diff --git a/.devcontainer b/.devcontainer new file mode 160000 index 0000000..192a20c --- /dev/null +++ b/.devcontainer @@ -0,0 +1 @@ +Subproject commit 192a20c759769b050f9efa89179baf7953bae65c diff --git a/.gitmodules b/.gitmodules new file mode 100644 index 0000000..070ca83 --- /dev/null +++ b/.gitmodules @@ -0,0 +1,4 @@ +[submodule ".devcontainer"] + path = .devcontainer + url = ssh://git@git.luke-else.co.uk:222/luke-else/.devcontainer.git + branch = tf diff --git a/Bitwarden/docker-compose.yml b/Bitwarden/docker-compose.yml deleted file mode 100644 index 91c1ffe..0000000 --- a/Bitwarden/docker-compose.yml +++ /dev/null @@ -1,27 +0,0 @@ -services: - -#Bitwarden () - bitwarden: - image: "vaultwarden/server:latest" - container_name: vaultwarden - volumes: - - ./bitwarden/:/data/ - networks: - - proxy - labels: - ## Expose Bitwarden Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.bitwarden-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.bitwarden-insecure.rule=Host(`bitwarden.luke-else.co.uk`)" - - "traefik.http.routers.bitwarden-insecure.entrypoints=web" - - - "traefik.http.routers.bitwarden.rule=Host(`bitwarden.luke-else.co.uk`)" - - "traefik.http.routers.bitwarden.entrypoints=websecure" - - "traefik.http.routers.bitwarden.tls.certresolver=myresolver" - restart: unless-stopped - -networks: - proxy: - external: true \ No newline at end of file diff --git a/Database/docker-compose.yml b/Database/docker-compose.yml deleted file mode 100644 index 3d1a9a3..0000000 --- a/Database/docker-compose.yml +++ /dev/null @@ -1,24 +0,0 @@ -services: - -#MongoDB (27017) - mongodb: - image: "mongo:latest" - container_name: mongoDB - volumes: - - ./mongo/:/data/db - networks: - - proxy - labels: - - "traefik.enable=true" - - "traefik.tcp.routers.mongodb.rule=HostSNI(`*`)" - - "traefik.tcp.routers.mongodb.entrypoints=mongo" - - "traefik.tcp.routers.mongodb.service=mongodb" - - "traefik.tcp.services.mongodb.loadbalancer.server.port=27017" - environment: - MONGO_INITDB_ROOT_USERNAME: root - MONGO_INITDB_ROOT_PASSWORD: rootpassword - restart: unless-stopped - -networks: - proxy: - external: true \ No newline at end of file diff --git a/Development/Gitea/docker-compose.yml b/Development/Gitea/docker-compose.yml deleted file mode 100644 index 3724a79..0000000 --- a/Development/Gitea/docker-compose.yml +++ /dev/null @@ -1,54 +0,0 @@ -services: - #gitea (222) - gitea: - image: gitea/gitea:latest - container_name: gitea - volumes: - - ./gitea:/data - - /etc/timezone:/etc/timezone:ro - - /etc/localtime:/etc/localtime:ro - networks: - - proxy - ports: - - "222:22" - environment: - - APP_NAME="gitea" - - USER_UID=1000 - - USER_GID=1000 - - USER=git - - RUN_MODE=prod - - DOMAIN=git.luke-else.co.uk - - SSH_DOMAIN=git.luke-else.co.uk - - HTTP_PORT=3000 - - ROOT_URL=https://git.luke-else.co.uk - - SSH_PORT=222 - - SSH_LISTEN_PORT=22 - - DB_TYPE=sqlite3 - - GITEA_service_DISABLE_REGISTRATION=true - - GITEA_server_LANDING_PAGE=/luke-else - labels: - ## Expose Gitea Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.cors-gitea.headers.accesscontrolallowmethods=*" - - "traefik.http.middlewares.cors-gitea.headers.accesscontrolalloworiginlist=*" - - "traefik.http.middlewares.cors-gitea.headers.addvaryheader=true" - - "traefik.http.middlewares.cors-gitea.headers.accesscontrolallowcredentials=true" - - "traefik.http.middlewares.cors-gitea.headers.accesscontrolallowheaders=Content-Type,Authorization" - - "traefik.http.middlewares.cors-gitea.headers.accesscontrolmaxage=100" - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.gitea-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.gitea-insecure.rule=Host(`git.luke-else.co.uk`)" - - "traefik.http.routers.gitea-insecure.entrypoints=web" - - - "traefik.http.services.gitea.loadbalancer.server.port=3000" - - "traefik.http.routers.gitea.rule=Host(`git.luke-else.co.uk`)" - - "traefik.http.routers.gitea.entrypoints=websecure" - - "traefik.http.routers.gitea.tls.certresolver=myresolver" - - "traefik.http.routers.gitea.middlewares=cors-gitea" - restart: unless-stopped - -networks: - proxy: - external: true \ No newline at end of file diff --git a/Development/Runners/config.yaml b/Development/Runners/config.yaml deleted file mode 100644 index e69de29..0000000 diff --git a/Development/Runners/docker-compose.yml b/Development/Runners/docker-compose.yml deleted file mode 100644 index f9f5acd..0000000 --- a/Development/Runners/docker-compose.yml +++ /dev/null @@ -1,33 +0,0 @@ -services: - # Runner - runner: - image: gitea/act_runner:latest - container_name: gitea_runner - volumes: - - ./config.yaml:/config.yaml - - ./gitea_runner:/data - - /var/run/docker.sock:/var/run/docker.sock - networks: - - proxy - environment: - CONFIG_FILE: /config.yaml - GITEA_INSTANCE_URL: "https://git.luke-else.co.uk" - GITEA_RUNNER_REGISTRATION_TOKEN: "INSERT REGISTRATION TOKEN" - GITEA_RUNNER_NAME: "CICD" - labels: - ## Expose cicd Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.cicd-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.cicd-insecure.rule=Host(`cicd.luke-else.co.uk`)" - - "traefik.http.routers.cicd-insecure.entrypoints=web" - - - "traefik.http.routers.cicd.rule=Host(`cicd.luke-else.co.uk`)" - - "traefik.http.routers.cicd.entrypoints=websecure" - - "traefik.http.routers.cicd.tls.certresolver=myresolver" - restart: unless-stopped - -networks: - proxy: - external: true \ No newline at end of file diff --git a/Misc/docker-compose.yml b/Misc/docker-compose.yml deleted file mode 100644 index 7914b79..0000000 --- a/Misc/docker-compose.yml +++ /dev/null @@ -1,51 +0,0 @@ -services: - status: - image: louislam/uptime-kuma:latest - container_name: status - volumes: - - ./uptime-kuma/data:/app/data - networks: - - proxy - labels: - ## Expose uptime-kuma Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.status-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.status-insecure.rule=Host(`status.luke-else.co.uk`)" - - "traefik.http.routers.status-insecure.entrypoints=web" - - - "traefik.http.routers.status.rule=Host(`status.luke-else.co.uk`)" - - "traefik.http.routers.status.entrypoints=websecure" - - "traefik.http.routers.status.tls.certresolver=myresolver" - restart: unless-stopped - - portainer: - image: portainer/portainer-ce:latest - container_name: portainer - security_opt: - - no-new-privileges:true - volumes: - - /etc/localtime:/etc/localtime:ro - - /var/run/docker.sock:/var/run/docker.sock:ro - - ./portainer-data:/data - networks: - - proxy - labels: - ## Expose portainer Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.portainer-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.portainer-insecure.rule=Host(`portainer.luke-else.co.uk`)" - - "traefik.http.routers.portainer-insecure.entrypoints=web" - - - "traefik.http.routers.portainer.rule=Host(`portainer.luke-else.co.uk`)" - - "traefik.http.services.portainer.loadbalancer.server.port=9000" - - "traefik.http.routers.portainer.entrypoints=websecure" - - "traefik.http.routers.portainer.tls.certresolver=myresolver" - restart: unless-stopped - -networks: - proxy: - external: true \ No newline at end of file diff --git a/Rustdesk/docker-compose.yml b/Rustdesk/docker-compose.yml deleted file mode 100644 index 4dc4145..0000000 --- a/Rustdesk/docker-compose.yml +++ /dev/null @@ -1,53 +0,0 @@ -services: - hbbs: - image: rustdesk/rustdesk-server:latest - container_name: rustdesk-hbbs - command: hbbs - restart: unless-stopped - - volumes: - - ./data:/root - - networks: - - proxy - - ports: - - "21115:21115/tcp" - - "21116:21116/tcp" - - "21116:21116/udp" - # - "21118:21118/tcp" - - labels: - - "traefik.enable=true" - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.rustdesk-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.rustdesk-insecure.rule=Host(`rd.luke-else.co.uk`)" - - "traefik.http.routers.rustdesk-insecure.entrypoints=web" - - - "traefik.http.routers.rustdesk.rule=Host(`rd.luke-else.co.uk`)" - - "traefik.http.routers.rustdesk.entrypoints=websecure" - - "traefik.http.routers.rustdesk.tls.certresolver=myresolver" - - # Service - - "traefik.http.services.rustdesk.loadbalancer.server.port=21118" - - hbbr: - image: rustdesk/rustdesk-server:latest - container_name: rustdesk-hbbr - command: hbbr - restart: unless-stopped - - volumes: - - ./data:/root - - networks: - - proxy - - ports: - - "21117:21117/tcp" - - "21119:21119/tcp" - -networks: - proxy: - external: true \ No newline at end of file diff --git a/Tracking/docker-compose.yml b/Tracking/docker-compose.yml deleted file mode 100644 index 6fe612a..0000000 --- a/Tracking/docker-compose.yml +++ /dev/null @@ -1,52 +0,0 @@ -services: - ackee: - image: electerious/ackee - container_name: ackee - environment: - - WAIT_HOSTS=mongo:27017 - - ACKEE_MONGODB=mongodb://mongo-ackee:27017/ackee - env_file: - - .env - expose: - - 3000 - networks: - - tracking - - proxy - labels: - ## Expose Ackee Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - # Enable CORS headers - - "traefik.http.middlewares.cors-tracking.headers.accesscontrolallowmethods=*" - - "traefik.http.middlewares.cors-tracking.headers.accesscontrolalloworiginlist=https://luke-else.co.uk" - - "traefik.http.middlewares.cors-tracking.headers.accesscontrolallowcredentials=true" - - "traefik.http.middlewares.cors-tracking.headers.accesscontrolallowheaders=Content-Type,Authorization" - - "traefik.http.middlewares.cors-tracking.headers.addvaryheader=true" - - "traefik.http.middlewares.cors-tracking.headers.accesscontrolmaxage=100" - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.ackee-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.ackee-insecure.rule=Host(`tracking.luke-else.co.uk`)" - - "traefik.http.routers.ackee-insecure.entrypoints=web" - - - "traefik.http.routers.ackee.rule=Host(`tracking.luke-else.co.uk`)" - - "traefik.http.routers.ackee.entrypoints=websecure" - - "traefik.http.routers.ackee.tls.certresolver=myresolver" - - "traefik.http.routers.ackee.middlewares=cors-tracking" - depends_on: - - mongo - restart: unless-stopped - - mongo: - image: mongo - container_name: mongo-ackee - volumes: - - ./data:/data/db - networks: - - tracking - restart: unless-stopped - -networks: - proxy: - external: true - tracking: \ No newline at end of file diff --git a/Traefik/docker-compose.yml b/Traefik/docker-compose.yml deleted file mode 100644 index c2b613a..0000000 --- a/Traefik/docker-compose.yml +++ /dev/null @@ -1,46 +0,0 @@ -services: - traefik: - image: "traefik:latest" - container_name: "traefik" - command: - - "--api.dashboard=true" - - "--providers.docker=true" - - "--providers.docker.exposedbydefault=false" - - "--entrypoints.web.address=:80" - - "--entrypoints.websecure.address=:443" - - "--entrypoints.mongo.address=:27017" - - "--entrypoints.web.transport.respondingTimeouts.readTimeout=120s" - - "--entrypoints.websecure.transport.respondingTimeouts.readTimeout=120s" - - "--entrypoints.web.transport.respondingTimeouts.writeTimeout=120s" - - "--entrypoints.websecure.transport.respondingTimeouts.writeTimeout=120s" - - "--certificatesresolvers.myresolver.acme.tlschallenge=true" - - "--certificatesresolvers.myresolver.acme.email=contact@luke-else.co.uk" - - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json" - ports: - - "80:80" - - "443:443" - - "27017:27017" - volumes: - - "./letsencrypt:/letsencrypt" - - "/var/run/docker.sock:/var/run/docker.sock:ro" - networks: - - proxy - labels: - - "traefik.enable=true" - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.traefik-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.traefik-insecure.rule=Host(`traefik.luke-else.co.uk`)" - - "traefik.http.routers.traefik-insecure.entrypoints=web" - - - "traefik.http.routers.traefik.rule=Host(`traefik.luke-else.co.uk`)" - - "traefik.http.routers.traefik.entrypoints=websecure" - - "traefik.http.routers.traefik.service=api@internal" - - "traefik.http.routers.traefik.tls.certresolver=myresolver" - - "traefik.http.routers.traefik.middlewares=traefik-auth" - - "traefik.http.middlewares.traefik-auth.basicauth.users=user:$$2y$$05$$s/vPphFtSO2fWJR7SYkEb.90UwPDRM3aOKqgOF/rme/3fUQ5tvpTS" - restart: unless-stopped - -networks: - proxy: - name: proxy \ No newline at end of file diff --git a/TraefikRunner/docker-compose.yml b/TraefikRunner/docker-compose.yml deleted file mode 100644 index e8970fd..0000000 --- a/TraefikRunner/docker-compose.yml +++ /dev/null @@ -1,40 +0,0 @@ -services: - traefik: - image: "traefik:latest" - container_name: "traefik" - command: - - "--api.dashboard=true" - - "--providers.docker=true" - - "--providers.docker.exposedbydefault=false" - - "--entrypoints.web.address=:80" - - "--entrypoints.websecure.address=:443" - - "--certificatesresolvers.myresolver.acme.tlschallenge=true" - - "--certificatesresolvers.myresolver.acme.email=contact@luke-else.co.uk" - - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json" - ports: - - "80:80" - - "443:443" - volumes: - - "./letsencrypt:/letsencrypt" - - "/var/run/docker.sock:/var/run/docker.sock:ro" - networks: - - proxy - labels: - - "traefik.enable=true" - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.traefik-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.traefik-insecure.rule=Host(`traefik.cicd.luke-else.co.uk`)" - - "traefik.http.routers.traefik-insecure.entrypoints=web" - - - "traefik.http.routers.traefik.rule=Host(`traefik.cicd.luke-else.co.uk`)" - - "traefik.http.routers.traefik.entrypoints=websecure" - - "traefik.http.routers.traefik.service=api@internal" - - "traefik.http.routers.traefik.tls.certresolver=myresolver" - - "traefik.http.routers.traefik.middlewares=traefik-auth" - - "traefik.http.middlewares.traefik-auth.basicauth.users=user:$$2y$$05$$s/vPphFtSO2fWJR7SYkEb.90UwPDRM3aOKqgOF/rme/3fUQ5tvpTS" - restart: unless-stopped - -networks: - proxy: - name: proxy \ No newline at end of file diff --git a/TraefikVPN/docker-compose.yml b/TraefikVPN/docker-compose.yml deleted file mode 100644 index 7383006..0000000 --- a/TraefikVPN/docker-compose.yml +++ /dev/null @@ -1,40 +0,0 @@ -services: - traefik: - image: "traefik:latest" - container_name: "traefik" - command: - - "--api.dashboard=true" - - "--providers.docker=true" - - "--providers.docker.exposedbydefault=false" - - "--entrypoints.web.address=:80" - - "--entrypoints.websecure.address=:443" - - "--certificatesresolvers.myresolver.acme.tlschallenge=true" - - "--certificatesresolvers.myresolver.acme.email=contact@luke-else.co.uk" - - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json" - ports: - - "80:80" - - "443:443" - volumes: - - "./letsencrypt:/letsencrypt" - - "/var/run/docker.sock:/var/run/docker.sock:ro" - networks: - - proxy - labels: - - "traefik.enable=true" - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.traefik-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.traefik-insecure.rule=Host(`traefik.vpn.luke-else.co.uk`)" - - "traefik.http.routers.traefik-insecure.entrypoints=web" - - - "traefik.http.routers.traefik.rule=Host(`traefik.vpn.luke-else.co.uk`)" - - "traefik.http.routers.traefik.entrypoints=websecure" - - "traefik.http.routers.traefik.service=api@internal" - - "traefik.http.routers.traefik.tls.certresolver=myresolver" - - "traefik.http.routers.traefik.middlewares=traefik-auth" - - "traefik.http.middlewares.traefik-auth.basicauth.users=user:$$2y$$05$$s/vPphFtSO2fWJR7SYkEb.90UwPDRM3aOKqgOF/rme/3fUQ5tvpTS" - restart: unless-stopped - -networks: - proxy: - name: proxy \ No newline at end of file diff --git a/VPN/docker-compose.yml b/VPN/docker-compose.yml deleted file mode 100644 index 502dcd8..0000000 --- a/VPN/docker-compose.yml +++ /dev/null @@ -1,24 +0,0 @@ -services: - dockovpn: - image: alekslitvinenk/openvpn - cap_add: - - NET_ADMIN - ports: - - 1194:1194/udp # Expose tcp if you defined HOST_TUN_PROTOCOL=tcp - environment: - HOST_ADDR: vpn.luke-else.co.uk # Your VPN server address - volumes: - - ./openvpn_conf:/opt/Dockovpn_data - labels: - ## Expose vpn Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.vpn-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.vpn-insecure.rule=Host(`vpn.luke-else.co.uk`)" - - "traefik.http.routers.vpn-insecure.entrypoints=web" - - - "traefik.http.routers.vpn.rule=Host(`vpn.luke-else.co.uk`)" - - "traefik.http.routers.vpn.entrypoints=websecure" - - "traefik.http.routers.vpn.tls.certresolver=myresolver" - restart: always \ No newline at end of file diff --git a/Watchtower/docker-compose.yml b/Watchtower/docker-compose.yml deleted file mode 100644 index ee735d3..0000000 --- a/Watchtower/docker-compose.yml +++ /dev/null @@ -1,8 +0,0 @@ -services: - watchtower: - image: nickfedor/watchtower - volumes: - - /var/run/docker.sock:/var/run/docker.sock - environment: - - WATCHTOWER_CLEANUP=true - - WATCHTOWER_POLL_INTERVAL=60 diff --git a/Websites/docker-compose.yml b/Websites/docker-compose.yml deleted file mode 100644 index ffc2c6b..0000000 --- a/Websites/docker-compose.yml +++ /dev/null @@ -1,103 +0,0 @@ -services: - -#Websites luke-else.co.uk (8000) snexo.co.uk (8001) divine-couture.co.uk (80) wmgzon.luke-else.co.uk (8080) - luke-else: - image: git.luke-else.co.uk/luke-else/luke-else.co.uk - container_name: luke-else - networks: - - proxy - labels: - ## Expose luke-else Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.personal-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.personal-insecure.rule=Host(`luke-else.co.uk`)" - - "traefik.http.routers.personal-insecure.entrypoints=web" - - - "traefik.http.routers.personal.rule=Host(`luke-else.co.uk`)" - - "traefik.http.routers.personal.entrypoints=websecure" - - "traefik.http.routers.personal.tls.certresolver=myresolver" - restart: unless-stopped - - luke-else-dev: - image: git.luke-else.co.uk/luke-else/luke-else.co.uk:dev - container_name: luke-else-dev - networks: - - proxy - labels: - ## Expose luke-else Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.personal-dev-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.personal-dev-insecure.rule=Host(`dev.luke-else.co.uk`)" - - "traefik.http.routers.personal-dev-insecure.entrypoints=web" - - - "traefik.http.routers.personal-dev.rule=Host(`dev.luke-else.co.uk`)" - - "traefik.http.routers.personal-dev.entrypoints=websecure" - - "traefik.http.routers.personal-dev.tls.certresolver=myresolver" - restart: unless-stopped - - metarius: - image: git.luke-else.co.uk/luke-else/metarius:latest - container_name: metarius - networks: - - proxy - labels: - ## Expose metarius Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.metarius-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.metarius-insecure.rule=Host(`metarius.luke-else.co.uk`)" - - "traefik.http.routers.metarius-insecure.entrypoints=web" - - - "traefik.http.routers.metarius.rule=Host(`metarius.luke-else.co.uk`)" - - "traefik.http.routers.metarius.entrypoints=websecure" - - "traefik.http.routers.metarius.tls.certresolver=myresolver" - restart: unless-stopped - - divine-couture: - image: git.luke-else.co.uk/luke-else/divine-couture.co.uk:latest - container_name: divine-couture - networks: - - proxy - labels: - ## Expose divine-couture Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.divine-couture-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.divine-couture-insecure.rule=Host(`www.divine-couture.co.uk`)" - - "traefik.http.routers.divine-couture-insecure.entrypoints=web" - - - "traefik.http.routers.divine-couture.rule=Host(`www.divine-couture.co.uk`)" - - "traefik.http.routers.divine-couture.entrypoints=websecure" - - "traefik.http.routers.divine-couture.tls.certresolver=myresolver" - restart: unless-stopped - - snexo: - image: "php:apache" - container_name: snexo - volumes: - - ./snexo.co.uk/:/var/www/html - networks: - - proxy - labels: - ## Expose Snexo Through Trefik ## - - "traefik.enable=true" # <== Enable traefik to proxy this container - - - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - - "traefik.http.routers.snexo-insecure.middlewares=redirect-web-secure" - - "traefik.http.routers.snexo-insecure.rule=Host(`snexo.co.uk`)" - - "traefik.http.routers.snexo-insecure.entrypoints=web" - - - "traefik.http.routers.snexo.rule=Host(`snexo.co.uk`)" - - "traefik.http.routers.snexo.entrypoints=websecure" - - "traefik.http.routers.snexo.tls.certresolver=myresolver" - restart: unless-stopped - -networks: - proxy: - external: true diff --git a/cicd-spindown.sh b/cicd-spindown.sh deleted file mode 100755 index 1e3d49c..0000000 --- a/cicd-spindown.sh +++ /dev/null @@ -1,16 +0,0 @@ -#Script file for spinning down all CICD relevant docker-containers - cd ./Development/Runners/ - docker compose down - cd ../.. - -cd ./TraefikRunner/ -docker compose down -cd .. - -cd ./Watchtower/ -docker compose down -cd .. - -docker rmi $(docker images -q) -docker system prune -f -a -docker volume prune -f -a \ No newline at end of file diff --git a/cicd-spinup.sh b/cicd-spinup.sh deleted file mode 100755 index 6a3b139..0000000 --- a/cicd-spinup.sh +++ /dev/null @@ -1,13 +0,0 @@ -#Script file for spinning up all docker-containers - -cd ./TraefikRunner/ -docker compose pull && docker compose up -d -cd .. - - cd ./Development/Runners/ - docker compose pull && docker compose up -d - cd ../.. - -cd ./Watchtower/ -docker compose pull && docker compose up -d -cd .. \ No newline at end of file diff --git a/main-spindown.sh b/main-spindown.sh deleted file mode 100755 index 1012835..0000000 --- a/main-spindown.sh +++ /dev/null @@ -1,42 +0,0 @@ -#Script file for spinning down all docker-containers - -cd ./Websites/ -docker compose down -cd .. - -cd ./Tracking/ -docker compose down -cd .. - - - cd ./Development/Gitea/ - docker compose down - cd ../.. - -cd ./Database/ -docker compose down -cd .. - -cd ./Bitwarden/ -docker compose down -cd .. - -cd ./Rustdesk/ -docker compose down -cd .. - -cd ./Misc/ -docker compose down -cd .. - -cd ./Watchtower/ -docker compose down -cd .. - -cd ./Traefik/ -docker compose down -cd .. - -docker rmi $(docker images -q) -docker system prune -f -a -docker volume prune -f -a \ No newline at end of file diff --git a/main-spinup.sh b/main-spinup.sh deleted file mode 100755 index d8f8a03..0000000 --- a/main-spinup.sh +++ /dev/null @@ -1,39 +0,0 @@ -#Script file for spinning up all docker-containers - -cd ./Traefik/ -docker compose pull && docker compose up -d -cd .. - - cd ./Development/Gitea/ - docker compose pull && docker compose up -d - cd ../.. - -sleep 20 # Allow Gitea + registry to start up before starting the rest of the services - -cd ./Watchtower/ -docker compose pull && docker compose up -d -cd .. - -cd ./Tracking/ -docker compose pull && docker compose up -d -cd .. - -cd ./Websites/ -docker compose pull && docker compose up -d -cd .. - -cd ./Database/ -docker compose pull && docker compose up -d -cd .. - -cd ./Bitwarden/ -docker compose pull && docker compose up -d -cd .. - -cd ./Rustdesk/ -docker compose pull && docker compose up -d -cd .. - -cd ./Misc/ -docker compose pull && docker compose up -d -cd .. \ No newline at end of file diff --git a/todo.md b/todo.md deleted file mode 100644 index a53d118..0000000 --- a/todo.md +++ /dev/null @@ -1,64 +0,0 @@ -# ToDo Items - -## General - -- Setup non root user -- UFW should be setup to keep VPS secure and only allow for: - - - https - - http - - ssh - - ftp - - 27017 - - - "21115:21115/tcp" - - "21116:21116/tcp" - - "21116:21116/udp" - - "21117:21117/tcp" - - "21119:21119/tcp" - -- Install SSH keys -- Setup unattended upgrades -- Install docker, docker-compose and apache utils. - -## Traefik + TraefikRunner + Traefik VPN - -- Setup htaccess -> `echo $(htpasswd -nb user password) | sed -e s/\\$/\\$\\$/g` -- Ensure email address is correct - -## Gitea - -- Ensure that ports are assigned correctly for the system - -# Gitea Runner - -- Ensure that a registration token has been setup before continuing - -## Tracking - -Create a .env file with the following content: - -```sh -ACKEE_USERNAME=luke-else -ACKEE_PASSWORD=XXX -``` - -## Websites - -- Ensure website files are copied over -- Ensure that ports are assigned correctly for the system - -## Bitwarden - -- Ensure that all data is fully encrypted during transfer. -- Ensure that ports are assigned correctly for the system - -## Rustdesk - -- No additional setup required bar the ports - -## Database - -- Ensure that mysql root password, user and default database are updated. -- Ensure that mongo root password, and user are updated. -- Ensure database ports are correctly assigned and do not have to pass through traefik. diff --git a/vpn-spindown.sh b/vpn-spindown.sh deleted file mode 100755 index 7cd9ef1..0000000 --- a/vpn-spindown.sh +++ /dev/null @@ -1,17 +0,0 @@ -#Script file for spinning down all CICD relevant docker-containers - -cd ./VPN/ -docker compose down -cd .. - -cd ./TraefikVPN/ -docker compose down -cd .. - -cd ./Watchtower/ -docker compose down -cd .. - -docker rmi $(docker images -q) -docker system prune -f -a -docker volume prune -f -a \ No newline at end of file diff --git a/vpn-spinup.sh b/vpn-spinup.sh deleted file mode 100755 index 4cc5159..0000000 --- a/vpn-spinup.sh +++ /dev/null @@ -1,13 +0,0 @@ -#Script file for spinning up all docker-containers - -cd ./TraefikRunner/ -docker compose pull && docker compose up -d -cd .. - -cd ./VPN/ -docker compose pull && docker compose up -d -cd .. - -cd ./Watchtower/ -docker compose pull && docker compose up -d -cd .. \ No newline at end of file