Files
docker-compose/arty.yml

246 lines
9.3 KiB
YAML
Raw Normal View History

2025-10-25 13:52:01 +02:00
name: "docker.compose"
version: "1.0.0"
description: "Valknar's Stacks"
author: "valknar@pivoine.art"
license: "private"
envs:
default:
# Common
ADMIN_EMAIL: valknar@pivoine.art
2025-10-26 11:05:19 +01:00
NETWORK_NAME: falcon_network
2025-10-25 13:52:01 +02:00
TIMEZONE: Europe/Berlin
# Core
CORE_COMPOSE_PROJECT_NAME: core
CORE_DB_HOST: postgres
CORE_DB_PORT: 5432
CORE_REDIS_HOST: redis
CORE_REDIS_PORT: 6379
CORE_REDIS_IMAGE: redis:7-alpine
CORE_POSTGRES_IMAGE: postgres:16-alpine
# VPN
VPN_TRAEFIK_ENABLED: true
VPN_COMPOSE_PROJECT_NAME: vpn
VPN_DOCKER_IMAGE: ghcr.io/wg-easy/wg-easy:latest
VPN_TRAEFIK_HOST: vpn.pivoine.art
# Track
TRACK_TRAEFIK_ENABLED: true
TRACK_COMPOSE_PROJECT_NAME: track
TRACK_DOCKER_IMAGE: ghcr.io/umami-software/umami:postgresql-latest
2025-10-26 11:52:01 +01:00
TRACK_TRAEFIK_HOST: umami.pivoine.art
2025-10-25 13:52:01 +02:00
TRACK_DB_NAME: umami
2025-10-26 17:05:56 +01:00
# AWSM
AWESOME_TRAEFIK_ENABLED: true
AWESOME_COMPOSE_PROJECT_NAME: awesome
AWESOME_TRAEFIK_HOST: awesome.pivoine.art
2025-10-25 13:52:01 +02:00
# Sexy
SEXY_TRAEFIK_ENABLED: true
SEXY_COMPOSE_PROJECT_NAME: sexy
SEXY_TRAEFIK_HOST: sexy.pivoine.art
SEXY_DIRECTUS_IMAGE: directus/directus:11.12.0
2025-10-26 10:54:01 +01:00
SEXY_FRONTEND_IMAGE: ghcr.io/valknarxxx/sexy:latest
2025-10-25 13:52:01 +02:00
SEXY_DB_NAME: directus
SEXY_PUBLIC_URL: https://sexy.pivoine.art/api
SEXY_CORS_ORIGIN: https://sexy.pivoine.art
SEXY_SESSION_COOKIE_DOMAIN: sexy.pivoine.art
SEXY_CONTENT_SECURITY_POLICY_DIRECTIVES__FRAME_SRC: https://sexy.pivoine.art
SEXY_USER_REGISTER_URL_ALLOW_LIST: https://sexy.pivoine.art/signup/verify
SEXY_PASSWORD_RESET_URL_ALLOW_LIST: https://sexy.pivoine.art/password/reset
2025-10-26 12:33:05 +01:00
SEXY_FRONTEND_PUBLIC_API_URL: https://sexy.pivoine.art/api
SEXY_FRONTEND_PUBLIC_URL: https://sexy.pivoine.art
2025-10-25 13:52:01 +02:00
# Gotify
GOTIFY_TRAEFIK_ENABLED: true
2025-10-26 17:52:57 +01:00
GOTIFY_COMPOSE_PROJECT_NAME: messaging
2025-10-25 13:52:01 +02:00
GOTIFY_IMAGE: gotify/server:latest
GOTIFY_TRAEFIK_HOST: gotify.pivoine.art
# Scrapy
SCRAPY_TRAEFIK_ENABLED: true
SCRAPY_COMPOSE_PROJECT_NAME: scrapy
SCRAPY_SCRAPYD_IMAGE: vimagick/scrapyd
SCRAPY_IMAGE: vimagick/scrapyd
SCRAPY_SCRAPYRT_IMAGE: vimagick/scrapyd
SCRAPY_UI_IMAGE: ghcr.io/valknarness/scrapy-ui:main
SCRAPY_TRAEFIK_HOST: scrapy.pivoine.art
SCRAPY_SCRAPYD_PORT: 6800
SCRAPY_SCRAPYRT_PORT: 9080
SCRAPY_UI_SCRAPYD_URL: https://scrapy.pivoine.art/scrapyd
# n8n
N8N_TRAEFIK_ENABLED: true
N8N_COMPOSE_PROJECT_NAME: n8n
N8N_IMAGE: docker.n8n.io/n8nio/n8n
N8N_TRAEFIK_HOST: n8n.pivoine.art
N8N_PORT: 5678
N8N_DB_NAME: n8n
N8N_DB_SCHEMA: public
# Filestash
STASH_TRAEFIK_ENABLED: true
STASH_COMPOSE_PROJECT_NAME: stash
STASH_IMAGE: machines/filestash:latest
STASH_TRAEFIK_HOST: stash.pivoine.art
STASH_PORT: 8334
STASH_CANARY: true
# Linkwarden
LINKS_TRAEFIK_ENABLED: true
LINKS_COMPOSE_PROJECT_NAME: links
LINKS_DOCKER_IMAGE: ghcr.io/linkwarden/linkwarden:latest
LINKS_TRAEFIK_HOST: links.pivoine.art
LINKS_DB_NAME: linkwarden
LINKS_MEILI_IMAGE: getmeili/meilisearch:v1.12.8
LINKS_MEILI_NO_ANALYTICS: true
# Restic
RESTIC_TRAEFIK_ENABLED: true
RESTIC_COMPOSE_PROJECT_NAME: restic
RESTIC_IMAGE: garethgeorge/backrest:latest
RESTIC_TRAEFIK_HOST: restic.pivoine.art
RESTIC_HOSTNAME: falcon
RESTIC_BACKUP_PATH: /mnt/hidrive/users/valknar/Backup
feat: add Vaultwarden password manager stack Added self-hosted password manager to The Falcon infrastructure: **Vault Stack** (vault.pivoine.art): - Vaultwarden (Bitwarden-compatible server) - SQLite database for password storage - WebSocket support for real-time sync - TOTP and WebAuthn/U2F 2FA support - Browser extensions and mobile apps compatible **Configuration:** - Domain: https://vault.pivoine.art - Signups: Disabled (invite-only for security) - Invitations: Enabled - Password hints: Disabled (security best practice) - First user becomes admin **Backup Integration:** - Added vaultwarden-backup plan to Restic - Schedule: 8 AM daily (same as letsencrypt) - Retention: 7 daily, 4 weekly, 12 monthly, 3 yearly - Backup volume: vault_data mounted read-only **Infrastructure Updates:** - Created vault/compose.yaml following stack pattern - Added VAULT_* environment variables to arty.yml - Updated compose.yaml to include vault stack - Added backup_vaultwarden_data volume to restic - Updated restic/config.json with 12th backup plan **Documentation:** - Added Vault to CORE SYSTEMS in README - Added to ship architecture diagram - Documented in CLAUDE.md with configuration details - Updated volume management sections - Backup count increased from 11 to 12 plans Critical data backed up with long retention (3 years yearly). Compatible with official Bitwarden clients on all platforms. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-06 11:15:12 +01:00
# Vault
VAULT_TRAEFIK_ENABLED: true
VAULT_COMPOSE_PROJECT_NAME: vault
VAULT_IMAGE: vaultwarden/server:latest
VAULT_TRAEFIK_HOST: vault.pivoine.art
VAULT_WEBSOCKET_ENABLED: true
VAULT_SIGNUPS_ALLOWED: true
feat: add Vaultwarden password manager stack Added self-hosted password manager to The Falcon infrastructure: **Vault Stack** (vault.pivoine.art): - Vaultwarden (Bitwarden-compatible server) - SQLite database for password storage - WebSocket support for real-time sync - TOTP and WebAuthn/U2F 2FA support - Browser extensions and mobile apps compatible **Configuration:** - Domain: https://vault.pivoine.art - Signups: Disabled (invite-only for security) - Invitations: Enabled - Password hints: Disabled (security best practice) - First user becomes admin **Backup Integration:** - Added vaultwarden-backup plan to Restic - Schedule: 8 AM daily (same as letsencrypt) - Retention: 7 daily, 4 weekly, 12 monthly, 3 yearly - Backup volume: vault_data mounted read-only **Infrastructure Updates:** - Created vault/compose.yaml following stack pattern - Added VAULT_* environment variables to arty.yml - Updated compose.yaml to include vault stack - Added backup_vaultwarden_data volume to restic - Updated restic/config.json with 12th backup plan **Documentation:** - Added Vault to CORE SYSTEMS in README - Added to ship architecture diagram - Documented in CLAUDE.md with configuration details - Updated volume management sections - Backup count increased from 11 to 12 plans Critical data backed up with long retention (3 years yearly). Compatible with official Bitwarden clients on all platforms. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-06 11:15:12 +01:00
VAULT_INVITATIONS_ALLOWED: true
VAULT_SHOW_PASSWORD_HINT: false
# Joplin
JOPLIN_TRAEFIK_ENABLED: true
JOPLIN_COMPOSE_PROJECT_NAME: joplin
JOPLIN_IMAGE: joplin/server:latest
JOPLIN_TRAEFIK_HOST: joplin.pivoine.art
JOPLIN_APP_PORT: 22300
JOPLIN_DB_NAME: joplin
# Kit (combines Vert and Paint with landing page)
KIT_TRAEFIK_ENABLED: true
KIT_COMPOSE_PROJECT_NAME: kit
KIT_TRAEFIK_HOST: kit.pivoine.art
KIT_LANDING_IMAGE: ghcr.io/valknarness/kit-ui:latest
KIT_VERT_IMAGE: ghcr.io/vert-sh/vert:latest
KIT_VERT_TRAEFIK_HOST: vert.kit.pivoine.art
KIT_PAINT_TRAEFIK_HOST: paint.kit.pivoine.art
KIT_PASTEL_API_IMAGE: ghcr.io/valknarness/pastel-api:latest
KIT_PASTEL_UI_IMAGE: ghcr.io/valknarness/pastel-ui:latest
KIT_PASTEL_TRAEFIK_HOST: pastel.kit.pivoine.art
KIT_STIRLING_IMAGE: frooodle/s-pdf:latest
KIT_STIRLING_TRAEFIK_HOST: stirling.kit.pivoine.art
# Jellyfin
JELLY_TRAEFIK_ENABLED: true
JELLY_COMPOSE_PROJECT_NAME: jelly
JELLY_TRAEFIK_HOST: jelly.pivoine.art
# PairDrop
DROP_TRAEFIK_ENABLED: true
DROP_COMPOSE_PROJECT_NAME: drop
DROP_TRAEFIK_HOST: drop.pivoine.art
2025-10-25 13:52:01 +02:00
# Proxy
PROXY_COMPOSE_PROJECT_NAME: proxy
PROXY_DOCKER_IMAGE: traefik:latest
PROXY_TRAEFIK_HOST: proxy.pivoine.art
# Sablier
SABLIER_COMPOSE_PROJECT_NAME: sablier
SABLIER_VERSION: latest
# Watchtower
WATCHTOWER_POLL_INTERVAL: 300
WATCHTOWER_LABEL_ENABLE: true
WATCHTOWER_CLEANUP: true
WATCHTOWER_INCLUDE_STOPPED: false
WATCHTOWER_INCLUDE_RESTARTING: true
WATCHTOWER_RUN_ONCE: false
WATCHTOWER_LOG_LEVEL: info
WATCHTOWER_ROLLING_RESTART: false
2025-10-25 13:52:01 +02:00
scripts:
config: docker compose config
up: docker compose up -d
down: docker compose down
logs: docker compose logs -f
2025-10-26 12:07:06 +01:00
restart: docker compose restart
ps: docker compose ps
2025-10-26 14:15:21 +01:00
pull: docker compose pull
2025-10-26 20:07:08 +01:00
run: docker compose exec -it
2025-10-26 12:07:06 +01:00
env/sync: rsync -avzhe ssh ./.env root@vps:~/Projects/docker-compose/
# Database export scripts for sexy.pivoine.art
# Export PostgreSQL database schema and data with DROP IF EXISTS statements
sexy/db/export: |
2025-10-28 22:27:33 +01:00
docker exec core_postgres pg_dump \
-U sexy \
-d sexy \
--no-owner \
--no-acl \
--clean \
--if-exists \
2025-10-28 22:27:33 +01:00
> ~/Projects/docker-compose/sexy/directus.sql &&
echo "Database exported to ~/Projects/docker-compose/sexy/directus.sql"
# Export Directus schema.yaml (collections, fields, relations, etc.)
sexy/schema/export: |
2025-10-28 22:27:33 +01:00
docker exec sexy_api mkdir -p /directus/snapshots &&
docker exec sexy_api npx directus schema snapshot /directus/snapshots/schema.yaml &&
docker cp sexy_api:/directus/snapshots/schema.yaml ~/Projects/docker-compose/sexy/schema.yaml &&
echo "Directus schema exported to ~/Projects/docker-compose/sexy/schema.yaml"
# Combined export: both database and schema
sexy/export/all: |
2025-10-28 22:27:33 +01:00
echo "Exporting database..." &&
docker exec core_postgres pg_dump \
-U sexy \
-d sexy \
--no-owner \
--no-acl \
--clean \
--if-exists \
2025-10-28 22:27:33 +01:00
> ~/Projects/docker-compose/sexy/directus.sql &&
echo "✓ Database exported" &&
echo "Exporting Directus schema..." &&
docker exec sexy_api mkdir -p /directus/snapshots &&
docker exec sexy_api npx directus schema snapshot /directus/snapshots/schema.yaml &&
docker cp sexy_api:/directus/snapshots/schema.yaml ~/Projects/docker-compose/sexy/schema.yaml &&
echo "✓ Directus schema exported" &&
echo "All exports completed successfully!"
# Import PostgreSQL database from SQL dump
# WARNING: This will DROP existing tables if they exist (uses --clean --if-exists)
sexy/db/import: |
2025-10-28 22:27:33 +01:00
echo "⚠️ WARNING: This will replace the current database!" &&
echo "Make sure core_postgres container is running..." &&
docker exec -i core_postgres psql -U valknar -d directus < ~/Projects/docker-compose/sexy/directus.sql &&
2025-10-28 22:27:33 +01:00
echo "✓ Database imported from ~/Projects/docker-compose/sexy/directus.sql" &&
echo "Restarting Directus API..." &&
docker restart sexy_api &&
echo "✓ Import completed successfully!"
# Apply Directus schema snapshot (collections, fields, relations)
# This uses 'directus schema apply' which is non-destructive by default
sexy/schema/import: |
2025-10-28 22:27:33 +01:00
echo "Applying Directus schema snapshot..." &&
docker cp ~/Projects/docker-compose/sexy/schema.yaml sexy_api:/directus/schema.yaml &&
docker exec sexy_api npx directus schema apply --yes /directus/schema.yaml &&
echo "✓ Directus schema applied from ~/Projects/docker-compose/sexy/schema.yaml" &&
echo "Restarting Directus API..." &&
docker restart sexy_api &&
echo "✓ Schema import completed successfully!"
# Combined import: database and schema (use with caution!)
# Step 1: Import database (drops/recreates all tables)
# Step 2: Apply schema (updates Directus metadata)
sexy/import/all: |
2025-10-28 22:27:33 +01:00
echo "⚠️ WARNING: This will completely replace the database and schema!" &&
echo "Importing database..." &&
docker exec -i core_postgres psql -U ${DB_USER} -d ${SEXY_DB_NAME} < ~/Projects/docker-compose/sexy/directus.sql &&
echo "✓ Database imported" &&
echo "Applying Directus schema..." &&
docker cp ~/Projects/docker-compose/sexy/schema.yaml sexy_api:/directus/schema.yaml &&
docker exec sexy_api npx directus schema apply --yes /directus/schema.yaml &&
echo "✓ Schema applied" &&
echo "Restarting Directus API..." &&
docker restart sexy_api &&
echo "✓✓✓ Complete import finished successfully!"
sexy/uploads/export: |
2025-10-26 11:38:32 +01:00
rm -rf sexy/uploads
docker cp "sexy_api:/directus/uploads" "sexy/uploads"
sexy/uploads/import: |
2025-10-26 11:40:07 +01:00
docker cp "sexy/uploads" "sexy_api:/directus"
2025-10-26 12:07:06 +01:00
net/create: docker network create "$NETWORK_NAME"
2025-10-26 19:41:56 +01:00
awsm/import: |
2025-10-26 21:08:56 +01:00
docker cp "/tmp/awesome-database" "awesome_app:/home/node/.awesome"