8997d1ce0c
- Changed Nextcloud port from 80 to 8099 - Changed Mealie port from 9000 to 9001 - Changed WordPress port from 80 to 8089 - Changed Gitea port from 3000 to 3011 - Changed DokuWiki port from 80 to 8088 - Changed BookStack port from 80 to 6876 - Updated all corresponding Traefik loadbalancer ports - Resolved conflicts with external host services in external-host-production.yml
498 lines
16 KiB
YAML
498 lines
16 KiB
YAML
# Productivity and Content Management Services
|
|
# Place in /opt/stacks/productivity/docker-compose.yml
|
|
|
|
# SABLIER SESSION DURATION: Set to 5m for testing. Increase to 30m for production in config-templates/traefik/dynamic/sablier.yml
|
|
|
|
# RESTART POLICY GUIDE:
|
|
# - unless-stopped: Core infrastructure services that should always run
|
|
# - no: Services with Sablier lazy loading (start on-demand)
|
|
# - See individual service comments for specific reasoning
|
|
|
|
# Service Access URLs:
|
|
# - Nextcloud: https://nextcloud.${DOMAIN}
|
|
# - Mealie: https://mealie.${DOMAIN}
|
|
# - WordPress: https://blog.${DOMAIN}
|
|
# - Gitea: https://git.${DOMAIN}
|
|
# - DokuWiki: https://wiki.${DOMAIN}
|
|
# - BookStack: https://docs.${DOMAIN}
|
|
# - MediaWiki: https://mediawiki.${DOMAIN}
|
|
|
|
services:
|
|
# Nextcloud - File sync and collaboration
|
|
# Access at: https://nextcloud.${DOMAIN}
|
|
# Uses Sablier lazy loading - starts on-demand, stops after 5min inactivity
|
|
nextcloud:
|
|
image: nextcloud:28
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: '1.5'
|
|
memory: 1G
|
|
pids: 2048
|
|
reservations:
|
|
cpus: '0.75'
|
|
memory: 512M
|
|
container_name: nextcloud
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
- nextcloud-network
|
|
ports:
|
|
- "8099:80"
|
|
volumes:
|
|
- ./nextcloud/html:/var/www/html
|
|
- /mnt/nextcloud-data:/var/www/html/data # Large data on separate drive
|
|
environment:
|
|
- MYSQL_HOST=nextcloud-db
|
|
- MYSQL_DATABASE=nextcloud
|
|
- MYSQL_USER=nextcloud
|
|
- MYSQL_PASSWORD=${NEXTCLOUD_DB_PASSWORD}
|
|
- NEXTCLOUD_ADMIN_USER=${NEXTCLOUD_ADMIN_USER:-admin}
|
|
- NEXTCLOUD_ADMIN_PASSWORD=${NEXTCLOUD_ADMIN_PASSWORD}
|
|
- NEXTCLOUD_TRUSTED_DOMAINS=nextcloud.${DOMAIN}
|
|
- TRUSTED_PROXIES=172.18.0.0/16
|
|
- OVERWRITEPROTOCOL=https
|
|
- OVERWRITEHOST=nextcloud.${DOMAIN}
|
|
depends_on:
|
|
- nextcloud-db
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# Service metadata
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=File sync and collaboration"
|
|
- "traefik.enable=true"
|
|
# Router configuration
|
|
- "traefik.http.routers.nextcloud.rule=Host(`nextcloud.${DOMAIN}`)"
|
|
- "traefik.http.routers.nextcloud.entrypoints=websecure"
|
|
- "traefik.http.routers.nextcloud.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.nextcloud.middlewares=authelia@docker"
|
|
# Service configuration
|
|
- "traefik.http.services.nextcloud.loadbalancer.server.port=8099"
|
|
# Sablier configuration
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-nextcloud"
|
|
- "sablier.start-on-demand=true"
|
|
|
|
nextcloud-db:
|
|
image: mariadb:10.11
|
|
container_name: nextcloud-db
|
|
restart: no
|
|
networks:
|
|
- nextcloud-network
|
|
volumes:
|
|
- nextcloud-db-data:/var/lib/mysql
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${NEXTCLOUD_DB_ROOT_PASSWORD}
|
|
- MYSQL_DATABASE=nextcloud
|
|
- MYSQL_USER=nextcloud
|
|
- MYSQL_PASSWORD=${NEXTCLOUD_DB_PASSWORD}
|
|
command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
|
|
labels:
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=Nextcloud database"
|
|
|
|
# Mealie - Recipe manager
|
|
# Access at: https://mealie.${DOMAIN}
|
|
mealie:
|
|
image: ghcr.io/mealie-recipes/mealie:latest
|
|
container_name: mealie
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "9001:9000"
|
|
volumes:
|
|
- ./mealie/data:/app/data
|
|
environment:
|
|
- PUID=${PUID:-1000}
|
|
- PGID=${PGID:-1000}
|
|
- TZ=${TZ}
|
|
- BASE_URL=https://mealie.${DOMAIN}
|
|
- DB_ENGINE=sqlite
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# Service metadata
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=Recipe manager and meal planner"
|
|
- "traefik.enable=true"
|
|
# Router configuration
|
|
- "traefik.http.routers.mealie.rule=Host(`mealie.${DOMAIN}`)"
|
|
- "traefik.http.routers.mealie.entrypoints=websecure"
|
|
- "traefik.http.routers.mealie.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.mealie.middlewares=authelia@docker"
|
|
# Service configuration
|
|
- "traefik.http.services.mealie.loadbalancer.server.port=9001"
|
|
# Sablier configuration
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-mealie"
|
|
- "sablier.start-on-demand=true"
|
|
|
|
# WordPress - Blog/website platform
|
|
# Access at: https://blog.${DOMAIN}
|
|
wordpress:
|
|
image: wordpress:latest
|
|
container_name: wordpress
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
- wordpress-network
|
|
ports:
|
|
- "8089:80"
|
|
volumes:
|
|
- ./wordpress/html:/var/www/html
|
|
environment:
|
|
- WORDPRESS_DB_HOST=wordpress-db
|
|
- WORDPRESS_DB_USER=wordpress
|
|
- WORDPRESS_DB_PASSWORD=${WORDPRESS_DB_PASSWORD}
|
|
- WORDPRESS_DB_NAME=wordpress
|
|
depends_on:
|
|
- wordpress-db
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# Service metadata
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=Blog and website platform"
|
|
- "traefik.enable=true"
|
|
# Router configuration
|
|
- "traefik.http.routers.wordpress.rule=Host(`wordpress.${DOMAIN}`)"
|
|
- "traefik.http.routers.wordpress.entrypoints=websecure"
|
|
- "traefik.http.routers.wordpress.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.wordpress.middlewares=authelia@docker"
|
|
# Service configuration
|
|
- "traefik.http.services.wordpress.loadbalancer.server.port=8089"
|
|
# Sablier configuration
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-wordpress"
|
|
- "sablier.start-on-demand=true"
|
|
|
|
wordpress-db:
|
|
image: mariadb:10.11
|
|
container_name: wordpress-db
|
|
restart: no
|
|
networks:
|
|
- wordpress-network
|
|
volumes:
|
|
- wordpress-db-data:/var/lib/mysql
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${WORDPRESS_DB_ROOT_PASSWORD}
|
|
- MYSQL_DATABASE=wordpress
|
|
- MYSQL_USER=wordpress
|
|
- MYSQL_PASSWORD=${WORDPRESS_DB_PASSWORD}
|
|
labels:
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=WordPress database"
|
|
|
|
# Gitea - Self-hosted Git service
|
|
# Access at: https://git.${DOMAIN}
|
|
gitea:
|
|
image: gitea/gitea:latest
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: '0.50'
|
|
memory: 256M
|
|
pids: 512
|
|
reservations:
|
|
cpus: '0.25'
|
|
memory: 128M
|
|
container_name: gitea
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
- gitea-network
|
|
ports:
|
|
- "3011:3000"
|
|
volumes:
|
|
- ./gitea/data:/data
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
environment:
|
|
- USER_UID=${PUID:-1000}
|
|
- USER_GID=${PGID:-1000}
|
|
- GITEA__database__DB_TYPE=postgres
|
|
- GITEA__database__HOST=gitea-db:5432
|
|
- GITEA__database__NAME=gitea
|
|
- GITEA__database__USER=gitea
|
|
- GITEA__database__PASSWD=${GITEA_DB_PASSWORD}
|
|
depends_on:
|
|
- gitea-db
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# Service metadata
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=Self-hosted Git service"
|
|
- "traefik.enable=true"
|
|
# Router configuration
|
|
- "traefik.http.routers.gitea.rule=Host(`gitea.${DOMAIN}`)"
|
|
- "traefik.http.routers.gitea.entrypoints=websecure"
|
|
- "traefik.http.routers.gitea.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.gitea.middlewares=authelia@docker"
|
|
# Service configuration
|
|
- "traefik.http.services.gitea.loadbalancer.server.port=3011"
|
|
# Sablier configuration
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-gitea"
|
|
- "sablier.start-on-demand=true"
|
|
|
|
gitea-db:
|
|
image: postgres:14-alpine
|
|
container_name: gitea-db
|
|
restart: no
|
|
networks:
|
|
- gitea-network
|
|
volumes:
|
|
- gitea-db-data:/var/lib/postgresql/data
|
|
environment:
|
|
- POSTGRES_USER=gitea
|
|
- POSTGRES_PASSWORD=${GITEA_DB_PASSWORD}
|
|
- POSTGRES_DB=gitea
|
|
labels:
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=Gitea database"
|
|
|
|
# DokuWiki - Wiki without database
|
|
# Access at: https://wiki.${DOMAIN}
|
|
# Uses Sablier lazy loading - starts on-demand, stops after 5min inactivity
|
|
dokuwiki:
|
|
image: lscr.io/linuxserver/dokuwiki:latest
|
|
container_name: dokuwiki
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "6876:80"
|
|
volumes:
|
|
- ./dokuwiki/config:/config
|
|
environment:
|
|
- PUID=${PUID:-1000}
|
|
- PGID=${PGID:-1000}
|
|
- TZ=${TZ}
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# Service metadata
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=File-based wiki"
|
|
- "traefik.enable=true"
|
|
# Router configuration
|
|
- "traefik.http.routers.dokuwiki.rule=Host(`dokuwiki.${DOMAIN}`)"
|
|
- "traefik.http.routers.dokuwiki.entrypoints=websecure"
|
|
- "traefik.http.routers.dokuwiki.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.dokuwiki.middlewares=authelia@docker"
|
|
# Service configuration
|
|
- "traefik.http.services.dokuwiki.loadbalancer.server.port=8088"
|
|
# Sablier configuration
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-dokuwiki"
|
|
- "sablier.start-on-demand=true"
|
|
|
|
# BookStack - Documentation platform
|
|
# Access at: https://docs.${DOMAIN}
|
|
# Uses Sablier lazy loading - starts on-demand, stops after 5min inactivity
|
|
bookstack:
|
|
image: lscr.io/linuxserver/bookstack:latest
|
|
container_name: bookstack
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
- bookstack-network
|
|
ports:
|
|
- "6876:80"
|
|
volumes:
|
|
- ./bookstack/config:/config
|
|
environment:
|
|
- PUID=${PUID:-1000}
|
|
- PGID=${PGID:-1000}
|
|
- APP_URL=https://bookstack.${DOMAIN}
|
|
- DB_HOST=bookstack-db
|
|
- DB_PORT=3306
|
|
- DB_DATABASE=bookstack
|
|
- DB_USERNAME=bookstack
|
|
- DB_PASSWORD=${BOOKSTACK_DB_PASSWORD}
|
|
- APP_KEY=base64:NsYD8+8MAvtBhK8xw9p8pxQDy4x8aOQi/78M3CsseAw=
|
|
depends_on:
|
|
- bookstack-db
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# Service metadata
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=Documentation and wiki platform"
|
|
- "traefik.enable=true"
|
|
# Router configuration
|
|
- "traefik.http.routers.bookstack.rule=Host(`bookstack.${DOMAIN}`)"
|
|
- "traefik.http.routers.bookstack.entrypoints=websecure"
|
|
- "traefik.http.routers.bookstack.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.bookstack.middlewares=authelia@docker"
|
|
# Service configuration
|
|
- "traefik.http.services.bookstack.loadbalancer.server.port=6876"
|
|
# Sablier configuration
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-bookstack"
|
|
- "sablier.start-on-demand=true"
|
|
|
|
bookstack-db:
|
|
image: mariadb:10.11
|
|
container_name: bookstack-db
|
|
restart: no
|
|
networks:
|
|
- bookstack-network
|
|
volumes:
|
|
- bookstack-db-data:/var/lib/mysql
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${BOOKSTACK_DB_ROOT_PASSWORD}
|
|
- MYSQL_DATABASE=bookstack
|
|
- MYSQL_USER=bookstack
|
|
- MYSQL_PASSWORD=${BOOKSTACK_DB_PASSWORD}
|
|
labels:
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=BookStack database"
|
|
|
|
# MediaWiki - Wiki platform
|
|
# Access at: https://mediawiki.${DOMAIN}
|
|
mediawiki:
|
|
image: mediawiki:latest
|
|
container_name: mediawiki
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
- mediawiki-network
|
|
ports:
|
|
- "8891:80"
|
|
volumes:
|
|
- ./mediawiki/images:/var/www/html/images
|
|
- ./mediawiki/LocalSettings.php:/var/www/html/LocalSettings.php
|
|
environment:
|
|
- MEDIAWIKI_DB_HOST=mediawiki-db
|
|
- MEDIAWIKI_DB_NAME=mediawiki
|
|
- MEDIAWIKI_DB_USER=mediawiki
|
|
- MEDIAWIKI_DB_PASSWORD=${MEDIAWIKI_DB_PASSWORD}
|
|
depends_on:
|
|
- mediawiki-db
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# Service metadata
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=MediaWiki platform"
|
|
- "traefik.enable=true"
|
|
# Router configuration
|
|
- "traefik.http.routers.mediawiki.rule=Host(`mediawiki.${DOMAIN}`)"
|
|
- "traefik.http.routers.mediawiki.entrypoints=websecure"
|
|
- "traefik.http.routers.mediawiki.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.mediawiki.middlewares=authelia@docker"
|
|
# Service configuration
|
|
- "traefik.http.services.mediawiki.loadbalancer.server.port=8891"
|
|
# Sablier configuration
|
|
- "sablier.enable=true"
|
|
- "sablier.group=${SERVER_HOSTNAME}-mediawiki"
|
|
- "sablier.start-on-demand=true"
|
|
|
|
mediawiki-db:
|
|
image: mariadb:10.11
|
|
container_name: mediawiki-db
|
|
restart: no
|
|
networks:
|
|
- mediawiki-network
|
|
volumes:
|
|
- mediawiki-db-data:/var/lib/mysql
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${MEDIAWIKI_DB_ROOT_PASSWORD}
|
|
- MYSQL_DATABASE=mediawiki
|
|
- MYSQL_USER=mediawiki
|
|
- MYSQL_PASSWORD=${MEDIAWIKI_DB_PASSWORD}
|
|
labels:
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=MediaWiki database"
|
|
|
|
# Jupyter Lab - Interactive computing notebooks
|
|
# Access at: https://jupyter.${DOMAIN}
|
|
# Token displayed in logs on first start
|
|
jupyter:
|
|
image: jupyter/scipy-notebook:latest
|
|
container_name: jupyter
|
|
restart: no
|
|
networks:
|
|
- homelab-network
|
|
- traefik-network
|
|
ports:
|
|
- "8890:8888"
|
|
volumes:
|
|
- ./config/jupyter:/home/jovyan/work
|
|
environment:
|
|
- JUPYTER_ENABLE_LAB=yes
|
|
- GRANT_SUDO=yes
|
|
user: root
|
|
command: start-notebook.sh --NotebookApp.token='${JUPYTER_TOKEN:-changeme}'
|
|
# Uncomment for GPU support (NVIDIA, requires nvidia-container-toolkit)
|
|
# runtime: nvidia
|
|
# devices:
|
|
# - /dev/nvidia0:/dev/nvidia0
|
|
# - /dev/nvidiactl:/dev/nvidiactl
|
|
# Add these to environment above:
|
|
# - NVIDIA_VISIBLE_DEVICES=all
|
|
# - NVIDIA_DRIVER_CAPABILITIES=compute,utility
|
|
labels:
|
|
# TRAEFIK CONFIGURATION
|
|
# ==========================================
|
|
# Service metadata
|
|
- "homelab.category=productivity"
|
|
- "homelab.description=Jupyter Lab for data science and ML"
|
|
# Traefik reverse proxy (comment/uncomment to disable/enable)
|
|
# If Traefik is on a remote server: these labels are NOT USED;
|
|
# configure external yml files in /traefik/dynamic folder instead.
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.jupyter.rule=Host(`jupyter.${DOMAIN}`)"
|
|
- "traefik.http.routers.jupyter.entrypoints=websecure"
|
|
- "traefik.http.routers.jupyter.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.jupyter.middlewares=authelia@docker"
|
|
- "traefik.http.services.jupyter.loadbalancer.server.port=8890"
|
|
|
|
volumes:
|
|
nextcloud-db-data:
|
|
wordpress-db-data:
|
|
gitea-db-data:
|
|
bookstack-db-data:
|
|
mediawiki-db-data:
|
|
|
|
# ==========================================
|
|
# DOCKGE URL CONFIGURATION
|
|
# ==========================================
|
|
x-dockge:
|
|
urls:
|
|
# Proxied URLs (through Traefik)
|
|
- https://nextcloud.${DOMAIN}
|
|
- https://mealie.${DOMAIN}
|
|
- https://wordpress.${DOMAIN}
|
|
- https://gitea.${DOMAIN}
|
|
- https://bookstack.${DOMAIN}
|
|
- https://dokuwiki.${DOMAIN}
|
|
- https://mediawiki.${DOMAIN}
|
|
|
|
networks:
|
|
homelab-network:
|
|
external: true
|
|
traefik-network:
|
|
external: true
|
|
nextcloud-network:
|
|
driver: bridge
|
|
wordpress-network:
|
|
driver: bridge
|
|
gitea-network:
|
|
driver: bridge
|
|
bookstack-network:
|
|
driver: bridge
|
|
mediawiki-network:
|
|
driver: bridge
|