add home assistant

docker-compose.yml

@@ -37,6 +37,7 @@ include:
 
   - path:
       - ${SERVICE_PATH}/gitea/gitea.yml
+      - ${SERVICE_PATH}/home-assistant/home-assistant.yml
       - ${SERVICE_PATH}/it-tools/it-tools.yml
       - ${SERVICE_PATH}/mealie/mealie.yml
       - ${SERVICE_PATH}/paperless-ngx/paperless-ngx.yml

project/infrastructure/authelia/authelia.yml

@@ -14,6 +14,8 @@ services:
       service: default
     container_name: authelia
     image: authelia/authelia:latest
+    ports:
+      - 9959:9959 # metrics prometheus
     expose:
       - 9091
     secrets: [JWT_SECRET, SESSION_SECRET, STORAGE_PASSWORD, STORAGE_ENCRYPTION_KEY]

project/infrastructure/homepage/homepage.yml

@@ -14,6 +14,7 @@ services:
       - ${INFRA_PATH}/homepage/config:/app/config
       - ${INFRA_PATH}/homepage/data/images:/app/public/images
       - ${INFRA_PATH}/homepage/data/icons:/app/public/icons
+      - ${EXTERNAL_STORAGE}:/disks/e
       - /var/run/docker.sock:/var/run/docker.sock:ro # optional, for docker integrations
     labels:
       # Watchtower

project/media/immich/immich.yml

@@ -13,7 +13,7 @@ services:
       DB_DATABASE_NAME: immich
       REDIS_HOSTNAME: redis
     volumes:
-      - ${IMMICH_EXTERNAL_PATH}:/usr/src/app/external
+      - ${IMMICH_EXTERNAL_PATH}:/usr/src/app/external:ro
       - ${MEDIA_PATH}/immich/data/library:/usr/src/app/upload
       - /etc/localtime:/etc/localtime:ro
     ports:

project/service/home-assistant/home-assistant.yml

@@ -0,0 +1,21 @@
+services:
+  home-assistant:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    image: ghcr.io/home-assistant/home-assistant:stable
+    container_name: home-assistant
+    ports:
+      - 4012:8123
+    volumes:
+      - ${SERVICE_PATH}/home-assistant/config:/config
+      - /etc/localtime:/etc/localtime:ro
+      - /run/dbus:/run/dbus:ro
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=true"
+      # Traefik
+      - "traefik.enable=true"
+      - "traefik.http.routers.home-assistant.rule=Host(`ha.${LOCAL_DOMAIN}`)"
+      - "traefik.http.routers.home-assistant.entrypoints=https"
+      - "traefik.http.routers.home-assistant.tls=true"

project/service/it-tools/it-tools.yml

@@ -14,6 +14,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.it-tools.rule=Host(`it-tools.${LOCAL_DOMAIN}`)"
       - "traefik.http.routers.it-tools.entrypoints=https"
-      - "traefik.http.routers.it-tools.tls=true"
-      # Middlewares
-      - "traefik.http.routers.it-tools.middlewares=crowdsec-bouncer@file"
+      - "traefik.http.routers.it-tools.tls=true"