637 lines
11 KiB
HCL
637 lines
11 KiB
HCL
services = {
|
|
"acme_dns" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "acme.serguzim.me"
|
|
}]
|
|
monitoring = {
|
|
url = "/health"
|
|
group = "7-support"
|
|
}
|
|
ports = [
|
|
{
|
|
port = 53
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
},
|
|
{
|
|
port = 53
|
|
protocol = "udp"
|
|
type = "firewall"
|
|
}
|
|
]
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
},
|
|
|
|
"authentik" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "auth.serguzim.me"
|
|
}]
|
|
monitoring = {
|
|
url = "/-/health/live/"
|
|
group = "4-services"
|
|
}
|
|
certificates = ["auth.serguzim.me"]
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
mail = "auth"
|
|
},
|
|
|
|
"backup" = {
|
|
host = "*"
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"caddy" = {
|
|
host = "*"
|
|
ports = [
|
|
{
|
|
port = 80
|
|
protocol = "tcp"
|
|
type = "reverse_proxy"
|
|
},
|
|
{
|
|
port = 443
|
|
protocol = "tcp"
|
|
type = "reverse_proxy"
|
|
},
|
|
{
|
|
port = 443
|
|
protocol = "udp"
|
|
type = "reverse_proxy"
|
|
},
|
|
#"2019:2019",
|
|
]
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"dokku" = {
|
|
host = "node001"
|
|
dns = [
|
|
{
|
|
domain = "paas.serguzim.me"
|
|
},
|
|
{
|
|
domain = "*.paas.serguzim.me"
|
|
name = "dokku-wildcard"
|
|
alias = "dokku"
|
|
},
|
|
{
|
|
domain = "serguzim.me"
|
|
name = "webpage-serguzim"
|
|
alias = "dokku"
|
|
},
|
|
{
|
|
domain = "www.serguzim.me"
|
|
name = "webpage-serguzim-www"
|
|
alias = "webpage-serguzim"
|
|
},
|
|
]
|
|
backup = [{
|
|
name = "dokku"
|
|
type = "directory"
|
|
path = "/var/lib/dokku"
|
|
}]
|
|
monitoring = {
|
|
group = "7-support"
|
|
}
|
|
ports = [
|
|
{
|
|
port = 3022
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
}
|
|
]
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"extra_services" = {
|
|
host = "node001"
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"forgejo" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "git.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "forgejo_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/api/v1/version"
|
|
group = "4-services"
|
|
}
|
|
ports = [
|
|
{
|
|
port = 22
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
}
|
|
]
|
|
auth = true
|
|
auth_redirects = ["https://git.serguzim.me/user/oauth2/auth.serguzim.me/callback"]
|
|
database = true
|
|
s3 = true
|
|
mail = "git"
|
|
},
|
|
|
|
"forgejo_runner" = {
|
|
host = "node001"
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"healthcheck" = {
|
|
host = "node001"
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"gatus" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "status.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "gatus_data"
|
|
type = "docker"
|
|
}]
|
|
auth = true
|
|
auth_redirects = ["https://status.serguzim.me/authorization-code/callback"]
|
|
database = false
|
|
s3 = false
|
|
mail = "status"
|
|
},
|
|
|
|
"homebox" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "inventory.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "homebox_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/api/v1/status"
|
|
group = "4-services"
|
|
conditions = [
|
|
"DEFAULT",
|
|
"[BODY].health == true"
|
|
]
|
|
}
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
mail = "inventory"
|
|
},
|
|
|
|
"immich" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "gallery.serguzim.me"
|
|
}]
|
|
backup = [
|
|
{
|
|
name = "immich_upload"
|
|
type = "docker_remote"
|
|
},
|
|
{
|
|
name = "immich_database"
|
|
type = "hook"
|
|
}
|
|
]
|
|
monitoring = {
|
|
group = "4-services"
|
|
}
|
|
auth = true
|
|
auth_redirects = ["https://gallery.serguzim.me/auth/login"]
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"influxdb" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "tick.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "influxdb_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/health"
|
|
group = "4-services"
|
|
conditions = [
|
|
"DEFAULT",
|
|
"[BODY].status == pass"
|
|
]
|
|
}
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"jellyfin" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "media.serguzim.me"
|
|
}]
|
|
backup = [
|
|
{
|
|
name = "jellyfin_config"
|
|
type = "docker"
|
|
},
|
|
{
|
|
name = "jellyfin_media"
|
|
type = "docker_remote"
|
|
}
|
|
]
|
|
monitoring = {
|
|
url = "/health"
|
|
group = "4-services"
|
|
conditions = [
|
|
"DEFAULT",
|
|
"[BODY] == Healthy"
|
|
]
|
|
}
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"lego" = {
|
|
host = "*"
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"linkwarden" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "bookmarks.serguzim.me"
|
|
}]
|
|
monitoring = {
|
|
url = "/api/v1/logins"
|
|
group = "4-services"
|
|
}
|
|
auth = true
|
|
auth_cert = "rsa"
|
|
auth_redirects = ["https://bookmarks.serguzim.me/api/v1/auth/callback/authentik"]
|
|
database = true
|
|
s3 = true
|
|
},
|
|
|
|
mailcowdockerized = {
|
|
host = "node003"
|
|
dns = [{
|
|
domain = "mail.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "mailcowdockerized"
|
|
type = "hook"
|
|
}]
|
|
monitoring = {
|
|
group = "4-services"
|
|
}
|
|
ports = [
|
|
{
|
|
port = 25 # SMTP
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
},
|
|
{
|
|
port = 465 # SMTP TLS
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
},
|
|
{
|
|
port = 587 # SMTP StartTLS
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
},
|
|
{
|
|
port = 993 # IMAPS
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
},
|
|
{
|
|
port = 995 # POPS
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
},
|
|
{
|
|
port = 4190 # Sieve
|
|
protocol = "tcp"
|
|
type = "firewall"
|
|
}
|
|
]
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"minio" = {
|
|
host = "node001"
|
|
dns = [
|
|
{
|
|
domain = "s3.serguzim.me"
|
|
},
|
|
{
|
|
domain = "console.s3.serguzim.me"
|
|
name = "minio-console"
|
|
alias = "minio"
|
|
}
|
|
]
|
|
backup = [{
|
|
name = "minio_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/minio/health/live"
|
|
group = "7-support"
|
|
}
|
|
auth = true
|
|
auth_redirects = ["https://console.s3.serguzim.me/oauth_callback"]
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"ntfy" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "push.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "ntfy_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/v1/health"
|
|
group = "4-services"
|
|
conditions = [
|
|
"DEFAULT",
|
|
"[BODY].healthy == true"
|
|
]
|
|
}
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"postgresql" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "db.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "postgresql"
|
|
type = "hook"
|
|
}]
|
|
monitoring = {
|
|
url = "tcp://db.serguzim.me:5432"
|
|
group = "7-support"
|
|
conditions = [
|
|
"[CONNECTED] == true"
|
|
]
|
|
}
|
|
certificates = ["db.serguzim.me"]
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"reitanlage_oranienburg" = {
|
|
host = "node001"
|
|
dns = [
|
|
{
|
|
domain = "reitanlage-oranienburg.de"
|
|
},
|
|
{
|
|
domain = "www.reitanlage-oranienburg.de"
|
|
name = "reitanlage_oranienburg-www"
|
|
alias = "reitanlage_oranienburg"
|
|
}
|
|
]
|
|
backup = [{
|
|
name = "reitanlage_oranienburg_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
group = "5-websites"
|
|
}
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
},
|
|
|
|
"shlink" = {
|
|
host = "node001"
|
|
dns = [
|
|
{
|
|
domain = "msrg.cc"
|
|
},
|
|
{
|
|
domain = "msvg.cc"
|
|
name = "shlink-msvg"
|
|
alias = "shlink"
|
|
}
|
|
]
|
|
monitoring = {
|
|
url = "/rest/health"
|
|
group = "4-services"
|
|
conditions = [
|
|
"DEFAULT",
|
|
"[BODY].status == pass"
|
|
]
|
|
}
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
},
|
|
|
|
"synapse" = {
|
|
host = "node001"
|
|
dns = [
|
|
{
|
|
domain = "matrix.serguzim.me"
|
|
},
|
|
{
|
|
domain = "matrix.msrg.cc"
|
|
name = "synapse-msrg"
|
|
alias = "synapse"
|
|
}
|
|
]
|
|
backup = [{
|
|
name = "synapse_media_store"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/_matrix/client/versions"
|
|
group = "4-services"
|
|
}
|
|
ports = [
|
|
{
|
|
port = 8448
|
|
protocol = "tcp"
|
|
type = "reverse_proxy"
|
|
}
|
|
]
|
|
auth = true
|
|
auth_redirects = ["https://matrix.serguzim.me/_synapse/client/oidc/callback"]
|
|
database = true
|
|
s3 = false
|
|
mail = "matrix"
|
|
},
|
|
|
|
"tandoor" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "recipes.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "tandoor_mediafiles"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/accounts/login/"
|
|
group = "4-services"
|
|
}
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
},
|
|
|
|
"teamspeak_fallback" = {
|
|
host = "node001"
|
|
dns = [
|
|
{
|
|
domain = "ts.serguzim.me"
|
|
},
|
|
{
|
|
domain = "hook.serguzim.me"
|
|
name = "teamspeak_fallback-hook"
|
|
alias = "teamspeak_fallback"
|
|
}
|
|
]
|
|
backup = [{
|
|
name = "teamspeak_fallback_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
group = "7-support"
|
|
}
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
}
|
|
|
|
"telegraf" = {
|
|
host = "node001"
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
},
|
|
|
|
"tinytinyrss" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "rss.serguzim.me"
|
|
}]
|
|
monitoring = {
|
|
url = "/tt-rss/"
|
|
group = "4-services"
|
|
}
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
},
|
|
|
|
"umami" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "analytics.serguzim.me"
|
|
}]
|
|
monitoring = {
|
|
url = "/api/heartbeat"
|
|
group = "4-services"
|
|
}
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
},
|
|
|
|
"vikunja" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "todo.serguzim.me"
|
|
}]
|
|
backup = [{
|
|
name = "vikunja_data"
|
|
type = "docker"
|
|
}]
|
|
monitoring = {
|
|
url = "/api/v1/info"
|
|
group = "4-services"
|
|
}
|
|
auth = true
|
|
auth_redirects = ["https://todo.serguzim.me/auth/openid/authserguzimme"]
|
|
database = true
|
|
s3 = false
|
|
mail = "todo"
|
|
},
|
|
|
|
"watchtower" = {
|
|
host = "*"
|
|
auth = false
|
|
database = false
|
|
s3 = false
|
|
mail = "watchtower"
|
|
},
|
|
|
|
"wiki_js" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "wiki.serguzim.me"
|
|
}]
|
|
monitoring = {
|
|
group = "4-services"
|
|
}
|
|
auth = true
|
|
auth_redirects = ["https://wiki.serguzim.me/login/f792bc7d-1a25-4437-944e-55eaf0111102/callback"]
|
|
database = true
|
|
s3 = false
|
|
mail = "wiki"
|
|
},
|
|
|
|
"woodpecker" = {
|
|
host = "node001"
|
|
dns = [{
|
|
domain = "ci.serguzim.me"
|
|
}]
|
|
monitoring = {
|
|
url = "/healthz"
|
|
group = "4-services"
|
|
}
|
|
auth = false
|
|
database = true
|
|
s3 = false
|
|
}
|
|
}
|