7449c14ac6
- Remove authelia middleware from Vaultwarden (Bitwarden) for app compatibility - Simplify all compose files to use only homelab-network and traefik-network - Remove unnecessary isolated networks (nextcloud-network, wordpress-network, etc.) - Remove monitoring-network, formio-network, and media-network - All services now communicate through the unified homelab-network - Maintain traefik-network for proxied services only
481 lines
17 KiB
YAML
481 lines
17 KiB
YAML
# Media Management Services
|
|
# Content automation and library management (*arr apps, transcoders, etc.)
|
|
# Place in /opt/stacks/media-management/docker-compose.yml
|
|
|
|
# RESTART POLICY GUIDE:
|
|
# - unless-stopped: Core infrastructure services that should always run
|
|
# - no: Services with Sablier lazy loading (start on-demand)
|
|
# - See individual service comments for specific reasoning
|
|
|
|
# Service Access URLs:
|
|
# - Sonarr: https://sonarr.${DOMAIN}
|
|
# - Radarr: https://radarr.${DOMAIN}
|
|
# - Prowlarr: https://prowlarr.${DOMAIN}
|
|
# - Readarr: https://readarr.${DOMAIN}
|
|
# - Lidarr: https://lidarr.${DOMAIN}
|
|
# - LazyLibrarian: https://lazylibrarian.${DOMAIN}
|
|
# - Mylar3: https://mylar.${DOMAIN}
|
|
# - Jellyseerr: https://jellyseerr.${DOMAIN}
|
|
# - Tdarr: https://tdarr.${DOMAIN}
|
|
# - Unmanic: https://unmanic.${DOMAIN}
|
|
|
|
services:
|
|
# Sonarr - TV show automation
|
|
# Access at: https://sonarr.yourdomain.duckdns.org
|
|
sonarr:
|
|
image: linuxserver/sonarr:4.0.0
|
|
container_name: sonarr
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "8989:8989"
|
|
volumes:
|
|
- ./sonarr/config:/config
|
|
- /mnt/media:/media
|
|
- /mnt/downloads:/downloads # Large downloads on separate drive
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=TV show management and automation"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.sonarr.rule=Host(`sonarr.${DOMAIN}`)"
|
|
- "traefik.http.routers.sonarr.entrypoints=websecure"
|
|
- "traefik.http.routers.sonarr.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.sonarr.middlewares=authelia@docker"
|
|
- "traefik.http.services.sonarr.loadbalancer.server.port=8989"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Radarr - Movie automation
|
|
# Access at: https://radarr.yourdomain.duckdns.org
|
|
radarr:
|
|
image: linuxserver/radarr:5.2.6
|
|
container_name: radarr
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "7878:7878"
|
|
volumes:
|
|
- ./radarr/config:/config
|
|
- /mnt/media:/media
|
|
- /mnt/downloads:/downloads # Large downloads on separate drive
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Movie management and automation"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.radarr.rule=Host(`radarr.${DOMAIN}`)"
|
|
- "traefik.http.routers.radarr.entrypoints=websecure"
|
|
- "traefik.http.routers.radarr.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.radarr.middlewares=authelia@docker"
|
|
- "traefik.http.services.radarr.loadbalancer.server.port=7878"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Prowlarr - Indexer manager
|
|
# Access at: https://prowlarr.yourdomain.duckdns.org
|
|
prowlarr:
|
|
image: linuxserver/prowlarr:1.11.4
|
|
container_name: prowlarr
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "9696:9696"
|
|
volumes:
|
|
- ./prowlarr/config:/config
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Indexer manager for Sonarr/Radarr"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.prowlarr.rule=Host(`prowlarr.${DOMAIN}`)"
|
|
- "traefik.http.routers.prowlarr.entrypoints=websecure"
|
|
- "traefik.http.routers.prowlarr.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.prowlarr.middlewares=authelia@docker"
|
|
- "traefik.http.services.prowlarr.loadbalancer.server.port=9696"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Readarr - Ebook and audiobook management
|
|
# Access at: https://readarr.${DOMAIN}
|
|
readarr:
|
|
image: linuxserver/readarr:0.4.19-nightly
|
|
container_name: readarr
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "8787:8787"
|
|
volumes:
|
|
- ./readarr/config:/config
|
|
- /mnt/media/books:/books
|
|
- /mnt/downloads:/downloads
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Ebook and audiobook management"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.readarr.rule=Host(`readarr.${DOMAIN}`)"
|
|
- "traefik.http.routers.readarr.entrypoints=websecure"
|
|
- "traefik.http.routers.readarr.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.readarr.middlewares=authelia@docker"
|
|
- "traefik.http.services.readarr.loadbalancer.server.port=8787"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Lidarr - Music collection manager
|
|
# Access at: https://lidarr.${DOMAIN}
|
|
lidarr:
|
|
image: linuxserver/lidarr:2.0.7
|
|
container_name: lidarr
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "8686:8686"
|
|
volumes:
|
|
- ./lidarr/config:/config
|
|
- /mnt/media/music:/music
|
|
- /mnt/downloads:/downloads
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Music collection manager"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.lidarr.rule=Host(`lidarr.${DOMAIN}`)"
|
|
- "traefik.http.routers.lidarr.entrypoints=websecure"
|
|
- "traefik.http.routers.lidarr.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.lidarr.middlewares=authelia@docker"
|
|
- "traefik.http.services.lidarr.loadbalancer.server.port=8686"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Lazy Librarian - Book manager
|
|
# Access at: https://lazylibrarian.${DOMAIN}
|
|
lazylibrarian:
|
|
image: linuxserver/lazylibrarian:latest
|
|
container_name: lazylibrarian
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "5299:5299"
|
|
volumes:
|
|
- ./lazylibrarian/config:/config
|
|
- /mnt/media/books:/books
|
|
- /mnt/downloads:/downloads
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
- DOCKER_MODS=linuxserver/mods:lazylibrarian-ffmpeg
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Book download automation"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.lazylibrarian.rule=Host(`lazylibrarian.${DOMAIN}`)"
|
|
- "traefik.http.routers.lazylibrarian.entrypoints=websecure"
|
|
- "traefik.http.routers.lazylibrarian.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.lazylibrarian.middlewares=authelia@docker"
|
|
- "traefik.http.services.lazylibrarian.loadbalancer.server.port=5299"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Mylar3 - Comic book manager
|
|
# Access at: https://mylar.${DOMAIN}
|
|
mylar3:
|
|
image: linuxserver/mylar3:latest
|
|
container_name: mylar3
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "8090:8090"
|
|
volumes:
|
|
- ./mylar3/config:/config
|
|
- /mnt/media/comics:/comics
|
|
- /mnt/downloads:/downloads
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Comic book collection manager"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.mylar.rule=Host(`mylar.${DOMAIN}`)"
|
|
- "traefik.http.routers.mylar.entrypoints=websecure"
|
|
- "traefik.http.routers.mylar.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.mylar.middlewares=authelia@docker"
|
|
- "traefik.http.services.mylar.loadbalancer.server.port=8090"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Jellyseerr - Request management for Jellyfin/Plex
|
|
# Access at: https://jellyseerr.${DOMAIN}
|
|
jellyseerr:
|
|
image: fallenbagel/jellyseerr:latest
|
|
container_name: jellyseerr
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "5055:5055"
|
|
volumes:
|
|
- ./jellyseerr/config:/app/config
|
|
environment:
|
|
- LOG_LEVEL=info
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Media request management"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.jellyseerr.rule=Host(`jellyseerr.${DOMAIN}`)"
|
|
- "traefik.http.routers.jellyseerr.entrypoints=websecure"
|
|
- "traefik.http.routers.jellyseerr.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.jellyseerr.middlewares=authelia@docker"
|
|
- "traefik.http.services.jellyseerr.loadbalancer.server.port=5055"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# FlareSolverr - Cloudflare bypass for Prowlarr
|
|
# No web UI - used by Prowlarr
|
|
flaresolverr:
|
|
image: flaresolverr/flaresolverr:latest
|
|
container_name: flaresolverr
|
|
restart: unless-stopped
|
|
networks:
|
|
- homelab-network
|
|
environment:
|
|
- LOG_LEVEL=info
|
|
- TZ=${TZ}
|
|
labels:
|
|
- homelab.category=media
|
|
- homelab.description=Cloudflare bypass for indexers
|
|
# Tdarr Server - Distributed transcoding server
|
|
# Access at: https://tdarr.${DOMAIN}
|
|
tdarr-server:
|
|
image: ghcr.io/haveagitgat/tdarr:latest
|
|
container_name: tdarr-server
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- 8265:8265 # Web UI port
|
|
- 8266:8266 # Server port
|
|
volumes:
|
|
- ./tdarr/server:/app/server
|
|
- ./tdarr/configs:/app/configs
|
|
- ./tdarr/logs:/app/logs
|
|
- /mnt/media:/media
|
|
- /mnt/tdarr-transcode:/temp # Transcode cache on separate drive
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
- serverIP=0.0.0.0
|
|
- serverPort=8266
|
|
- webUIPort=8265
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Distributed transcoding server"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.tdarr.rule=Host(`tdarr.${DOMAIN}`)"
|
|
- "traefik.http.routers.tdarr.entrypoints=websecure"
|
|
- "traefik.http.routers.tdarr.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.tdarr.middlewares=authelia@docker"
|
|
- "traefik.http.services.tdarr.loadbalancer.server.port=8265"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
# Tdarr Node - Transcoding worker
|
|
# No web UI - controlled by server
|
|
tdarr-node:
|
|
image: ghcr.io/haveagitgat/tdarr_node:latest
|
|
container_name: tdarr-node
|
|
restart: unless-stopped
|
|
networks:
|
|
- homelab-network
|
|
volumes:
|
|
- ./tdarr/configs:/app/configs
|
|
- ./tdarr/logs:/app/logs
|
|
- /mnt/media:/media
|
|
- /mnt/tdarr-transcode:/temp
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
- nodeID=MainNode
|
|
- nodeIP=0.0.0.0
|
|
- nodePort=8267
|
|
- serverIP=tdarr-server
|
|
- serverPort=8266
|
|
labels:
|
|
- homelab.category=media
|
|
- homelab.description=Tdarr transcoding worker node
|
|
# Unmanic - Another transcoding option
|
|
# Access at: https://unmanic.${DOMAIN}
|
|
unmanic:
|
|
image: josh5/unmanic:latest
|
|
container_name: unmanic
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "8888:8888"
|
|
volumes:
|
|
- ./unmanic/config:/config
|
|
- /mnt/media:/library
|
|
- /mnt/unmanic-cache:/tmp/unmanic # Transcode cache on separate drive
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=media"
|
|
- "homelab.description=Library optimization and transcoding"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.unmanic.rule=Host(`unmanic.${DOMAIN}`)"
|
|
- "traefik.http.routers.unmanic.entrypoints=websecure"
|
|
- "traefik.http.routers.unmanic.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.unmanic.middlewares=authelia@docker"
|
|
- "traefik.http.services.unmanic.loadbalancer.server.port=8888"
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-arr"
|
|
- "sablier.start-on-demand=true"
|
|
x-dockge:
|
|
urls:
|
|
- https://sonarr.${DOMAIN}
|
|
- http://localhost:8989
|
|
- https://radarr.${DOMAIN}
|
|
- http://localhost:7878
|
|
- https://prowlarr.${DOMAIN}
|
|
- http://localhost:9696
|
|
- https://readarr.${DOMAIN}
|
|
- http://localhost:8787
|
|
- https://lidarr.${DOMAIN}
|
|
- http://localhost:8686
|
|
- https://lazylibrarian.${DOMAIN}
|
|
- http://localhost:5299
|
|
- https://mylar.${DOMAIN}
|
|
- http://localhost:8090
|
|
- https://jellyseerr.${DOMAIN}
|
|
- http://localhost:5055
|
|
- https://tdarr.${DOMAIN}
|
|
- http://localhost:8265
|
|
- https://unmanic.${DOMAIN}
|
|
- http://localhost:8888
|
|
networks:
|
|
homelab-network:
|
|
external: true
|
|
traefik-network:
|
|
external: true
|