Update to match working current

Update compose schema version number, reorganize command parameter for forwardauth
Implement temporary workaround for Nvidia driver bug
2024-02-15 01:05:32 -08:00 · 2024-02-15 01:05:11 -08:00 · 2024-02-15 01:04:12 -08:00
7 changed files with 263 additions and 29 deletions
--- a/fighter/config/autopirate/docker-compose-nvidia.yml
+++ b/fighter/config/autopirate/docker-compose-nvidia.yml
@ -0,0 +1,181 @@
+version: "3"
+services:
+  radarr:
+    image: linuxserver/radarr
+    container_name: autopirate_radarr
+    networks:
+      - web
+    env_file:
+      - autopirate.env
+    volumes:
+      - "${MEDIA_DIR}/Video/Movies:/movies"
+      - "${DOCKER_DATA}/radarr_config:/config"
+      - "${NZB_DIR}:/downloads"
+    labels:
+      - traefik.http.routers.radarr.rule=Host(`radarr.jafner.net`)
+      - traefik.http.routers.radarr.tls.certresolver=lets-encrypt
+      - traefik.http.services.radarr.loadbalancer.server.port=7878
+      - traefik.http.routers.radarr.middlewares=lan-only@file,traefik-forward-auth-privileged@file
+
+  sonarr:
+    image: linuxserver/sonarr
+    container_name: autopirate_sonarr
+    networks:
+      - web
+    env_file:
+      - autopirate.env
+    volumes:
+      - "${MEDIA_DIR}/Video/Shows:/shows"
+      - "${DOCKER_DATA}/sonarr_config:/config"
+      - "${NZB_DIR}:/downloads"
+    labels:
+      - traefik.http.routers.sonarr.rule=Host(`sonarr.jafner.net`)
+      - traefik.http.routers.sonarr.tls.certresolver=lets-encrypt
+      - traefik.http.services.sonarr.loadbalancer.server.port=8989
+      - traefik.http.routers.sonarr.middlewares=lan-only@file,traefik-forward-auth-privileged@file
+
+  bazarr:
+    image: lscr.io/linuxserver/bazarr:latest
+    container_name: autopirate_bazarr
+    networks:
+      - web
+    env_file:
+      - autopirate.env
+    volumes:
+      - "${DOCKER_DATA_LOCAL}/bazarr:/config"
+      - "${MEDIA_DIR}/Video/Movies:/movies"
+      - "${MEDIA_DIR}/Video/Shows:/tv"
+    labels:
+      - traefik.http.routers.bazarr.rule=Host(`bazarr.jafner.net`)
+      - traefik.http.routers.bazarr.tls.certresolver=lets-encrypt
+      - trarfik.http.services.bazarr.loadbalancer.server.port=6767
+      - traefik.http.routers.bazarr.middlewares=lan-only@file,traefik-forward-auth-privileged@file
+
+  nzbhydra2:
+    image: linuxserver/nzbhydra2
+    container_name: autopirate_nzbhydra2
+    networks:
+      - web
+    env_file:
+      - autopirate.env
+    volumes:
+      - "${DOCKER_DATA}/nzbhydra2_config:/config"
+      - "${NZB_DIR}:/downloads"
+    labels:
+      - traefik.http.routers.nzbhydra2.rule=Host(`nzbhydra.jafner.net`)
+      - traefik.http.routers.nzbhydra2.tls.certresolver=lets-encrypt
+      - traefik.http.services.nzbhydra2.loadbalancer.server.port=5076
+      - traefik.http.routers.nzbhydra2.middlewares=lan-only@file,traefik-forward-auth-privileged@file
+  
+  sabnzbd:
+    image: linuxserver/sabnzbd
+    container_name: autopirate_sabnzbd
+    networks:
+      - web
+      - monitoring
+    env_file:
+      - autopirate.env
+    ports:
+      - 8085:8080
+    volumes:
+      - "${DOCKER_DATA_LOCAL}/sabnzbd_config:/config"
+      - "${MEDIA_DIR}/Video/Movies:/movies"
+      - "${MEDIA_DIR}/Video/Shows:/shows"
+      - "${MEDIA_DIR}/Audio/Music:/music"
+      - "${NZB_DIR}:/downloads"
+      - "${INCOMPLETE_NZB_DIR}:/incomplete-downloads"
+    labels:
+      - traefik.http.routers.sabnzbd.rule=Host(`sabnzbd.jafner.net`)
+      - traefik.http.routers.sabnzbd.tls.certresolver=lets-encrypt
+      - traefik.http.services.sabnzbd.loadbalancer.server.port=8080
+      - traefik.http.routers.sabnzbd.middlewares=lan-only@file,traefik-forward-auth-privileged@file
+
+  tdarr:
+    image: haveagitgat/tdarr:latest
+    container_name: autopirate_tdarr
+    networks:
+      web:
+      tdarr: 
+        ipv4_address: 172.110.0.10
+    ports:
+      - 8265:8265 # webUI port
+      - 8266:8266 # server port
+      - 8267:8267 # node port
+    labels:
+      - traefik.http.routers.tdarr.rule=Host(`tdarr.jafner.net`)
+      - traefik.http.routers.tdarr.tls.certresolver=lets-encrypt
+      - traefik.http.routers.tdarr.middlewares=lan-only@file,traefik-forward-auth-privileged@file
+      - traefik.http.services.tdarr.loadbalancer.server.port=8265
+    env_file:
+      - autopirate.env
+      - tdarr.env
+    volumes:
+      - ${DOCKER_DATA}/tdarr/server:/app/server
+      - ${DOCKER_DATA}/tdarr/configs:/app/configs
+      - ${DOCKER_DATA}/tdarr/logs:/app/logs
+      - ${MEDIA_DIR}/Video/Movies:/movies
+      - ${MEDIA_DIR}/Video/Shows:/shows
+      - ${TRANSCODE_DIR}/transcode_cache:/temp
+
+  tdarr-node:
+    image: haveagitgat/tdarr_node:latest
+    container_name: autopirate_tdarr-node
+    deploy:
+      resources:
+        reservations:
+          devices:
+            - driver: nvidia
+              count: all
+              capabilities: [gpu]
+        limits:
+          cpus: '12.00'
+    networks:
+      tdarr:
+        ipv4_address: 172.110.0.20
+    env_file:
+      - autopirate.env
+      - tdarr_node.env
+    volumes:
+      - ${DOCKER_DATA}/tdarr/configs:/app/configs
+      - ${DOCKER_DATA}/tdarr/logs:/app/logs
+      - ${MEDIA_DIR}/Video/Movies:/movies
+      - ${MEDIA_DIR}/Video/Shows:/shows
+      - ${TRANSCODE_DIR}/transcode_cache:/temp
+
+  jackett:
+    image: linuxserver/jackett
+    container_name: autopirate_jackett
+    networks:
+      - web
+    env_file:
+      - autopirate.env
+      - jackett.env
+    volumes:
+      - "${DOCKER_DATA}/jackett_config:/config"
+      - "${NZB_DIR}:/downloads"
+    labels:
+      - traefik.http.routers.jackett.rule=Host(`jackett.jafner.net`)
+      - traefik.http.routers.jackett.tls.certresolver=lets-encrypt
+      - traefik.http.services.jackett.loadbalancer.server.port=9117
+      - traefik.http.routers.jackett.middlewares=lan-only@file,traefik-forward-auth-privileged@file
+
+  exporter-sabnzbd:
+    image: msroest/sabnzbd_exporter # https://github.com/msroest/sabnzbd_exporter
+    container_name: autopirate_sabnzbd-exporter
+    restart: "no"
+    networks:
+      - monitoring
+    env_file:
+      - exporter-sabnzbd.env
+      - exporter-sabnzbd_secrets.env
+
+networks:
+  tdarr:
+    ipam:
+      driver: default
+      config:
+        - subnet: "172.110.0.0/24"
+  web:
+    external: true
+  monitoring:
+    external: true
--- a/fighter/config/autopirate/docker-compose.yml
+++ b/fighter/config/autopirate/docker-compose.yml
@ -120,15 +120,6 @@ services:
  tdarr-node:
    image: haveagitgat/tdarr_node:latest
    container_name: autopirate_tdarr-node
-    deploy:
-      resources:
-        reservations:
-          devices:
-            - driver: nvidia
-              count: all
-              capabilities: [gpu]
-        limits:
-          cpus: '12.00'
    networks:
      tdarr:
        ipv4_address: 172.110.0.20
--- a/fighter/config/keycloak/docker-compose.yml
+++ b/fighter/config/keycloak/docker-compose.yml
@ -1,4 +1,4 @@
-version: '3.0'
+version: '3.9'

 services:
  keycloak:
@ -41,6 +41,7 @@ services:
        aliases:
          - forwardauth
    restart: "no"
+    command: "./traefik-forward-auth"
    depends_on:
      keycloak: 
        condition: service_healthy
@ -57,12 +58,12 @@ services:
  forwardauth-privileged:
    image: mesosphere/traefik-forward-auth:3.1.0
    container_name: keycloak_forwardauth-privileged
-    command: "./traefik-forward-auth --whitelist=jafner425@gmail.com"
    networks:
      web:
        aliases:
          - forwardauth-privileged
    restart: "no"
+    command: "./traefik-forward-auth --whitelist=jafner425@gmail.com"
    depends_on:
      keycloak: 
        condition: service_healthy
--- a/fighter/config/plex/docker-compose-nvidia.yml
+++ b/fighter/config/plex/docker-compose-nvidia.yml
@ -0,0 +1,73 @@
+version: "3"
+services:
+  plex:
+    image: linuxserver/plex
+    container_name: plex_plex
+    restart: "no"
+    deploy:
+      resources:
+        reservations:
+          devices:
+            - driver: nvidia
+              count: all
+              capabilities: [gpu]
+    networks:
+      - web
+    ports:
+      - 32400:32400/tcp
+      - 32400:32400/udp
+      - 3005:3005/tcp
+      - 8324:8324/tcp
+      - 32469:32469/tcp
+      - 1900:1900/udp
+      - 32410:32410/udp
+      - 32412:32412/udp
+      - 32413:32413/udp
+      - 32414:32414/udp
+    env_file:
+      - plex_stack.env
+      - plex.env
+      - plex_secrets.env
+    volumes:
+      - "${MEDIA_DIR}/Video/Movies:/movies"
+      - "${MEDIA_DIR}/Video/Shows:/shows"
+      - "${MEDIA_DIR}/Audio/Music:/music"
+      - "${DOCKER_DATA}/plex:/config"
+    labels:
+      - traefik.http.routers.plex.rule=Host(`plex.jafner.net`)
+      - traefik.http.routers.plex.tls.certresolver=lets-encrypt
+      - traefik.http.services.plex.loadbalancer.server.port=32400
+  ombi:
+    image: ghcr.io/linuxserver/ombi
+    container_name: plex_ombi
+    restart: "no"
+    networks:
+      - web
+    env_file:
+      - plex_stack.env
+    volumes:
+      - "${DOCKER_DATA}/ombi:/config"
+    labels:
+      - traefik.http.routers.ombi.rule=Host(`ombi.jafner.net`)
+      - traefik.http.routers.ombi.tls.certresolver=lets-encrypt
+      - traefik.http.routers.ombi.tls.options=tls12@file
+      - traefik.http.routers.ombi.middlewares=securityheaders@file
+      - traefik.http.services.ombi.loadbalancer.server.port=3579   
+  exporter-plex:
+    image: granra/plex_exporter
+    container_name: plex_exporter
+    restart: "no"
+    networks:
+      - monitoring
+    command: 
+      - "--plex-server=https://plex.jafner.net"
+      - "--token=4eBmSrpfXxxgT3cRF2gC"
+      - "--auto-discover"
+    labels:
+      - traefik.enable=false
+
+networks:
+  web:
+    external: true
+  monitoring:
+    external: true
--- a/fighter/config/plex/docker-compose.yml
+++ b/fighter/config/plex/docker-compose.yml
@ -4,13 +4,6 @@ services:
    image: linuxserver/plex
    container_name: plex_plex
    restart: "no"
-    deploy:
-      resources:
-        reservations:
-          devices:
-            - driver: nvidia
-              count: all
-              capabilities: [gpu]
    networks:
      - web
    ports:
--- a/fighter/config/qbittorrent/docker-compose.yml
+++ b/fighter/config/qbittorrent/docker-compose.yml
@ -16,7 +16,7 @@ services:
    env_file:
      - qbittorrent.env
    ports:
-      - 49500-50000:49500-50000
+      - 49510:49510
    labels:
      - traefik.http.routers.qbt.rule=Host(`qbt.jafner.net`)
      - traefik.http.routers.qbt.tls.certresolver=lets-encrypt
@ -38,4 +38,4 @@ networks:
  web:
    external: true
  monitoring:
-    external: true
+    external: true
--- a/fighter/config/send/docker-compose.yml
+++ b/fighter/config/send/docker-compose.yml
@ -2,22 +2,22 @@ version: '3'
 services:
  send:
    image: registry.gitlab.com/timvisee/send:latest
+    user: 1001:1001
    container_name: send_send
    restart: "no"
    networks:
      - send
      - web
-    volumes:
-      - ${DOCKER_DATA}/uploads:/uploads
    env_file:
      - send.env
+    volumes:
+      - ${DOCKER_DATA}/uploads:/uploads
    labels:
      - traefik.http.routers.send.rule=Host(`send.jafner.net`)
      - traefik.http.routers.send.tls.certresolver=lets-encrypt
      - traefik.http.routers.send.tls.options=tls12@file
      - traefik.http.routers.send.middlewares=securityheaders@file
      - traefik.http.services.send.loadbalancer.server.port=1234
-      #- traefik.http.routers.send.middlewares=

  redis:
    image: 'redis:alpine'
@ -25,13 +25,8 @@ services:
    networks:
      - send
    restart: "no"
-    volumes:
-      - send-redis:/data
-
-volumes:
-  send-redis:

 networks:
  web:
    external: true
-  send:
+  send:
Author	SHA1	Message	Date
Joey Hafner	ec92f9e9e1	Update to match working current All checks were successful Deploy to Fighter / Deploy (push) Successful in 4s Details	2024-02-15 01:05:32 -08:00
Joey Hafner	372cf400f9	Update compose schema version number, reorganize command parameter for forwardauth	2024-02-15 01:05:11 -08:00
Joey Hafner	a5d2ff38c9	Implement temporary workaround for Nvidia driver bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063675	2024-02-15 01:04:12 -08:00