diff --git a/install_scripts/apps.sh b/install_scripts/apps.sh new file mode 100644 index 0000000..5689504 --- /dev/null +++ b/install_scripts/apps.sh @@ -0,0 +1,4 @@ +#!/bin/sh +LIST_OF_APPS="docker docker-compose nfs-kernel-server nfs-common ddclient nfs-utils fail2ban ncdu nload nethogs nmap sshfs" +apt-get update +apt-get install $LIST_OF_APPS -y diff --git a/install_scripts/ufw.sh b/install_scripts/ufw.sh new file mode 100644 index 0000000..3b0453b --- /dev/null +++ b/install_scripts/ufw.sh @@ -0,0 +1,67 @@ +#!/bin/sh + +ufw allow 22 +ufw allow 22/tcp +ufw allow 80 +ufw allow 443 +ufw allow 8384 +ufw allow 2222 +ufw allow 8888 +ufw allow 4444 +ufw allow 32400 +ufw allow 21027 +ufw allow 22000/tcp +ufw allow 22000/udp +ufw allow 21027/udp + +ufw enable + +cd /srv +mkdir gitlab gitlab-runner hastebin jellyfin mongodata nextcloud syncthing traefik plex znc + +cd /home/null + +mkdir shares +mkdir shares/disk1 +mkdir shares/disk2 +mkdir shares/usb + +newgrp docker +usermod -aG docker null + + +systemctl start fail2ban.service + +# docker volume create --driver local --opt type=nfs --opt o=addr=192.168.1.110,rw,vers=4 --opt device=:/media --name nfs_data + + +# 80 ALLOW Anywhere +# 443 ALLOW Anywhere +# 22 ALLOW Anywhere +# 8384 ALLOW Anywhere +# 2222 ALLOW Anywhere +# 8888 ALLOW Anywhere +# 4444 ALLOW Anywhere +# 32400 ALLOW Anywhere +# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/tcp ALLOW Anywhere +# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/udp ALLOW Anywhere +# 22000 ALLOW Anywhere +# 21027 ALLOW Anywhere +# 22000/tcp ALLOW Anywhere +# 22000/udp ALLOW Anywhere +# 21027/udp ALLOW Anywhere +# 80 (v6) ALLOW Anywhere (v6) +# 443 (v6) ALLOW Anywhere (v6) +# 22 (v6) ALLOW Anywhere (v6) +# 8384 (v6) ALLOW Anywhere (v6) +# 2222 (v6) ALLOW Anywhere (v6) +# 8888 (v6) ALLOW Anywhere (v6) +# 4444 (v6) ALLOW Anywhere (v6) +# 32400 (v6) ALLOW Anywhere (v6) +# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/tcp (v6) ALLOW Anywhere (v6) +# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/udp (v6) ALLOW Anywhere (v6) +# 22000 (v6) ALLOW Anywhere (v6) +# 21027 (v6) ALLOW Anywhere (v6) +# 22000/tcp (v6) ALLOW Anywhere (v6) +# 22000/udp (v6) ALLOW Anywhere (v6) +# 21027/udp (v6) diff --git a/install_scripts/usr.sh b/install_scripts/usr.sh new file mode 100644 index 0000000..9d3da44 --- /dev/null +++ b/install_scripts/usr.sh @@ -0,0 +1,14 @@ +#!/bin/sh + +cd /home/null + +mkdir shares +mkdir shares/disk1 +mkdir shares/disk2 +mkdir shares/usb + +docker volume create --driver local --opt type=nfs --opt o=addr=192.168.1.110,rw,vers=4 --opt device=:/media --name nfs_data + +docker network create traefik + +docker run -d --name gitlab-runner --restart always \\n -v /var/run/docker.sock:/var/run/docker.sock \\n -v /etc/gitlab-runner \\n gitlab/gitlab-runner:latest diff --git a/photoprism/docker-compose.yml b/photoprism/docker-compose.yml new file mode 100644 index 0000000..897a1bc --- /dev/null +++ b/photoprism/docker-compose.yml @@ -0,0 +1,145 @@ +version: '3.5' + +# Example Docker Compose config file for PhotoPrism (Linux / AMD64) +# +# Note: +# - Running PhotoPrism on a server with less than 4 GB of swap space or setting a memory/swap limit can cause unexpected +# restarts ("crashes"), for example, when the indexer temporarily needs more memory to process large files. +# - If you install PhotoPrism on a public server outside your home network, please always run it behind a secure +# HTTPS reverse proxy such as Traefik or Caddy. Your files and passwords will otherwise be transmitted +# in clear text and can be intercepted by anyone, including your provider, hackers, and governments: +# https://docs.photoprism.app/getting-started/proxies/traefik/ +# +# Setup Guides: +# - https://docs.photoprism.app/getting-started/docker-compose/ +# - https://docs.photoprism.app/getting-started/raspberry-pi/ +# - https://www.photoprism.app/kb/activation +# +# Troubleshooting Checklists: +# - https://docs.photoprism.app/getting-started/troubleshooting/ +# - https://docs.photoprism.app/getting-started/troubleshooting/docker/ +# - https://docs.photoprism.app/getting-started/troubleshooting/mariadb/ +# +# CLI Commands: +# - https://docs.photoprism.app/getting-started/docker-compose/#command-line-interface +# +# All commands may have to be prefixed with "sudo" when not running as root. +# This will point the home directory shortcut ~ to /root in volume mounts. + +services: + photoprism: + ## Use photoprism/photoprism:preview for testing preview builds: + image: photoprism/photoprism:latest + ## Don't enable automatic restarts until PhotoPrism has been properly configured and tested! + ## If the service gets stuck in a restart loop, this points to a memory, filesystem, network, or database issue: + ## https://docs.photoprism.app/getting-started/troubleshooting/#fatal-server-errors + # restart: unless-stopped + stop_grace_period: 10s + depends_on: + - mariadb + security_opt: + - seccomp:unconfined + - apparmor:unconfined + ## Server port mapping in the format "Host:Container". To use a different port, change the host port on + ## the left-hand side and keep the container port, e.g. "80:2342" (for HTTP) or "443:2342 (for HTTPS): + ports: + - "2342:2342" + ## Before you start the service, please check the following config options (and change them as needed): + ## https://docs.photoprism.app/getting-started/config-options/ + environment: + PHOTOPRISM_ADMIN_USER: "admin" # admin login username + PHOTOPRISM_ADMIN_PASSWORD: "Lukmignuind1" # initial admin password (8-72 characters) + PHOTOPRISM_AUTH_MODE: "password" # authentication mode (public, password) + PHOTOPRISM_SITE_URL: "http://localhost:2342/" # server URL in the format "http(s)://domain.name(:port)/(path)" + PHOTOPRISM_DISABLE_TLS: "false" # disables HTTPS/TLS even if the site URL starts with https:// and a certificate is available + PHOTOPRISM_DEFAULT_TLS: "true" # defaults to a self-signed HTTPS/TLS certificate if no other certificate is available + PHOTOPRISM_ORIGINALS_LIMIT: 5000 # file size limit for originals in MB (increase for high-res video) + PHOTOPRISM_HTTP_COMPRESSION: "gzip" # improves transfer speed and bandwidth utilization (none or gzip) + PHOTOPRISM_LOG_LEVEL: "info" # log level: trace, debug, info, warning, error, fatal, or panic + PHOTOPRISM_READONLY: "false" # do not modify originals directory (reduced functionality) + PHOTOPRISM_EXPERIMENTAL: "false" # enables experimental features + PHOTOPRISM_DISABLE_CHOWN: "false" # disables updating storage permissions via chmod and chown on startup + PHOTOPRISM_DISABLE_WEBDAV: "false" # disables built-in WebDAV server + PHOTOPRISM_DISABLE_SETTINGS: "false" # disables settings UI and API + PHOTOPRISM_DISABLE_TENSORFLOW: "false" # disables all features depending on TensorFlow + PHOTOPRISM_DISABLE_FACES: "false" # disables face detection and recognition (requires TensorFlow) + PHOTOPRISM_DISABLE_CLASSIFICATION: "false" # disables image classification (requires TensorFlow) + PHOTOPRISM_DISABLE_VECTORS: "false" # disables vector graphics support + PHOTOPRISM_DISABLE_RAW: "false" # disables indexing and conversion of RAW images + PHOTOPRISM_RAW_PRESETS: "false" # enables applying user presets when converting RAW images (reduces performance) + PHOTOPRISM_JPEG_QUALITY: 85 # a higher value increases the quality and file size of JPEG images and thumbnails (25-100) + PHOTOPRISM_DETECT_NSFW: "false" # automatically flags photos as private that MAY be offensive (requires TensorFlow) + PHOTOPRISM_UPLOAD_NSFW: "true" # allows uploads that MAY be offensive (no effect without TensorFlow) + # PHOTOPRISM_DATABASE_DRIVER: "sqlite" # SQLite is an embedded database that doesn't require a server + PHOTOPRISM_DATABASE_DRIVER: "mysql" # use MariaDB 10.5+ or MySQL 8+ instead of SQLite for improved performance + PHOTOPRISM_DATABASE_SERVER: "mariadb:3306" # MariaDB or MySQL database server (hostname:port) + PHOTOPRISM_DATABASE_NAME: "photoprism" # MariaDB or MySQL database schema name + PHOTOPRISM_DATABASE_USER: "photoprism" # MariaDB or MySQL database user name + PHOTOPRISM_DATABASE_PASSWORD: "f&xsbGyb@ZAftyBqZ4&xjCepPv%cPrCs%nDgYz4GYyNc*EBPog" # MariaDB or MySQL database user password + PHOTOPRISM_SITE_CAPTION: "Home is where that thing lives.." + PHOTOPRISM_SITE_DESCRIPTION: "" # meta site description + PHOTOPRISM_SITE_AUTHOR: "null" # meta site author + ## Video Transcoding (https://docs.photoprism.app/getting-started/advanced/transcoding/): + # PHOTOPRISM_FFMPEG_ENCODER: "software" # H.264/AVC encoder (software, intel, nvidia, apple, raspberry, or vaapi) + # PHOTOPRISM_FFMPEG_SIZE: "1920" # video size limit in pixels (720-7680) (default: 3840) + # PHOTOPRISM_FFMPEG_BITRATE: "32" # video bitrate limit in Mbit/s (default: 50) + ## Run/install on first startup (options: update https gpu tensorflow davfs clitools clean): + # PHOTOPRISM_INIT: "https gpu tensorflow" + ## Run as a non-root user after initialization (supported: 0, 33, 50-99, 500-600, and 900-1200): + # PHOTOPRISM_UID: 1000 + # PHOTOPRISM_GID: 1000 + # PHOTOPRISM_UMASK: 0000 + ## Start as non-root user before initialization (supported: 0, 33, 50-99, 500-600, and 900-1200): + # user: "1000:1000" + ## Share hardware devices with FFmpeg and TensorFlow (optional): + # devices: + # - "/dev/dri:/dev/dri" # Intel QSV + # - "/dev/nvidia0:/dev/nvidia0" # Nvidia CUDA + # - "/dev/nvidiactl:/dev/nvidiactl" + # - "/dev/nvidia-modeset:/dev/nvidia-modeset" + # - "/dev/nvidia-nvswitchctl:/dev/nvidia-nvswitchctl" + # - "/dev/nvidia-uvm:/dev/nvidia-uvm" + # - "/dev/nvidia-uvm-tools:/dev/nvidia-uvm-tools" + # - "/dev/video11:/dev/video11" # Video4Linux Video Encode Device (h264_v4l2m2m) + working_dir: "/photoprism" # do not change or remove + ## Storage Folders: "~" is a shortcut for your home directory, "." for the current directory + volumes: + - "/home/null/shares/disk1/backups/photoprism/originals:/photoprism/originals" # Original media files (DO NOT REMOVE) + - "/home/null/shares/disk1/backups/photoprism/storage:/photoprism/storage" # *Writable* storage folder for cache, database, and sidecar files (DO NOT REMOVE) + + ## Database Server (recommended) + ## see https://docs.photoprism.app/getting-started/faq/#should-i-use-sqlite-mariadb-or-mysql + mariadb: + image: mariadb:11 + ## If MariaDB gets stuck in a restart loop, this points to a memory or filesystem issue: + ## https://docs.photoprism.app/getting-started/troubleshooting/#fatal-server-errors + restart: unless-stopped + stop_grace_period: 5s + security_opt: # see https://github.com/MariaDB/mariadb-docker/issues/434#issuecomment-1136151239 + - seccomp:unconfined + - apparmor:unconfined + command: --innodb-buffer-pool-size=512M --transaction-isolation=READ-COMMITTED --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci --max-connections=512 --innodb-rollback-on-timeout=OFF --innodb-lock-wait-timeout=120 + ## Never store database files on an unreliable device such as a USB flash drive, an SD card, or a shared network folder: + volumes: + - "/srv/photoprism:/var/lib/mysql" # DO NOT REMOVE + environment: + MARIADB_AUTO_UPGRADE: "1" + MARIADB_INITDB_SKIP_TZINFO: "1" + MARIADB_DATABASE: "photoprism" + MARIADB_USER: "photoprism" + MARIADB_PASSWORD: "f&xsbGyb@ZAftyBqZ4&xjCepPv%cPrCs%nDgYz4GYyNc*EBPog" + MARIADB_ROOT_PASSWORD: "pY6NuudthC%DQAdV#XUh9p8eRJs8uiq*qnijL3H&x@r6uFq9uT" + + ## Watchtower upgrades services automatically (optional) + ## see https://docs.photoprism.app/getting-started/updates/#watchtower + ## activate via "COMPOSE_PROFILES=update docker compose up -d" + watchtower: + restart: unless-stopped + image: containrrr/watchtower + profiles: ["update"] + environment: + WATCHTOWER_CLEANUP: "true" + WATCHTOWER_POLL_INTERVAL: 7200 # checks for updates every two hours + volumes: + - "/var/run/docker.sock:/var/run/docker.sock" + # - "~/.docker/config.json:/config.json" # optional, for authentication if you have a Docker Hub account diff --git a/plex/docker-compose.yml b/plex/docker-compose.yml index f56a3b0..2d698aa 100644 --- a/plex/docker-compose.yml +++ b/plex/docker-compose.yml @@ -20,7 +20,7 @@ services: - 32414:32414 environment: - TZ=Europe/Copenhagen - - PLEX_CLAIM=claim-6Zvsp8xmyzZLfQHGyX8w + - PLEX_CLAIM=claim-8yFTWJE7VHZDqfGLckqy - ADVERTISE_IP=http://plex.knast.cc:32400/ volumes: # - "/var/lib/plexmediaserver:/config" @@ -28,7 +28,7 @@ services: - "/tmp/:/transcode" # - "/srv/pseudotv:/mnt/pseudotv" - "nfs_data:/shares" - + # image: plexinc/pms-docker:latest labels: - traefik.enable=true