homelab/home-stack.yaml at master · dalehumby/homelab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
version: "3.8"

services:

  mosquitto:
    image: eclipse-mosquitto
    ports:
      - "1883:1883"
    volumes:
      - /media/cluster/mosquitto/:/mosquitto/config/
      - /media/cluster/mosquitto/:/mosquitto/data
      - /var/log:/mosquitto/log
    deploy:
      labels:
        - "traefik.enable=false"

  node-red:
    image: nodered/node-red:latest
    ports:
      - "1880:1880"
    environment:
      - TZ=Europe/Stockholm
    volumes:
      - /media/cluster/node-red:/data
    deploy:
      labels:
        - "traefik.enable=false"

  homeassistant:
    image: homeassistant/home-assistant:stable
    ports:
      - "8123:8123"
      # Shelly CoIoT https://www.home-assistant.io/integrations/shelly/#shelly-device-configuration-generation-1
      - mode: host
        protocol: udp
        published: 5683
        target: 5683
      # Apple TV / HomeKit Discovery (mDNS)
      - target: 5353
        published: 5353
        protocol: udp
        mode: host
    volumes:
      - /media/cluster/homeassistant:/config
    networks:
      - default
      - proxy_default
    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.homeassistant-secure.rule=Host(`home.humby.co.za`)"
        - "traefik.http.routers.homeassistant-secure.entrypoints=websecure"
        - "traefik.http.routers.homeassistant-secure.tls.certresolver=mytlschallenge"
        - "traefik.http.routers.homeassistant-secure.middlewares=security-headers@file,ratelimit@file"
        - "traefik.http.routers.homeassistant-secure.service=homeassistant"
        - "traefik.http.services.homeassistant.loadbalancer.server.port=8123"

  esphome:
    image: esphome/esphome
    ports:
      - "6052:6052"
    volumes:
      - /media/cluster/esphome/:/config
    environment:
      - ESPHOME_DASHBOARD_USE_PING=true
    deploy:
      labels:
        - "traefik.enable=false"

  homepage:
    image: ghcr.io/gethomepage/homepage:latest
    ports:
      - "8081:3000"
    environment:
      - HOMEPAGE_ALLOWED_HOSTS=10.0.0.10:8081,homedell.lan:8081
    volumes:
      - /media/cluster/homepage:/app/config
    deploy:
      labels:
        - "traefik.enable=false"

  syslog:
    image: lscr.io/linuxserver/syslog-ng:latest
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Stockholm
    volumes:
      - /media/cluster/syslog:/config
      - /media/cluster/syslog/log:/var/log
    ports:
      - 514:5514/udp
      - 601:6601/tcp
    deploy:
      labels:
        - "traefik.enable=false"

  convertx:
    image: ghcr.io/c4illin/convertx
    ports:
      - "8082:3000"
    environment:
      - HTTP_ALLOWED=true
      - ALLOW_UNAUTHENTICATED=true
    volumes:
      - /media/cluster/convertx:/app/data
    deploy:
      labels:
        - "traefik.enable=false"

  bentopdf:
    image: ghcr.io/alam00000/bentopdf:latest
    ports:
      - "8084:8080"
    deploy:
      labels:
        - "traefik.enable=false"

  pixelfin:
    image: ghcr.io/nothing2obvi/pixelfin:latest
    ports:
      - "1280:1280"
    volumes:
      - /media/cluster/pixelfin/data:/app/data
      - /media/cluster/pixelfin/output:/app/output
    deploy:
      labels:
        - "traefik.enable=false"

  swiparr:
    image: ghcr.io/m3sserstudi0s/swiparr:latest
    ports:
      - "8085:4321"
    environment:
      - PROVIDER=jellyfin
      - PROVIDER_LOCK=true
      - JELLYFIN_URL=http://truenas.lan:30013/
      - JELLYFIN_PUBLIC_URL=https://jellyfin.humby.co.za/
      - ALLOW_PRIVATE_PROVIDER_URLS=true
      - APP_PUBLIC_URL=https://swiparr.humby.co.za/
      - USE_SECURE_COOKIES=true
    volumes:
      - /media/cluster/swiparr:/app/data
    networks:
      - default
      - proxy_default
    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.swiparr-secure.rule=Host(`swiparr.humby.co.za`)"
        - "traefik.http.routers.swiparr-secure.entrypoints=websecure"
        - "traefik.http.routers.swiparr-secure.tls.certresolver=mytlschallenge"
        - "traefik.http.routers.swiparr-secure.middlewares=security-headers@file,ratelimit@file"
        - "traefik.http.routers.swiparr-secure.service=swiparr"
        - "traefik.http.services.swiparr.loadbalancer.server.port=4321"

networks:
  default: {}
  proxy_default:
    external: true