reverse proxy

caddy/conf/Caddyfile

@@ -0,0 +1,55 @@
+
+gitea.theocorp {
+  tls internal
+  reverse_proxy gitea:3000
+}
+
+glance.theocorp {
+  tls internal
+  reverse_proxy glance-glance-1:8080
+}
+
+hoarder.theocorp {
+  tls internal
+  reverse_proxy hoarder-web-1:3000
+}
+
+immich.theocorp {
+  tls internal
+  reverse_proxy immich_server:2283
+}
+
+n8n.theocorp {
+  tls internal
+  reverse_proxy n8n-n8n-1:5678
+}
+
+navidrome.theocorp {
+  tls internal
+  reverse_proxy navidrome-navidrome-1:4533
+}
+
+olivetin.theocorp {
+  tls internal
+  reverse_proxy olivetin:1337
+}
+
+paperless-ai.theocorp {
+  tls internal
+  reverse_proxy paperless-ai:3000
+}
+
+paperless.theocorp {
+  tls internal
+  reverse_proxy paperless-ngx-webserver-1:8000
+}
+
+portainer.theocorp {
+  tls internal
+  reverse_proxy portainer-portainer-1:9000
+}
+
+vaultwarden.theocorp {
+  tls internal
+  reverse_proxy vaultwarden:80
+}

caddy/docker-compose.yml

@@ -0,0 +1,59 @@
+services:
+  caddy:
+    image: caddy:latest
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+    ports:
+      - "80:80"
+      - "443:443"
+      - "443:443/udp"
+    volumes:
+      - $PWD/conf:/etc/caddy
+      - $PWD/site:/srv
+      - caddy_data:/data
+      - caddy_config:/config
+    networks:
+      - portainer_default
+      - glance_default
+      - gitea_gitea
+      - hoarder_default
+      - immich_default
+      - n8n_default
+      - navidrome_default
+      - olivetin_default
+      - paperless-ai_default
+      - paperless-ngx_default
+      - vaultwarden_default
+      - yams_default
+
+volumes:
+  caddy_data:
+  caddy_config:
+
+
+networks:
+  portainer_default:
+    external: true
+  gitea_gitea:
+    external: true
+  glance_default:
+    external: true
+  hoarder_default:
+    external: true
+  immich_default:
+    external: true
+  n8n_default:
+    external: true
+  navidrome_default:
+    external: true
+  olivetin_default:
+    external: true
+  paperless-ai_default:
+    external: true
+  paperless-ngx_default:
+    external: true
+  vaultwarden_default:
+    external: true
+  yams_default:
+    external: true

glance/glance.yml

@@ -18,21 +18,29 @@ pages:
             cache: 1m
             title: Services
             sites:
-              - title: Hoarder
-                url: "http://theocorp:1003"
-                icon: si:gitea
-              - title: Git
-                url: "http://theocorp:8123"
-                icon: si:homeassistant
-              - title: Portainer
-                url: "http://theocorp:1000"
-                icon: si:portainer
-              - title: Navidrome
-                url: "http://theocorp:1002"
-                icon: si:applemusic
-              - title: Olive Tin
-                url: "http://theocorp:1004"
-                icon: si:applemusic
+              - title: gitea
+                url: "https://gitea.theocorp"
+              - title: glance
+                url: "https://glance.theocorp"
+              - title: hoarder
+                url: "https://hoarder.theocorp"
+              - title: immich
+                url: "https://immich.theocorp"
+              - title: n8n
+                url: "https://n8n.theocorp"
+              - title: navidrome
+                url: "https://navidrome.theocorp"
+              - title: olivetin
+                url: "https://olivetin.theocorp"
+              - title: paperless-ai
+                url: "https://paperless-ai.theocorp"
+              - title: paperless
+                url: "https://paperless.theocorp"
+              - title: portainer
+                url: "https://portainer.theocorp"
+              - title: vaultwarden
+                url: "https://vaultwarden.theocorp"
+
           - type: bookmarks
             groups:
               - title: General
@@ -61,8 +69,7 @@ pages:
                     url: https://example.com
                   - title: Fidelity
                     url: https://example.com
- 
- 
+
   - name: Technology
     columns:
       - size: small
@@ -107,7 +114,6 @@ pages:
                 subreddit: chatgpt
                 show-thumbnails: true
 
-
       # - size: small
       #   widgets:
       #     - type: weather
@@ -156,7 +162,7 @@ pages:
           - type: videos
             channels:
               - UCLuYADJ6hESLHX87JnsGbjA # Josh Joshnson
-          
+
   - name: BlackCulture
     columns:
       - size: full
@@ -196,8 +202,7 @@ pages:
                 feeds:
                   - url: https://rss.app/feeds/8l0pnQ0Vny9DxtaR.xml
                     title: Google News
-            
-        
+
           - type: videos
             style: grid-cards
             channels:
@@ -215,14 +220,12 @@ pages:
                 limit: 20
                 sort-by: top
 
-
   # - name: Well-Being
   #   columns:
   #     - size: small
   #       widgets:
   #         - type: calendar
 
-
   # - name: Spirituality
   #   columns:
   #     - size: small

paperless-ai/docker-compose.yml

@@ -0,0 +1,19 @@
+services:
+  paperless-ai:
+    image: clusterzx/paperless-ai
+    container_name: paperless-ai
+    restart: unless-stopped
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges=true
+    environment:
+      - PUID=1000
+      - PGID=1000
+    ports:
+      - 1014:3000
+    volumes:
+      - paperless-ai_data:/app/data
+
+volumes:
+  paperless-ai_data:

pihole/docker-compose.yml

@@ -0,0 +1,18 @@
+# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
+services:
+  pihole:
+    container_name: pihole
+    image: pihole/pihole:latest
+    # For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
+    network_mode: "host"
+    environment:
+      TZ: 'America/Chicago'
+      # WEBPASSWORD: 'set a secure password here or it will be random'
+    # Volumes store your data between container upgrades
+    volumes:
+      - './etc-pihole:/etc/pihole'
+      - './etc-dnsmasq.d:/etc/dnsmasq.d'
+    #   https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
+    cap_add:
+      - NET_ADMIN # Required if you are using Pi-hole as your DHCP server, else not needed
+    restart: unless-stopped

watchtower/docker-compose.yml

@@ -0,0 +1,9 @@
+version: '3'
+services:
+  watchtower:
+    image: containrrr/watchtower
+    command:
+      - --cleanup=true
+    restart: always
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock