lucas
52c02beb3d
add gite to shared proxy add usb dev and NET privilige to HA add immich image server remove sonarr-en add jackett indexer for ABB add gluetun-proxy for general proxy add blackbox exporter to check https sites set node-exporter to network host to see interface traffic decrease resolution of cadvisor to save RAM add status and code SANs for nginx add upstream block so sites are not redirecte to cloud... add homeassistant config add nginx exporter for prometheus
64 lines
1.3 KiB
YAML
64 lines
1.3 KiB
YAML
services:
|
|
nginx:
|
|
image: nginx:stable
|
|
container_name: nginx
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- ./conf.d:/etc/nginx/conf.d
|
|
- ./certs:/etc/nginx/certs
|
|
- ./html:/usr/share/nginx/html
|
|
# Access and error logs
|
|
- ./logs:/var/log/nginx
|
|
networks:
|
|
- default
|
|
- shared-proxy-services
|
|
|
|
nginx-exporter:
|
|
image: nginx/nginx-prometheus-exporter:latest
|
|
container_name: nginx-exporter
|
|
restart: unless-stopped
|
|
command:
|
|
- --nginx.scrape-uri=http://nginx:8080/nginx_status
|
|
ports:
|
|
- "9113:9113"
|
|
depends_on:
|
|
- nginx
|
|
networks:
|
|
- default
|
|
- shared-proxy-services
|
|
|
|
crowdsec:
|
|
image: crowdsecurity/crowdsec:latest
|
|
container_name: crowdsec
|
|
restart: unless-stopped
|
|
environment:
|
|
COLLECTIONS: >
|
|
crowdsecurity/nginx
|
|
crowdsecurity/http-cve
|
|
volumes:
|
|
- crowdsec-db:/var/lib/crowdsec/data
|
|
- ./logs:/var/log/nginx:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
networks:
|
|
- default
|
|
|
|
certbot:
|
|
image: certbot/certbot:latest
|
|
container_name: certbot
|
|
volumes:
|
|
- ./certs:/etc/letsencrypt
|
|
- ./html:/var/www/certbot
|
|
networks:
|
|
- shared-proxy-services
|
|
|
|
networks:
|
|
default:
|
|
shared-proxy-services:
|
|
external: true
|
|
|
|
volumes:
|
|
crowdsec-db:
|