Updates nextcloud, adds overleaf, zigbee etc
This commit is contained in:
@@ -16,6 +16,7 @@ RemainAfterExit=yes
|
||||
# prevent the service from failing.
|
||||
ExecStart=/usr/bin/rpm-ostree install -y --allow-inactive firewalld fail2ban fail2ban-firewalld setroubleshoot-server setools smartmontools
|
||||
ExecStart=/bin/touch /var/lib/additional-packages.stamp
|
||||
ExecStart=/bin/usermod -aG dialout homeassistant
|
||||
ExecStart=/bin/systemctl enable configure-firewalld.service enable-all-quadlets.service move-downloads-nextcloud.timer copy-music.timer defragment-nas.timer scrub-nas.timer
|
||||
ExecStart=semanage fcontext -a -t bin_t "/var/opt/bin(/.*)?"
|
||||
ExecStart=semanage fcontext -a -t bin_t "/root/scripts(/.*)?"
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
[Pod]
|
||||
PodName=homeassistant
|
||||
PublishPort=9003:8123
|
||||
PublishPort=9025:8080
|
||||
|
||||
@@ -0,0 +1,7 @@
|
||||
[Volume]
|
||||
Copy=true
|
||||
Device=/var/mnt/nas/containers/homeassistant/storage/mosquitto-config
|
||||
Driver=local
|
||||
Options=bind
|
||||
Type=none
|
||||
VolumeName=mosquitto-config
|
||||
@@ -0,0 +1,7 @@
|
||||
[Volume]
|
||||
Copy=true
|
||||
Device=/var/mnt/nas/containers/homeassistant/storage/mosquitto-data
|
||||
Driver=local
|
||||
Options=bind
|
||||
Type=none
|
||||
VolumeName=mosquitto-data
|
||||
@@ -0,0 +1,2 @@
|
||||
[Volume]
|
||||
VolumeName=mosquitto-log
|
||||
@@ -0,0 +1,21 @@
|
||||
[Unit]
|
||||
Description=Mosquitto container
|
||||
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=mosquitto
|
||||
Environment=TZ=Europe/Zurich
|
||||
Image=docker.io/eclipse-mosquitto:2
|
||||
Label=io.containers.autoupdate=registry
|
||||
Pod=homeassistant.pod
|
||||
StartWithPod=true
|
||||
Timezone=Europe/Zurich
|
||||
Volume=mosquitto-config.volume:/mosquitto/config
|
||||
Volume=mosquitto-data.volume:/mosquitto/data
|
||||
Volume=mosquitto-log.volume:/mosquitto/log
|
||||
|
||||
[Service]
|
||||
Restart=always
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
@@ -0,0 +1,7 @@
|
||||
[Volume]
|
||||
Copy=true
|
||||
Device=/var/mnt/nas/containers/homeassistant/storage/zigbee2mqtt-data
|
||||
Driver=local
|
||||
Options=bind
|
||||
Type=none
|
||||
VolumeName=zigbee2mqtt-data
|
||||
@@ -0,0 +1,24 @@
|
||||
[Unit]
|
||||
Description=ZigBee2MQTT container
|
||||
After=mosquitto.container
|
||||
Requires=mosquitto.container
|
||||
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
ContainerName=zigbee2mqtt
|
||||
AddDevice=/dev/serial/by-id/usb-SONOFF_SONOFF_Dongle_Plus_MG24_56ef89bf70f5ef11915aa1a29ed47d52-if00-port0:/dev/ttyUSB0
|
||||
Environment=TZ=Europe/Zurich
|
||||
GroupAdd=keep-groups
|
||||
Image=docker.io/koenkk/zigbee2mqtt:2
|
||||
Label=io.containers.autoupdate=registry
|
||||
Pod=homeassistant.pod
|
||||
StartWithPod=true
|
||||
Timezone=Europe/Zurich
|
||||
Volume=zigbee2mqtt-data.volume:/app/data
|
||||
Volume=/run/udev:/run/udev:ro
|
||||
|
||||
[Service]
|
||||
Restart=always
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
@@ -12,7 +12,7 @@ AutoUpdate=registry
|
||||
ContainerName=nextcloud-cron
|
||||
Entrypoint=/cron.sh
|
||||
Environment=TZ=Europe/Zurich
|
||||
Image=docker.io/nextcloud:33
|
||||
Image=docker.io/nextcloud:34
|
||||
Label=io.containers.autoupdate=registry
|
||||
Pod=nextcloud.pod
|
||||
StartWithPod=true
|
||||
|
||||
@@ -16,7 +16,7 @@ Environment=PHP_UPLOAD_LIMIT=100G
|
||||
Environment=REDIS_HOST=nextcloud-redis
|
||||
Environment=TRUSTED_PROXIES="192.168.0.0/16 172.16.0.0/12 169.254.0.0/16 10.0.0.0/8"
|
||||
Environment=TZ=Europe/Zurich
|
||||
Image=docker.io/nextcloud:33
|
||||
Image=docker.io/nextcloud:34
|
||||
Label=io.containers.autoupdate=registry
|
||||
Pod=nextcloud.pod
|
||||
Secret=database-user,type=env,target=MYSQL_USER
|
||||
|
||||
@@ -16,7 +16,6 @@ Volume=nginx-certs.volume:/etc/nginx/certs:z
|
||||
Volume=nginx-config.volume:/etc/nginx/conf.d
|
||||
Volume=nginx-html.volume:/usr/share/nginx/html
|
||||
Volume=nginx-stream.volume:/etc/nginx/stream.d
|
||||
Volume=nginx-vhost.volume:/etc/nginx/vhost.d
|
||||
|
||||
[Service]
|
||||
Restart=always
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
[Pod]
|
||||
PodName=nginx
|
||||
PublishPort=8080:80
|
||||
PublishPort=4443:443
|
||||
PublishPort=8080:80/tcp
|
||||
PublishPort=8080:80/udp
|
||||
PublishPort=4443:443/tcp
|
||||
PublishPort=4443:443/udp
|
||||
|
||||
@@ -1,2 +1,7 @@
|
||||
[Volume]
|
||||
Copy=true
|
||||
Device=/var/mnt/nas/containers/overleaf/storage/data
|
||||
Driver=local
|
||||
Options=bind
|
||||
Type=none
|
||||
VolumeName=overleaf-data
|
||||
|
||||
@@ -0,0 +1,2 @@
|
||||
[Volume]
|
||||
VolumeName=overleaf-database-data
|
||||
@@ -3,14 +3,14 @@ Description=Overleaf MongoDB container
|
||||
|
||||
[Container]
|
||||
AutoUpdate=registry
|
||||
Command="--replSet overleaf"
|
||||
ContainerName=overleaf-database
|
||||
Environment=MONGO_INITDB_DATABASE=sharelatex
|
||||
Environment=TZ=Europe/Zurich
|
||||
HealthCheck="echo 'db.stats().ok' | mongosh localhost:27017/test --quiet"
|
||||
HealthCheckInterval=10s
|
||||
HealthCheckTimeout=10s
|
||||
HealthCheckRetries=5
|
||||
Exec="--replSet overleaf"
|
||||
HealthCmd="echo 'db.stats().ok' | mongosh localhost:27017/test --quiet"
|
||||
HealthInterval=10s
|
||||
HealthTimeout=10s
|
||||
HealthRetries=5
|
||||
Image=docker.io/mongo:8.0
|
||||
Label=io.containers.autoupdate=registry
|
||||
Pod=overleaf.pod
|
||||
|
||||
@@ -9,6 +9,7 @@ Exec=/bin/sh -c 'redis-server --appendonly yes --requirepass $${REDIS_PASSWORD}'
|
||||
Image=docker.io/redis:latest
|
||||
Label=io.containers.autoupdate=registry
|
||||
Pod=overleaf.pod
|
||||
Secret=overleaf-redis-password,type=env,target=REDIS_PASSWORD
|
||||
StartWithPod=true
|
||||
Timezone=Europe/Zurich
|
||||
Volume=overleaf-redis-data.volume:/data
|
||||
|
||||
@@ -30,6 +30,24 @@ storage:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /var/mnt/nas/containers/homeassistant/storage/mosquitto-config
|
||||
mode: 0755
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /var/mnt/nas/containers/homeassistant/storage/mosquitto-data
|
||||
mode: 0755
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /var/mnt/nas/containers/homeassistant/storage/zigbee2mqtt-data
|
||||
mode: 0755
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
files:
|
||||
- path: /var/lib/systemd/linger/homeassistant
|
||||
mode: 0644
|
||||
@@ -63,5 +81,53 @@ storage:
|
||||
local: quadlets/homeassistant/homeassistant-ssh.volume
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /home/homeassistant/.config/containers/systemd/mosquitto-config.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/homeassistant/mosquitto-config.volume
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /home/homeassistant/.config/containers/systemd/mosquitto.container
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/homeassistant/mosquitto.container
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /home/homeassistant/.config/containers/systemd/mosquitto-data.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/homeassistant/mosquitto-data.volume
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /home/homeassistant/.config/containers/systemd/mosquitto-log.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/homeassistant/mosquitto-log.volume
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /home/homeassistant/.config/containers/systemd/zigbee2mqtt.container
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/homeassistant/zigbee2mqtt.container
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
- path: /home/homeassistant/.config/containers/systemd/zigbee2mqtt-data.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/homeassistant/zigbee2mqtt-data.volume
|
||||
user:
|
||||
name: homeassistant
|
||||
group:
|
||||
name: homeassistant
|
||||
@@ -0,0 +1,107 @@
|
||||
variant: fcos
|
||||
version: 1.6.0
|
||||
passwd:
|
||||
users:
|
||||
- name: overleaf
|
||||
storage:
|
||||
directories:
|
||||
- path: /home/overleaf/.config/systemd/user
|
||||
mode: 0755
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /var/mnt/nas/containers/overleaf
|
||||
mode: 0755
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
|
||||
- path: /var/mnt/nas/containers/overleaf/storage/data
|
||||
mode: 0755
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /var/mnt/nas/containers/overleaf/storage/redis-config
|
||||
mode: 0755
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
files:
|
||||
- path: /var/lib/systemd/linger/overleaf
|
||||
mode: 0644
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf.container
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf.container
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf-database.container
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf-database.container
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf-database-data.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf-database-data.volume
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf-data.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf-data.volume
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf.pod
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf.pod
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf-redis-config.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf-redis-config.volume
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf-redis.container
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf-redis.container
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /home/overleaf/.config/containers/systemd/overleaf-redis-data.volume
|
||||
mode: 0644
|
||||
contents:
|
||||
local: quadlets/overleaf/overleaf-redis-data.volume
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
- path: /var/home/overleaf/.secrets
|
||||
mode: 0755
|
||||
contents:
|
||||
local: home/overleaf/.secrets
|
||||
user:
|
||||
name: overleaf
|
||||
group:
|
||||
name: overleaf
|
||||
Reference in New Issue
Block a user