librewolf build

merge with dev
technitium
permissions script nextcloud

README.md

@@ -13,4 +13,3 @@ Nginx is currently used to share my publicly facing services with a subdomain of
 - Investigate a sync service for music playlists between yt spotify musicbrainz and lastfm
 - find email filtering service to host
 - Check out caddy and try it as an alternitive to nginx
--

build/librewolf-vnc/Dockerfile

@@ -0,0 +1,23 @@
+FROM ghcr.io/linuxserver/baseimage-kasmvnc:alpine319
+
+# set version label
+ARG BUILD_DATE
+ARG VERSION
+ARG FIREFOX_VERSION
+LABEL build_version="Linuxserver.io version:- ${VERSION} Build-date:- ${BUILD_DATE}"
+LABEL maintainer="thelamer"
+
+# title
+ENV TITLE=Librewolf
+
+RUN \
+  echo "**** install packages ****" && \
+  apk add librewolf --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/edge/testing/ --allow-untrusted && \
+  sed -i 's|</applications>|  <application title="LibreWolf" type="normal">\n    <maximized>yes</maximized>\n  </application>\n</applications>|' /etc/xdg/openbox/rc.xml 
+
+# COPY /root /
+
+# ports and volumes
+EXPOSE 3000
+
+VOLUME /config

caddyreload

@@ -0,0 +1,2 @@
+caddy_container_id=$(docker ps | grep caddy | awk '{print $1;}')
+docker exec -w /etc/caddy $caddy_container_id caddy reload

compose

@@ -1 +1,2 @@
+# command to run compose with
 docker compose up -d --remove-orphans

docker-compose.yml

@@ -1,6 +1,9 @@
 networks:
   swag:
     name: swag
+    ipam:
+      config:
+        - subnet: 172.20.0.0/16
   qbit:
     name: qbit
   shoko:
@@ -8,29 +11,76 @@ networks:
   arr:
     name: arr
 
-volumes:
-  searxng:
-    name: searxng
-  jellyfin: 
-    name: jellyfin
-  gitea:
-    name: gitea
-  technitium:
-    name: technitium
-  sonarr:
-    name: sonarr
-  prowlarr:
-    name: prowlarr
-  nextcloud_aio_mastercontainer:
-    name: nextcloud_aio_mastercontainer
-  bitmonero:
-    name: bitmonero
-  p2pool-data:
-    name: p2pool-data
-  swag:
-    name: swag
-
 services:
+  firefox:
+    image: lscr.io/linuxserver/firefox:latest
+    container_name: firefox
+    security_opt:
+      - seccomp:unconfined #optional
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Etc/UTC
+    volumes:
+      - firefox:/config
+    ports:
+      - 3003:3000
+      - 3004:3001
+    shm_size: "1gb"
+    restart: unless-stopped
+
+  librewolf:
+    image: d3ec5f138a5c
+    container_name: librewolf
+    security_opt:
+      - seccomp:unconfined #optional
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Etc/UTC
+    volumes:
+      - librewolf-conf:/config
+    ports:
+      - 3000:3000
+      - 3001:3001
+    shm_size: "10gb"
+    restart: unless-stopped
+
+  syncthing:
+    image: lscr.io/linuxserver/syncthing:latest
+    container_name: syncthing
+    environment:
+      - PUID=1000
+      - PGID=1000
+    volumes:
+      - syncdata:/config
+      - /mnt/nextcloud:/mnt/files
+    ports:
+      - 8384:8384
+      - 22000:22000/tcp
+      - 22000:22000/udp
+      - 21027:21027/udp
+    restart: unless-stopped
+
+  caddy:
+    image: caddy:latest
+    container_name: caddy
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+    ports:
+      - 80:80
+      - 443:443
+      - 443:443/udp
+    volumes:
+      - caddy_set:/etc/caddy
+      - caddy_srv:/srv
+      - caddy_data:/data
+      - caddy_config:/config
+    networks:
+      swag:
+        ipv4_address: 172.20.0.10
+
 
   technitium:
     container_name: technitium
@@ -99,7 +149,7 @@ services:
       - TZ=Etc/UTC
       - WEBUI_PORT=8181
     volumes:
-      - /mnt/docker/configs/qbittorrent/config:/config
+      - qbittorrent:/config
       - /mnt/nextcloud:/mnt/files
     ports:
       - 8181:8181
@@ -121,7 +171,7 @@ services:
     ports:
       - "8111:8111"
     volumes:
-      - /mnt/docker/configs/shoko:/home/shoko/.shoko
+      - shoko:/home/shoko/.shoko
       - /mnt/massdrive/media:/mnt/media
     networks: 
       - shoko
@@ -137,7 +187,7 @@ services:
       SIGNUPS_ALLOWED: false
       ADMIN_TOKEN: ${PASS} 
     volumes:
-      - /mnt/docker/configs/vaultwarden:/data
+      - vaultwarden:/data
     networks: 
       - swag
     ports:
@@ -190,7 +240,7 @@ services:
     restart: unless-stopped
     volumes: 
       - /mnt/nextcloud:/aria2/data
-      - /mnt/docker/configs/aria:/aria2/conf
+      - ariang:/aria2/conf
     environment:
       - PUID=1000
       - PGID=1000
@@ -219,16 +269,13 @@ services:
     image: pufferpanel/pufferpanel:latest
     container_name: puffer
     restart: always
-    environment:
-      - PUFFER_DAEMON_DATA_SERVERS=/mnt/docker/configs/puffer/lib/servers
         #ports:
         #  - 8081:8080
         #  - 5657:5657
     volumes:
-      - /mnt/docker/configs/puffer/pufferpanel-config:/etc/pufferpanel
-      - /mnt/docker/configs/puffer/lib:/var/lib/pufferpanel
+      - puffer-config:/etc/pufferpanel
+      - /var/lib/pufferpanel:/var/lib/pufferpanel
       - /var/run/docker.sock:/var/run/docker.sock
-      - /mnt/docker/configs/puffer/lib/servers:/docker/store/puffer/lib/servers
     networks: 
       - swag
 
@@ -243,8 +290,8 @@ services:
      - gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
-       #ports:
-       #  - "3030:3000"
+   ports:
+     - "3030:3000"
        #  - "222:22"
    networks: 
      - swag
@@ -270,24 +317,24 @@ services:
       - swag
       - shoko
 
-  swag:
-    container_name: swag
-    image: lscr.io/linuxserver/swag:latest
-    restart: unless-stopped
-    volumes:
-      - swag:/config
-    environment:
-      - PUID=1000
-      - PGID=1000
-      - TZ=America/Chicago
-      - URL=mintyserver.net
-      - VALIDATION=http 
-      - SUBDOMAINS=aria,git,nextcloud,jelly,searxng,puffer,vault
-    ports:
-      - 443:443
-      - 80:80
-    networks: 
-      - swag
+        #swag:
+        #  container_name: swag
+        #  image: lscr.io/linuxserver/swag:latest
+        #  restart: unless-stopped
+        #  volumes:
+        #    - swag:/config
+        #  environment:
+        #    - PUID=1000
+        #    - PGID=1000
+        #    - TZ=America/Chicago
+        #    - URL=mintyserver.net
+        #    - VALIDATION=http 
+        #    - SUBDOMAINS=aria,git,nextcloud,jelly,searxng,puffer,vault
+        #  ports:
+        #    - 443:443
+        #    - 80:80
+        #  networks: 
+        #    - swag
 
   nextcloud:
     container_name: nextcloud-aio-mastercontainer
@@ -304,7 +351,7 @@ services:
     environment:
       - APACHE_PORT=11000
       - APACHE_IP_BINDING=0.0.0.0
-      - NEXTCLOUD_DATADIR=/mnt/docker/configs/ncaio
+        #- NEXTCLOUD_DATADIR=/mnt/docker/configs/ncaio
       - NEXTCLOUD_MOUNT=/mnt/nextcloud/
       - NEXTCLOUD_MEMORY_LIMIT=4096M
 
@@ -313,3 +360,52 @@ services:
     container_name: watchtower
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
+
+
+volumes:
+  caddy_config:
+    name: caddy_config
+  caddy_data:
+    name: caddy_data
+  caddy_srv:
+    name: caddy_srv
+  caddy_set:
+    name: caddy_set
+  vaultwarden:
+    name: vaultwarden
+  qbittorrent:
+    name: qbittorrent
+  shoko:
+    name: shoko
+  ariang:
+    name: ariang
+  puffer-config:
+    name: puffer-config
+  puffer-lib:
+    name: puffer-lib
+  searxng:
+    name: searxng
+  jellyfin: 
+    name: jellyfin
+  gitea:
+    name: gitea
+  technitium:
+    name: technitium
+  sonarr:
+    name: sonarr
+  prowlarr:
+    name: prowlarr
+  nextcloud_aio_mastercontainer:
+    name: nextcloud_aio_mastercontainer
+  bitmonero:
+    name: bitmonero
+  p2pool-data:
+    name: p2pool-data
+  swag:
+    name: swag
+  syncdata:
+    name: syncdata
+  librewolf-conf:
+    name: librewolf-conf
+  firefox:
+    name: firefox