    }
-
-    .flex {
-      display: flex
-    }
-    .flex-wrap {
-      flex-wrap: wrap
-    }
-
-    .inline-flex {
-      display: inline-flex
-    }
-
-    .h-24 {
-      height: 6rem
-    }
-
-    .h-6 {
-      height: 1.5rem
-    }
-
-    .h-full {
-      height: 100%
-    }
-
-    .h-screen {
-      height: 100vh
-    }
-
-    .text-center {
-      text-align: center
-    }
-
-    .w-24 {
-      width: 6rem
-    }
-
-    .w-6 {
-      width: 1.5rem
-    }
-
-    .w-full {
-      width: 100%
-    }
-
-    .w-screen {
-      width: 100vw
-    }
-
-    .my-3 {
-      margin-top: 0.75rem;
-      margin-bottom: 0.75rem
-    }
-
-    .flex-col {
-      flex-direction: column
-    }
-
-    .items-center {
-      align-items: center
-    }
-
-    .justify-center {
-      justify-content: center
-    }
-
-    .justify-between {
-      justify-content: space-between
-    }
-
-    .space-y-1>:not([hidden])~:not([hidden]) {
-      --tw-space-y-reverse: 0;
-      margin-bottom: calc(.25rem*var(--tw-space-y-reverse));
-      margin-top: calc(.25rem*(1 - var(--tw-space-y-reverse)))
-    }
-
-    .space-y-4>:not([hidden])~:not([hidden]) {
-      --tw-space-y-reverse: 0;
-      margin-bottom: calc(1rem*var(--tw-space-y-reverse));
-      margin-top: calc(1rem*(1 - var(--tw-space-y-reverse)))
-    }
-
-    .rounded-xl {
-      border-radius: .75rem
-    }
-
-    .border-2 {
-      border-width: 2px
-    }
-
-    .border-black {
-      --tw-border-opacity: 1;
-      border-color: rgb(0 0 0/var(--tw-border-opacity))
-    }
-
-    .p-4 {
-      padding: 1rem
-    }
-
-    .px-4 {
-      padding-left: 1rem;
-      padding-right: 1rem
-    }
-
-    .py-2 {
-      padding-bottom: .5rem;
-      padding-top: .5rem
-    }
-
-    .text-2xl {
-      font-size: 1.5rem;
-      line-height: 2rem
-    }
-
-    .text-sm {
-      font-size: .875rem;
-      line-height: 1.25rem
-    }
-
-    .text-xl {
-      font-size: 1.25rem;
-      line-height: 1.75rem
-    }
-
-    .font-bold {
-      font-weight: 700
-    }
-
-    .text-white {
-      --tw-text-opacity: 1;
-      color: rgb(255 255 255/var(--tw-text-opacity))
-    }
-
-    @media (min-width:640px) {
-      .sm\:w-2\/3 {
-        width: 66.666667%
-      }
-    }
-
-    @media (min-width:768px) {
-      .md\:flex-row {
-        flex-direction: row
-      }
-    }
-
-    @media (min-width:1024px) {
-      .lg\:w-1\/2 {
-        width: 50%
-      }
-
-      .lg\:text-3xl {
-        font-size: 1.875rem;
-        line-height: 2.25rem
-      }
-
-      .lg\:text-xl {
-        font-size: 1.25rem;
-        line-height: 1.75rem
-      }
-    }
-
-    @media (min-width:1280px) {
-      .xl\:text-4xl {
-        font-size: 2.25rem;
-        line-height: 2.5rem
-      }
-    }
-  </style>
-  <script src="{{ .FrontendJS }}" async defer></script>
-</head>
-
-<body class="h-screen w-screen p-4">
-  <div class="h-full w-full flex flex-col justify-center items-center">
-    <div class="border-2 border-black rounded-xl p-4 text-center w-full sm:w-2/3 lg:w-1/2">
-      <div class="flex flex-col items-center space-y-4">
-        <svg fill="black" class="h-24 w-24" aria-hidden="true" focusable="false" data-prefix="fas"
-          data-icon="exclamation-triangle" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"
-          class="warning">
-          <path
-            d="M569.517 440.013C587.975 472.007 564.806 512 527.94 512H48.054c-36.937 0-59.999-40.055-41.577-71.987L246.423 23.985c18.467-32.009 64.72-31.951 83.154 0l239.94 416.028zM288 354c-25.405 0-46 20.595-46 46s20.595 46 46 46 46-20.595 46-46-20.595-46-46-46zm-43.673-165.346l7.418 136c.347 6.364 5.609 11.346 11.982 11.346h48.546c6.373 0 11.635-4.982 11.982-11.346l7.418-136c.375-6.874-5.098-12.654-11.982-12.654h-63.383c-6.884 0-12.356 5.78-11.981 12.654z">
-          </path>
-        </svg>
-        <h1 class="text-2xl lg:text-3xl xl:text-4xl">CrowdSec Captcha</h1>
-      </div>
-      <form action="" method="POST" class="flex flex-col space-y-1" id="captcha-form">
-        <div id="captcha" class="{{ .FrontendKey }}" data-sitekey="{{ .SiteKey }}" data-callback="captchaCallback">
-        </div>
-      </form>
-      <div class="flex justify-center flex-wrap">
-        <p class="my-3">This security check has been powered by</p>
-        <a href="https://crowdsec.net/" target="_blank" rel="noopener" class="inline-flex flex-col items-center">
-          <svg fill="black" width="33.92" height="33.76" viewBox="0 0 254.4 253.2">
-            <defs>
-              <clipPath id="a">
-                <path d="M0 52h84v201.2H0zm0 0" />
-              </clipPath>
-              <clipPath id="b">
-                <path d="M170 52h84.4v201.2H170zm0 0" />
-              </clipPath>
-            </defs>
-            <path
-              d="M59.3 128.4c1.4 2.3 2.5 4.6 3.4 7-1-4.1-2.3-8.1-4.3-12-3.1-6-7.8-5.8-10.7 0-2 4-3.2 8-4.3 12.1 1-2.4 2-4.8 3.4-7.1 3.4-5.8 8.8-6 12.5 0M207.8 128.4a42.9 42.9 0 013.4 7c-1-4.1-2.3-8.1-4.3-12-3.2-6-7.8-5.8-10.7 0-2 4-3.3 8-4.3 12.1.9-2.4 2-4.8 3.4-7.1 3.4-5.8 8.8-6 12.5 0M134.6 92.9c2 3.5 3.6 7 4.8 10.7-1.3-5.4-3-10.6-5.6-15.7-4-7.5-9.7-7.2-13.3 0a75.4 75.4 0 00-5.6 16c1.2-3.8 2.7-7.4 4.7-11 4.1-7.2 10.6-7.5 15 0M43.8 136.8c.9 4.6 3.7 8.3 7.3 9.2 0 2.7 0 5.5.2 8.2.3 3.3.4 6.6 1 9.6.3 2.3 1 2.2 1.3 0 .5-3 .6-6.3 1-9.6l.2-8.2c3.5-1 6.4-4.6 7.2-9.2a17.8 17.8 0 01-9 2.4c-3.5 0-6.6-1-9.2-2.4M192.4 136.8c.8 4.6 3.7 8.3 7.2 9.2 0 2.7 0 5.5.3 8.2.3 3.3.4 6.6 1 9.6.3 2.3.9 2.2 1.2 0 .6-3 .7-6.3 1-9.6.2-2.7.3-5.5.2-8.2 3.6-1 6.4-4.6 7.3-9.2a17.8 17.8 0 01-9.1 2.4c-3.4 0-6.6-1-9.1-2.4M138.3 104.6c-3.1 1.9-7 3-11.3 3-4.3 0-8.2-1.1-11.3-3 1 5.8 4.5 10.3 9 11.5 0 3.4 0 6.8.3 10.2.4 4.1.5 8.2 1.2 12 .4 2.9 1.2 2.7 1.6 0 .7-3.8.8-7.9 1.2-12 .3-3.4.3-6.8.3-10.2 4.5-1.2 8-5.7 9-11.5" />
-            <path
-              d="M51 146c0 2.7.1 5.5.3 8.2.3 3.3.4 6.6 1 9.6.3 2.3 1 2.2 1.3 0 .5-3 .6-6.3 1-9.6l.2-8.2c3.5-1 6.4-4.6 7.2-9.2a17.8 17.8 0 01-9 2.4c-3.5 0-6.6-1-9.2-2.4.9 4.6 3.7 8.3 7.3 9.2M143.9 105c-1.9-.4-3.5-1.2-4.9-2.3 1.4 5.6 2.5 11.3 4 17 1.2 5 2 10 2.4 15 .6 7.8-4.5 14.5-10.9 14.5h-15c-6.4 0-11.5-6.7-11-14.5.5-5 1.3-10 2.6-15 1.3-5.3 2.3-10.5 3.6-15.7-2.2 1.2-4.8 1.9-7.7 2-4.7.1-9.4-.3-14-1-4-.4-6.7-3-8-6.7-1.3-3.4-2-7-3.3-10.4-.5-1.5-1.6-2.8-2.4-4.2-.4-.6-.8-1.2-.9-1.8v-7.8a77 77 0 0124.5-3c6.1 0 12 1 17.8 3.2 4.7 1.7 9.7 1.8 14.4 0 9-3.4 18.2-3.8 27.5-3 4.9.5 9.8 1.6 14.8 2.4v8.2c0 .6-.3 1.5-.7 1.7-2 .9-2.2 2.7-2.7 4.5-.9 3.2-1.8 6.4-2.9 9.5a11 11 0 01-8.8 7.7 40.6 40.6 0 01-18.4-.2m29.4 80.6c-3.2-26.8-6.4-50-8.9-60.7a14.3 14.3 0 0014.1-14h.4a9 9 0 005.6-16.5 14.3 14.3 0 00-3.7-27.2 9 9 0 00-6.9-14.6c2.4-1.1 4.5-3 5.8-5 3.4-5.3 4-29-8-44.4-5-6.3-9.8-2.5-10 1.8-1 13.2-1.1 23-4.5 34.3a9 9 0 00-16-4.1 14.3 14.3 0 00-28.4 0 9 9 0 00-16 4.1c-3.4-11.2-3.5-21.1-4.4-34.3-.3-4.3-5.2-8-10-1.8-12 15.3-11.5 39-8.1 44.4 1.3 2 3.4 3.9 5.8 5a9 9 0 00-7 14.6 14.3 14.3 0 00-3.6 27.2A9 9 0 0075 111h.5a14.5 14.5 0 0014.3 14c-4 17.2-10 66.3-15 111.3l-1.3 13.4a1656.4 1656.4 0 01106.6 0l-1.4-12.7-5.4-51.3" />
-            <g clip-path="url(#a)">
-              <path
-                d="M83.5 136.6l-2.3.7c-5 1-9.8 1-14.8-.2-1.4-.3-2.7-1-3.8-1.9l3.1 13.7c1 4 1.7 8 2 12 .5 6.3-3.6 11.6-8.7 11.6H46.9c-5.1 0-9.2-5.3-8.7-11.6.3-4 1-8 2-12 1-4.2 1.8-8.5 2.9-12.6-1.8 1-3.9 1.5-6.3 1.6a71 71 0 01-11.1-.7 7.7 7.7 0 01-6.5-5.5c-1-2.7-1.6-5.6-2.6-8.3-.4-1.2-1.3-2.3-2-3.4-.2-.4-.6-1-.6-1.4v-6.3c6.4-2 13-2.6 19.6-2.5 4.9.1 9.6 1 14.2 2.6 3.9 1.4 7.9 1.5 11.7 0 1.8-.7 3.6-1.2 5.5-1.6a13 13 0 01-1.6-15.5A18.3 18.3 0 0159 73.1a11.5 11.5 0 00-17.4 8.1 7.2 7.2 0 00-12.9 3.3c-2.7-9-2.8-17-3.6-27.5-.2-3.4-4-6.5-8-1.4C7.5 67.8 7.9 86.9 10.6 91c1.1 1.7 2.8 3.1 4.7 4a7.2 7.2 0 00-5.6 11.7 11.5 11.5 0 00-2.9 21.9 7.2 7.2 0 004.5 13.2h.3c0 .6 0 1.1.2 1.7.9 5.4 5.6 9.5 11.3 9.5A1177.2 1177.2 0 0010 253.2c18.1-1.5 38.1-2.6 59.5-3.4.4-4.6.8-9.3 1.4-14 1.2-11.6 3.3-30.5 5.7-49.7 2.2-18 4.7-36.3 7-49.5" />
-            </g>
-            <g clip-path="url(#b)">
-              <path
-                d="M254.4 118.2c0-5.8-4.2-10.5-9.7-11.4a7.2 7.2 0 00-5.6-11.7c2-.9 3.6-2.3 4.7-4 2.7-4.2 3.1-23.3-6.5-35.5-4-5.1-7.8-2-8 1.4-.8 10.5-.9 18.5-3.6 27.5a7.2 7.2 0 00-12.8-3.3 11.5 11.5 0 00-17.8-7.9 18.4 18.4 0 01-4.5 22 13 13 0 01-1.3 15.2c2.4.5 4.8 1 7.1 2 3.8 1.3 7.8 1.4 11.6 0 7.2-2.8 14.6-3 22-2.4 4 .4 7.9 1.2 12 1.9l-.1 6.6c0 .5-.2 1.2-.5 1.3-1.7.7-1.8 2.2-2.2 3.7l-2.3 7.6a8.8 8.8 0 01-7 6.1c-5 1-10 1-14.9-.2-1.5-.3-2.8-1-3.9-1.9 1.2 4.5 2 9.1 3.2 13.7 1 4 1.6 8 2 12 .4 6.3-3.6 11.6-8.8 11.6h-12c-5.2 0-9.3-5.3-8.8-11.6.4-4 1-8 2-12 1-4.2 1.9-8.5 3-12.6-1.8 1-4 1.5-6.3 1.6-3.7 0-7.5-.3-11.2-.7a7.7 7.7 0 01-3.7-1.5c3.1 18.4 7.1 51.2 12.5 100.9l.6 5.3.8 7.9c21.4.7 41.5 1.9 59.7 3.4L243 243l-4.4-41.2a606 606 0 00-7-48.7 11.5 11.5 0 0011.2-11.2h.4a7.2 7.2 0 004.4-13.2c4-1.8 6.8-5.8 6.8-10.5" />
-            </g>
-            <path
-              d="M180 249.6h.4a6946 6946 0 00-7.1-63.9l5.4 51.3 1.4 12.6M164.4 125c2.5 10.7 5.7 33.9 8.9 60.7a570.9 570.9 0 00-8.9-60.7M74.8 236.3l-1.4 13.4 1.4-13.4" />
-          </svg>
-          <span>CrowdSec</span>
-        </a>
-      </div>
-    </div>
-  </div>
-  <script>
-    function captchaCallback() {
-      setTimeout(() => document.querySelector('#captcha-form').submit(), 500);
-    }
-  </script>
-</body>
-</html>

project/infrastructure/traefik/traefik.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: traefik:3.6.5
+    image: traefik:v3.6.10
     container_name: traefik
     ports:
       - "80:80"
@@ -15,12 +15,12 @@ services:
     environment:
       TRAEFIK_EMAIL: ${EMAIL}
       TRAEFIK_LOCAL_DOMAIN: ${LOCAL_DOMAIN}
+      TRAEFIK_VPS_DOMAIN: ${VPS_DOMAIN}
       TRAEFIK_PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}
       TRAEFIK_AUTH_PUBLIC_DOMAIN: auth.${PUBLIC_DOMAIN}
-      TRAEFIK_CROWDSEC_API_KEY: ${CROWDSEC_API_KEY}
       INFOMANIAK_ACCESS_TOKEN: ${INFOMANIAK_CERTIFICATE_ACCESS_TOKEN}
     volumes:
-      - "/var/log/crowdsec/:/var/log/crowdsec/"
+      - "/var/log/traefik/:/var/log/traefik/"
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
       - "${INFRA_PATH}/traefik/letsencrypt:/letsencrypt"
       - "${INFRA_PATH}/traefik/config:/etc/traefik"

project/infrastructure/uptime-kuma/uptime-kuma.yml

@@ -5,7 +5,7 @@ services:
     # extends:
     #   file: ${TEMPLATES_PATH}
     #   service: default
-    image: louislam/uptime-kuma:2.0.2
+    image: louislam/uptime-kuma:2.2.1
     container_name: uptime-kuma
     restart: unless-stopped
     security_opt:

project/infrastructure/watchtower/watchtower.yml

@@ -1,26 +0,0 @@
-services:
-  watchtower:
-    extends:
-      file: ${TEMPLATES_PATH}
-      service: default
-    image: containrrr/watchtower:latest
-    container_name: watchtower
-    environment:
-      - WATCHTOWER_CLEANUP=true
-      - WATCHTOWER_POLL_INTERVAL=43200 # 12h
-      - WATCHTOWER_INCLUDE_RESTARTING=true
-      - WATCHTOWER_LABEL_ENABLE=true
-      - WATCHTOWER_HTTP_API_METRICS=true
-      - WATCHTOWER_HTTP_API_TOKEN=mytoken
-      - WATCHTOWER_HTTP_API_UPDATE=true
-      - WATCHTOWER_HTTP_API_PERIODIC_POLLS=true
-    ports:
-      - 7999:8080
-    networks:
-      - ip4net
-    volumes:
-      # - ${INFRA_PATH}/watchtower/config:/config.json
-      - /var/run/docker.sock:/var/run/docker.sock
-    labels:
-      # Watchtower
-      - "com.centurylinklabs.watchtower.enable=true"

project/media/audiobookshelf/audiobookshelf.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ghcr.io/advplyr/audiobookshelf:2.32.1
+    image: ghcr.io/advplyr/audiobookshelf:2.33.0
     container_name: audiobookshelf
     ports:
       - 13378:80
@@ -18,7 +18,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.audiobookshelf.rule=Host(`audiobookshelf.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.audiobookshelf.entrypoints=https"
-      - "traefik.http.routers.audiobookshelf.tls.certresolver=myresolver"
       - "traefik.http.routers.audiobookshelf.tls=true"
-      # Middlewares
-      - "traefik.http.routers.audiobookshelf.middlewares=crowdsec-bouncer@file"

project/media/calibre/calibre.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: lscr.io/linuxserver/calibre:8.16.2
+    image: lscr.io/linuxserver/calibre:9.5.0
     container_name: calibre
     environment:
       - PASSWORD= #optional
@@ -29,7 +29,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: lscr.io/linuxserver/calibre-web:0.6.25
+    image: lscr.io/linuxserver/calibre-web:0.6.26
     container_name: calibre-web
     environment:
       - DOCKER_MODS=linuxserver/mods:universal-calibre #optional

project/media/immich/immich.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v2.4.1
+    image: ghcr.io/immich-app/immich-server:v2.5.6
     environment:
       DB_PASSWORD: ${IMMICH_DB_PASSWORD}
       DB_HOSTNAME: postgres-with-pg-vector
@@ -25,17 +25,14 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.immich-server.rule=Host(`immich.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.immich-server.entrypoints=https"
-      - "traefik.http.routers.immich-server.tls.certresolver=myresolver"
       - "traefik.http.routers.immich-server.tls=true"
-      # Middlewares
-      - "traefik.http.routers.immich-server.middlewares=crowdsec-bouncer@file"
 
   immich-machine-learning:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v2.4.1
+    image: ghcr.io/immich-app/immich-machine-learning:v2.5.6
     ports:
       - 3003:3003
     volumes:
@@ -43,15 +40,15 @@ services:
 
   # https://github.com/Salvoxia/immich-folder-album-creator
   # one time run:
-  # docker run -e -e API_URL="https://immich.crescentec.xyz/api/" -e API_KEY="qTaebdVMtph9yD0pSJRJDQJkDEpexiXNMJ5V5HBEnA" -e ROOT_PATH="/usr/src/app/external" -e LOG_LEVEL="DEBUG" salvoxia/immich-folder-album-creator:latest /script/immich_auto_album.sh
+  # docker run -e -e API_URL="https://immich.${PUBLIC_DOMAIN}/api/" -e API_KEY="qTaebdVMtph9yD0pSJRJDQJkDEpexiXNMJ5V5HBEnA" -e ROOT_PATH="/usr/src/app/external" -e LOG_LEVEL="DEBUG" salvoxia/immich-folder-album-creator:latest /script/immich_auto_album.sh
   immich-folder-album-creator:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: immich_folder_album_creator
-    image: salvoxia/immich-folder-album-creator:0.24.0
+    image: salvoxia/immich-folder-album-creator:0.25.1
     environment:
-      API_URL: https://immich.crescentec.xyz/api
+      API_URL: https://immich.${PUBLIC_DOMAIN}/api
       API_KEY: qTaebdVMtph9yD0pSJRJDQJkDEpexiXNMJ5V5HBEnA
       ROOT_PATH: /usr/src/app/external
       CRON_EXPRESSION: "0 * * * *"

project/media/kiwix/kiwix.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ghcr.io/kiwix/kiwix-serve:3.8.1
+    image: ghcr.io/kiwix/kiwix-serve:3.8.2
     container_name: kiwix
     ports:
       - 2009:8080

project/media/navidrome/navidrome.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: deluan/navidrome:0.59.0
+    image: deluan/navidrome:0.60.3
     container_name: navidrome
     ports:
       - 2011:4533
@@ -22,8 +22,8 @@ services:
       - "traefik.http.routers.navidrome.entrypoints=https"
       - "traefik.http.routers.navidrome.tls=true"
       # Middlewares
-      - "traefik.http.routers.navidrome.middlewares=crowdsec-bouncer@file, authelia@file"
+      - "traefik.http.routers.navidrome.middlewares=authelia@file"
       # Subsonic endpoint use basic authentication middleware from authelia
       - "traefik.http.routers.navidrome-subsonic.rule=Host(`navidrome.${PUBLIC_DOMAIN}`) && PathPrefix(`/rest/`) && !Query(`c`, `NavidromeUI`)"
       - "traefik.http.routers.navidrome-subsonic.entrypoints=https"
-      - "traefik.http.routers.navidrome-subsonic.middlewares=crowdsec-bouncer@file, authelia-basicauth@file, subsonic-basicauth@file"
+      - "traefik.http.routers.navidrome-subsonic.middlewares=authelia-basicauth@file, subsonic-basicauth@file"

project/media/prowlarr/prowlarr.yml

@@ -18,3 +18,12 @@ services:
       - "traefik.http.routers.prowlarr.entrypoints=https"
       - "traefik.http.routers.prowlarr.tls=true"
 
+  mousehole:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    ports:
+      - 5010:5010
+    image: tmmrtn/mousehole:0.2.0
+    volumes:
+      - ${MEDIA_PATH}/prowlarr/mousehole:/srv/mousehole

project/media/slskd/slskd.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: slskd/slskd:0.24.1
+    image: slskd/slskd:0.24.5
     container_name: slskd
     user: ${PUID}:${PGID}
     ports:

project/monitoring/dozzle/dozzle.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: dozzle
-    image: amir20/dozzle:v8.14.12
+    image: amir20/dozzle:v10.1.1
     ports:
       - 8083:8080
     networks:

project/monitoring/grafana/grafana.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: grafana
-    image: grafana/grafana-oss:12.3.1
+    image: grafana/grafana-oss:12.4.1
     ports:
       - 8090:3000
     networks:

project/monitoring/loki/loki.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: loki
-    image: grafana/loki:3.6.3
+    image: grafana/loki:3.6.7
     ports:
       - 8094:3100
     networks:
@@ -23,7 +23,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: promtail
-    image: grafana/promtail:3.6.3
+    image: grafana/promtail:3.6.7
     networks:
       - ip4net
     volumes:

project/monitoring/prometheus/prometheus.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: prometheus
-    image: prom/prometheus:v3.8.1
+    image: prom/prometheus:v3.10.0
     ports:
       - 9090:9090
     networks:

project/service/freshrss/freshrss.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: freshrss/freshrss:1.28.0
+    image: freshrss/freshrss:1.28.1
     container_name: freshrss
     ports:
       - 4014:80
@@ -21,6 +21,3 @@ services:
       - "traefik.http.routers.freshrss.rule=Host(`rss.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.freshrss.entrypoints=https"
       - "traefik.http.routers.freshrss.tls=true"
-      - "traefik.http.routers.freshrss.tls.certresolver=myresolver"
-      # Middlewares
-      - "traefik.http.routers.freshrss.middlewares=crowdsec-bouncer@file"

project/service/ghost/ghost.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ghost:6.10.3-alpine
+    image: ghost:6.22.0-alpine
     container_name: ghost
     ports:
       - 4016:2368

project/service/gitea/gitea.yml

@@ -41,18 +41,15 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.gitea.rule=Host(`gitea.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.gitea.entrypoints=https"
-      - "traefik.http.routers.gitea.tls.certresolver=myresolver"
       - "traefik.http.routers.gitea.tls=true"
       - "traefik.http.routers.gitea.service=gitea-service"
       - "traefik.http.services.gitea-service.loadbalancer.server.port=4002"
-      # Middlewares
-      - "traefik.http.routers.gitea.middlewares=crowdsec-bouncer@file"
 
   gitea-runner:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: gitea/act_runner:0.2.13
+    image: gitea/act_runner:0.3.0
     container_name: gitea_runner
     depends_on:
       - gitea

project/service/home-assistant/home-assistant.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ghcr.io/home-assistant/home-assistant:2025.12.5
+    image: ghcr.io/home-assistant/home-assistant:2026.3.1
     container_name: home-assistant
     networks:
       - ip4net

project/service/linkwarden/linkwarden.yml

@@ -45,3 +45,9 @@ services:
       - MEILI_MASTER_KEY=${LINKWARDEN_MEILI_MASTER_KEY}
     volumes:
       - ${SERVICE_PATH}/linkwarden/meili_data:/meili_data
+    # command:
+    #   [
+    #     "--master-key=${LINKWARDEN_MEILI_MASTER_KEY}",
+    #     "--env=production",
+    #     "--import-dump=${SERVICE_PATH}/linkwarden/meili_data/dumps/20260115-183317235.dump",
+    #   ]

project/service/mealie/mealie.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ghcr.io/mealie-recipes/mealie:v3.8.0
+    image: ghcr.io/mealie-recipes/mealie:v3.12.0
     container_name: mealie
     ports:
       - "4006:9000"
@@ -33,7 +33,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.mealie.rule=Host(`mealie.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.mealie.entrypoints=https"
-      - "traefik.http.routers.mealie.tls.certresolver=myresolver"
       - "traefik.http.routers.mealie.tls=true"
-      # Middlewares
-      - "traefik.http.routers.mealie.middlewares=crowdsec-bouncer@file"

project/service/n8n/Dockerfile

@@ -0,0 +1,51 @@
+# Start with the official n8n image
+FROM n8nio/n8n:2.12.2
+
+# Copy apk and its deps from Alpine 3.23
+COPY --from=alpine:3.23 /sbin/apk /sbin/apk
+COPY --from=alpine:3.23 /usr/lib/libapk.so* /usr/lib/
+
+# Switch to root to install dependencies
+USER root
+
+# Install Chromium and necessary dependencies for Puppeteer
+RUN set -x \
+    && apk update \
+    && apk upgrade \
+    && apk add --no-cache \
+    udev \
+    chromium \
+    nss \
+    freetype \
+    harfbuzz \
+    ca-certificates \
+    ttf-freefont \
+    wget \
+    nodejs \
+    npm
+
+# Set environment variable for Puppeteer to find Chromium
+ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+ENV XDG_CONFIG_HOME=/tmp/.chromium
+ENV XDG_CACHE_HOME=/tmp/.chromium
+
+# Install Puppeteer
+RUN npm install puppeteer
+
+# Install restic and rclone for backups
+RUN apk add --no-cache \
+    restic \
+    curl \
+    unzip
+
+# Download and install rclone
+RUN curl -O https://downloads.rclone.org/rclone-current-linux-amd64.zip \
+    && unzip rclone-current-linux-amd64.zip \
+    && cd rclone-*-linux-amd64 \
+    && cp rclone /usr/local/bin/ \
+    && chmod 755 /usr/local/bin/rclone \
+    && cd .. && rm -rf rclone-*-linux-amd64*
+
+# Revert back to non-root (default n8n user)
+USER node

project/service/n8n/n8n.yml

@@ -3,7 +3,9 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: docker.n8n.io/n8nio/n8n:2.2.1
+    build:
+      context: .
+      dockerfile: ${SERVICE_PATH}/n8n/Dockerfile
     container_name: n8n
     ports:
       - 4022:5678
@@ -13,18 +15,24 @@ services:
       - N8N_BLOCK_ENV_ACCESS_IN_NODE=false
       - MAM_USERNAME=${N8N_MAM_USERNAME}
       - MAM_PASSWORD=${N8N_MAM_PASSWORD}
-      - PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+      - RESTIC_PASSWORD=${N8N_RESTIC_PASSWORD}
-      - PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+      - NODES_EXCLUDE=[]
-    user: root
+      - DB_TYPE=postgresdb
+      - DB_POSTGRESDB_HOST=postgres
+      - DB_POSTGRESDB_PORT=5432
+      - DB_POSTGRESDB_DATABASE=n8n
+      - DB_POSTGRESDB_USER=n8n
+      - DB_POSTGRESDB_PASSWORD=${N8N_DB_PASSWORD}
+      - DB_POSTGRESDB_SCHEMA=public
     volumes:
       - ${SERVICE_PATH}/n8n/data:/home/node/.n8n
-    entrypoint: /home/node/.n8n/script/entrypoint.sh
+      - ${SERVICE_PATH}/n8n/data/rclone.conf:/home/node/.config/rclone/rclone.conf
+      - ${PWD}/scripts:/home/node/.n8n/external-scripts
+      - ${DB_PATH}/databasus/data/backups:/home/node/.n8n/database
+      - ${EXTERNAL_STORAGE}/:/home/node/.n8n/data
     labels:
       # Traefik
       - "traefik.enable=true"
       - "traefik.http.routers.n8n.rule=Host(`n8n.${LOCAL_DOMAIN}`)"
       - "traefik.http.routers.n8n.entrypoints=https"
       - "traefik.http.routers.n8n.tls=true"
-      - "traefik.http.routers.n8n.tls.certresolver=myresolver"
-      # Middlewares
-      - "traefik.http.routers.n8n.middlewares=crowdsec-bouncer@file"

project/service/ollama/ollama.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ollama/ollama:0.13.5
+    image: ollama/ollama:0.17.7
     container_name: ollama
     ports:
       - 4019:11434
@@ -17,6 +17,3 @@ services:
       - "traefik.http.routers.ollama.rule=Host(`ollama.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.ollama.entrypoints=https"
       - "traefik.http.routers.ollama.tls=true"
-      - "traefik.http.routers.ollama.tls.certresolver=myresolver"
-      # Middlewares
-      - "traefik.http.routers.ollama.middlewares=crowdsec-bouncer@file"

project/service/paperless-ngx/paperless-ngx.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.3
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.10
     container_name: paperless-ngx
     ports:
       - "4009:8000"
@@ -33,15 +33,12 @@ services:
       # PAPERLESS_DISABLE_REGULAR_LOGIN: true
       # PAPERLESS_ENABLE_HTTP_REMOTE_USER: true
       # PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME: HTTP_REMOTE_USER
-      # PAPERLESS_LOGOUT_REDIRECT_URL: https://auth.crescentec.xyz/logout
+      # PAPERLESS_LOGOUT_REDIRECT_URL: https://auth.${PUBLIC_DOMAIN}/logout
       # PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
-      # PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{"openid_connect":{"SCOPE":["openid","profile","email"],"OAUTH_PKCE_ENABLED":true,"APPS":[{"provider_id":"authelia","name":"Authelia","client_id":"paperless","secret":"jzO0JYA35oOojGqxFJUaDXdgdXhuACyq4b3lvOx233wtoSyv19prQfCKah1mwyDv","settings":{"server_url":"https://auth.crescentec.xyz","token_auth_method":"client_secret_basic"}}]}}'
+      # PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{"openid_connect":{"SCOPE":["openid","profile","email"],"OAUTH_PKCE_ENABLED":true,"APPS":[{"provider_id":"authelia","name":"Authelia","client_id":"paperless","secret":"jzO0JYA35oOojGqxFJUaDXdgdXhuACyq4b3lvOx233wtoSyv19prQfCKah1mwyDv","settings":{"server_url":"https://auth.${PUBLIC_DOMAIN}","token_auth_method":"client_secret_basic"}}]}}'
     labels:
       # Traefik
       - "traefik.enable=true"
       - "traefik.http.routers.paperless.rule=Host(`paperless.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.paperless.entrypoints=https"
-      - "traefik.http.routers.paperless.tls.certresolver=myresolver"
       - "traefik.http.routers.paperless.tls=true"
-      # Middlewares
-      - "traefik.http.routers.paperless.middlewares=crowdsec-bouncer@file"

project/service/pdf/pdf.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: bentopdf/bentopdf-simple:1.15.1
+    image: ghcr.io/alam00000/bentopdf-simple:2.5.0
     container_name: pdf
     ports:
       - "4003:8080"
@@ -14,7 +14,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.pdf.rule=Host(`pdf.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.pdf.entrypoints=https"
-      - "traefik.http.routers.pdf.tls.certresolver=myresolver"
       - "traefik.http.routers.pdf.tls=true"
-      # Middlewares
-      - "traefik.http.routers.pdf.middlewares=crowdsec-bouncer@file, authelia@file"

project/service/radicale/radicale.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: tomsquest/docker-radicale:3.5.10.0
+    image: tomsquest/docker-radicale:3.6.1.0
     container_name: radicale
     ports:
       - 4017:5232
@@ -30,7 +30,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.radicale.rule=Host(`radicale.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.radicale.entrypoints=https"
-      - "traefik.http.routers.radicale.tls.certresolver=myresolver"
       - "traefik.http.routers.radicale.tls=true"
-      # Middlewares
-      - "traefik.http.routers.radicale.middlewares=crowdsec-bouncer@file"

project/service/vaultwarden/vaultwarden.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: vaultwarden/server:1.35.0
+    image: vaultwarden/server:1.35.4
     container_name: vaultwarden
     ports:
       - 4018:80
@@ -27,6 +27,3 @@ services:
       - "traefik.http.routers.vaultwarden.rule=Host(`vaultwarden.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.vaultwarden.entrypoints=https"
       - "traefik.http.routers.vaultwarden.tls=true"
-      - "traefik.http.routers.vaultwarden.tls.certresolver=myresolver"
-      # Middlewares
-      - "traefik.http.routers.vaultwarden.middlewares=crowdsec-bouncer@file"

project/service/vikunja/vikunja.yml

@@ -6,7 +6,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: vikunja/vikunja:0.24.6
+    image: vikunja/vikunja:2.1.0
     container_name: vikunja
     secrets: [vikunja_jwt_secret]
     environment:
@@ -27,8 +27,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.vikunja.rule=Host(`vikunja.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.vikunja.entrypoints=https"
-      - "traefik.http.routers.vikunja.tls.certresolver=myresolver"
       - "traefik.http.routers.vikunja.tls=true"
-      # Middlewares
-      - "traefik.http.routers.vikunja.middlewares=crowdsec-bouncer@file"
-

renovate.json

@@ -13,6 +13,35 @@
     ],
     "configMigration": true,
     "prHourlyLimit": 0,
+    "packageRules": [
+        {
+            "matchCategories": [
+                "docker"
+            ],
+            "enabled": true,
+            "managerFilePatterns": [
+                "/(^|/)project/db/*\\Dockerfile$/",
+                "/(^|/)project/infrastructure/.*\\Dockerfile$/",
+                "/(^|/)project/media/.*\\Dockerfile$/",
+                "/(^|/)project/monitoring/.*\\Dockerfile$/",
+                "/(^|/)project/service/.*\\Dockerfile$/"
+            ]
+        },
+        {
+            "matchUpdateTypes": [
+                "minor",
+                "patch"
+            ],
+            "automerge": true,
+            "automergeType": "pr"
+        },
+        {
+            "matchUpdateTypes": [
+                "major"
+            ],
+            "automerge": false
+        }
+    ],
     "docker-compose": {
         "enabled": true,
         "managerFilePatterns": [
@@ -39,6 +68,10 @@
             {
                 "matchPackageNames": "mrusse08/soularr",
                 "enabled": false
+            },
+            {
+                "matchPackageNames": "getmeili/meilisearch",
+                "enabled": false
             }
         ]
     }

scripts/certificates/generate_certificate.sh

@@ -0,0 +1,26 @@
+# https://stackoverflow.com/questions/59738140/why-is-firefox-not-trusting-my-self-signed-certificate
+# generate all the certificates
+# import certificate root-ca.crt in firefox
+# in the config of traefik set the server.key and server.crt in the tls store 
+
+openssl req -x509 -nodes \
+ -newkey RSA:2048       \
+ -keyout root-ca.key    \
+ -days 365              \
+ -out root-ca.crt       \
+ -subj '/C=CH/ST=Denial/L=Earth/O=Crescentec/CN=root_CA_crescentec'
+
+openssl req -nodes   \
+ -newkey rsa:2048   \
+ -keyout server.key \
+ -out server.csr    \
+ -subj '/C=CH/ST=Denial/L=Earth/O=Crescentec/CN=server_crescentec'
+
+openssl x509 -req    \
+ -CA root-ca.crt    \
+ -CAkey root-ca.key \
+ -in server.csr     \
+ -out server.crt    \
+ -days 365          \
+ -CAcreateserial    \
+ -extfile <(printf "subjectAltName = DNS:*.${LOCAL_DOMAIN}\nauthorityKeyIdentifier = keyid,issuer\nbasicConstraints = CA:FALSE\nkeyUsage = digitalSignature, keyEncipherment\nextendedKeyUsage=serverAuth")

scripts/data-backup/README.md

@@ -0,0 +1,17 @@
+Inspired by the [blog](https://www.ericbette.com/configuring-a-remote-backup-solution-using-restic-and-rclone)
+
+# List of commands: 
+
+## Installation
+- Install restic and rclone baremetal
+
+## Setting up rclone:
+- run: rclone config or follow the instructions on the provider (infomaniak in my case)
+- run: rclone listremotes to confirm the server link creation
+
+## Setting up backup repository with restic
+- Save password in env variable, by running: echo export RESTIC_PASSWORD=my_password >> ~/.zshrc 
+- Initialize repository: restic -r rclone:example-remote:example-repo init
+- Run the backup: restic -r rclone:example-remote:example-repo --verbose backup /path/to/backup
+- List the snapshots: restic -r rclone:example-remote:example-repo snapshots
+- Restore the backup: restic -r rclone:example-remote:example-repo restore latest --target /target --path "/target"

scripts/data-backup/backup-infomaniak-calendars-contacts.sh

@@ -0,0 +1,5 @@
+LOG_FILE="/home/node/.n8n/external-scripts/data-backup/logs/log.log"
+echo "------------------------------------------------------------------------" >> "$LOG_FILE"
+echo "$(date) - Script for calendars-contact started" >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:calendars-contacts backup /home/node/.n8n/data/calendars-contacts >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:calendars-contacts forget --keep-last 3 --group-by '' --prune >> "$LOG_FILE"

scripts/data-backup/backup-infomaniak-databases.sh

@@ -0,0 +1,5 @@
+LOG_FILE="/home/node/.n8n/external-scripts/data-backup/logs/log.log"
+echo "------------------------------------------------------------------------" >> "$LOG_FILE"
+echo "$(date) - Script for databases started"  >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:databases backup /home/node/.n8n/database >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:databases forget --keep-last 3 --group-by '' --prune >> "$LOG_FILE"

scripts/data-backup/backup-infomaniak-documents.sh

@@ -0,0 +1,6 @@
+LOG_FILE="/home/node/.n8n/external-scripts/data-backup/logs/log.log"
+echo "------------------------------------------------------------------------" >> "$LOG_FILE"
+echo "$(date) - Script for documents started"  >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:documents backup /home/node/.n8n/data/documents >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:documents forget --keep-last 3 --group-by '' --prune >> "$LOG_FILE"
+

scripts/data-backup/backup-infomaniak-music.sh

@@ -0,0 +1,5 @@
+LOG_FILE="/home/node/.n8n/external-scripts/data-backup/logs/log.log"
+echo "------------------------------------------------------------------------" >> "$LOG_FILE"
+echo "$(date) - Script for music started" >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:music backup /home/node/.n8n/data/media/music >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:music forget --keep-last 3 --group-by '' --prune >> "$LOG_FILE"

scripts/data-backup/backup-infomaniak-notes.sh

@@ -0,0 +1,5 @@
+LOG_FILE="/home/node/.n8n/external-scripts/data-backup/logs/log.log"
+echo "------------------------------------------------------------------------" >> "$LOG_FILE"
+echo "$(date) - Script for notes started"  >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:notes backup /home/node/.n8n/data/notes >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:notes forget --keep-last 3 --group-by '' --prune >> "$LOG_FILE"

scripts/data-backup/backup-infomaniak-passwords.sh

@@ -0,0 +1,5 @@
+LOG_FILE="/home/node/.n8n/external-scripts/data-backup/logs/log.log"
+echo "------------------------------------------------------------------------" >> "$LOG_FILE"
+echo "$(date) - Script for passwords started"  >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:passwords backup /home/node/.n8n/data/passwords >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:passwords forget --keep-last 3 --group-by '' --prune >> "$LOG_FILE"

scripts/data-backup/backup-infomaniak-pictures.sh

@@ -0,0 +1,5 @@
+LOG_FILE="/home/node/.n8n/external-scripts/data-backup/logs/log.log"
+echo "------------------------------------------------------------------------" >> "$LOG_FILE"
+echo "$(date) - Script for pictures started" >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:pictures backup /home/node/.n8n/data/media/pictures >> "$LOG_FILE"
+restic -r rclone:sb_project_SBI-CW231949:pictures forget --keep-last 3 --group-by '' --prune >> "$LOG_FILE"

scripts/data-backup/backup-overleaf-cleanup.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+BACKUP_DIR="$HOME/docker/compose/project/service/overleaf-toolkit/backup"
+ls -t "$BACKUP_DIR" | tail -n +6 | xargs -I {} rm -rf "$BACKUP_DIR/{}"
+

scripts/database-backup/db_backup_script.sh

@@ -0,0 +1,72 @@
+#!/bin/bash
+
+# Cron job check the logs
+
+## Executing the script
+# bash db_backup_script.sh
+
+## command used to back up
+# docker exec DOCKER_CONTAINER pg_dump -U postgres -Fc DATABASE_NAME > BACKUP_FILE.DUMP
+
+## command used to restore
+# directory where the backup is saved in in the docker container: /var/lib/postgresql/data
+# for example: docker exec postgres pg_restore -U postgres -d vikunja-backup /var/lib/postgresql/data/backup/vikunja-2024-01-31.dump
+# docker exec DOCKER_CONTAINER pg_restore -U postgres -d DATABASE_NAME /var/lib/postgresql/data/backup/BACKUP_FILE.DUMP
+
+# Date format
+YEAR=$(date +"%Y")
+MONTH=$(date +"%m")
+DAY=$(date +"%d")
+NOW=$(date +"%Y-%m-%d")
+
+BACKUP_DIRECTORY="/home/debian/docker/compose/project/db/postgres/data"
+
+# Docker container with DB to backup
+DB_1="postgres"
+DB_2="postgres-with-pg-vector"
+
+back_up_db() {
+
+    # sql to list all databases
+    DATABASE_NAME=$(docker exec $1 psql -U postgres -t -c 'SELECT datname FROM pg_database WHERE datistemplate = false;')
+
+    # pg_dump command
+    PGDUMP="docker exec $1 pg_dump -U postgres -Fc"
+
+    for i in $DATABASE_NAME; do
+
+        # ignoring postgres db
+        if [[ "$i" != "postgres" ]]; then
+
+            echo "Backing up database $i"
+            # backup path to file
+            BACKFILE="$BACKUP_DIRECTORY/backup/$i-$NOW.dump"
+            $PGDUMP $i > $BACKFILE
+
+        fi
+
+    done
+}
+
+clean_up_backups() {
+
+    echo "Looking for dumps to prune in folder: $BACKUP_DIRECTORY/backup/"
+
+    # keep one backup per year, month and last two days
+    BACKUP_YEAR="*-$YEAR-02-01.dump"
+    BACKUP_MONTH="*-$YEAR-$MONTH-01.dump"
+    BACKUP_DAY="*-$YEAR-$MONTH-$DAY.dump"
+    BACKUP_DAY_1="*-$YEAR-$MONTH-$((DAY-1)).dump"
+    FILE_TO_DELETE=$(find $BACKUP_DIRECTORY/backup/ -type f \( ! -name $BACKUP_YEAR -a ! -name $BACKUP_MONTH -a ! -name $BACKUP_DAY -a ! -name $BACKUP_DAY_1 \))
+
+    # delete such files
+    for i in $FILE_TO_DELETE; do
+        echo "Pruning $i"
+        rm $i
+    done
+}
+
+back_up_db $DB_1
+back_up_db $DB_2
+
+clean_up_backups

scripts/database-backup/overleaf_backup_script.sh

@@ -0,0 +1,25 @@
+# Date format
+NOW=$(date +"%Y-%m-%d")
+
+OVERLEAF_DIRECTORY="/home/debian/docker/compose/project/service/overleaf-toolkit"
+
+# Backup config
+$OVERLEAF_DIRECTORY/bin/backup-config -m tar $OVERLEAF_DIRECTORY/backup/$NOW-overleaf-config-backup.tar
+# Backup mongo
+tar --create --file $OVERLEAF_DIRECTORY/backup/$NOW-overleaf-mongo-backup.tar $OVERLEAF_DIRECTORY/data/mongo
+# Backup sharelatex
+tar --create --file $OVERLEAF_DIRECTORY/backup/$NOW-overleaf-sharelatex-backup.tar $OVERLEAF_DIRECTORY/data/sharelatex
+
+# Pruning
+clean_up_backups() {
+
+    # list all files older than 3 days
+    FILE_TO_DELETE=$(find $OVERLEAF_DIRECTORY/backup/ -type f -mtime 3)
+
+    # delete such files
+    for i in $FILE_TO_DELETE; do
+        rm $i
+    done
+}
+
+clean_up_backups

scripts/mam/mam-login.js

@@ -0,0 +1,47 @@
+const puppeteer = require('puppeteer');
+
+async function loginToMAM(username, password) {
+    try {
+        const browser = await puppeteer.launch({
+            executablePath: '/usr/bin/chromium-browser',
+            headless: true,
+            args: ['--no-sandbox', '--disable-setuid-sandbox', '--disable-gpu', 'diable-dev-shm-usage']
+        });
+        const page = await browser.newPage();
+
+        console.log("Navigating to MAM login...");
+        await page.goto('https://www.myanonamouse.net/login.php', {
+            waitUntil: 'networkidle2',
+            timeout: 10000
+        });
+
+        const pageTitle = await page.title();
+
+        console.log("Filling in login form...");
+        await page.type('input[name="email"]', username);
+        await page.type('input[name="password"]', password);
+
+        console.log("Submitting login form...");
+        await page.click('input[type="submit"]');
+        await page.waitForNavigation({
+            waitUntil: 'domcontentloaded',
+            timeout: 10000
+        });
+
+        console.log("Login attempt completed.");
+        const cookies = await page.cookies();
+        await browser.close();
+
+        console.log(JSON.stringify(cookies));
+    } catch (err) {
+        console.error("Login failed: ", err);
+        process.exit(1);
+    }
+}
+
+const username = process.env.MAM_USERNAME;
+const password = process.env.MAM_PASSWORD;
+
+loginToMAM(username, password)
+    .then(cookies => ({ result: 'Success', cookies }))
+    .catch(err => ({ result: 'Error', error: err.message }));