Updates nextcloud, adds overleaf, zigbee etc

files/install-additional-packages.service

@@ -16,6 +16,7 @@ RemainAfterExit=yes
 # prevent the service from failing.
 ExecStart=/usr/bin/rpm-ostree install -y --allow-inactive firewalld fail2ban fail2ban-firewalld setroubleshoot-server setools smartmontools
 ExecStart=/bin/touch /var/lib/additional-packages.stamp
+ExecStart=/bin/usermod -aG dialout homeassistant
 ExecStart=/bin/systemctl enable configure-firewalld.service enable-all-quadlets.service move-downloads-nextcloud.timer copy-music.timer defragment-nas.timer scrub-nas.timer
 ExecStart=semanage fcontext -a -t bin_t "/var/opt/bin(/.*)?"
 ExecStart=semanage fcontext -a -t bin_t "/root/scripts(/.*)?"

quadlets/homeassistant/homeassistant.pod

@@ -1,3 +1,4 @@
 [Pod]
 PodName=homeassistant
 PublishPort=9003:8123
+PublishPort=9025:8080

quadlets/homeassistant/mosquitto-config.volume

@@ -0,0 +1,7 @@
+[Volume]
+Copy=true
+Device=/var/mnt/nas/containers/homeassistant/storage/mosquitto-config
+Driver=local
+Options=bind
+Type=none
+VolumeName=mosquitto-config

quadlets/homeassistant/mosquitto-data.volume

@@ -0,0 +1,7 @@
+[Volume]
+Copy=true
+Device=/var/mnt/nas/containers/homeassistant/storage/mosquitto-data
+Driver=local
+Options=bind
+Type=none
+VolumeName=mosquitto-data

quadlets/homeassistant/mosquitto-log.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=mosquitto-log

quadlets/homeassistant/mosquitto.container

@@ -0,0 +1,21 @@
+[Unit]
+Description=Mosquitto container
+
+[Container]
+AutoUpdate=registry
+ContainerName=mosquitto
+Environment=TZ=Europe/Zurich
+Image=docker.io/eclipse-mosquitto:2
+Label=io.containers.autoupdate=registry
+Pod=homeassistant.pod
+StartWithPod=true
+Timezone=Europe/Zurich
+Volume=mosquitto-config.volume:/mosquitto/config
+Volume=mosquitto-data.volume:/mosquitto/data
+Volume=mosquitto-log.volume:/mosquitto/log
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=default.target

quadlets/homeassistant/zigbee2mqtt-data.volume

@@ -0,0 +1,7 @@
+[Volume]
+Copy=true
+Device=/var/mnt/nas/containers/homeassistant/storage/zigbee2mqtt-data
+Driver=local
+Options=bind
+Type=none
+VolumeName=zigbee2mqtt-data

quadlets/homeassistant/zigbee2mqtt.container

@@ -0,0 +1,24 @@
+[Unit]
+Description=ZigBee2MQTT container
+After=mosquitto.container
+Requires=mosquitto.container
+
+[Container]
+AutoUpdate=registry
+ContainerName=zigbee2mqtt
+AddDevice=/dev/serial/by-id/usb-SONOFF_SONOFF_Dongle_Plus_MG24_56ef89bf70f5ef11915aa1a29ed47d52-if00-port0:/dev/ttyUSB0
+Environment=TZ=Europe/Zurich
+GroupAdd=keep-groups
+Image=docker.io/koenkk/zigbee2mqtt:2
+Label=io.containers.autoupdate=registry
+Pod=homeassistant.pod
+StartWithPod=true
+Timezone=Europe/Zurich
+Volume=zigbee2mqtt-data.volume:/app/data
+Volume=/run/udev:/run/udev:ro
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=default.target

quadlets/nextcloud/nextcloud-cron.container

@@ -12,7 +12,7 @@ AutoUpdate=registry
 ContainerName=nextcloud-cron
 Entrypoint=/cron.sh
 Environment=TZ=Europe/Zurich
-Image=docker.io/nextcloud:33
+Image=docker.io/nextcloud:34
 Label=io.containers.autoupdate=registry
 Pod=nextcloud.pod
 StartWithPod=true

quadlets/nextcloud/nextcloud.container

@@ -16,7 +16,7 @@ Environment=PHP_UPLOAD_LIMIT=100G
 Environment=REDIS_HOST=nextcloud-redis
 Environment=TRUSTED_PROXIES="192.168.0.0/16 172.16.0.0/12 169.254.0.0/16 10.0.0.0/8"
 Environment=TZ=Europe/Zurich
-Image=docker.io/nextcloud:33
+Image=docker.io/nextcloud:34
 Label=io.containers.autoupdate=registry
 Pod=nextcloud.pod
 Secret=database-user,type=env,target=MYSQL_USER

quadlets/nginx/nginx.container

@@ -16,7 +16,6 @@ Volume=nginx-certs.volume:/etc/nginx/certs:z
 Volume=nginx-config.volume:/etc/nginx/conf.d
 Volume=nginx-html.volume:/usr/share/nginx/html
 Volume=nginx-stream.volume:/etc/nginx/stream.d
-Volume=nginx-vhost.volume:/etc/nginx/vhost.d
 
 [Service]
 Restart=always

quadlets/nginx/nginx.pod

@@ -1,4 +1,6 @@
 [Pod]
 PodName=nginx
-PublishPort=8080:80
+PublishPort=8080:80/tcp
-PublishPort=4443:443
+PublishPort=8080:80/udp
+PublishPort=4443:443/tcp
+PublishPort=4443:443/udp

quadlets/overleaf/overleaf-data.volume

@@ -1,2 +1,7 @@
 [Volume]
+Copy=true
+Device=/var/mnt/nas/containers/overleaf/storage/data
+Driver=local
+Options=bind
+Type=none
 VolumeName=overleaf-data

quadlets/overleaf/overleaf-database-data.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=overleaf-database-data

quadlets/overleaf/overleaf-database.container

@@ -3,14 +3,14 @@ Description=Overleaf MongoDB container
 
 [Container]
 AutoUpdate=registry
-Command="--replSet overleaf"
 ContainerName=overleaf-database
 Environment=MONGO_INITDB_DATABASE=sharelatex
 Environment=TZ=Europe/Zurich
-HealthCheck="echo 'db.stats().ok' | mongosh localhost:27017/test --quiet"
+Exec="--replSet overleaf"
-HealthCheckInterval=10s
+HealthCmd="echo 'db.stats().ok' | mongosh localhost:27017/test --quiet"
-HealthCheckTimeout=10s
+HealthInterval=10s
-HealthCheckRetries=5
+HealthTimeout=10s
+HealthRetries=5
 Image=docker.io/mongo:8.0
 Label=io.containers.autoupdate=registry
 Pod=overleaf.pod

quadlets/overleaf/overleaf-redis.container

@@ -9,6 +9,7 @@ Exec=/bin/sh -c 'redis-server --appendonly yes --requirepass $${REDIS_PASSWORD}'
 Image=docker.io/redis:latest
 Label=io.containers.autoupdate=registry
 Pod=overleaf.pod
+Secret=overleaf-redis-password,type=env,target=REDIS_PASSWORD
 StartWithPod=true
 Timezone=Europe/Zurich
 Volume=overleaf-redis-data.volume:/data

users/homeassistant.bu

@@ -30,6 +30,24 @@ storage:
         name: homeassistant
       group:
         name: homeassistant
+    - path: /var/mnt/nas/containers/homeassistant/storage/mosquitto-config
+      mode: 0755
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
+    - path: /var/mnt/nas/containers/homeassistant/storage/mosquitto-data
+      mode: 0755
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
+    - path: /var/mnt/nas/containers/homeassistant/storage/zigbee2mqtt-data
+      mode: 0755
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
   files:
     - path: /var/lib/systemd/linger/homeassistant
       mode: 0644
@@ -63,5 +81,53 @@ storage:
         local: quadlets/homeassistant/homeassistant-ssh.volume
       user:
         name: homeassistant
+      group:
+        name: homeassistant
+    - path: /home/homeassistant/.config/containers/systemd/mosquitto-config.volume
+      mode: 0644
+      contents:
+        local: quadlets/homeassistant/mosquitto-config.volume
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
+    - path: /home/homeassistant/.config/containers/systemd/mosquitto.container
+      mode: 0644
+      contents:
+        local: quadlets/homeassistant/mosquitto.container
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
+    - path: /home/homeassistant/.config/containers/systemd/mosquitto-data.volume
+      mode: 0644
+      contents:
+        local: quadlets/homeassistant/mosquitto-data.volume
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
+    - path: /home/homeassistant/.config/containers/systemd/mosquitto-log.volume
+      mode: 0644
+      contents:
+        local: quadlets/homeassistant/mosquitto-log.volume
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
+    - path: /home/homeassistant/.config/containers/systemd/zigbee2mqtt.container
+      mode: 0644
+      contents:
+        local: quadlets/homeassistant/zigbee2mqtt.container
+      user:
+        name: homeassistant
+      group:
+        name: homeassistant
+    - path: /home/homeassistant/.config/containers/systemd/zigbee2mqtt-data.volume
+      mode: 0644
+      contents:
+        local: quadlets/homeassistant/zigbee2mqtt-data.volume
+      user:
+        name: homeassistant
       group:
         name: homeassistant

users/overleaf.bu

@@ -0,0 +1,107 @@
+variant: fcos
+version: 1.6.0
+passwd:
+  users:
+    - name: overleaf
+storage:
+  directories:
+    - path: /home/overleaf/.config/systemd/user
+      mode: 0755
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /var/mnt/nas/containers/overleaf
+      mode: 0755
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+
+    - path: /var/mnt/nas/containers/overleaf/storage/data
+      mode: 0755
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /var/mnt/nas/containers/overleaf/storage/redis-config
+      mode: 0755
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+  files:
+    - path: /var/lib/systemd/linger/overleaf
+      mode: 0644
+    - path: /home/overleaf/.config/containers/systemd/overleaf.container
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf.container
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /home/overleaf/.config/containers/systemd/overleaf-database.container
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf-database.container
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /home/overleaf/.config/containers/systemd/overleaf-database-data.volume
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf-database-data.volume
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /home/overleaf/.config/containers/systemd/overleaf-data.volume
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf-data.volume
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /home/overleaf/.config/containers/systemd/overleaf.pod
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf.pod
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /home/overleaf/.config/containers/systemd/overleaf-redis-config.volume
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf-redis-config.volume
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /home/overleaf/.config/containers/systemd/overleaf-redis.container
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf-redis.container
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /home/overleaf/.config/containers/systemd/overleaf-redis-data.volume
+      mode: 0644
+      contents:
+        local: quadlets/overleaf/overleaf-redis-data.volume
+      user:
+        name: overleaf
+      group:
+        name: overleaf
+    - path: /var/home/overleaf/.secrets
+      mode: 0755
+      contents:
+        local: home/overleaf/.secrets
+      user:
+        name: overleaf
+      group:
+        name: overleaf