8f1c29b847
Updating repo and files to look a bit more on par with the style of ansible I'm used to writing. Removing inventory as it can easily go stale and the homelab env needs to be a bit more dynamic anyway. need to find a good way to manage this but for now, no inventory is better than outdated inv.
172 lines
4.7 KiB
YAML
172 lines
4.7 KiB
YAML
---
|
|
version: '3.4'
|
|
x-function: &traefik-config
|
|
networks:
|
|
- traefik_proxy1
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=traefik_proxy1"
|
|
- "traefik.frontend.headers.SSLRedirect=true"
|
|
- "traefik.frontend.headers.STSSeconds=315360000"
|
|
- "traefik.frontend.headers.browserXSSFilter=true"
|
|
- "traefik.frontend.headers.contentTypeNosniff=true"
|
|
- "traefik.frontend.headers.forceSTSHeader=true"
|
|
- "traefik.frontend.headers.SSLHost=example.com"
|
|
- "traefik.frontend.headers.STSIncludeSubdomains=true"
|
|
- "traefik.frontend.headers.STSPreload=true"
|
|
- "traefik.frontend.headers.frameDeny=true"
|
|
restart: always
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
# Media Server
|
|
services:
|
|
# Grabber, manage TV shows
|
|
sonarr:
|
|
<<: *traefik-config
|
|
image: linuxserver/sonarr:latest
|
|
container_name: sonarr
|
|
volumes:
|
|
- /opt/appdata/sonarr:/config
|
|
- /mnt/storage/tv:/tv
|
|
- /downloads/:/downloads
|
|
- /downloads/complete/tv_import:/tv_import
|
|
ports:
|
|
- 27021:8989
|
|
labels:
|
|
- "traefik.backend=sonarr"
|
|
- "traefik.port=8989"
|
|
- "traefik.frontend.rule=Host:sonarr.${DOMAINNAME}"
|
|
- "docker.group=external"
|
|
|
|
# Indexer, Used by managers to query sites for content
|
|
jackett:
|
|
<<: *traefik-config
|
|
image: linuxserver/jackett:latest
|
|
container_name: jackett
|
|
volumes:
|
|
- /opt/appdata/jackett:/config
|
|
- /downloads:/downloads
|
|
ports:
|
|
- 9117:9117
|
|
labels:
|
|
- "traefik.backend=jackett"
|
|
- "traefik.frontend.rule=Host:jackett.${DOMAINNAME}"
|
|
- "traefik.port=9117"
|
|
- "docker.group=internal"
|
|
# Reverse Proxy, Used to route applications to domain
|
|
traefik:
|
|
<<: *traefik-config
|
|
hostname: traefik
|
|
image: traefik:v1.7
|
|
container_name: traefik
|
|
domainname: ${DOMAINNAME}
|
|
networks:
|
|
- default
|
|
- traefik_proxy1
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
- "8080:8080"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.backend=traefik"
|
|
- "traefik.frontend.rule=Host:traefik.${DOMAINNAME}"
|
|
- "traefik.port=80"
|
|
- "traefik.frontend.auth.basic.users=${HTTP_USERNAME}:${HTTP_PASSWORD}"
|
|
- "docker.group=internal"
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
- /home/dockeruser/traefik:/etc/traefik
|
|
- /opt/appdata/shared:/shared
|
|
- /opt/appdata/traefik:/var/log
|
|
- /opt/appdata/traefik/tmp:/tmp
|
|
# Downloader, pull in content from torrents & hide traffic behind VPN
|
|
arch-deluge:
|
|
<<: *traefik-config
|
|
image: binhex/arch-delugevpn:latest
|
|
container_name: arch-deluge
|
|
ports:
|
|
- 8112:8112
|
|
- 8118:8118
|
|
- 58846:58846
|
|
- 58946:58946
|
|
cap_add:
|
|
- NET_ADMIN
|
|
volumes:
|
|
- /opt/appdata/arch-deluge:/config
|
|
- /downloads:/downloads
|
|
- /mnt/storage:/mnt/storage
|
|
- /opt/appdata/shared:/shared
|
|
- /opt/appdata/arch-deluge/data:/data
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
- VPN_ENABLED=yes
|
|
- VPN_USER=${VPN_USER}
|
|
- VPN_PASS=${VPN_PASS}
|
|
- VPN_PROV=custom
|
|
- STRICT_PORT_FORWARD=yes
|
|
- ENABLE_PRIVOXY=yes
|
|
- LAN_NETWORK=192.168.0.100/24
|
|
- NAME_SERVERS=103.86.96.100, 103.86.99.100
|
|
- DELUGE_DAEMON_LOG_LEVEL=error
|
|
- DELUGE_WEB_LOG_LEVEL=error
|
|
- DEBUG=true
|
|
- UMASK=000
|
|
labels:
|
|
- "traefik.backend=arch-deluge"
|
|
- "traefik.frontend.rule=Host:deluge.${DOMAINNAME}"
|
|
- "traefik.port=8112"
|
|
- "docker.group=external"
|
|
privileged: true
|
|
# User Request, auto add to searchers
|
|
ombi:
|
|
<<: *traefik-config
|
|
image: linuxserver/ombi
|
|
container_name: ombi
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
- BASE_URL=/ombi # optional
|
|
volumes:
|
|
- /opt/appdata/ombi:/config
|
|
- /opt/appdata/shared:/shared
|
|
networks:
|
|
- traefik_proxy1
|
|
labels:
|
|
- "traefik.backend=ombi"
|
|
- "traefik.frontend.rule=Host:requests.${DOMAINNAME}" #
|
|
- "traefik.port=3579"
|
|
- "traefik.docker.network=traefik_proxy1"
|
|
- "docker.group=external"
|
|
ports:
|
|
- 3579:3579
|
|
# NZBGet - usenet downloader
|
|
nzbget:
|
|
<<: *traefik-config
|
|
image: linuxserver/nzbget:latest
|
|
container_name: nzbget
|
|
volumes:
|
|
- /opt/appdata/nzbget/config:/config
|
|
- /opt/appdata/nzbget/data:/data
|
|
- /downloads:/downloads
|
|
- /opt/appdata/shared:/shared
|
|
ports:
|
|
- 27020:6789
|
|
networks:
|
|
- traefik_proxy1
|
|
labels:
|
|
- "traefik.backend=nzbget"
|
|
- "traefik.frontend.rule=Host:nzbget.${DOMAINNAME}" #
|
|
- "traefik.port=6789"
|
|
- "docker.group=external"
|
|
# Networks, Needed for Traefik
|
|
networks:
|
|
traefik_proxy1:
|
|
default:
|
|
driver: bridge
|