Merge branch 'main' into passbolt

docker-compose/README.md

@@ -1,21 +0,0 @@
-# Docker-Compose Boilerplates and Templates
-
-## Index
-
-- **Authelia** - 
-- **Duplicati** - 
-- **Grafana** - 
-- **Homer** - 
-- **Influxdb** - 
-- **Jellyfin** - 
-- **Nextcloud** - 
-- **Nginxproxymanager** - 
-- **Pihole** - 
-- **Plex** - 
-- **Portainer** - 
-- **Prometheus** - 
-- **SWAG** - 
-- **Teleport** -
-- **Traefik** - 
-- **Watchtower** - 
-- **Whoami** - 

docker-compose/cadvisor/docker-compose.yml

@@ -0,0 +1,21 @@
+---
+version: '3'
+
+services:
+  cadvisor:
+    # TODO: latest tag is not updated, check latest release https://github.com/google/cadvisor/releases 
+    image: gcr.io/cadvisor/cadvisor:v0.45.0     
+    container_name: cadvisor
+    ports:
+      - "8080:8080"
+    network_mode: host
+    volumes:
+      - /:/rootfs:ro
+      - /var/run:/var/run:ro
+      - /sys:/sys:ro
+      - /var/lib/docker/:/var/lib/docker:ro
+      - /dev/disk/:/dev/disk:ro
+    devices:
+      - /dev/kmsg
+    restart: unless-stopped
+    privileged: true

docker-compose/heimdall/heimdall.yaml

@@ -0,0 +1,15 @@
+---
+version: "2.1"
+services:
+  heimdall:
+    image: lscr.io/linuxserver/heimdall:latest
+    container_name: heimdall
+    environment:
+      - PUID=1000
+      - PGID=1000
+    volumes:
+      - ./heimdall/config:/config
+    ports:
+      - 80:80
+      - 443:443
+    restart: unless-stopped

docker-compose/nextcloud/nextcloud-npm.yaml

@@ -1,77 +0,0 @@
-version: '3'
-
-volumes:
-  nextcloud-data:
-  nextcloud-db:
-  npm-data:
-  npm-ssl:
-  npm-db:
-
-networks:
-  frontend:
-    # add this if the network is already existing!
-    # external: true
-  backend:
-
-services:
-
-  nextcloud-app:
-    image: nextcloud
-    restart: always
-    volumes:
-      - nextcloud-data:/var/www/html
-    environment:
-      - MYSQL_PASSWORD=replace-with-secure-password
-      - MYSQL_DATABASE=nextcloud
-      - MYSQL_USER=nextcloud
-      - MYSQL_HOST=nextcloud-db
-    networks:
-      - frontend
-      - backend
-
-  nextcloud-db:
-    image: mariadb
-    restart: always
-    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
-    volumes:
-      - nextcloud-db:/var/lib/mysql
-    environment:
-      - MYSQL_ROOT_PASSWORD=replace-with-secure-password
-      - MYSQL_PASSWORD=replace-with-secure-password
-      - MYSQL_DATABASE=nextcloud
-      - MYSQL_USER=nextcloud
-    networks:
-      - backend
-
-  npm-app:
-    image: jc21/nginx-proxy-manager:latest
-    restart: always
-    ports:
-      - "80:80"
-      - "81:81"
-      - "443:443"
-    environment:
-      - DB_MYSQL_HOST=npm-db
-      - DB_MYSQL_PORT=3306
-      - DB_MYSQL_USER=npm
-      - DB_MYSQL_PASSWORD=replace-with-secure-password
-      - DB_MYSQL_NAME=npm
-    volumes:
-      - npm-data:/data
-      - npm-ssl:/etc/letsencrypt
-    networks:
-      - frontend
-      - backend
-
-  npm-db:
-    image: jc21/mariadb-aria:latest
-    restart: always
-    environment:
-      - MYSQL_ROOT_PASSWORD=replace-with-secure-password
-      - MYSQL_DATABASE=npm
-      - MYSQL_USER=npm
-      - MYSQL_PASSWORD=replace-with-secure-password
-    volumes:
-      - npm-db:/var/lib/mysql
-    networks:
-      - backend

docker-compose/nextcloud/nextcloud.yaml

@@ -4,38 +4,29 @@ volumes:
   nextcloud-data:
   nextcloud-db:
 
-networks:
-  frontend:
-    # add this if the network is already existing!
-    # external: true
-  backend:
-
 services:
 
   nextcloud-app:
-    image: nextcloud
-    restart: always
+    image: nextcloud:latest
+    restart: unless-stopped
     volumes:
       - nextcloud-data:/var/www/html
     environment:
-      - MYSQL_PASSWORD=replace-with-secure-password
-      - MYSQL_DATABASE=nextcloud
-      - MYSQL_USER=nextcloud
+      - MYSQL_PASSWORD=$MYSQL_PASSWORD
+      - MYSQL_DATABASE=$MYSQL_DATABASE
+      - MYSQL_USER=$MYSQL_USER
       - MYSQL_HOST=nextcloud-db
-    networks:
-      - frontend
-      - backend
+    ports:
+      - 80:80
 
   nextcloud-db:
-    image: mariadb
-    restart: always
+    image: mariadb:latest
+    restart: unless-stopped
     command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
     volumes:
       - nextcloud-db:/var/lib/mysql
     environment:
-      - MYSQL_ROOT_PASSWORD=replace-with-secure-password
-      - MYSQL_PASSWORD=replace-with-secure-password
-      - MYSQL_DATABASE=nextcloud
-      - MYSQL_USER=nextcloud
-    networks:
-      - backend
+      - MYSQL_RANDOM_ROOT_PASSWORD=true
+      - MYSQL_PASSWORD=$MYSQL_PASSWORD
+      - MYSQL_DATABASE=$MYSQL_DATABASE
+      - MYSQL_USER=$MYSQL_USER

docker-compose/prometheus/README.md

@@ -11,6 +11,15 @@ Configure your settings in the `/etc/prometheus/prometheus.yml` file.
 
 *For more info visit:* [Official Prometheus Installation Documentation](https://prometheus.io/docs/prometheus/latest/installation/)
 
+# Exporters
+
+TODO: WIP
+
+- cadvisor
+- nodeexporter
+- nvidiadgcm
+- nvidiasmi
+
 # Best-Practices & Post-Installation
 
 ## Disable HTTP
@@ -19,7 +28,7 @@ It's not secure to expose Prometheus via the HTTP protocol.
 
 ### Use a Reverse Proxy
 
-- [] Use a Reverse Proxy to securely expose administrative services.
+- [ ] Use a Reverse Proxy to securely expose administrative services.
 
 # Additional Referfences
 

docker-compose/prometheus/exporters/cadvisor/docker-compose.yml

@@ -1,21 +0,0 @@
----
-version: '3'
-
-services:
-  cadvisor:
-    image: gcr.io/cadvisor/cadvisor:v0.45.0 # latest tag is not updated...
-                                            # https://github.com/google/cadvisor/issues/3066    
-                                            # To manual check versions: https://github.com/google/cadvisor/releases      
-    container_name: cadvisor
-    # ports:
-    #   - "8080:8080"
-    network_mode: host
-    volumes:
-      - /:/rootfs:ro
-      - /var/run:/var/run:ro
-      - /sys:/sys:ro
-      - /var/lib/docker/:/var/lib/docker:ro
-      - /dev/disk/:/dev/disk:ro
-    devices:
-      - /dev/kmsg
-    restart: unless-stopped