Update: Collection with latest options

README.md

@@ -50,6 +50,10 @@ https://github.com/linuxserver/docker-doublecommander/
 
 Some other external resources gathered from the web
 
+Must read:
+  * https://geek-cookbook.funkypenguin.co.nz/docker-swarm/design/
+  * https://homelabos.com/docs/
+
 #### Large Collections
 
 - https://docs.linuxserver.io/general/awesome-lsio

authelia/conf/configuration.ldap.yml

@@ -21,8 +21,8 @@ authentication_backend:
     permit_unauthenticated_bind: false
 
     additional_users_dn: ou=people
-    base_dn: DC=dev,DC=box
+    base_dn: DC=jeznet,DC=org
-    user: CN=admin,DC=dev,DC=box
+    user: CN=admin,DC=jeznet,DC=org
-    password: admin
+    password: devbox_admin
 
 

ldap-account-manager/.env

@@ -1,11 +0,0 @@
-APP_IMAGE=traefik
-APP_VERSION=v2.6.1
-
-APP_PUBLIC_IP="127.0.0.1"
-APP_NETWORK=''
-
-APP_DOMAIN=dev
-APP_ADMIN_EMAIL=admin@dev
-
-TRAEFIK_CERTRESOLV=default
-TRAEFIK_CERTRESOLV_PROVIDER=''

ldap-user-manager/.env

@@ -1,11 +0,0 @@
-APP_IMAGE=traefik
-APP_VERSION=v2.6.1
-
-APP_PUBLIC_IP="127.0.0.1"
-APP_NETWORK=''
-
-APP_DOMAIN=dev
-APP_ADMIN_EMAIL=admin@dev
-
-TRAEFIK_CERTRESOLV=default
-TRAEFIK_CERTRESOLV_PROVIDER=''

librespeed/docker-compose.mysql.yml

@@ -0,0 +1,10 @@
+services:
+  librespeed:
+    environment:
+      - DB_TYPE=$app_db_type #optional
+      - DB_NAME=$app_db_name #optional
+      - DB_HOSTNAME=$app_db_host #optional
+      - DB_USERNAME=$app_db_user #optional
+      - DB_PASSWORD=$app_db_passwd #optional
+      - DB_PORT=$app_db_port #optional
+

librespeed/docker-compose.yml

@@ -1,22 +1,14 @@
 version: "3.7"
+
 services:
   librespeed:
-    image: lscr.io/linuxserver/librespeed:latest
+    image: ${app_image}:${app_image_version}
-      #container_name: librespeed
     environment:
-      #- PUID=$app_puid
+      - PUID=$app_puid
-      #- PGID=$app_pgid
+      - PGID=$app_pgid
       - TZ=$app_tz
       - PASSWORD=$app_admin_passwd
       - CUSTOM_RESULTS=false  #optional
       - DB_TYPE=sqlite #optional
-        # - DB_NAME=DB_NAME #optional
-        # - DB_HOSTNAME=DB_HOSTNAME #optional
-        # - DB_USERNAME=DB_USERNAME #optional
-        # - DB_PASSWORD=DB_PASSWORD #optional
-        # - DB_PORT=DB_PORT #optional
     volumes:
       - ./config:/config
-        #ports:
-        #  - 80:80
-

librespeed/vars.yml

@@ -0,0 +1,2 @@
+app_image: lscr.io/linuxserver/librespeed
+app_image_version: 5.2.5

minio/docker-compose.client.yml

@@ -0,0 +1,24 @@
+
+networks:
+  default:
+    name: ${net_ostorage:-s3}
+
+
+services:
+  client:
+    image: minio/mc:latest
+    command: server --console-address ":9001" /data
+    volumes:
+      - ./data:/data
+      - ./config:/root/.minio
+    environment:
+      - MINIO_ROOT_USER=$app_admin_login
+      - MINIO_ROOT_PASSWORD=$app_admin_passwd
+      
+      # Why this does not work ?
+      #- MINIO_SERVER_URL=${app_prot}://minio.$app_domain
+      - MINIO_SERVER_URL=${app_prot}://minio:9000
+
+      - MINIO_DOMAIN=minio.$app_domain
+      - MINIO_BROWSER_REDIRECT_URL=${app_prot}://minio-console.$app_domain
+

minio/docker-compose.ldap.yml

@@ -1,19 +1,25 @@
 
 networks:
   ldap:
-    name: ${net_ldap:-s3}
+    name: ${net_ldap:-ldap}
 
 services:
   minio:
     networks:
       ldap:
     environment:
-      - MINIO_IDENTITY_LDAP_LOOKUP_BIND_DN
+      - MINIO_IDENTITY_LDAP_SERVER_ADDR=ldap:389
-      - MINIO_IDENTITY_LDAP_LOOKUP_BIND_PASSWORD
+        #- MINIO_IDENTITY_LDAP_SERVER_ADDR=ldap:636
-      - MINIO_IDENTITY_LDAP_USER_DN_SEARCH_BASE_DN
+      - MINIO_IDENTITY_LDAP_LOOKUP_BIND_DN=$ldap_admin_bind_dn
-      - MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER
+      - MINIO_IDENTITY_LDAP_LOOKUP_BIND_PASSWORD=$ldap_admin_bind_passwd
+      - MINIO_IDENTITY_LDAP_USER_DN_SEARCH_BASE_DN=$ldap_user_base_dn
+      - MINIO_IDENTITY_LDAP_SERVER_INSECURE=on
+        #- MINIO_IDENTITY_LDAP_TLS_SKIP_VERIFY=on
+        #- MINIO_IDENTITY_LDAP_SERVER_STARTTLS=off
+      - MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER=(uid=%s)
+      #- MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER
 
-      - MINIO_IDENTITY_LDAP_USERNAME_FORMAT
+        #- MINIO_IDENTITY_LDAP_USERNAME_FORMAT # Legacy method
-      - MINIO_IDENTITY_LDAP_GROUP_SEARCH_BASE_DN
+      - MINIO_IDENTITY_LDAP_GROUP_SEARCH_BASE_DN=$ldap_group_base_dn
-      - MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER
+      - MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER=(&(objectClass=posixGroup)(uniqueMember=%d))
 

minio/docker-compose.yml

@@ -1,5 +1,6 @@
 version: "3.9"
 
+
 # Official docuemtnation
 # https://min.io/docs/minio/container/index.html
 
@@ -20,9 +21,8 @@ networks:
 
 services:
   minio:
-    image: quay.io/minio/minio:latest
+    image: ${app_image}:${app_image_version}
     command: server --console-address ":9001" /data
-    restart: always
     volumes:
       - ./data:/data
       - ./config:/root/.minio
@@ -30,12 +30,10 @@ services:
       - MINIO_ROOT_USER=$app_admin_login
       - MINIO_ROOT_PASSWORD=$app_admin_passwd
       
-      #- MINIO_DOMAIN=minio.$app_domain
+      # Why this does not work ?
-      #- MINIO_DOMAIN=http://localhost:9000
+      #- MINIO_SERVER_URL=${app_prot}://minio.$app_domain
-      #- MINIO_SERVER_URL=http://minio.$app_domain
       - MINIO_SERVER_URL=${app_prot}://minio:9000
-      - MINIO_BROWSER_REDIRECT_URL=${app_prot}://minio-console.$app_domain
+
-       #
+      - MINIO_DOMAIN=minio.$app_domain
-      #- MINIO_ACCESS_KEY=dksflhdskhfkjdshfkdf
+      - MINIO_BROWSER_REDIRECT_URL=${app_prot}://minio-console.$app_domain
-      #- MINIO_SECRET_KEY=kfsdfksdhfkjsdhfkjdshf
 

minio/vars.yml

@@ -0,0 +1,2 @@
+app_image: quay.io/minio/minio
+app_image_version: RELEASE.2022-10-20T00-55-09Z

openldap/.env

@@ -1,11 +0,0 @@
-APP_IMAGE=traefik
-APP_VERSION=v2.6.1
-
-APP_PUBLIC_IP="127.0.0.1"
-APP_NETWORK=''
-
-APP_DOMAIN=dev
-APP_ADMIN_EMAIL=admin@dev
-
-TRAEFIK_CERTRESOLV=default
-TRAEFIK_CERTRESOLV_PROVIDER=''

openldap/README.md

@@ -1,5 +1,19 @@
 # OpenLDAP Server
 
+## Connecting as admin
+
+You can use JXplorer as LDAP client to test it out:
+* Host: Your LDAP IP
+* Port: Your LDAP port (389)
+* Base DN: dc=example,dc=org
+* User DN: cn=admin,dc=example,dc=org
+* Password: LDAP Admin password
+
+## Note about TLS
+
+LDAP port: 389
+LDAPS port: 636
+
 
 ## Self-serve configuration
 

openldap/docker-compose.expose.yml

@@ -2,4 +2,5 @@ services:
   openldap:
     ports:
       - $app_expose_ip:${app_expose_port:-389}:389
+      - $app_expose_ip:${app_expose_port:-636}:636
       

openldap/docker-compose.yml

@@ -9,13 +9,13 @@ services:
   openldap:
     image: osixia/openldap:latest
     restart: always
-    networks:
+      #networks:
-      default:
+      #  default:
-        aliases:
+      #    aliases:
-          - ldap
+      #      - ldap
-          - $ldap_uri_server
+      #      - $ldap_uri_server
     environment:
-      - "LDAP_ORGANISATION=${ldap_domain:-$app_fqdn}"
+      - "LDAP_ORGANISATION=${ldap_org:-$app_fqdn}"
       - "LDAP_DOMAIN=${ldap_domain:-$app_fqdn}"
       - "LDAP_ADMIN_PASSWORD=${ldap_admin_bind_passwd:-$app_admin_passwd}"
       - "LDAP_RFC2307BIS_SCHEMA=true"

traefik/.env

@@ -1,11 +0,0 @@
-APP_IMAGE=traefik
-APP_VERSION=v2.6.1
-
-app_expose_ip="127.0.0.1"
-APP_NETWORK=''
-
-APP_DOMAIN=dev
-APP_ADMIN_EMAIL=admin@dev
-
-TRAEFIK_CERTRESOLV=default
-TRAEFIK_CERTRESOLV_PROVIDER=''

traefik/docker-compose.letsencrypt-dns.yml

@@ -10,13 +10,14 @@ services:
       - TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_EMAIL=${app_admin_email}
       - TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_STORAGE=/data/acme-${traefik_svc_certresolver}.json
       - TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_DNSCHALLENGE=true
-      - TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_DNSCHALLENGE_PROVIDER=${traefik_svc_certresolver_PROVIDER}
+      - TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_DNSCHALLENGE_PROVIDER=${traefik_svc_certresolver_provider}
+      - TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_DNSCHALLENGE_RESOLVERS=${traefik_svc_certresolver_resolvers}
         #- TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_DNSCHALLENGE_DELAYBEFORECHECK=10
-        #- TRAEFIK_CERTIFICATESRESOLVERS_${traefik_svc_certresolver}_ACME_DNSCHALLENGE_RESOLVERS="167.114.154.30:53,192.99.60.247:53"
 
-      # ACME credentials for ovh-eu
+      # ACME support for ovh
-      # - OVH_ENDPOINT=ovh-eu
+      - OVH_ENDPOINT=${traefik_svc_certresolver_ovh_endpoint}
-      # - OVH_APPLICATION_KEY=XXX
+      - OVH_APPLICATION_KEY=${traefik_svc_certresolver_ovh_app_key}
-      # - OVH_APPLICATION_SECRET=YYY
+      - OVH_APPLICATION_SECRET=${traefik_svc_certresolver_ovh_app_secret}
-      # - OVH_CONSUMER_KEY=ZZZ
+      - OVH_CONSUMER_KEY=${traefik_svc_certresolver_ovh_consumer_key}
+
 

traefik/docker-compose.yml

@@ -6,23 +6,24 @@ version: "3.7"
 #  - bash does not allow hyphen in their name
 #  - Traefik does not allow underscore when shell configuration is used
 
-x-paasify:
+
-  app:
+  # x-paasify:
-    service: traefik
+  #   app:
-    port: 8080
+  #     service: traefik
-    image: traefik
+  #     port: 8080
-    version: v1.6
+  #     image: traefik
-    cmd: my command
+  #     version: v1.6
-    cmd_help: 
+  #     cmd: my command
-    cmd_shell: 
+  #     cmd_help: 
-    cmd_status: 
+  #     cmd_shell: 
-  conf:
+  #     cmd_status: 
-    traefik_svc_tls: false
+  #   conf:
-    traefik_svc_entrypoints: default-http
+  #     traefik_svc_tls: false
+  #     traefik_svc_entrypoints: default-http
 
 services:
   traefik:
-    image: ${app_image}
+    image: ${app_image}:${app_image_version}
     restart: always
     #networks:
     #  default:

traefik/vars.yml

@@ -0,0 +1,14 @@
+app_image: traefik
+app_image_version: v2.9
+
+# Let's encrypt support
+traefik_svc_certresolver: default
+traefik_svc_certresolver_provider: null
+traefik_svc_certresolver_resolvers: 
+
+# OVH support for Let's encrypt
+traefik_svc_certresolver_ovh_endpoint: ovh-eu
+traefik_svc_certresolver_ovh_app_key: 
+traefik_svc_certresolver_ovh_app_secret: 
+traefik_svc_certresolver_ovh_consumer_key: 
+