Moved some to ignore
This commit is contained in:
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
173
home/podman/.config/containers/ignore/2fauth-server.container
Normal file
173
home/podman/.config/containers/ignore/2fauth-server.container
Normal file
@ -0,0 +1,173 @@
|
||||
[Container]
|
||||
# AutoUpdate=registry
|
||||
ContainerName=2fauth-server
|
||||
# You can change the name of the app
|
||||
Environment="APP_NAME=2FAuth"
|
||||
# You can leave this on "local". If you change it to production most console commands will ask for extra confirmation.
|
||||
# Never set it to "testing".
|
||||
Environment="APP_ENV=local"
|
||||
# The timezone for your application, which is used to record dates and times to database. This global setting can be
|
||||
# overridden by users via in-app settings for a personalised dates and times display.
|
||||
# If this setting is changed while the application is already running, existing records in the database won't be updated
|
||||
Environment="APP_TIMEZONE=UTC"
|
||||
# Set to true if you want to see debug information in error screens.
|
||||
Environment="APP_DEBUG=false"
|
||||
# This should be your email address
|
||||
Environment="SITE_OWNER=mikepharesjr@msn.com"
|
||||
# The encryption key for our database and sessions. Keep this very secure.
|
||||
# If you generate a new one all existing data must be considered LOST.
|
||||
# Change it to a string of exactly 32 chars or use command `php artisan key:generate` to generate it
|
||||
Environment="APP_KEY=uvL37oiI1By0J#5t5kZwYB~17CXI2J9A"
|
||||
# This variable must match your installation's external address.
|
||||
# Webauthn won't work otherwise.
|
||||
# Environment="APP_URL=http://localhost"
|
||||
# Environment="APP_URL=http://192.168.11.2"
|
||||
# Environment="APP_URL=http://192.168.11.2:5015"
|
||||
Environment="APP_URL=https://2fauth.phares.duckdns.org"
|
||||
# If you want to serve js assets from a CDN (like https://cdn.example.com),
|
||||
# uncomment the following line and set this var with the CDN url.
|
||||
# Otherwise, let this line commented.
|
||||
# - ASSET_URL=http://localhost
|
||||
#
|
||||
# Turn this to true if you want your app to react like a demo.
|
||||
# The Demo mode reset the app content every hours and set a generic demo user.
|
||||
Environment="IS_DEMO_APP=false"
|
||||
# The log channel defines where your log entries go to.
|
||||
# 'daily' is the default logging mode giving you 7 daily rotated log files in /storage/logs/.
|
||||
# Also available are 'errorlog', 'syslog', 'stderr', 'papertrail', 'slack' and a 'stack' channel
|
||||
# to combine multiple channels into a single one.
|
||||
Environment="LOG_CHANNEL=daily"
|
||||
# Log level. You can set this from least severe to most severe:
|
||||
# debug, info, notice, warning, error, critical, alert, emergency
|
||||
# If you set it to debug your logs will grow large, and fast. If you set it to emergency probably
|
||||
# nothing will get logged, ever.
|
||||
Environment="LOG_LEVEL=notice"
|
||||
# Database config (can only be sqlite)
|
||||
Environment="DB_DATABASE=/srv/database/database.sqlite"
|
||||
# If you're looking for performance improvements, you could install memcached.
|
||||
Environment="CACHE_DRIVER=file"
|
||||
Environment="SESSION_DRIVER=file"
|
||||
# Mail settings
|
||||
# Refer your email provider documentation to configure your mail settings
|
||||
# Set a value for every available setting to avoid issue
|
||||
Environment="MAIL_MAILER=log"
|
||||
Environment="MAIL_HOST=smtp.centurylink.net"
|
||||
Environment="MAIL_PORT=587"
|
||||
Environment="MAIL_USERNAME=phares@centurylink.net"
|
||||
Environment="MAIL_PASSWORD=Q7rOkv6#YdLCx4SBvMIAw"
|
||||
Environment="MAIL_ENCRYPTION=null"
|
||||
Environment="MAIL_FROM_NAME=Mik Phares"
|
||||
Environment="MAIL_FROM_ADDRESS=noreply@phares.duckdns.org"
|
||||
# SSL peer verification.
|
||||
# Set this to false to disable the SSL certificate validation.
|
||||
# WARNING
|
||||
# Disabling peer verification can result in a major security flaw.
|
||||
# Change it only if you know what you're doing.
|
||||
Environment="MAIL_VERIFY_SSL_PEER=false"
|
||||
# API settings
|
||||
# The maximum number of API calls in a minute from the same IP.
|
||||
# Once reached, all requests from this IP will be rejected until the minute has elapsed.
|
||||
# Set to null to disable the API throttling.
|
||||
Environment="THROTTLE_API=60"
|
||||
# Authentication settings
|
||||
# The number of times per minute a user can fail to log in before being locked out.
|
||||
# Once reached, all login attempts will be rejected until the minute has elapsed.
|
||||
# This setting applies to both email/password and webauthn login attempts.
|
||||
Environment="LOGIN_THROTTLE=5"
|
||||
# The default authentication guard
|
||||
# Supported:
|
||||
# 'web-guard' : The Laravel built-in auth system (default if nulled)
|
||||
# 'reverse-proxy-guard' : When 2FAuth is deployed behind a reverse-proxy that handle authentication
|
||||
# WARNING
|
||||
# When using 'reverse-proxy-guard' 2FAuth only look for the dedicated headers and skip all other built-in
|
||||
# authentication checks. That means your proxy is fully responsible of the authentication process, 2FAuth will
|
||||
# trust him as long as headers are presents.
|
||||
Environment="AUTHENTICATION_GUARD=web-guard"
|
||||
# Authentication log retention time, in days.
|
||||
# Log entries older than that are automatically deleted.
|
||||
Environment="AUTHENTICATION_LOG_RETENTION=365"
|
||||
# Name of the HTTP headers sent by the reverse proxy that identifies the authenticated user at proxy level.
|
||||
# Check your proxy documentation to find out how these headers are named (i.e 'REMOTE_USER', 'REMOTE_EMAIL', etc...)
|
||||
# (only relevant when AUTHENTICATION_GUARD is set to 'reverse-proxy-guard')
|
||||
Environment="AUTH_PROXY_HEADER_FOR_USER=null"
|
||||
Environment="AUTH_PROXY_HEADER_FOR_EMAIL=null"
|
||||
# Custom logout URL to open when using an auth proxy.
|
||||
Environment="PROXY_LOGOUT_URL=null"
|
||||
# WebAuthn settings
|
||||
# Relying Party name, aka the name of the application. If blank, defaults to APP_NAME. Do not set to null.
|
||||
Environment="WEBAUTHN_NAME=2FAuth"
|
||||
# Relying Party ID, should equal the site domain (i.e 2fauth.example.com).
|
||||
# If null, the device will fill it internally (recommended)
|
||||
# See https://webauthn-doc.spomky-labs.com/prerequisites/the-relying-party#how-to-determine-the-relying-party-id
|
||||
Environment="WEBAUTHN_ID=null"
|
||||
# Use this setting to control how user verification behave during the
|
||||
# WebAuthn authentication flow.
|
||||
#
|
||||
# Most authenticators and smartphones will ask the user to actively verify
|
||||
# themselves for log in. For example, through a touch plus pin code,
|
||||
# password entry, or biometric recognition (e.g., presenting a fingerprint).
|
||||
# The intent is to distinguish one user from any other.
|
||||
#
|
||||
# Supported:
|
||||
# 'required': Will ALWAYS ask for user verification
|
||||
# 'preferred' (default) : Will ask for user verification IF POSSIBLE
|
||||
# 'discouraged' : Will NOT ask for user verification (for example, to minimize disruption to the user interaction flow)
|
||||
Environment="WEBAUTHN_USER_VERIFICATION=preferred"
|
||||
#### SSO settings (for Socialite) ####
|
||||
# Uncomment and complete lines for the OAuth providers you want to enable.
|
||||
# - OPENID_AUTHORIZE_URL=
|
||||
# - OPENID_TOKEN_URL=
|
||||
# - OPENID_USERINFO_URL=
|
||||
# - OPENID_CLIENT_ID=
|
||||
# - OPENID_CLIENT_SECRET=
|
||||
# - GITHUB_CLIENT_ID=
|
||||
# - GITHUB_CLIENT_SECRET=
|
||||
# Use this setting to declare trusted proxied.
|
||||
# Supported:
|
||||
# '*': to trust any proxy
|
||||
# A comma separated IP list: The list of proxies IP to trust
|
||||
Environment="TRUSTED_PROXIES=null"
|
||||
# Proxy for outgoing requests like new releases detection or logo fetching.
|
||||
# You can provide a proxy URL that contains a scheme, username, and password.
|
||||
# For example, "http://username:password@192.168.16.1:10".
|
||||
Environment="PROXY_FOR_OUTGOING_REQUESTS=null"
|
||||
# Leave the following configuration vars as is.
|
||||
# Unless you like to tinker and know what you're doing.
|
||||
Environment="BROADCAST_DRIVER=log"
|
||||
Environment="QUEUE_DRIVER=sync"
|
||||
Environment="SESSION_LIFETIME=120"
|
||||
Environment="REDIS_HOST=127.0.0.1"
|
||||
Environment="REDIS_PASSWORD=null"
|
||||
Environment="REDIS_PORT=6379"
|
||||
Environment="PUSHER_APP_ID="
|
||||
Environment="PUSHER_APP_KEY="
|
||||
Environment="PUSHER_APP_SECRET="
|
||||
Environment="PUSHER_APP_CLUSTER=mt1"
|
||||
Environment="VITE_PUSHER_APP_KEY="${PUSHER_APP_KEY}""
|
||||
Environment="VITE_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}""
|
||||
Environment="MIX_ENV=local"
|
||||
Image=docker.io/2fauth/2fauth
|
||||
# Network=2fauth.network
|
||||
# Pod=2fauth.pod
|
||||
PublishPort=5015:44311
|
||||
Volume=2fauth-server-data:/2fauth:Z
|
||||
Volume=/home/podman/2fauth/nginx.conf:/etc/nginx/nginx.conf:ro
|
||||
Volume=/home/podman/wild-phares/fullchain.cer:/certs/server.cert:ro
|
||||
Volume=/home/podman/wild-phares/phares.duckdns.org.key:/certs/server.key:ro
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/2fauth/2fauth
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start 2fauth-server
|
||||
# systemctl --user status 2fauth-server --lines=999
|
||||
# journalctl -fu 2fauth-server.service
|
||||
# podman logs 2fauth-server
|
||||
# systemctl --user stop 2fauth-server
|
||||
# systemctl --user disable 2fauth-server
|
||||
# podman exec -ti 2fauth-server /bin/sh
|
||||
# podman exec -ti 2fauth-server /bin/bash
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,36 @@
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=actual-server
|
||||
Environment="ACTUAL_HOSTNAME=0.0.0.0"
|
||||
# Environment="ACTUAL_HTTPS_CERT=/certs/server.cert"
|
||||
# Environment="ACTUAL_HTTPS_KEY=/certs/server"
|
||||
# Environment="ACTUAL_PORT=5006"
|
||||
# Environment="ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20"
|
||||
# Environment="ACTUAL_UPLOAD_FILE_SYNC_SIZE_LIMIT_MB=20"
|
||||
# Environment="ACTUAL_UPLOAD_SYNC_ENCRYPTED_FILE_SYNC_SIZE_LIMIT_MB=50"
|
||||
Image=docker.io/actualbudget/actual-server:latest
|
||||
# Network=actual.network
|
||||
# Pod=actual.pod
|
||||
PublishPort=5013:5006
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
Volume=/home/podman/wild-phares/fullchain.cer:/certs/server.cert:ro
|
||||
Volume=/home/podman/wild-phares/phares.duckdns.org.key:/certs/server.key:ro
|
||||
Volume=actual-server-data.volume:/data:rw
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/actualbudget/actual-server:latest
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start actual-server
|
||||
# systemctl --user status actual-server --lines=999
|
||||
# journalctl -fu actual-server.service
|
||||
# podman logs actual-server
|
||||
# systemctl --user stop actual-server
|
||||
# systemctl --user disable actual-server
|
||||
# podman exec -ti actual-server /bin/sh
|
||||
# podman exec -ti actual-server /bin/bash
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
36
home/podman/.config/containers/ignore/authentik-db.container
Normal file
36
home/podman/.config/containers/ignore/authentik-db.container
Normal file
@ -0,0 +1,36 @@
|
||||
[Container]
|
||||
# AutoUpdate=registry
|
||||
ContainerName=authentik-db
|
||||
Environment="POSTGRES_USER=authentik"
|
||||
Environment="POSTGRES_PASSWORD=OCxfxtWadNuXslBbfWw9c0JXLMu+bWngv+qk9Ya65sw="
|
||||
Environment="POSTGRES_DB=authentik"
|
||||
Environment="TZ=America/Phoenix"
|
||||
Image=docker.io/library/postgres:16.6
|
||||
HealthCmd=pg_isready -U authentik
|
||||
HealthInterval=30s
|
||||
HealthRetries=5
|
||||
HealthStartPeriod=20s
|
||||
HealthTimeout=3s
|
||||
# Network=authentik.network
|
||||
# Pod=authentik.pod
|
||||
PublishPort=5439:5432
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
Volume=authentik-db-data:/data:Z
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/library/postgres:16.6
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start authentik-db
|
||||
# systemctl --user status authentik-db --lines=999
|
||||
# journalctl -fu authentik-db.service
|
||||
# podman logs authentik-db
|
||||
# systemctl --user stop authentik-db
|
||||
# systemctl --user disable authentik-db
|
||||
# podman exec -ti authentik-db /bin/sh
|
||||
# podman exec -ti authentik-db /bin/bash
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,36 @@
|
||||
[Container]
|
||||
# AutoUpdate=registry
|
||||
ContainerName=authentik-redis
|
||||
Exec=--save 60 1 --loglevel warning
|
||||
# Environment="AUTHENTIK_REDIS__HOST=192.168.11.2"
|
||||
HealthCmd=/usr/local/bin/redis-cli ping || grep PONG
|
||||
HealthInterval=30s
|
||||
HealthRetries=5
|
||||
HealthStartPeriod=20s
|
||||
HealthTimeout=3s
|
||||
Image=docker.io/library/redis:7.4.1
|
||||
# Network=authentik.network
|
||||
# Pod=authentik.pod
|
||||
PublishPort=5021:6379
|
||||
Volume=authentik-redis-data:/data:Z
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Unit]
|
||||
Requires=authentik-db.service
|
||||
After=authentik-db.service
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/library/redis:7.4.1
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start authentik-redis
|
||||
# systemctl --user status authentik-redis --lines=999
|
||||
# journalctl -fu authentik-redis.service
|
||||
# podman logs authentik-redis
|
||||
# systemctl --user stop authentik-redis
|
||||
# systemctl --user disable authentik-redis
|
||||
# podman exec -ti authentik-redis /bin/sh
|
||||
# podman exec -ti authentik-redis /bin/bash
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,55 @@
|
||||
[Container]
|
||||
ContainerName=authentik-server
|
||||
Environment="AUTHENTIK_POSTGRESQL__CONN_MAX_AGE=0"
|
||||
Environment="AUTHENTIK_POSTGRESQL__HOST=192.168.11.2"
|
||||
Environment="AUTHENTIK_POSTGRESQL__NAME=authentik"
|
||||
Environment="AUTHENTIK_POSTGRESQL__PASSWORD=OCxfxtWadNuXslBbfWw9c0JXLMu+bWngv+qk9Ya65sw="
|
||||
Environment="AUTHENTIK_POSTGRESQL__PORT=5439"
|
||||
Environment="AUTHENTIK_POSTGRESQL__USER=authentik"
|
||||
Environment="AUTHENTIK_REDIS__HOST=192.168.11.2"
|
||||
Environment="AUTHENTIK_REDIS__PORT=5021"
|
||||
# (Required) To generate a secret key run the following command:
|
||||
# echo $(openssl rand -base64 32)
|
||||
Environment="AUTHENTIK_SECRET_KEY=mlZ57mWthun9b8SPaS7Ptl0bBQX4OvyRanbqdQ+5e/k="
|
||||
# (Optional) Enable Error Reporting
|
||||
# Environment="AUTHENTIK_ERROR_REPORTING__ENABLED=${AUTHENTIK_ERROR_REPORTING:-false}"
|
||||
# (Optional) Enable Email Sending
|
||||
# Environment="AUTHENTIK_EMAIL__HOST=smtp.centurylink.net"
|
||||
# Environment="AUTHENTIK_EMAIL__PORT=587"
|
||||
# Environment="AUTHENTIK_EMAIL__USERNAME=phares@centurylink.net"
|
||||
# Environment="AUTHENTIK_EMAIL__PASSWORD=Q7rOkv6#YdLCx4SBvMIAw"
|
||||
# Environment="AUTHENTIK_EMAIL__USE_TLS=false"
|
||||
# Environment="AUTHENTIK_EMAIL__USE_SSL=false"
|
||||
# Environment="AUTHENTIK_EMAIL__TIMEOUT=10"
|
||||
# Environment="AUTHENTIK_EMAIL__FROM=noreply@phares.duckdns.org"
|
||||
Exec=server
|
||||
Image=ghcr.io/goauthentik/server:2024.12.1
|
||||
PublishPort=5017:9000
|
||||
PublishPort=5018:9443
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
Volume=/home/podman/wild-phares/fullchain.cer:/certs/server.cert:ro
|
||||
Volume=/home/podman/wild-phares/phares.duckdns.org.key:/certs/server.key:ro
|
||||
Volume=authentik-server-media:/media:Z
|
||||
Volume=authentik-server-templates:/templates:Z
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Unit]
|
||||
Requires=authentik-worker.service
|
||||
After=authentik-worker.service
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull ghcr.io/goauthentik/server:2024.12.1
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start authentik-server
|
||||
# systemctl --user status authentik-server --lines=999
|
||||
# journalctl -fu authentik-server.service
|
||||
# podman logs authentik-server
|
||||
# systemctl --user stop authentik-server
|
||||
# systemctl --user disable authentik-server
|
||||
# podman exec -ti authentik-server /bin/sh
|
||||
# podman exec -ti authentik-server /bin/bash
|
||||
@ -0,0 +1,57 @@
|
||||
[Container]
|
||||
ContainerName=authentik-worker
|
||||
Environment="AUTHENTIK_POSTGRESQL__CONN_MAX_AGE=0"
|
||||
Environment="AUTHENTIK_POSTGRESQL__HOST=192.168.11.2"
|
||||
Environment="AUTHENTIK_POSTGRESQL__NAME=authentik"
|
||||
Environment="AUTHENTIK_POSTGRESQL__PASSWORD=OCxfxtWadNuXslBbfWw9c0JXLMu+bWngv+qk9Ya65sw="
|
||||
Environment="AUTHENTIK_POSTGRESQL__PORT=5439"
|
||||
Environment="AUTHENTIK_POSTGRESQL__USER=authentik"
|
||||
Environment="AUTHENTIK_REDIS__HOST=192.168.11.2"
|
||||
Environment="AUTHENTIK_REDIS__PORT=5021"
|
||||
# (Required) To generate a secret key run the following command:
|
||||
# echo $(openssl rand -base64 32)
|
||||
Environment="AUTHENTIK_SECRET_KEY=QvqdN5Pn4piWcoof1yPDa0FcaGnOL1gHAiSImJjEGZl6pypRgE2nCps8DTd4R9UHqfFuOtR9jhCelmQ2"
|
||||
# (Optional) Enable Error Reporting
|
||||
# Environment="AUTHENTIK_ERROR_REPORTING__ENABLED=true"
|
||||
# (Optional) Enable Email Sending
|
||||
# Environment="AUTHENTIK_EMAIL__HOST=smtp.centurylink.net"
|
||||
# Environment="AUTHENTIK_EMAIL__PORT=587"
|
||||
# Environment="AUTHENTIK_EMAIL__USERNAME=phares@centurylink.net"
|
||||
# Environment="AUTHENTIK_EMAIL__PASSWORD=Q7rOkv6#YdLCx4SBvMIAw"
|
||||
# Environment="AUTHENTIK_EMAIL__USE_TLS=false"
|
||||
# Environment="AUTHENTIK_EMAIL__USE_SSL=false"
|
||||
# Environment="AUTHENTIK_EMAIL__TIMEOUT=10"
|
||||
# Environment="AUTHENTIK_EMAIL__FROM=noreply@phares.duckdns.org"
|
||||
Exec=worker
|
||||
Image=ghcr.io/goauthentik/server:2024.12.1
|
||||
PublishPort=5019:9000
|
||||
PublishPort=5020:9443
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
Volume=/home/podman/wild-phares/fullchain.cer:/certs/server.cert:ro
|
||||
Volume=/home/podman/wild-phares/phares.duckdns.org.key:/certs/server.key:ro
|
||||
Volume=authentik-server-media:/media:Z
|
||||
Volume=authentik-server-templates:/templates:Z
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Unit]
|
||||
Requires=authentik-db.service
|
||||
Requires=authentik-redis.service
|
||||
After=authentik-db.service
|
||||
After=authentik-redis.service
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull ghcr.io/goauthentik/server:2024.12.1
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start authentik-worker
|
||||
# systemctl --user status authentik-worker --lines=999
|
||||
# journalctl -fu authentik-worker.service
|
||||
# podman logs authentik-worker
|
||||
# systemctl --user stop authentik-worker
|
||||
# systemctl --user disable authentik-worker
|
||||
# podman exec -ti authentik-worker /bin/sh
|
||||
# podman exec -ti authentik-worker /bin/bash
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,32 @@
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=linkwarden-db
|
||||
Environment="POSTGRES_DB=linkwarden"
|
||||
Environment="POSTGRES_PASSWORD=postgres"
|
||||
Environment="POSTGRES_USER=postgres"
|
||||
Image=docker.io/postgres:16-alpine
|
||||
# Network=linkwarden.network
|
||||
# Pod=linkwarden.pod
|
||||
PublishPort=5437:5432
|
||||
Volume=linkwarden-db-data.volume:/var/lib/postgresql/data:Z
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/postgres:16-alpine
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start linkwarden-db
|
||||
# systemctl --user status linkwarden-db
|
||||
# journalctl -fu linkwarden-db.service
|
||||
# podman logs linkwarden-db
|
||||
# systemctl --user stop linkwarden-db
|
||||
# systemctl --user disable linkwarden-db
|
||||
# podman exec -ti linkwarden-db /bin/sh
|
||||
# podman exec -ti linkwarden-db /bin/bash
|
||||
# Image=docker.io/library/postgres:16
|
||||
# podman pull docker.io/library/postgres:16
|
||||
# file: 'extension.c', line: '543', routine: 'parse_extension_control_file'
|
||||
# https://github.com/linkwarden-app/linkwarden/discussions/6792
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,34 @@
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=linkwarden-server
|
||||
Environment="DATABASE_URL=postgresql://postgres:postgres@192.168.11.2:5437/linkwarden"
|
||||
Environment="NEXTAUTH_SECRET=BP3BnWf17S1I7tyxCbLO3"
|
||||
Environment="NEXTAUTH_URL=https://linkwarden.phares.duckdns.org/api/v1/auth"
|
||||
Environment="POSTGRES_PASSWORD=postgres"
|
||||
Image=ghcr.io/linkwarden/linkwarden:latest
|
||||
# Network=linkwarden.network
|
||||
# Pod=linkwarden.pod
|
||||
PublishPort=5011:3000
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=linkwarden-server-data.volume:/data/data:Z
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Unit]
|
||||
Requires=linkwarden-db.service
|
||||
After=linkwarden-db.service
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull ghcr.io/linkwarden/linkwarden:latest
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start linkwarden-server
|
||||
# systemctl --user status linkwarden-server --lines=9999
|
||||
# journalctl -fu linkwarden-server.service
|
||||
# podman logs linkwarden-server
|
||||
# systemctl --user stop linkwarden-server
|
||||
# systemctl --user disable linkwarden-server
|
||||
# podman exec -ti linkwarden-server /bin/sh
|
||||
# podman exec -ti linkwarden-server /bin/bash
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,33 @@
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=mattermost-db
|
||||
Environment="POSTGRES_DB=mattermost"
|
||||
Environment="POSTGRES_INITDB_ARGS=--data-checksums"
|
||||
Environment="POSTGRES_PASSWORD=mmuser_password"
|
||||
Environment="POSTGRES_USER=mmuser"
|
||||
Image=docker.io/postgres:13-alpine
|
||||
# Network=immich.network
|
||||
# Pod=immich.pod
|
||||
PublishPort=5436:5432
|
||||
Volume=mattermost-db-data.volume:/var/lib/postgresql/data
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/postgres:13-alpine
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start mattermost-db
|
||||
# systemctl --user status mattermost-db
|
||||
# journalctl -fu mattermost-db.service
|
||||
# podman logs mattermost-db
|
||||
# systemctl --user stop mattermost-db
|
||||
# systemctl --user disable mattermost-db
|
||||
# podman exec -ti mattermost-db /bin/sh
|
||||
# podman exec -ti mattermost-db /bin/bash
|
||||
# Image=docker.io/library/postgres:16
|
||||
# podman pull docker.io/library/postgres:16
|
||||
# file: 'extension.c', line: '543', routine: 'parse_extension_control_file'
|
||||
# https://github.com/immich-app/immich/discussions/6792
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,50 @@
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=mattermost-server
|
||||
Environment="DOMAIN=mattermost.phares.duckdns.org"
|
||||
Environment="MM_BLEVESETTINGS_INDEXDIR=/mattermost/bleve-indexes"
|
||||
Environment="MM_SERVICESETTINGS_SITEURL=https://mattermost.phares.duckdns.org"
|
||||
Environment="MM_SQLSETTINGS_DATASOURCE=postgres://mmuser:mmuser_password@192.168.11.2:5436/mattermost?sslmode=disable&connect_timeout=10"
|
||||
Environment="MM_SQLSETTINGS_DRIVERNAME=postgres"
|
||||
Environment="TZ=US/Arizona"
|
||||
# HealthCmd=ls
|
||||
# HealthCmd=curl -f http://0.0.0.0:8065/api/v4/system/ping || exit 1
|
||||
# HealthCmd=curl -f https://mattermost.phares.duckdns.org/api/v4/system/ping || exit 1
|
||||
# Image=docker.io/mattermost/mattermost-team-edition:9.11.2
|
||||
Image=docker.io/mattermost/mattermost-team-edition:release-10.3
|
||||
# Network=mattermost.network
|
||||
# Pod=mattermost.pod
|
||||
# PublishPort=8065:8065
|
||||
# PublishPort=8443:8443
|
||||
PublishPort=8443:8065
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
Volume=mattermost-server-bleve.volume:/mattermost/bleve-indexes:rw
|
||||
Volume=mattermost-server-client-plugins.volume:/mattermost/client/plugins:rw
|
||||
Volume=mattermost-server-config.volume:/mattermost/config:rw
|
||||
Volume=mattermost-server-data.volume:/mattermost/data:rw
|
||||
Volume=mattermost-server-logs.volume:/mattermost/logs:rw
|
||||
Volume=mattermost-server-plugins.volume:/mattermost/plugins:rw
|
||||
Volume=/home/podman/wild-phares/fullchain.cer:/certs/server.cert:ro
|
||||
Volume=/home/podman/wild-phares/phares.duckdns.org.key:/certs/server.key:ro
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Unit]
|
||||
Requires=mattermost-db.service
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/mattermost/mattermost-team-edition:release-10.3
|
||||
# podman pull docker.io/mattermost/mattermost-team-edition:9.11.2
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start mattermost-server
|
||||
# systemctl --user status mattermost-server --lines=999
|
||||
# journalctl -fu mattermost-server.service
|
||||
# podman logs mattermost-server
|
||||
# systemctl --user stop mattermost-server
|
||||
# systemctl --user disable mattermost-server
|
||||
# podman exec -ti mattermost-server /bin/sh
|
||||
# podman exec -ti mattermost-server /bin/bash
|
||||
@ -0,0 +1 @@
|
||||
[Volume]
|
||||
@ -0,0 +1,30 @@
|
||||
[Container]
|
||||
# AutoUpdate=registry
|
||||
ContainerName=passed-server
|
||||
Environment="PASSED_ADDRESS=:3000"
|
||||
Environment="PASSED_STORE_TYPE=dir"
|
||||
Environment="PASSED_STORE_DIR_PATH=/etc/passed"
|
||||
Image=git.1e99.eu/1e99/passed:latest
|
||||
# Network=passed.network
|
||||
# Pod=passed.pod
|
||||
PublishPort=5022:3000
|
||||
Volume=passed-server-data.volume:/etc/passed:Z
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull git.1e99.eu/1e99/passed:latest
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start passed-server
|
||||
# systemctl --user status passed-server --lines=999
|
||||
# journalctl -fu passed-server.service
|
||||
# podman logs passed-server
|
||||
# systemctl --user stop passed-server
|
||||
# systemctl --user disable passed-server
|
||||
# podman exec -ti passed-server /bin/sh
|
||||
# podman exec -ti passed-server /bin/bash
|
||||
@ -0,0 +1,33 @@
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=traccar-server
|
||||
Image=docker.io/traccar/traccar:latest
|
||||
# Network=traccar.network
|
||||
# Pod=traccar.pod
|
||||
PublishPort=5011:8082
|
||||
# PublishPort=5000-5150:5000-5150
|
||||
# PublishPort=5000-5150:5000-5150/udp
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
Volume=/opt/traccar/logs:/opt/traccar/logs:rw
|
||||
Volume=/opt/traccar/traccar.xml:/opt/traccar/conf/traccar.xml:rw
|
||||
|
||||
[Service]
|
||||
Restart=no
|
||||
|
||||
# [Unit]
|
||||
# Requires=traccar-db.service
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
# podman pull docker.io/traccar/traccar:latest
|
||||
# systemctl --user daemon-reload
|
||||
# systemctl --user start traccar-server
|
||||
# systemctl --user status traccar-server --lines=999
|
||||
# journalctl -fu traccar-server.service
|
||||
# podman logs traccar-server
|
||||
# systemctl --user stop traccar-server
|
||||
# systemctl --user disable traccar-server
|
||||
# podman exec -ti traccar-server /bin/sh
|
||||
# podman exec -ti traccar-server /bin/bash
|
||||
Reference in New Issue
Block a user