added admin subfolder

admin/.gitignore

@@ -0,0 +1 @@
+appdata/

admin/admin-compose.yml

@@ -0,0 +1,88 @@
+version: '3'
+
+services:
+  authelia:
+    container_name: authelia
+    image: authelia/authelia
+    environment:
+      - TZ=America/Chicago
+    networks:
+      - admin
+    ports:
+      - 9091:9091
+    restart: always
+    volumes:
+      - ./admin/appdata/authelia/config:/config
+
+  bitwarden:
+    container_name: bitwarden
+    image: vaultwarden/server:latest
+    environment:
+      - TZ=America/Chicago
+      - ADMIN_TOKEN=h/oRssGu83I1E1WQGiSchYMAJnM0JcDXmjeI/A3QgMCasn/IK9zZldH5FXim0rSi
+      - DATABASE_URL=data/db.sqlite3
+      - DISABLE_ADMIN_TOKEN=false
+      - DOMAIN=https://bitwarden.akanealw.com
+      - ENABLE_DB_WAL=true
+      - INVITATIONS_ALLOWED=false
+      - SHOW_PASSWORD_HINT=false
+      - SIGNUPS_ALLOWED=false
+      - SIGNUPS_VERIFY=false
+      - SMTP_PORT=587
+      - SMTP_SSL=true
+    networks:
+      - admin
+    ports:
+      - 8089:80/tcp
+    restart: always
+    volumes:
+      - ./admin/appdata/vaultwarden:/data
+      - /etc/localtime:/etc/localtime:ro
+
+  dozzle:
+    container_name: dozzle
+    image: amir20/dozzle:latest
+    environment:
+      - DOZZLE_ADDR=:1234
+    networks:
+      - admin
+    ports:
+      - 9999:1234
+    restart: always
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+
+  nginxproxymanager:
+    container_name: nginxproxymanager
+    image: jc21/nginx-proxy-manager:2.9.22
+    environment:
+      - X_FRAME_OPTIONS=sameorigin
+      - DB_SQLITE_FILE=/data/database.sqlite
+    networks:
+      - admin
+    ports:
+      - 8443:443/tcp
+      - 8080:80/tcp
+      - 8081:81/tcp
+    restart: always
+    volumes:
+      - ./admin/appdata/nginxproxymanager/data:/data
+      - ./admin/appdata/nginxproxymanager/letsencrypt:/etc/letsencrypt
+      - ./admin/appdata/nginxproxymanager/snippets:/snippets:ro
+      - /etc/localtime:/etc/localtime:ro
+
+  portainer:
+    container_name: portainer
+    image: portainer/portainer-ce:latest
+    networks:
+      - admin
+    ports:
+      - 9000:9000/tcp
+    restart: always
+    volumes:
+      - ./admin/appdata/portainer/data:/data
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /etc/localtime:/etc/localtime:ro
+
+networks:
+    admin:

admin/configuration.yml

@@ -0,0 +1,125 @@
+theme: dark
+jwt_secret: 9DGPzQy8SZQ7rV57V3DJnw
+
+default_redirection_url: https://akanealw.com
+
+server:
+  host: 0.0.0.0
+  port: 9091
+  path: ""
+  read_buffer_size: 4096
+  write_buffer_size: 4096
+  enable_pprof: false
+  enable_expvars: false
+  disable_healthcheck: false
+  tls:
+    key: ""
+    certificate: ""
+
+ntp:
+  address: "0.debian.pool.ntp.org:123"
+  version: 3
+  max_desync: 3s
+  disable_startup_check: true
+  disable_failure: true
+
+log:
+  level: info
+
+totp:
+  disable: false
+  issuer: akanealw.com
+  algorithm: sha1
+  digits: 6
+  period: 30
+  skew: 1
+  secret_size: 32
+
+authentication_backend:
+  disable_reset_password: true
+  refresh_interval: 5m
+  file:
+    path: /config/users_database.yml
+    password:
+      algorithm: argon2id
+      iterations: 1
+      salt_length: 16
+      parallelism: 8
+      memory: 64
+
+access_control:
+  default_policy: deny
+  rules:
+    # bypass rule
+    - domain: 
+      - auth.akanealw.com
+      - bitwarden.akanealw.com
+      - gitea.akanealw.com
+      - meshcentral.akanealw.com
+      - nextcloud.akanealw.com
+      - owncloud.akanealw.com
+      - overseerr.akanealw.com
+      - plex.akanealw.com
+      policy: bypass
+
+    # two_factor rule
+    - domain: 
+      - akanealw.com
+      - bazarr.akanealw.com
+      - codeserver.akanealw.com
+      - freshrss.akanealw.com
+      - jackett.akanealw.com
+      - jdownloader.akanealw.com
+      - kavita.akanealw.com
+      - lidarr.akanealw.com
+      - metube.akanealw.com
+      - monitorr.akanealw.com
+      - mstream.akanealw.com
+      - nzbhydra.akanealw.com
+      - organizr.akanealw.com
+      - portainer.akanealw.com
+      - prowlarr.akanealw.com
+      - qbittorrent.akanealw.com
+      - radarr.akanealw.com
+      - sabnzbd.akanealw.com
+      - spdf.akanealw.com
+      - sonarr.akanealw.com
+      - tools.akanealw.com
+      - www.akanealw.com
+      policy: two_factor
+
+session:
+  name: authelia_session
+  domain: akanealw.com
+  same_site: lax
+  secret: 8r9y4d8mY7NfQtpCe2oU
+  expiration: 6h
+  inactivity: 5m
+  remember_me_duration: 1w
+
+regulation:
+  max_retries: 3
+  find_time: 10m
+  ban_time: 12h
+
+storage:
+  local:
+    path: /config/db.sqlite3
+  encryption_key: iiB7C8Bn4A2gAhzs2fWaggUug76PZ4LU
+  
+notifier:
+  disable_startup_check: true
+  smtp:
+    username: akanealw@gmail.com
+    password: qlvmffuzpscltdgz
+    host: smtp.gmail.com
+    port: 587
+    sender: akanealw@gmail.com
+    identifier: dockerserver
+    subject: "[Authelia] {title}"
+    startup_check_address: akanealw@gmail.com
+    disable_require_tls: false
+    disable_html_emails: false
+    tls:
+      skip_verify: false
+      minimum_version: TLS1.2

admin/users_database.yml

@@ -0,0 +1,8 @@
+users:
+  akanealw:
+    displayname: "akanealw"
+    password: "$argon2id$v=19$m=65536,t=1,p=8$ZWJ2UGVPUDE2SnU0YXNvNg$Q3LQfN90kPI5/3Yr06WmTUjFbvIBBZPJP44YLhysT0M"
+    email: akanealw@gmail.com
+    groups:
+      - admins
+