f

services/prod/home-docker-compose.yml

@@ -0,0 +1,26 @@
+services:
+  home:
+    image: ghcr.io/gethomepage/homepage:latest
+    container_name: home
+    volumes:
+      - ./home/config:/app/config
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    networks:
+      - proxy
+    labels:
+      ## Expose home Through Trefik ##
+      - "traefik.enable=true" # <== Enable traefik to proxy this container
+
+      - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https"
+      - "traefik.http.routers.home-insecure.middlewares=redirect-web-secure"
+      - "traefik.http.routers.home-insecure.rule=Host(`home.luke-else.co.uk`)"
+      - "traefik.http.routers.home-insecure.entrypoints=web"
+
+      - "traefik.http.routers.home.rule=Host(`home.luke-else.co.uk`)"
+      - "traefik.http.routers.home.entrypoints=websecure"
+      - "traefik.http.routers.home.tls.certresolver=myresolver"
+    restart: unless-stopped
+
+networks:
+  proxy:
+    external: true

services/prod/home/config/docker.yaml

@@ -0,0 +1,6 @@
+# Docker host home reads live container status from - only ever the local
+# socket for prod. dev/vpn are separate hosts with their own Docker daemons
+# and are deliberately not reachable from here (see architecture diagram in
+# the README), so their services are plain links, not live widgets.
+my-docker:
+  socket: /var/run/docker.sock

services/prod/home/config/services.yaml

@@ -0,0 +1,63 @@
+- Websites:
+    - luke-else.co.uk:
+        href: https://luke-else.co.uk
+        description: Personal site (prod)
+        icon: mdi-web
+        container: luke-else
+
+- Services:
+    - Status page:
+        href: https://status.luke-else.co.uk
+        description: Uptime Kuma
+        icon: mdi-list-status
+        container: status
+        widget:
+          type: uptimekuma
+          url: https://status.luke-else.co.uk
+          slug: dashboard
+    - Bitwarden:
+        href: https://bitwarden.luke-else.co.uk
+        description: Vaultwarden
+        icon: mdi-key-variant
+        container: bitwarden
+    - RustDesk:
+        href: https://rd.luke-else.co.uk
+        description: RustDesk relay (hbbs/hbbr)
+        icon: mdi-remote-desktop
+        container: rustdesk-hbbs
+    - Gitea:
+        href: https://git.luke-else.co.uk
+        description: Git hosting + CI (dev)
+        icon: mdi-git
+    - WireGuard:
+        href: https://vpn.luke-else.co.uk
+        description: wg-easy (vpn)
+        icon: mdi-vpn
+
+- Infrastructure:
+    - Traefik (prod):
+        href: https://traefik.luke-else.co.uk
+        description: Reverse proxy - prod
+        icon: mdi-lan-connect
+        container: traefik
+        widget:
+          type: traefik
+          url: http://traefik.luke-else.co.uk
+    - Traefik (dev):
+        href: https://traefik.cicd.luke-else.co.uk
+        description: Reverse proxy - dev
+        icon: mdi-lan-connect
+        widget:
+          type: traefik
+          url: https://traefik.cicd.luke-else.co.uk
+    - Traefik (vpn):
+        href: https://traefik.vpn.luke-else.co.uk
+        description: Reverse proxy - vpn
+        icon: mdi-lan-connect
+        widget:
+          type: traefik
+          url: https://traefik.vpn.luke-else.co.uk
+    - Hetzner Cloud Console:
+        href: https://console.hetzner.cloud/
+        description: Servers, networks, firewalls (OpenTofu-managed)
+        icon: mdi-cloud-outline

services/prod/home/config/settings.yaml

@@ -0,0 +1,14 @@
+title: Home
+theme: dark
+color: slate
+headerStyle: boxed
+layout:
+  Websites:
+    style: row
+    columns: 3
+  Services:
+    style: row
+    columns: 3
+  Infrastructure:
+    style: row
+    columns: 3

services/prod/home/config/widgets.yaml

@@ -0,0 +1,9 @@
+# Info bar widgets - stats for *this* host (prod), where home actually runs.
+- resources:
+    label: prod
+    cpu: true
+    memory: true
+    disk: /
+- search:
+    provider: duckduckgo
+    target: _blank

services/prod/spindown.sh

@@ -6,6 +6,7 @@ docker compose -f web-docker-compose.yml down
 docker compose -f status-docker-compose.yml down
 docker compose -f bitwarden-docker-compose.yml down
 docker compose -f rd-docker-compose.yml down
+docker compose -f home-docker-compose.yml down
 docker compose -f watchtower-docker-compose.yml down
 docker compose -f traefik-docker-compose.yml down
 docker compose -f backup-docker-compose.yml down

services/prod/spinup.sh

@@ -21,6 +21,7 @@ docker compose -f status-docker-compose.yml pull && docker compose -f status-doc
 docker compose -f web-docker-compose.yml pull && docker compose -f web-docker-compose.yml up -d
 docker compose -f bitwarden-docker-compose.yml pull && docker compose -f bitwarden-docker-compose.yml up -d
 docker compose -f rd-docker-compose.yml pull && docker compose -f rd-docker-compose.yml up -d
+docker compose -f home-docker-compose.yml pull && docker compose -f home-docker-compose.yml up -d
 
 docker compose -f backup-docker-compose.yml pull backup
 docker compose -f backup-docker-compose.yml up -d backup