Compare commits
24 Commits
docker-ref
...
fa1f342c95
| Author | SHA1 | Date | |
|---|---|---|---|
| fa1f342c95 | |||
| dc94b51647 | |||
| 558e494dfd | |||
| b47ac029bc | |||
| fcbaaab872 | |||
| 1f6ac5d291 | |||
| 58f3f59665 | |||
| 543272ded8 | |||
| e7ca7182c0 | |||
| f49b9fe4c3 | |||
| 3bc1487b29 | |||
| 2bdbf1a313 | |||
| 5af8be33d8 | |||
| 3e582e4d0c | |||
| 5715ba5c98 | |||
| 76e58b602f | |||
| 3fe7e47c3e | |||
| 527d330e72 | |||
| 668abc799e | |||
| c4106fbfae | |||
| 4cba6a009a | |||
| b5ecc227d0 | |||
| 40668b67dc | |||
| 18c973446d |
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@@ -0,0 +1 @@
|
||||
.env
|
||||
@@ -7,7 +7,7 @@ services:
|
||||
influxdb:
|
||||
condition: service_healthy
|
||||
volumes:
|
||||
- ${GARMINCONNECT_TOKENS}:/home/appuser/.garminconnect # (persistant tokens storage - garminconnect-tokens folder must be owned by 1000:1000)
|
||||
- garminconnect_tokens:/home/appuser/.garminconnect # persisted tokens storage (named volume)
|
||||
environment:
|
||||
- INFLUXDB_HOST=influxdb
|
||||
- INFLUXDB_PORT=8086
|
||||
@@ -34,7 +34,7 @@ services:
|
||||
ports:
|
||||
- '8086:8086'
|
||||
volumes:
|
||||
- ${PATH_TO_INFLUXDB_DATA}:/var/lib/influxdb
|
||||
- influxdb_data:/var/lib/influxdb
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://localhost:8086/ping"]
|
||||
interval: 10s
|
||||
@@ -52,7 +52,7 @@ services:
|
||||
- GF_SECURITY_ADMIN_USER=${GF_SECURITY_ADMIN_USER}
|
||||
- GF_SECURITY_ADMIN_PASSWORD=${GF_SECURITY_ADMIN_PASSWORD}
|
||||
volumes:
|
||||
- ${PATH_TO_GRAFANA_DATA}:/var/lib/grafana
|
||||
- grafana_data:/var/lib/grafana
|
||||
ports:
|
||||
- '3000:3000'
|
||||
healthcheck:
|
||||
@@ -66,3 +66,11 @@ services:
|
||||
networks:
|
||||
garmin-grafana-net:
|
||||
driver: bridge
|
||||
|
||||
volumes:
|
||||
garminconnect_tokens:
|
||||
name: garminconnect_tokens
|
||||
influxdb_data:
|
||||
name: influxdb_data
|
||||
grafana_data:
|
||||
name: grafana_data
|
||||
@@ -1,3 +1,27 @@
|
||||
# Authentication parameters for Proxmox API
|
||||
HOMEPAGE_VAR_PROXMOX_PAM=${HOMEPAGE_VAR_PROXMOX_PAM}
|
||||
HOMEPAGE_VAR_PROXMOX_SECRET=${HOMEPAGE_VAR_PROXMOX_SECRET}
|
||||
HOMEPAGE_VAR_PROXMOX_URL=https://proxmox.example.com:8006
|
||||
HOMEPAGE_VAR_PROXMOX_PAM=root@pam
|
||||
HOMEPAGE_VAR_PROXMOX_SECRET='your_proxmox_api_token'
|
||||
HOMEPAGE_VAR_PORTAINER_URL=https://portainer.example.com
|
||||
HOMEPAGE_VAR_PORTAINER_KEY='your_portainer_api_token'
|
||||
HOMEPAGE_VAR_TRUENAS_URL=http://truenas.example.com
|
||||
HOMEPAGE_VAR_TRUENAS_KEY='your_truenas_api_token'
|
||||
HOMEPAGE_VAR_TRANSMISSION_URL=http://transmission.example.com:9091
|
||||
HOMEPAGE_VAR_IMMICH_URL=http://immich.example.com
|
||||
HOMEPAGE_VAR_IMMICH_KEY='your_immich_api_token'
|
||||
HOMEPAGE_VAR_SEAFILE_URL=https://seafile.example.com/
|
||||
HOMEPAGE_VAR_NPM_URL=http://npm.example.com:81
|
||||
HOMEPAGE_VAR_NPM_USER=user@example.com
|
||||
HOMEPAGE_VAR_NPM_PASS='your_npm_password'
|
||||
HOMEPAGE_VAR_ADGUARD_URL=http://adguard.example.com
|
||||
HOMEPAGE_VAR_ADGUARD_USER='your_adguard_username'
|
||||
HOMEPAGE_VAR_ADGUARD_PASS='your_adguard_password'
|
||||
HOMEPAGE_VAR_GUACAMOLE_URL=http://guacamole.example.com
|
||||
HOMEPAGE_VAR_WEBTOP_URL=http://webtop.example.com
|
||||
HOMEPAGE_VAR_LENOVO_AMT_URL=http://amt.example.com:16992
|
||||
HOMEPAGE_VAR_ZABBIX_URL=https://zabbix.example.com
|
||||
HOMEPAGE_VAR_ZABBIX_KEY='your_zabbix_api_token'
|
||||
HOMEPAGE_VAR_GRAFANA_URL=https://grafana.example.com
|
||||
HOMEPAGE_VAR_IT_TOOLS_URL=http://it-tools.example.com
|
||||
HOMEPAGE_VAR_VAULTWARDEN_URL=https://vaultwarden.example.com
|
||||
HOMEPAGE_VAR_GITEA_URL=http://gitea.example.com:3000
|
||||
HOMEPAGE_VAR_GITEA_KEY='your_gitea_api_token'
|
||||
@@ -4,14 +4,14 @@ services:
|
||||
container_name: homepage
|
||||
ports:
|
||||
- "3001:3000"
|
||||
env_file:
|
||||
- .env # Make sure this file exists and contains necessary environment variables (chek .env.example)
|
||||
volumes:
|
||||
- ${PATH_TO_CONFIG}:/app/config # Make sure your local config directory exists
|
||||
- /var/run/docker.sock:/var/run/docker.sock # (optional) For docker integrations
|
||||
env_file:
|
||||
- .env
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000"]
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:3000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
152
komodo/.env.example
Normal file
152
komodo/.env.example
Normal file
@@ -0,0 +1,152 @@
|
||||
####################################
|
||||
# 🦎 KOMODO COMPOSE - VARIABLES 🦎 #
|
||||
####################################
|
||||
|
||||
## These compose variables can be used with all Komodo deployment options.
|
||||
## Pass these variables to the compose up command using `--env-file komodo/compose.env`.
|
||||
## Additionally, they are passed to both Komodo Core and Komodo Periphery with `env_file: ./compose.env`,
|
||||
## so you can pass any additional environment variables to Core / Periphery directly in this file as well.
|
||||
|
||||
## Stick to a specific version, or use `latest`
|
||||
COMPOSE_KOMODO_IMAGE_TAG=latest
|
||||
## Store dated database backups on the host - https://komo.do/docs/setup/backup
|
||||
COMPOSE_KOMODO_BACKUPS_PATH=/etc/komodo/backups
|
||||
|
||||
## DB credentials
|
||||
KOMODO_DB_USERNAME=admin
|
||||
KOMODO_DB_PASSWORD=admin
|
||||
|
||||
## Configure a secure passkey to authenticate between Core / Periphery.
|
||||
KOMODO_PASSKEY=a_random_passkey
|
||||
|
||||
## Set your time zone for schedules
|
||||
## https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
|
||||
TZ=Etc/UTC
|
||||
|
||||
#=-------------------------=#
|
||||
#= Komodo Core Environment =#
|
||||
#=-------------------------=#
|
||||
|
||||
## Full variable list + descriptions are available here:
|
||||
## 🦎 https://github.com/moghtech/komodo/blob/main/config/core.config.toml 🦎
|
||||
|
||||
## Note. Secret variables also support `${VARIABLE}_FILE` syntax to pass docker compose secrets.
|
||||
## Docs: https://docs.docker.com/compose/how-tos/use-secrets/#examples
|
||||
|
||||
## Used for Oauth / Webhook url suggestion / Caddy reverse proxy.
|
||||
KOMODO_HOST=https://demo.komo.do
|
||||
## Displayed in the browser tab.
|
||||
KOMODO_TITLE=Komodo
|
||||
## Create a server matching this address as the "first server".
|
||||
## Use `https://host.docker.internal:8120` when using systemd-managed Periphery.
|
||||
KOMODO_FIRST_SERVER=https://periphery:8120
|
||||
## Give the first server a custom name.
|
||||
KOMODO_FIRST_SERVER_NAME=Local
|
||||
## Make all buttons just double-click, rather than the full confirmation dialog.
|
||||
KOMODO_DISABLE_CONFIRM_DIALOG=false
|
||||
|
||||
## Rate Komodo polls your servers for
|
||||
## status / container status / system stats / alerting.
|
||||
## Options: 1-sec, 5-sec, 15-sec, 1-min, 5-min, 15-min
|
||||
## Default: 15-sec
|
||||
KOMODO_MONITORING_INTERVAL="15-sec"
|
||||
## Interval at which to poll Resources for any updates / automated actions.
|
||||
## Options: 15-min, 1-hr, 2-hr, 6-hr, 12-hr, 1-day
|
||||
## Default: 1-hr
|
||||
KOMODO_RESOURCE_POLL_INTERVAL="1-hr"
|
||||
|
||||
## Used to auth incoming webhooks. Alt: KOMODO_WEBHOOK_SECRET_FILE
|
||||
KOMODO_WEBHOOK_SECRET=a_random_secret
|
||||
## Used to generate jwt. Alt: KOMODO_JWT_SECRET_FILE
|
||||
KOMODO_JWT_SECRET=a_random_jwt_secret
|
||||
## Time to live for jwt tokens.
|
||||
## Options: 1-hr, 12-hr, 1-day, 3-day, 1-wk, 2-wk
|
||||
KOMODO_JWT_TTL="1-day"
|
||||
|
||||
## Enable login with username + password.
|
||||
KOMODO_LOCAL_AUTH=true
|
||||
## Set the initial admin username created upon first launch.
|
||||
## Comment out to disable initial user creation,
|
||||
## and create first user using signup button.
|
||||
KOMODO_INIT_ADMIN_USERNAME=admin
|
||||
## Set the initial admin password
|
||||
KOMODO_INIT_ADMIN_PASSWORD=changeme
|
||||
## Disable new user signups.
|
||||
KOMODO_DISABLE_USER_REGISTRATION=false
|
||||
## All new logins are auto enabled
|
||||
KOMODO_ENABLE_NEW_USERS=false
|
||||
## Disable non-admins from creating new resources.
|
||||
KOMODO_DISABLE_NON_ADMIN_CREATE=false
|
||||
## Allows all users to have Read level access to all resources.
|
||||
KOMODO_TRANSPARENT_MODE=false
|
||||
|
||||
## Prettier logging with empty lines between logs
|
||||
KOMODO_LOGGING_PRETTY=false
|
||||
## More human readable logging of startup config (multi-line)
|
||||
KOMODO_PRETTY_STARTUP_CONFIG=false
|
||||
|
||||
## OIDC Login
|
||||
KOMODO_OIDC_ENABLED=false
|
||||
## Must reachable from Komodo Core container
|
||||
# KOMODO_OIDC_PROVIDER=https://oidc.provider.internal/application/o/komodo
|
||||
## Change the host to one reachable be reachable by users (optional if it is the same as above).
|
||||
## DO NOT include the `path` part of the URL.
|
||||
# KOMODO_OIDC_REDIRECT_HOST=https://oidc.provider.external
|
||||
## Your OIDC client id
|
||||
# KOMODO_OIDC_CLIENT_ID= # Alt: KOMODO_OIDC_CLIENT_ID_FILE
|
||||
## Your OIDC client secret.
|
||||
## If your provider supports PKCE flow, this can be ommitted.
|
||||
# KOMODO_OIDC_CLIENT_SECRET= # Alt: KOMODO_OIDC_CLIENT_SECRET_FILE
|
||||
## Make usernames the full email.
|
||||
## Note. This does not work for all OIDC providers.
|
||||
# KOMODO_OIDC_USE_FULL_EMAIL=true
|
||||
## Add additional trusted audiences for token claims verification.
|
||||
## Supports comma separated list, and passing with _FILE (for compose secrets).
|
||||
# KOMODO_OIDC_ADDITIONAL_AUDIENCES=abc,123 # Alt: KOMODO_OIDC_ADDITIONAL_AUDIENCES_FILE
|
||||
|
||||
## Github Oauth
|
||||
KOMODO_GITHUB_OAUTH_ENABLED=false
|
||||
# KOMODO_GITHUB_OAUTH_ID= # Alt: KOMODO_GITHUB_OAUTH_ID_FILE
|
||||
# KOMODO_GITHUB_OAUTH_SECRET= # Alt: KOMODO_GITHUB_OAUTH_SECRET_FILE
|
||||
|
||||
## Google Oauth
|
||||
KOMODO_GOOGLE_OAUTH_ENABLED=false
|
||||
# KOMODO_GOOGLE_OAUTH_ID= # Alt: KOMODO_GOOGLE_OAUTH_ID_FILE
|
||||
# KOMODO_GOOGLE_OAUTH_SECRET= # Alt: KOMODO_GOOGLE_OAUTH_SECRET_FILE
|
||||
|
||||
## Aws - Used to launch Builder instances.
|
||||
KOMODO_AWS_ACCESS_KEY_ID= # Alt: KOMODO_AWS_ACCESS_KEY_ID_FILE
|
||||
KOMODO_AWS_SECRET_ACCESS_KEY= # Alt: KOMODO_AWS_SECRET_ACCESS_KEY_FILE
|
||||
|
||||
#=------------------------------=#
|
||||
#= Komodo Periphery Environment =#
|
||||
#=------------------------------=#
|
||||
|
||||
## Full variable list + descriptions are available here:
|
||||
## 🦎 https://github.com/moghtech/komodo/blob/main/config/periphery.config.toml 🦎
|
||||
|
||||
## Specify the root directory used by Periphery agent.
|
||||
PERIPHERY_ROOT_DIRECTORY=/etc/komodo
|
||||
|
||||
## Periphery passkeys must include KOMODO_PASSKEY to authenticate.
|
||||
PERIPHERY_PASSKEYS=${KOMODO_PASSKEY}
|
||||
|
||||
## Specify whether to disable the terminals feature
|
||||
## and disallow remote shell access (inside the Periphery container).
|
||||
PERIPHERY_DISABLE_TERMINALS=false
|
||||
|
||||
## Enable SSL using self signed certificates.
|
||||
## Connect to Periphery at https://address:8120.
|
||||
PERIPHERY_SSL_ENABLED=true
|
||||
|
||||
## If the disk size is overreporting, can use one of these to
|
||||
## whitelist / blacklist the disks to filter them, whichever is easier.
|
||||
## Accepts comma separated list of paths.
|
||||
## Usually whitelisting just /etc/hostname gives correct size.
|
||||
PERIPHERY_INCLUDE_DISK_MOUNTS=/etc/hostname
|
||||
# PERIPHERY_EXCLUDE_DISK_MOUNTS=/snap,/etc/repos
|
||||
|
||||
## Prettier logging with empty lines between logs
|
||||
PERIPHERY_LOGGING_PRETTY=false
|
||||
## More human readable logging of startup config (multi-line)
|
||||
PERIPHERY_PRETTY_STARTUP_CONFIG=false
|
||||
13
komodo/agent-compose.yaml
Normal file
13
komodo/agent-compose.yaml
Normal file
@@ -0,0 +1,13 @@
|
||||
services:
|
||||
periphery:
|
||||
image: ghcr.io/moghtech/komodo-periphery:latest
|
||||
container_name: komodo-periphery
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- "8120:8120"
|
||||
env_file:
|
||||
- .env
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- /proc:/proc
|
||||
- /etc/komodo:/etc/komodo
|
||||
79
komodo/docker-compose.yaml
Normal file
79
komodo/docker-compose.yaml
Normal file
@@ -0,0 +1,79 @@
|
||||
################################
|
||||
# 🦎 KOMODO COMPOSE - MONGO 🦎 #
|
||||
################################
|
||||
## This compose file will deploy:
|
||||
## 1. MongoDB
|
||||
## 2. Komodo Core
|
||||
## 3. Komodo Periphery
|
||||
services:
|
||||
mongo:
|
||||
image: mongo:4.4.18
|
||||
container_name: komodo-mongo
|
||||
labels:
|
||||
komodo.skip: # Prevent Komodo from stopping with StopAllContainers
|
||||
command: --quiet --wiredTigerCacheSizeGB 0.25
|
||||
restart: unless-stopped
|
||||
# ports:
|
||||
# - 27017:27017
|
||||
volumes:
|
||||
- mongo-data:/data/db
|
||||
- mongo-config:/data/configdb
|
||||
environment:
|
||||
MONGO_INITDB_ROOT_USERNAME: ${KOMODO_DB_USERNAME}
|
||||
MONGO_INITDB_ROOT_PASSWORD: ${KOMODO_DB_PASSWORD}
|
||||
|
||||
core:
|
||||
image: ghcr.io/moghtech/komodo-core:${COMPOSE_KOMODO_IMAGE_TAG:-latest}
|
||||
container_name: komodo-core
|
||||
labels:
|
||||
komodo.skip: # Prevent Komodo from stopping with StopAllContainers
|
||||
restart: unless-stopped
|
||||
depends_on:
|
||||
- mongo
|
||||
ports:
|
||||
- 9120:9120
|
||||
env_file:
|
||||
- .env
|
||||
environment:
|
||||
KOMODO_DATABASE_ADDRESS: mongo:27017
|
||||
KOMODO_DATABASE_USERNAME: ${KOMODO_DB_USERNAME}
|
||||
KOMODO_DATABASE_PASSWORD: ${KOMODO_DB_PASSWORD}
|
||||
volumes:
|
||||
## Store dated backups of the database - https://komo.do/docs/setup/backup
|
||||
## No need to have bind mounts because of the ability to create backups on a separate volume
|
||||
- ${COMPOSE_KOMODO_BACKUPS_PATH}:/backups
|
||||
## Store sync files on server
|
||||
# - /path/to/syncs:/syncs
|
||||
## Optionally mount a custom core.config.toml
|
||||
# - /path/to/core.config.toml:/config/config.toml
|
||||
## Allows for systemd Periphery connection at
|
||||
## "https://host.docker.internal:8120"
|
||||
# extra_hosts:
|
||||
# - host.docker.internal:host-gateway
|
||||
|
||||
## Deploy Periphery container using this block,
|
||||
## or deploy the Periphery binary with systemd using
|
||||
## https://github.com/moghtech/komodo/tree/main/scripts
|
||||
periphery:
|
||||
image: ghcr.io/moghtech/komodo-periphery:${COMPOSE_KOMODO_IMAGE_TAG:-latest}
|
||||
container_name: komodo-periphery
|
||||
labels:
|
||||
komodo.skip: # Prevent Komodo from stopping with StopAllContainers
|
||||
restart: unless-stopped
|
||||
env_file:
|
||||
- .env
|
||||
volumes:
|
||||
## Mount external docker socket
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
## Allow Periphery to see processes outside of container
|
||||
- /proc:/proc
|
||||
## Specify the Periphery agent root directory.
|
||||
## Must be the same inside and outside the container,
|
||||
## or docker will get confused. See https://github.com/moghtech/komodo/discussions/180.
|
||||
## Default: /etc/komodo.
|
||||
- ${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}:${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}
|
||||
|
||||
volumes:
|
||||
# Mongo
|
||||
mongo-data:
|
||||
mongo-config:
|
||||
@@ -1,8 +1,12 @@
|
||||
# Domain for n8n
|
||||
DOMAIN=n8n.example.com
|
||||
|
||||
# Your timezone
|
||||
GENERIC_TIMEZONE=Europe/Warsaw
|
||||
|
||||
# Directory where n8n will store files
|
||||
PATH_TO_FILES=/path/to/n8n/files
|
||||
# Domain for n8n
|
||||
DOMAIN_NAME=mbuz.uk
|
||||
SUBDOMAIN=automate
|
||||
N8N_HOST=automate.mbuz.uk
|
||||
N8N_PROTOCOL=https
|
||||
# URL to webhook for the webhook triggers
|
||||
WEBHOOK_URL=https://automate.mbuz.uk/
|
||||
NODE_ENV=production
|
||||
@@ -5,13 +5,8 @@ services:
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- 5678:5678
|
||||
environment:
|
||||
- N8N_HOST=${DOMAIN}
|
||||
- N8N_PORT=5678
|
||||
- N8N_PROTOCOL=https
|
||||
- NODE_ENV=production
|
||||
- WEBHOOK_URL=https://${DOMAIN}/
|
||||
- GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
|
||||
env_file:
|
||||
- .env
|
||||
volumes:
|
||||
- n8n_data:/home/node/.n8n
|
||||
- ${PATH_TO_FILES}:/files
|
||||
@@ -1,4 +1,11 @@
|
||||
<<<<<<< HEAD
|
||||
SEMAPHORE_ADMIN=admin
|
||||
SEMAPHORE_ADMIN_PASSWORD=changeme
|
||||
SEMAPHORE_ADMIN_NAME=Admin
|
||||
SEMAPHORE_ADMIN_EMAIL=admin@example.com
|
||||
SEMAPHORE_ADMIN_EMAIL=admin@example.com
|
||||
=======
|
||||
ADMIN_USER=admin
|
||||
ADMIN_PASS=changeme
|
||||
ADMIN_NAME=Admin
|
||||
ADMIN_EMAIL=admin@example.com
|
||||
>>>>>>> ab90593 (ADD: Semaphore UI initial commit)
|
||||
|
||||
@@ -5,12 +5,8 @@ services:
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- "3030:3000"
|
||||
environment:
|
||||
SEMAPHORE_DB_DIALECT: sqlite
|
||||
SEMAPHORE_ADMIN: ${ADMIN_USER}
|
||||
SEMAPHORE_ADMIN_PASSWORD: ${ADMIN_PASS}
|
||||
SEMAPHORE_ADMIN_NAME: ${ADMIN_NAME}
|
||||
SEMAPHORE_ADMIN_EMAIL: ${ADMIN_EMAIL}
|
||||
env_file:
|
||||
- .env
|
||||
volumes:
|
||||
- semaphore-data:/var/lib/semaphore
|
||||
- semaphore-config:/etc/semaphore
|
||||
Reference in New Issue
Block a user