dockerserver/mixed/compose.yml

version: '3'

services:
  adguardhome-sync:
    container_name: adguardhome-sync
    image: ghcr.io/bakito/adguardhome-sync
    command: run --config /config/adguardhome-sync.yaml
    environment:
      LOG_LEVEL: info
      ORIGIN_URL: http://192.168.1.2:80
      ORIGIN_USERNAME: akanealw
      ORIGIN_PASSWORD: Aehaigoothohshoh1aab
      REPLICA1_URL: http://192.168.1.3:80
      REPLICA1_USERNAME: akanealw
      REPLICA1_PASSWORD: Aehaigoothohshoh1aab
      REPLICA2_URL: "http://192.168.1.5:80"
      REPLICA2_USERNAME: "akanealw"
      REPLICA2_PASSWORD: "Aehaigoothohshoh1aab"
      REPLICA3_URL: "http://192.168.1.31:3030"
      REPLICA3_USERNAME: "akanealw"
      REPLICA3_PASSWORD: "Aehaigoothohshoh1aab"
      CRON: "*/10 * * * *" # run every 10 minutes
      RUN_ON_START: true
      CONTINUE_ON_ERROR: true
    restart: always

  archivebox:
    container_name: archivebox
    image: archivebox/archivebox:dev
    command: server --quick-init 0.0.0.0:8000
    environment:
      - ALLOWED_HOSTS=*
      - MEDIA_MAX_SIZE=750m
      - PUBLIC_ADD_VIEW=True
      - PUBLIC_INDEX=True
      - PUBLIC_SNAPSHOTS=False
      - SAVE_TITLE=True
      - SAVE_FAVICON=True
      - SAVE_WGET=False
      - SAVE_WARC=False
      - SAVE_PDF=True
      - SAVE_SCREENSHOT=True
      - SAVE_DOM=False
      - SAVE_SINGLEFILE=True
      - SAVE_READABILITY=True
      - SAVE_MERCURY=False
      - SAVE_GIT=False
      - SAVE_MEDIA=False
      - SAVE_ARCHIVE_DOT_ORG=False
    networks:
      - reverse-proxy
    ports:
      - 8000:8000
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/archivebox/data:/data

  collabora:
    container_name: collabora
    image: collabora/code:22.05.14.3.1
    environment:
      - alias_group1=${COLLABORA_DOMAIN}
      - username=${COLLABORA_USERNAME}
      - password=${COLLABORA_PASSWORD}
    networks:
      - reverse-proxy
    ports:
      - 9980:9980
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/collabora/code:/etc/loolwsd

  freshrss:
    container_name: freshrss
    image: freshrss/freshrss:latest
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - CRON_MIN=*/20
      - TZ=${TZ}
    depends_on:
      - freshrss-db
    networks:
      - freshrss
      - reverse-proxy
    ports:
      - 8088:80
    restart: unless-stopped
    volumes:
      - ${DOCKER_CONFIGS}/freshrss/data:/var/www/FreshRSS/data
      - ${DOCKER_CONFIGS}/freshrss/extensions:/var/www/FreshRSS/extensions
      - /etc/localtime:/etc/localtime:ro

  freshrss-db:
    container_name: freshrss-db
    image: postgres:12-alpine
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - POSTGRES_USER=freshrss
      - POSTGRES_PASSWORD=freshrss
      - POSTGRES_DB=freshrss
    networks:
      - freshrss
    restart: unless-stopped
    volumes:
      - ${DOCKER_CONFIGS}/freshrss/db/data:/var/lib/postgresql/data
      - /etc/localtime:/etc/localtime:ro

  hbbr:
    container_name: hbbr
    image: rustdesk/rustdesk-server:latest
    command: hbbr -k _
    networks:
      - reverse-proxy
    ports:
      - 21117:21117
      - 21119:21119
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/rustdesk/hbbr:/root

  hbbs:
    container_name: hbbs
    image: rustdesk/rustdesk-server:latest
    command: hbbs -r rustdesk.akanealw.com:21117 -k _
    depends_on:
      - hbbr
    networks:
      - reverse-proxy
    ports:
      - 21115:21115
      - 21116:21116
      - 21116:21116/udp
      - 21118:21118
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/rustdesk/hbbs:/root

  it-tools:
    container_name: it-tools
    image: corentinth/it-tools:latest
    networks:
      - reverse-proxy
    ports:
      - 8383:80
    restart: always

  jellyseerr:
    container_name: jellyseerr
    image: fallenbagel/jellyseerr:latest
    environment:
      - LOG_LEVEL=info
      - TZ=${TZ}
    networks:
      - reverse-proxy
    ports:
      - 5056:5055
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/jellyseerr/config:/app/config

  kavita:
    container_name: kavita
    image: lscr.io/linuxserver/kavita:latest
    networks:
      - reverse-proxy
    ports:
      - 5002:5000
    restart: always
    volumes:
      - ${STORAGE_DIR}/Books:/data
      - ${DOCKER_CONFIGS}/kavita/config:/config

  metube:
    container_name: metube
    hostname: metube
    image: alexta69/metube
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - CREATE_CUSTOM_DIRS=true
      - DARK_MODE=false
    networks:
      - reverse-proxy
    ports:
      - 8082:8081
    restart: always
    volumes:
      - ${MEDIA_DIR}/videos:/downloads

  monitorr:
    container_name: monitorr
    image: monitorr/monitorr:latest
    environment:
      - PGID=${PGID}
      - PUID=${PUID}
      - TZ=${TZ}
    networks:
      - reverse-proxy
    ports:
      - 8084:80/tcp
    restart: always
    volumes:
      - ${MEDIA_DIR}:/HD:ro
      - ${DOCKER_CONFIGS}/monitorr/app:/app
      - ${DOCKER_CONFIGS}/monitorr/config:/config
      - /etc/localtime:/etc/localtime:ro

  mstream:
    container_name: mstream
    image: lscr.io/linuxserver/mstream:latest
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    networks:
      - reverse-proxy
    ports:
      - 3001:3000
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/mstream:/config
      - ${STORAGE_DIR}/Music:/music

  navidrome:
    container_name: navidrome
    image: deluan/navidrome:latest
    environment:
      ND_SCANSCHEDULE: 1h
      ND_LOGLEVEL: info
      ND_SESSIONTIMEOUT: 24h
      ND_BASEURL: ""
      LastFM.ApiKey: "788adda1a4ce53bdedcc0d48016fddd2"
      LastFM.Secret: "b1579a1932372da6043cd479b925d2db"
    user: 1000:1000
    networks:
      - reverse-proxy
    ports:
      - 4533:4533
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/navidrome/data:/data
      - ${STORAGE_DIR}/Music/Albums:/music:ro

  opengist:
    container_name: opengist
    image: ghcr.io/thomiceli/opengist:1
    networks:
      - reverse-proxy
    ports:
      - 6157:6157
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/opengist:/opengist

  # orbital-sync:
  #   container_name: orbital-sync
  #   image: mattwebbio/orbital-sync:1
  #   environment:
  #     - PRIMARY_HOST_BASE_URL=http://192.168.1.2:80
  #     - PRIMARY_HOST_PASSWORD=${WEBPASSWORD}
  #     - SECONDARY_HOST_1_BASE_URL=http://192.168.1.3:80
  #     - SECONDARY_HOST_1_PASSWORD=${WEBPASSWORD}
  #     - SECONDARY_HOST_2_BASE_URL=http://192.168.1.31:8180
  #     - SECONDARY_HOST_2_PASSWORD=${WEBPASSWORD}
  #     - INTERVAL_MINUTES=30
  #   restart: always

  organizr:
    container_name: organizr
    image: organizr/organizr:latest
    environment:
      - PGID=${PGID}
      - PUID=${PUID}
      - FPM=true
    networks:
      - reverse-proxy
    ports:
      - 8085:80/tcp
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/organizr/config:/config
      - /etc/localtime:/etc/localtime:ro

  peanut:
    container_name: peanut
    image: brandawg93/peanut:latest
    environment:
      - NUT_HOST=192.168.1.41
      - NUT_PORT=3493
      - WEB_PORT=8080
    networks:
      - reverse-proxy
    ports:
      - 8080:8080
    restart: unless-stopped

  # pihole:
  #   container_name: pihole
  #   image: cbcrowe/pihole-unbound:latest
  #   hostname: ${HOSTNAME}
  #   domainname: ${DOMAIN_NAME}
  #   environment:
  #     - FTLCONF_LOCAL_IPV4=${FTLCONF_LOCAL_IPV4}
  #     - TZ=${TZ}
  #     - WEBPASSWORD=${WEBPASSWORD}
  #     - WEBTHEME=${WEBTHEME:-default-dark}
  #     - REV_SERVER=${REV_SERVER:-false}
  #     - PIHOLE_DNS_=127.0.0.1#5335
  #     - DNSSEC="true"
  #     - DNSMASQ_LISTENING=single
  #   networks:
  #     - reverse-proxy
  #   ports:
  #     - 53:53
  #     - 53:53/udp
  #     - 8180:80
  #   restart: always
  #   volumes:
  #     - ${DOCKER_CONFIGS}/pihole/unbound:/etc/pihole:rw
  #     - ${DOCKER_CONFIGS}/pihole/dnsmasq-unbound:/etc/dnsmasq.d:rw

  s-pdf:
    container_name: spdf
    image: frooodle/s-pdf
    networks:
      - reverse-proxy
    ports:
      - 8086:8080
    restart: always

  syncthing:
    container_name: syncthing
    image: lscr.io/linuxserver/syncthing:latest
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    networks:
      - reverse-proxy
    ports:
      - 8384:8384
      - 22000:22000/tcp
      - 22000:22000/udp
      - 21027:21027/udp
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/syncthing/config:/config
      - ${STORAGE_DIR}:/storage

  syncthing-relay-discovery:
    container_name: syncthing-relay-discovery
    image: t4skforce/syncthing-relay-discovery:latest
    environment:
      RELAY_OPTS:
      DISC_OPTS: 
      POOLS:
    networks:
      - reverse-proxy
    ports:
      - 22067:22067
      - 22026:22026
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/syncthing-relay-discovery:/home/syncthing/certs

  vaultwarden:
    container_name: vaultwarden
    image: vaultwarden/server:latest
    environment:
      - TZ=${TZ}
      - ADMIN_TOKEN=h/oRssGu83I1E1WQGiSchYMAJnM0JcDXmjeI/A3QgMCasn/IK9zZldH5FXim0rSi
      - DATABASE_URL=data/db.sqlite3
      - DISABLE_ADMIN_TOKEN=false
      - DOMAIN=https://bitwarden.akanealw.com
      - ENABLE_DB_WAL=true
      - INVITATIONS_ALLOWED=false
      - SHOW_PASSWORD_HINT=false
      - SIGNUPS_ALLOWED=false
      - SIGNUPS_VERIFY=false
      - SMTP_PORT=587
      - SMTP_SSL=true
    networks:
      - vaultwarden
      - reverse-proxy
    ports:
      - 8089:80
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/vaultwarden:/data
      - /etc/localtime:/etc/localtime:ro

  vaultwarden-backup:
    container_name: vaultwarden-backup
    image: bruceforce/vaultwarden-backup
    environment:
      - BACKUP_DIR=/data/backups
      - CRON_TIME=15 * * * *
      - TIMESTAMP=true
      - UID=${PUID}
      - GID=${PGID}
    networks:
      - vaultwarden
    depends_on:
      - vaultwarden
    init: true
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/vaultwarden:/data
      - /home/akanealw/backups/vaultwardenbackups:/data/backups

  wg-easy:
    container_name: wg-easy      
    image: weejewel/wg-easy
    environment:
      - WG_HOST=${WG_HOST}
      - PASSWORD=${WG_PASSWORD}
      - WG_DEFAULT_DNS=10.8.0.5
      - WG_PORT=51830
      - WG_PERSISTENT_KEEPALIVE=25
      - WG_DEFAULT_ADDRESS=10.8.0.x
      - WG_MTU=1420
      - WG_ALLOWED_IPS=10.8.0.0/24
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1
    networks:
      - reverse-proxy
    ports:
      - 51830:51820/udp
      - 51831:51821
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/wireguard:/etc/wireguard

networks:
  freshrss:
    name: freshrss
  vaultwarden:
    name: vaultwarden
  reverse-proxy:
    name: reverse-proxy
    external: true