Update README.md

README.md

@@ -5,11 +5,8 @@ I use docker for all of my services that I run with a docker compose file.  I us
 
 The homelab is run off of a dedicated server running a headless instance of Arch Linux.  Arch linux is my Distro of preference however if I were to run a server that is required for reliability I would most likely prefer RedHat or similar for a stable environment over rolling release Arch.
 
-Nginx is currently used to share my publicly facing services with a subdomain of mintyserver.net eg https://git.mintyserver.net.  I use a docker image from linuxserver.io called swag.  This contains some nice packages fo nginx such as fail2ban for spam authentication protection and letsencrypt for http ssl certificates.  Not all services are reverse proxied such as my pihole as they are only needed to be accessed by me and therefore only accessible via local or vpn connections.  
+Caddy is currently used to share my publicly facing services with a subdomain of mintyserver.net eg https://git.mintyserver.net. Not all services are reverse proxied such as my pihole as they are only needed to be accessed by me and therefore only accessible via local or vpn connections.  
 
 
 
 ## TODO
-- Investigate a sync service for music playlists between yt spotify musicbrainz and lastfm
-- find email filtering service to host
-- Check out caddy and try it as an alternitive to nginx

docker-compose.yml

@@ -12,6 +12,43 @@ networks:
     name: arr
 
 services:
+  gluetun:
+    image: ghcr.io/qdm12/gluetun
+    cap_add:
+      - NET_ADMIN
+    container_name: gluetun
+    environment:
+      - VPN_SERVICE_PROVIDER=mullvad
+      - VPN_TYPE=wireguard
+      - WIREGUARD_PRIVATE_KEY=+Jm+OLkBDUag9JrezhsNJy59qzCECI9uHl0QQtneolw=
+      - WIREGUARD_ADDRESSES=10.64.21.169/32
+      - SERVER_CITIES=Chicago IL
+        #- LOG_LEVEL=debug
+    volumes:
+      - gluetun:/gluetun
+    ports:
+      - 8181:8181
+      - 6881:6881
+      - 6881:6881/udp
+    restart: unless-stopped
+    networks:
+      - qbit
+
+  syncthing:
+    image: lscr.io/linuxserver/syncthing:latest
+    container_name: syncthing
+    environment:
+      - PUID=1000
+      - PGID=1000
+    volumes:
+      - syncdata:/config
+      - /mnt/nextcloud:/mnt/files
+    ports:
+      - 8384:8384
+      - 22000:22000/tcp
+      - 22000:22000/udp
+      - 21027:21027/udp
+    restart: unless-stopped
 
   caddy:
     image: caddy:latest
@@ -99,16 +136,16 @@ services:
       - PGID=1000
       - TZ=Etc/UTC
       - WEBUI_PORT=8181
+    network_mode: "service:gluetun"
     volumes:
       - qbittorrent:/config
       - /mnt/nextcloud:/mnt/files
-    ports:
-      - 8181:8181
-      - 6881:6881
-      - 6881:6881/udp
     restart: unless-stopped
-    networks: 
-      - qbit
+    depends_on:
+      gluetun:
+        condition: service_healthy
+      #networks: 
+      #- qbit
 
   shoko:
     shm_size: 256m
@@ -156,6 +193,10 @@ services:
       - 18089:18089
       - 18083:18083
     command:
+      - "--add-priority-node=p2pmd.xmrvsbeast.com:18080"
+        #- "--add-priority-node=nodes.hashvault.pro:18080"
+      - "--out-peers=32"
+      - "--in-peers=64"
       - "--disable-dns-checkpoints"
       - "--rpc-restricted-bind-ip=0.0.0.0"
       - "--rpc-restricted-bind-port=18089"
@@ -259,10 +300,10 @@ services:
     volumes:
       - jellyfin:/config
       - /mnt/massdrive/media:/data
-        # ports:
+    ports:
         #   - 7359:7359/udp
         #   - 1900:1900/udp
-        #   - 8096:8096
+      - 8096:8096
     restart: unless-stopped
     networks:
       - swag
@@ -324,28 +365,32 @@ volumes:
     name: caddy_set
   vaultwarden:
     name: vaultwarden
+    external: true
   qbittorrent:
     name: qbittorrent
+    external: true
   shoko:
     name: shoko
+    external: true
   ariang:
     name: ariang
   puffer-config:
     name: puffer-config
-  puffer-lib:
-    name: puffer-lib
   searxng:
     name: searxng
+    external: true
   jellyfin: 
     name: jellyfin
   gitea:
     name: gitea
   technitium:
     name: technitium
+    external: true
   sonarr:
     name: sonarr
   prowlarr:
     name: prowlarr
+    external: true
   nextcloud_aio_mastercontainer:
     name: nextcloud_aio_mastercontainer
   bitmonero:
@@ -354,4 +399,12 @@ volumes:
     name: p2pool-data
   swag:
     name: swag
-
+  syncdata:
+    name: syncdata
+    external: true
+  librewolf-conf:
+    name: librewolf-conf
+  firefox:
+    name: firefox
+  gluetun:
+    name: gluetun

permfix

@@ -1,3 +1,4 @@
 # Adds the group 1000 and then adds that group to user 33 to nextcloud container to fix permissions
 docker exec -it nextcloud-aio-nextcloud groupadd -g 1000 poslop
 docker exec -it nextcloud-aio-nextcloud usermod www-data -aG poslop
+docker exec -u 33 nextcloud-aio-nextcloud ./occ files:scan poslop