added photoprism

install_scripts/apps.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+LIST_OF_APPS="docker docker-compose nfs-kernel-server nfs-common ddclient nfs-utils fail2ban ncdu nload nethogs nmap sshfs"
+apt-get update
+apt-get install $LIST_OF_APPS -y

install_scripts/ufw.sh

@@ -0,0 +1,67 @@
+#!/bin/sh
+
+ufw allow 22
+ufw allow 22/tcp
+ufw allow 80
+ufw allow 443
+ufw allow 8384
+ufw allow 2222
+ufw allow 8888
+ufw allow 4444
+ufw allow 32400
+ufw allow 21027
+ufw allow 22000/tcp
+ufw allow 22000/udp
+ufw allow 21027/udp
+
+ufw enable
+
+cd /srv
+mkdir gitlab gitlab-runner hastebin jellyfin mongodata nextcloud syncthing traefik plex znc
+
+cd /home/null
+
+mkdir shares
+mkdir shares/disk1
+mkdir shares/disk2
+mkdir shares/usb
+
+newgrp docker
+usermod -aG docker null
+
+
+systemctl start fail2ban.service
+
+# docker volume create --driver local --opt type=nfs --opt o=addr=192.168.1.110,rw,vers=4 --opt device=:/media --name nfs_data
+
+
+# 80                         ALLOW       Anywhere
+# 443                        ALLOW       Anywhere
+# 22                         ALLOW       Anywhere
+# 8384                       ALLOW       Anywhere
+# 2222                       ALLOW       Anywhere
+# 8888                       ALLOW       Anywhere
+# 4444                       ALLOW       Anywhere
+# 32400                      ALLOW       Anywhere
+# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/tcp ALLOW       Anywhere
+# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/udp ALLOW       Anywhere
+# 22000                      ALLOW       Anywhere
+# 21027                      ALLOW       Anywhere
+# 22000/tcp                  ALLOW       Anywhere
+# 22000/udp                  ALLOW       Anywhere
+# 21027/udp                  ALLOW       Anywhere
+# 80 (v6)                    ALLOW       Anywhere (v6)
+# 443 (v6)                   ALLOW       Anywhere (v6)
+# 22 (v6)                    ALLOW       Anywhere (v6)
+# 8384 (v6)                  ALLOW       Anywhere (v6)
+# 2222 (v6)                  ALLOW       Anywhere (v6)
+# 8888 (v6)                  ALLOW       Anywhere (v6)
+# 4444 (v6)                  ALLOW       Anywhere (v6)
+# 32400 (v6)                 ALLOW       Anywhere (v6)
+# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/tcp (v6) ALLOW       Anywhere (v6)
+# 22,80,443,2222,3040,4444,8096,8097,8384,8888,21027,22000,32400,51820,51821/udp (v6) ALLOW       Anywhere (v6)
+# 22000 (v6)                 ALLOW       Anywhere (v6)
+# 21027 (v6)                 ALLOW       Anywhere (v6)
+# 22000/tcp (v6)             ALLOW       Anywhere (v6)
+# 22000/udp (v6)             ALLOW       Anywhere (v6)
+# 21027/udp (v6)

install_scripts/usr.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+
+cd /home/null
+
+mkdir shares
+mkdir shares/disk1
+mkdir shares/disk2
+mkdir shares/usb
+
+docker volume create --driver local --opt type=nfs --opt o=addr=192.168.1.110,rw,vers=4 --opt device=:/media --name nfs_data
+
+docker network create traefik
+
+docker run -d --name gitlab-runner --restart always \\n  -v /var/run/docker.sock:/var/run/docker.sock \\n  -v /etc/gitlab-runner \\n  gitlab/gitlab-runner:latest

photoprism/docker-compose.yml

@@ -0,0 +1,145 @@
+version: '3.5'
+
+# Example Docker Compose config file for PhotoPrism (Linux / AMD64)
+#
+# Note:
+# - Running PhotoPrism on a server with less than 4 GB of swap space or setting a memory/swap limit can cause unexpected
+#   restarts ("crashes"), for example, when the indexer temporarily needs more memory to process large files.
+# - If you install PhotoPrism on a public server outside your home network, please always run it behind a secure
+#   HTTPS reverse proxy such as Traefik or Caddy. Your files and passwords will otherwise be transmitted
+#   in clear text and can be intercepted by anyone, including your provider, hackers, and governments:
+#   https://docs.photoprism.app/getting-started/proxies/traefik/
+#
+# Setup Guides:
+# - https://docs.photoprism.app/getting-started/docker-compose/
+# - https://docs.photoprism.app/getting-started/raspberry-pi/
+# - https://www.photoprism.app/kb/activation
+#
+# Troubleshooting Checklists:
+# - https://docs.photoprism.app/getting-started/troubleshooting/
+# - https://docs.photoprism.app/getting-started/troubleshooting/docker/
+# - https://docs.photoprism.app/getting-started/troubleshooting/mariadb/
+#
+# CLI Commands:
+# - https://docs.photoprism.app/getting-started/docker-compose/#command-line-interface
+#
+# All commands may have to be prefixed with "sudo" when not running as root.
+# This will point the home directory shortcut ~ to /root in volume mounts.
+
+services:
+  photoprism:
+    ## Use photoprism/photoprism:preview for testing preview builds:
+    image: photoprism/photoprism:latest
+    ## Don't enable automatic restarts until PhotoPrism has been properly configured and tested!
+    ## If the service gets stuck in a restart loop, this points to a memory, filesystem, network, or database issue:
+    ## https://docs.photoprism.app/getting-started/troubleshooting/#fatal-server-errors
+    # restart: unless-stopped
+    stop_grace_period: 10s
+    depends_on:
+      - mariadb
+    security_opt:
+      - seccomp:unconfined
+      - apparmor:unconfined
+    ## Server port mapping in the format "Host:Container". To use a different port, change the host port on
+    ## the left-hand side and keep the container port, e.g. "80:2342" (for HTTP) or "443:2342 (for HTTPS):
+    ports:
+      - "2342:2342"
+    ## Before you start the service, please check the following config options (and change them as needed):
+    ## https://docs.photoprism.app/getting-started/config-options/
+    environment:
+      PHOTOPRISM_ADMIN_USER: "admin"                 # admin login username
+      PHOTOPRISM_ADMIN_PASSWORD: "Lukmignuind1"          # initial admin password (8-72 characters)
+      PHOTOPRISM_AUTH_MODE: "password"               # authentication mode (public, password)
+      PHOTOPRISM_SITE_URL: "http://localhost:2342/"  # server URL in the format "http(s)://domain.name(:port)/(path)"
+      PHOTOPRISM_DISABLE_TLS: "false"                # disables HTTPS/TLS even if the site URL starts with https:// and a certificate is available
+      PHOTOPRISM_DEFAULT_TLS: "true"                 # defaults to a self-signed HTTPS/TLS certificate if no other certificate is available
+      PHOTOPRISM_ORIGINALS_LIMIT: 5000               # file size limit for originals in MB (increase for high-res video)
+      PHOTOPRISM_HTTP_COMPRESSION: "gzip"            # improves transfer speed and bandwidth utilization (none or gzip)
+      PHOTOPRISM_LOG_LEVEL: "info"                   # log level: trace, debug, info, warning, error, fatal, or panic
+      PHOTOPRISM_READONLY: "false"                   # do not modify originals directory (reduced functionality)
+      PHOTOPRISM_EXPERIMENTAL: "false"               # enables experimental features
+      PHOTOPRISM_DISABLE_CHOWN: "false"              # disables updating storage permissions via chmod and chown on startup
+      PHOTOPRISM_DISABLE_WEBDAV: "false"             # disables built-in WebDAV server
+      PHOTOPRISM_DISABLE_SETTINGS: "false"           # disables settings UI and API
+      PHOTOPRISM_DISABLE_TENSORFLOW: "false"         # disables all features depending on TensorFlow
+      PHOTOPRISM_DISABLE_FACES: "false"              # disables face detection and recognition (requires TensorFlow)
+      PHOTOPRISM_DISABLE_CLASSIFICATION: "false"     # disables image classification (requires TensorFlow)
+      PHOTOPRISM_DISABLE_VECTORS: "false"            # disables vector graphics support
+      PHOTOPRISM_DISABLE_RAW: "false"                # disables indexing and conversion of RAW images
+      PHOTOPRISM_RAW_PRESETS: "false"                # enables applying user presets when converting RAW images (reduces performance)
+      PHOTOPRISM_JPEG_QUALITY: 85                    # a higher value increases the quality and file size of JPEG images and thumbnails (25-100)
+      PHOTOPRISM_DETECT_NSFW: "false"                # automatically flags photos as private that MAY be offensive (requires TensorFlow)
+      PHOTOPRISM_UPLOAD_NSFW: "true"                 # allows uploads that MAY be offensive (no effect without TensorFlow)
+      # PHOTOPRISM_DATABASE_DRIVER: "sqlite"         # SQLite is an embedded database that doesn't require a server
+      PHOTOPRISM_DATABASE_DRIVER: "mysql"            # use MariaDB 10.5+ or MySQL 8+ instead of SQLite for improved performance
+      PHOTOPRISM_DATABASE_SERVER: "mariadb:3306"     # MariaDB or MySQL database server (hostname:port)
+      PHOTOPRISM_DATABASE_NAME: "photoprism"         # MariaDB or MySQL database schema name
+      PHOTOPRISM_DATABASE_USER: "photoprism"         # MariaDB or MySQL database user name
+      PHOTOPRISM_DATABASE_PASSWORD: "f&xsbGyb@ZAftyBqZ4&xjCepPv%cPrCs%nDgYz4GYyNc*EBPog"       # MariaDB or MySQL database user password
+      PHOTOPRISM_SITE_CAPTION: "Home is where that thing lives.."
+      PHOTOPRISM_SITE_DESCRIPTION: ""                # meta site description
+      PHOTOPRISM_SITE_AUTHOR: "null"                     # meta site author
+      ## Video Transcoding (https://docs.photoprism.app/getting-started/advanced/transcoding/):
+      # PHOTOPRISM_FFMPEG_ENCODER: "software"        # H.264/AVC encoder (software, intel, nvidia, apple, raspberry, or vaapi)
+      # PHOTOPRISM_FFMPEG_SIZE: "1920"               # video size limit in pixels (720-7680) (default: 3840)
+      # PHOTOPRISM_FFMPEG_BITRATE: "32"              # video bitrate limit in Mbit/s (default: 50)
+      ## Run/install on first startup (options: update https gpu tensorflow davfs clitools clean):
+      # PHOTOPRISM_INIT: "https gpu tensorflow"
+      ## Run as a non-root user after initialization (supported: 0, 33, 50-99, 500-600, and 900-1200):
+      # PHOTOPRISM_UID: 1000
+      # PHOTOPRISM_GID: 1000
+      # PHOTOPRISM_UMASK: 0000
+    ## Start as non-root user before initialization (supported: 0, 33, 50-99, 500-600, and 900-1200):
+    # user: "1000:1000"
+    ## Share hardware devices with FFmpeg and TensorFlow (optional):
+    # devices:
+    #  - "/dev/dri:/dev/dri"                         # Intel QSV
+    #  - "/dev/nvidia0:/dev/nvidia0"                 # Nvidia CUDA
+    #  - "/dev/nvidiactl:/dev/nvidiactl"
+    #  - "/dev/nvidia-modeset:/dev/nvidia-modeset"
+    #  - "/dev/nvidia-nvswitchctl:/dev/nvidia-nvswitchctl"
+    #  - "/dev/nvidia-uvm:/dev/nvidia-uvm"
+    #  - "/dev/nvidia-uvm-tools:/dev/nvidia-uvm-tools"
+    #  - "/dev/video11:/dev/video11"                 # Video4Linux Video Encode Device (h264_v4l2m2m)
+    working_dir: "/photoprism" # do not change or remove
+    ## Storage Folders: "~" is a shortcut for your home directory, "." for the current directory
+    volumes:
+      - "/home/null/shares/disk1/backups/photoprism/originals:/photoprism/originals"               # Original media files (DO NOT REMOVE)
+      - "/home/null/shares/disk1/backups/photoprism/storage:/photoprism/storage"                  # *Writable* storage folder for cache, database, and sidecar files (DO NOT REMOVE)
+
+  ## Database Server (recommended)
+  ## see https://docs.photoprism.app/getting-started/faq/#should-i-use-sqlite-mariadb-or-mysql
+  mariadb:
+    image: mariadb:11
+    ## If MariaDB gets stuck in a restart loop, this points to a memory or filesystem issue:
+    ## https://docs.photoprism.app/getting-started/troubleshooting/#fatal-server-errors
+    restart: unless-stopped
+    stop_grace_period: 5s
+    security_opt: # see https://github.com/MariaDB/mariadb-docker/issues/434#issuecomment-1136151239
+      - seccomp:unconfined
+      - apparmor:unconfined
+    command: --innodb-buffer-pool-size=512M --transaction-isolation=READ-COMMITTED --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci --max-connections=512 --innodb-rollback-on-timeout=OFF --innodb-lock-wait-timeout=120
+    ## Never store database files on an unreliable device such as a USB flash drive, an SD card, or a shared network folder:
+    volumes:
+      - "/srv/photoprism:/var/lib/mysql" # DO NOT REMOVE
+    environment:
+      MARIADB_AUTO_UPGRADE: "1"
+      MARIADB_INITDB_SKIP_TZINFO: "1"
+      MARIADB_DATABASE: "photoprism"
+      MARIADB_USER: "photoprism"
+      MARIADB_PASSWORD: "f&xsbGyb@ZAftyBqZ4&xjCepPv%cPrCs%nDgYz4GYyNc*EBPog"
+      MARIADB_ROOT_PASSWORD: "pY6NuudthC%DQAdV#XUh9p8eRJs8uiq*qnijL3H&x@r6uFq9uT"
+
+  ## Watchtower upgrades services automatically (optional)
+  ## see https://docs.photoprism.app/getting-started/updates/#watchtower
+  ## activate via "COMPOSE_PROFILES=update docker compose up -d"
+  watchtower:
+    restart: unless-stopped
+    image: containrrr/watchtower
+    profiles: ["update"]
+    environment:
+      WATCHTOWER_CLEANUP: "true"
+      WATCHTOWER_POLL_INTERVAL: 7200 # checks for updates every two hours
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock"
+      # - "~/.docker/config.json:/config.json" # optional, for authentication if you have a Docker Hub account

plex/docker-compose.yml

@@ -20,7 +20,7 @@ services:
       - 32414:32414
     environment:
       - TZ=Europe/Copenhagen
-      - PLEX_CLAIM=claim-6Zvsp8xmyzZLfQHGyX8w
+      - PLEX_CLAIM=claim-8yFTWJE7VHZDqfGLckqy
       - ADVERTISE_IP=http://plex.knast.cc:32400/
     volumes:
       # - "/var/lib/plexmediaserver:/config"