Docker/Portainer on 4n6Post

Whisper Webapp - Docker Deployment

2025-12-20

Ref: https://github.com/jonesckevin/whisper-webapp

Whisper WebApp Dockerized version for running OpenAI’s Whisper speech-to-text model. It provides an easy-to-use web interface for transcribing audio/video files with support for multiple languages and models.

Deploying Whisper WebApp in a Docker container simplifies setup and ensures consistent environments for reliable transcription.

yaml
33 lines

---

services:
 whisper-webapp:
 image: 'jonesckevin/whisper-webapp:latest'
 ports:
 - "${WHISPERPORT:-8000}:5000"
 volumes:
 # Mapped directories for external file access via network share
 - ./data/uploads:/data/uploads
 - ./data/completed:/data/completed
 # Whisper models cache - persists models outside container
 - ./data/models:/root/.cache/whisper
 environment:
 - NVIDIA_VISIBLE_DEVICES=all
 - CUDA_VISIBLE_DEVICES=0
 - FLASK_ENV=production
 - MAX_UPLOAD_SIZE_GB=5
 - PRELOAD_WHISPER_MODELS=false # Set to 'true' to download all models on first run
 deploy:
 resources:
 reservations:
 devices:
 - driver: nvidia
 count: 1
 capabilities: [gpu]
 restart: unless-stopped
 healthcheck:
 test: ["CMD", "curl", "-f", "http://localhost:5000/api/health"]
 interval: 30s
 timeout: 10s
 retries: 3
 start_period: 60s

Portainer Stack

If you use Portainer, and do not have a GPU, you can utilize CPU with degraded performance.

BentoPDF

2025-12-19

This guide provides a Docker Compose setup for BentoPDF, a lightweight PDF viewer and manager that can be self-hosted. BentoPDF offers an easy way to view, organize, and manage PDF documents through a web interface.

Portainer Setup

yaml
9 lines

services:
 bentopdf:
 # simple mode - bentopdf/bentopdf-simple:latest
 # default mode - bentopdf/bentopdf:latest
 image: bentopdf/bentopdf:latest
 container_name: bentopdf
 restart: unless-stopped
 ports:
 - '8080:8080'

OCR WebApp

2024-12-21

Ref:

OCR WebApp is a Dockerized application that provides a web interface for performing Optical Character Recognition (OCR) on uploaded images and documents. It leverages powerful OCR engines to extract text from various file formats, making it easy for users to convert scanned documents and images into editable text.

Portainer Stack

yaml
51 lines

---
services:
 ocr-webapp:
 image: jonesckevin/ocr-webapp:latest
 container_name: ocr-webapp
 ports:
 - "${OCRPORT:-8002}:5000"
 volumes:
 # Persistent storage for uploaded files and OCR results
 - ./data/uploaded:/data/uploaded
 - ./data/output:/data/output
 - ./data/logs:/data/logs
 environment:
 # Flask settings
 - FLASK_ENV=production
 - SECRET_KEY=change-this-to-a-secure-random-string

 # Admin feature toggles
 - ALLOW_LIVE_LANG_INSTALL=true
 - ALLOW_CLIENT_API_KEYS=true

 # Logging configuration
 - LOG_MAX_BYTES=10485760 # 10MB default
 - LOG_BACKUP_COUNT=5
 - LOG_LEVEL=INFO

 # LLM Server endpoints (local)
 - OLLAMA_HOST=http://host.docker.internal:11434
 - LMSTUDIO_HOST=http://host.docker.internal:1234

 # Paid LLM API Keys (server-side, secure)
 # Uncomment and set your API keys as needed
 # - OPENAI_API_KEY=sk-your-openai-key
 # - ANTHROPIC_API_KEY=sk-ant-your-anthropic-key
 # - GOOGLE_API_KEY=AIza-your-google-key
 # - DEEPSEEK_API_KEY=sk-your-deepseek-key
 # - COHERE_API_KEY=your-cohere-key
 # - GROK_API_KEY=xai-your-grok-key
 # - MISTRAL_API_KEY=your-mistral-key
 # - PERPLEXITY_API_KEY=pplx-your-perplexity-key

 restart: unless-stopped
 # For live language installation, container needs to run as root
 # user: root

 # Resource limits (optional)
 # deploy:
 # resources:
 # limits:
 # memory: 2G
 # cpus: '2'

Wireguard + Dashboard

2024-12-15

Ref:

Wireguard + WGDashboard is a Dockerized setup that combines the Wireguard VPN server with WGDashboard, a web-based management interface. This setup allows users to easily configure and monitor their Wireguard VPN servers through an intuitive dashboard.

Portainer Stack

yaml
42 lines

services:
 wgdashboard:
 # Since the github organisation we recommend the ghcr.io.
 # Alternatively we also still push to docker.io under donaldzou/wgdashboard.
 # Both share the exact same tags. So they should be interchangable.
 image: ghcr.io/wgdashboard/wgdashboard:latest

 # Make sure to set the restart policy. Because for a VPN its important to come back IF it crashes.
 restart: unless-stopped
 container_name: wgdashboard

 # Environment variables can be used to configure certain values at startup. Without having to configure it from the dashboard.
 # By default its all disabled, but uncomment the following lines to apply these. (uncommenting is removing the # character)
 # Refer to the documentation on https://wgdashboard.dev/ for more info on what everything means.
 #environment:
 #- tz= # <--- Set container timezone, default: Europe/Amsterdam.
 #- public_ip= # <--- Set public IP to ensure the correct one is chosen, defaulting to the IP give by ifconfig.me.
 #- wgd_port= # <--- Set the port WGDashboard will use for its web-server.

 # The following section, ports is very important for exposing more than one Wireguard/AmneziaWireguard interfaces.
 # Once you create a new configuration and assign a port in the dashboard, don't forget to add it to the ports as well.
 # Quick-tip: most Wireguard VPN tunnels use UDP. WGDashboard uses HTTP, so tcp.
 ports:
 - 10086:10086/tcp
 - 51820:51820/udp

 # Volumes can be configured however you'd like. The default is using docker volumes.
 # If you want to use local paths, replace the path before the : with your path.
 volumes:
 - aconf:/etc/amnezia/amneziawg
 - conf:/etc/wireguard
 - data:/data

 # Needed for network administration.
 cap_add:
 - NET_ADMIN

# The following configuration is linked to the above default volumes.
volumes:
 aconf:
 conf:
 data:

*Arr Media Stack

2024-01-15

This guide provides a Docker Compose setup for various media management applications, including qBittorrent, Transmission, NZBGet, SABnzbd, Jackett, Prowlarr, Sonarr, Radarr, Lidarr, Readarr, Bazarr, and Tubesync. The setup is designed to work with a Synology NAS or similar systems.

Portainer Setup

Note: You will need your own VPN credentials for the DelugeVPN service. As well you will need your config file from the VPN provider.

yaml
203 lines

services:
 delugevpn:
 image: binhex/arch-delugevpn
 container_name: delugevpn
 cap_add:
 - NET_ADMIN
 environment:
 - VPN_ENABLED=yes
 - VPN_USER=${VPN_USER}
 - VPN_PASS=${VPN_PASS}
 - VPN_PROV=pia
 - LAN_NETWORK=192.168.1.0/24
 - NAME_SERVERS=1.1.1.1,1.0.0.1
 - DELUGE_DAEMON_LOG_LEVEL=info
 - DELUGE_WEB_LOG_LEVEL=info
 ports:
 - 8112:8112
 - 8118:8118
 - 58846:58846
 volumes:
 - $V_PATHS/delugevpn:/data
 - $V_PATHS/delugevpn/config:/config

 transmission:
 image: linuxserver/transmission:version-3.00-r0
 container_name: transmission
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 volumes:
 - $V_PATHS/transmission:/config
 - $V_PATHS/_downloads:/media/_downloads
 - $V_PATHS/_downloads/_watch:/media/_downloads/_watch
 - $V_PATHS/_downloads/_intermediate:/media/_downloads/_intermediate
 restart: always

 nzbget:
 image: ghcr.io/linuxserver/nzbget
 container_name: nzbget
 ports:
 - 6789:6789
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 volumes:
 - $V_PATHS/nzbget:/config
 - $V_PATHS/nzbget/logs:/nzb_logs
 - $V_PATHS/_downloads:/media/_downloads
 - $V_PATHS/_downloads/_watch:/media/_downloads/_watch
 - $V_PATHS/_downloads/_intermediate:/media/_downloads/_intermediate
 restart: always

 sabnzb:
 image: lscr.io/linuxserver/sabnzbd:latest
 container_name: sabnzb
 ports:
 - 8280:8080
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 volumes:
 - $V_PATH/sabnzb:/config
 - $V_PATHS/_downloads:/downloads
 - $V_PATHS/_downloads/_incomplete:/incomplete-downloads
 restart: always

 jackett:
 image: ghcr.io/linuxserver/jackett
 container_name: jackett
 hostname: jackett
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 ports:
 - 9117:9117
 volumes:
 - $V_PATHS/jackett:/config
 restart: always

 prowlarr:
 image: ghcr.io/linuxserver/prowlarr:develop
 container_name: prowlarr
 hostname: prowlarr
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 ports:
 - 9696:9696
 volumes:
 - $V_PATHS/prowlarr:/config
 restart: always

 sonarr:
 image: ghcr.io/linuxserver/sonarr
 container_name: sonarr
 hostname: sonarr
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 ports:
 - 8989:8989
 volumes:
 - $V_PATHS/sonarr:/config
 - $V_MEDIA/tv:/media/tv
 - $V_PATHS/_downloads:/media/_downloads
 restart: always

 radarr:
 image: ghcr.io/linuxserver/radarr
 container_name: radarr
 hostname: radarr
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 ports:
 - 7878:7878
 volumes:
 - $V_PATHS/radarr:/config
 - $V_MEDIA/movies:/media/movies
 - $V_PATHS/_downloads:/media/_downloads
 restart: always

 lidarr:
 image: ghcr.io/linuxserver/lidarr
 container_name: lidarr
 hostname: lidarr
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 ports:
 - 8686:8686
 volumes:
 - $V_PATH/lidarr:/config
 - $V_MEDIA/music:/media/music
 - $V_PATHS/_downloads:/media/_downloads
 restart: always

 readarr:
 image: lscr.io/linuxserver/readarr:develop
 container_name: readarr
 hostname: readarr
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 ports:
 - 8787:8787
 volumes:
 - $V_PATHS/readarr:/config
 - $V_MEDIA/audiobooks:/media/audiobooks
 - $V_MEDIA/ebooks:/media/ebooks
 - $V_PATHS/_downloads:/media/_downloads
 restart: always

 bazarr:
 image: ghcr.io/linuxserver/bazarr
 container_name: bazarr
 ports:
 - 6767:6767
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 volumes:
 - $V_PATHS/bazarr:/config
 - $V_MEDIA/movies:/movies
 - $V_MEDIA/tv:/tv
 restart: always

 tubesync:
 image: ghcr.io/meeb/tubesync:latest
 container_name: tubesync
 hostname: tubesync
 environment:
 - PUID=$V_PUID
 - PGID=$V_PGID
 - PGID=$V_TZ
 ports:
 - 4848:4848
 volumes:
 - $V_PATHS/tubesync:/config
 - $V_MEDIA/youtube:/downloads
 restart: "no"

# Note: The m4b-tool and example sections were not valid docker-compose services and have been removed.
# If you want to use m4b-tool, use the provided docker run alias outside of docker-compose.

# Only one volume was defined, for synology-tv. If you want to use more named volumes, define them here.
volumes:
 synology-tv:
 driver: local
 driver_opts:
 type: cifs
 o: username=$V_USERNAME,password=$V_PASSWORD,uid=1031,gid=100,file_mode=0777,dir_mode=0777
 device: $V_CIFS_DEVICE_TV

env
10 lines

 VPN_USER=your_vpn_username
 VPN_PASS=your_vpn_password
 V_PUID=1000
 V_PGID=1000
 V_TZ=America/New_York
 V_MEDIA=/mnt/pve/PlexMedia/nzbdocker
 V_PATHS=./nzbget/Arrs/
 V_USERNAME=yarrsername
 V_PASSWORD=the_password
 V_CIFS_DEVICE_TV=//10.0.0.10/tv

Backdoors & Breaches

2024-01-15

Portainer Stack

Ref: https://github.com/p3hndrx/B-B-Shuffle

yaml
9 lines

# Backdoors and Breaches
# https://github.com/p3hndrx/B-B-Shuffle

services:
 shuffle:
 image: jonesckevin/b-b-shuffle:latest
 container_name: B-B-Shuffle
 ports:
 - "9500:80"

BookStack

2024-01-15

BookStack Docker Compose

BookStack is an open-source platform for creating documentation and wikis. It allows users to create, manage, and share content in a structured way. Categorizing in:

Shelves
Books
Chapters
Pages

BookStack is designed to be user-friendly and provides a simple interface for organizing information.

yaml
36 lines

services:
 bookstack:
 image: lscr.io/linuxserver/mariadb
 volumes:
 - './bookstack/db-data:/var/lib/postgresql/data'
 environment:
 - MYSQL_DATABASE=bookstackapp
 - MYSQL_USER=bookstack
 - MYSQL_PASSWORD=bookstackpassword
 - TZ=America/Toronto
 - MYSQL_ROOT_PASSWORD=bookstackrootpassword
 - PGID=1000
 - PUID=1000
 restart: 'always'
 hostname: bookstack-db
 container_name: BookStack-DB

 linuxserver:
 image: 'lscr.io/linuxserver/bookstack:latest'
 environment:
 - DB_DATABASE=bookstackapp
 - DB_PASS=bookstackpassword
 - DB_USER=bookstack
 - 'APP_URL=http://bookstacks.4n6post.com'
 - DB_HOST=BookStack-DB
 - DB_PORT=3306
 - PGID=1000
 - PUID=1000
 volumes:
 - './bookstack/public:/var/www/bookstack/public:rw'
 - './bookstack/app_data:/config'
 ports:
 - '1003:80'
 restart: 'always'
 hostname: bookstack
 container_name: BookStack

CodiMD (HackMD)

2024-01-15

Portainer Stack

Cody is a collaborative markdown editor that can be run using Docker. It is based on the HackMD project and allows multiple users to edit documents in real-time.

Ref:

yaml
25 lines

services:
 codimd:
 image: 'hackmdio/hackmd:2.5.4'
 hostname: codimd
 container_name: Codimd
 restart: 'always'
 environment:
 - CMD_DB_URL=postgres://codimd:thepassword@Codimd-DB/codimd
 - CMD_USECDN=false
 volumes:
 - './codimd/uploads:/home/hackmd/app/public/uploads'
 ports:
 - '3000:3000'

 codimd-db:
 image: 'postgres:14-alpine'
 hostname: codimd-db
 container_name: Codimd-DB
 restart: 'always'
 environment:
 - POSTGRES_DB=codimd
 - POSTGRES_USER=codimd
 - POSTGRES_PASSWORD=thepassword
 volumes:
 - './codimd/db-data:/var/lib/postgresql/data'

CyberChef

2024-01-15

Cyberchef is a web app for analyzing and decoding data. It provides a wide range of tools for encoding, decoding, encrypting, decrypting, and manipulating data in various formats.

It is designed to be user-friendly and accessible, making it easy for users to perform complex data operations without needing extensive technical knowledge.

Portainer Stack

yaml
6 lines

services:
 cyber-chef:
 image: mpepping/cyberchef:latest
 container_name: CyberChef
 ports:
 - "8100:8000"

DoomJS

2024-01-15

Ref: DoomJS

DoomJS is a fast, lightweight, and highly customizable game server for the classic first-person shooter game. It allows players to host their own game sessions and provides a variety of options for customization and optimization.

Portainer Stack

bash
1 lines

docker run -d --name hal-doom --restart always -p 999:8080 callumhoughton22/doom-in-docker

yaml
8 lines

services:
 doom:
 image: callumhoughton22/doom-in-docker
 hostname: doomjs
 container_name: doomjs
 restart: unless-stopped
 ports:
 - "999:8080"

Draw.io

2024-01-15

Draw.io is a web-based diagramming tool that allows users to create flowcharts, UML diagrams, and various other types of visual representations. It is designed for collaboration and can be used for prototyping, design, and visualization tasks.

It provides a user-friendly interface and supports a wide range of diagram types, making it suitable for both technical and non-technical users. It can be integrated into various platforms and is often used in software development, project management, and educational contexts.

DuckDNS

2024-01-15

Ref: DuckDNS.org

DuckDNS is a free dynamic DNS service that allows you to keep your domain name pointed to your dynamic IP address. It is a simple and effective solution for users who want to access their home network or self-hosted services from anywhere in the world without worrying about IP address changes.

Portainer Stack

yaml
16 lines

services:
 duckdns:
 image: lscr.io/linuxserver/duckdns:latest
 container_name: duckdns
 network_mode: host
 restart: unless-stopped
 environment:
 - PUID=1000
 - PGID=1000
 - TZ=Etc/UTC
 - SUBDOMAINS=${DUCKDNS_DOMAIN}
 - TOKEN=${DUCKDNS_TOKEN}
 - UPDATE_IP=ipv4
 - LOG_FILE=false
 volumes:
 - /root/duckdns/config:/config

env
2 lines

DUCKDNS_DOMAIN="subdomain1,subdomain2"
DUCKDNS_TOKEN=your_duckdns_token

Etherpad

2024-01-15

Etherpad is a collaborative real-time editor that allows multiple users to create and edit documents simultaneously. It is designed for productivity and teamwork, providing features such as version control, chat, and document sharing. It is an open-source web application that can be self-hosted, making it a popular choice for teams and organizations looking for a flexible and customizable text editing solution.

Portainer Stack

yaml
50 lines

services:
 app:
 user: "0:0"
 image: etherpad/etherpad:latest
 tty: true
 stdin_open: true
 volumes:
 - plugins:/opt/etherpad-lite/src/plugin_packages
 - etherpad-var:/opt/etherpad-lite/var
 depends_on:
 - postgres
 environment:
 NODE_ENV: production
 ADMIN_PASSWORD: ${DOCKER_COMPOSE_APP_ADMIN_PASSWORD:-admin}
 DB_CHARSET: ${DOCKER_COMPOSE_APP_DB_CHARSET:-utf8mb4}
 DB_HOST: postgres
 DB_NAME: ${DOCKER_COMPOSE_POSTGRES_DATABASE:-etherpad}
 DB_PASS: ${DOCKER_COMPOSE_POSTGRES_PASSWORD:-admin}
 DB_PORT: ${DOCKER_COMPOSE_POSTGRES_PORT:-5432}
 DB_TYPE: "postgres"
 DB_USER: ${DOCKER_COMPOSE_POSTGRES_USER:-admin}
 # For now, the env var DEFAULT_PAD_TEXT cannot be unset or empty; it seems to be mandatory in the latest version of etherpad
 DEFAULT_PAD_TEXT: ${DOCKER_COMPOSE_APP_DEFAULT_PAD_TEXT:- }
 DISABLE_IP_LOGGING: ${DOCKER_COMPOSE_APP_DISABLE_IP_LOGGING:-false}
 SOFFICE: ${DOCKER_COMPOSE_APP_SOFFICE:-null}
 TRUST_PROXY: ${DOCKER_COMPOSE_APP_TRUST_PROXY:-true}
 restart: always
 ports:
 - "${DOCKER_COMPOSE_APP_PORT_PUBLISHED:-9001}:${DOCKER_COMPOSE_APP_PORT_TARGET:-9001}"

 postgres:
 image: postgres:15-alpine
 environment:
 POSTGRES_DB: ${DOCKER_COMPOSE_POSTGRES_DATABASE:-etherpad}
 POSTGRES_PASSWORD: ${DOCKER_COMPOSE_POSTGRES_PASSWORD:-admin}
 POSTGRES_PORT: ${DOCKER_COMPOSE_POSTGRES_PORT:-5432}
 POSTGRES_USER: ${DOCKER_COMPOSE_POSTGRES_USER:-admin}
 PGDATA: /var/lib/postgresql/data/pgdata
 restart: always
 # Exposing the port is not needed unless you want to access this database instance from the host.
 # Be careful when other postgres docker container are running on the same port
 # ports:
 # - "5432:5432"
 volumes:
 - postgres_data:/var/lib/postgresql/data/pgdata

volumes:
 postgres_data:
 plugins:
 etherpad-var:

.env
7 lines

DOCKER_COMPOSE_APP_PORT_PUBLISHED=9001
DOCKER_COMPOSE_APP_PORT_TARGET=9001
DOCKER_COMPOSE_APP_DEV_ENV_DEFAULT_PAD_TEXT="Welcome to MedaPad"
DOCKER_COMPOSE_APP_ADMIN_PASSWORD=etherpad
DOCKER_COMPOSE_POSTGRES_DATABASE=db
DOCKER_COMPOSE_POSTGRES_PASSWORD=medapad
DOCKER_COMPOSE_POSTGRES_USER=medapad

GitLab

2024-01-15

GitLab is a web-based DevOps lifecycle tool that provides a Git repository manager with features like issue tracking, continuous integration/continuous deployment (CI/CD), and more. It is designed to facilitate collaboration among developers and teams, offering a comprehensive platform for software development, project management, and version control.

Portainer Stack

yaml
12 lines

services:
 gitlab:
 image: gitlab/gitlab-ce:latest
 container_name: GitLab
 hostname: gitlab
 restart: always
 ports:
 - 8500:80
 volumes:
 - ./gitlab/config:/etc/gitlab:rw
 - ./gitlab/logs:/var/log/gitlab:rw
 - ./gitlab/data:/var/opt/gitlab:rw

.env
1 lines

EXTERNAL_URL=https://gitlab.4n6post.com

Post Setup Instructions

While the docker is up and running, you can access GitLab at http://localhost:8500.

Homer

2024-01-15

Portainer Stack

Ref: Github.com/b4bz/homer

yaml
16 lines

services:
 homer:
 image: b4bz/homer:latest
 container_name: Homer
 ports:
 - 80:8080
 user: 1000:1000 # default
# user: 0:0 # For when Default doesn't work
 environment:
 - INIT_ASSETS=1 # default
 volumes:
 - ./assets/:/www/assets
 - ./assets/tools:/www/assets/tools
 - ./assets/custom.css:/www/assets/custom.css
volumes:
 assets:

Immich

2024-01-15

Immich is a self-hosted photo and video backup solution that allows users to securely store, manage, and share their media files. It offers features like AI-powered search, sharing capabilities, and a user-friendly interface for organizing photos and videos.

Portainer Stack

WARNING: Make sure to use the docker-compose.yml of the current release:

https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml

The compose file on main may not be compatible with the latest release.

yaml
73 lines

services:
 immich-server:
 container_name: immich_server
 image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
 # extends:
 # file: hwaccel.transcoding.yml
 # service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
 volumes:
 # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
 - ${UPLOAD_LOCATION}:/usr/src/app/upload
 - /etc/localtime:/etc/localtime:ro
 ports:
 - ${IMMICH_PORT:-2283}:2283
 depends_on:
 - redis
 - database
 restart: always
 healthcheck:
 disable: false

 immich-machine-learning:
 container_name: immich_machine_learning
 # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
 # Example tag: ${IMMICH_VERSION:-release}-cuda
 image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}-cuda
 # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
 # file: hwaccel.ml.yml
 # service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
 volumes:
 - ./immich/model-cache:/cache
 restart: always
 healthcheck:
 disable: false

 redis:
 container_name: immich_redis
 image: docker.io/redis:6.2-alpine@sha256:905c4ee67b8e0aa955331960d2aa745781e6bd89afc44a8584bfd13bc890f0ae
 healthcheck:
 test: redis-cli ping || exit 1
 restart: always

 database:
 container_name: immich_postgres
 image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
 environment:
 POSTGRES_PASSWORD: ${DB_PASSWORD}
 POSTGRES_USER: ${DB_USERNAME}
 POSTGRES_DB: ${DB_DATABASE_NAME}
 POSTGRES_INITDB_ARGS: '--data-checksums'
 volumes:
 - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
 healthcheck:
 test: >-
 pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1;
 Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align
 --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')";
 echo "checksum failure count is $$Chksum";
 [ "$$Chksum" = '0' ] || exit 1
 interval: 5m
 start_interval: 30s
 start_period: 5m
 command: >-
 postgres
 -c shared_preload_libraries=vectors.so
 -c 'search_path="$$user", public, vectors'
 -c logging_collector=on
 -c max_wal_size=2GB
 -c shared_buffers=512MB
 -c wal_compression=on
 restart: always

volumes:
 model-cache:

.env
7 lines

UPLOAD_LOCATION=./immich/media
DB_DATA_LOCATION=./immich/postgres
IMMICH_VERSION=release
DB_PASSWORD=postgres
DB_USERNAME=postgres
DB_DATABASE_NAME=immich
IMMICH_PORT=1054

IT Tools

2024-01-15

IT Tools is a collection of web-based tools designed for IT professionals. It includes applications like CyberChef for data analysis, Draw.io for diagramming, and other utilities that enhance productivity and collaboration in IT environments.

Portainer Stack

yaml
6 lines

services:
 it-tools:
 restart: unless-stopped
 image: corentinth/it-tools:latest
 ports:
 - 8800:80

Linkwarden

2024-01-15

Ref: https://arstech.net/install-linkwarden-on-portainer/

Linkwarden is a self-hosted bookmark manager that allows users to save, organize, and share web links. It provides a web interface for managing bookmarks with features like tagging, archiving, and collaboration, ensuring data privacy and control.

Portainer Stack

yaml
30 lines

services:
 linkwarden:
 container_name: linkwarden
 image: ghcr.io/linkwarden/linkwarden:latest
 restart: unless-stopped
 volumes:
 - ./linkwarden/data:/data/data
 environment:
 - DATABASE_URL=postgresql://dbuser1:PASSWORD@linkwarden-db:5432/linkwarden
 - NEXTAUTH_SECRET=SuperPassword
 - NEXTAUTH_URL=http://localhost/api/v1/auth
 ports:
 - "4222:3000"
 networks:
 - linkwarden_net
 linkwarden-db:
 container_name: linkwarden-db
 image: postgres:16-alpine
 restart: unless-stopped
 environment:
 - POSTGRES_USER=dbuser1
 - POSTGRES_PASSWORD=PASSWORD
 - POSTGRES_DB=linkwarden
 volumes:
 - ./linkwarden/pgdata:/var/lib/postgresql/data
 networks:
 - linkwarden_net
networks:
 linkwarden_net:
 driver: bridge

Mattermost

2024-01-15

MatterMost is an open-source, self-hosted collaboration platform designed for team communication and project management. It provides a web-based interface for messaging, file sharing, and project tracking, making it suitable for teams of all sizes. MatterMost supports real-time chat, threaded conversations, and integrations with various tools, enhancing productivity and collaboration within teams.

Portainer Stack

Ref: https://mattermost.com/

Example Playbook - https://github.com/it33/playbook-templates/blob/main/cyber-crisis-response.json

yaml
38 lines

services:
 mattermost:
 image: "mattermost/mattermost-enterprise-edition:9.5" # https://hub.com/r/mattermost/mattermost-enterprise-edition/tags
 restart: "unless-stopped"
 container_name: mattermost
 depends_on:
 - "mattermost_db"
 ports:
 - "8065:8065"
 environment:
 MM_SQLSETTINGS_DRIVERNAME: "postgres"
 MM_SQLSETTINGS_DATASOURCE: "postgres://${MM_POSTGRES_USER}:${MM_POSTGRES_PASSWORD}@mattermost_db/${MM_POSTGRES_DB}?sslmode=disable&connect_timeout=10"
 MM_SERVICESETTINGS_LISTENADDRESS: ":8065"
 MM_SERVICESETTINGS_SITEURL: "http://10.1.1.2:8065" # Or https://MM.domain.com
 MM_SERVICESETTINGS_ENABLEBOTACCOUNTCREATION: "true"
 MM_SERVICESETTINGS_ENABLEUSERACCESSTOKENS: "true"
 MM_SERVICESETTINGS_ENABLEOAUTHSERVICEPROVIDER: "true"
 MM_SERVICESETTINGS_ENABLEDEVELOPER: "true"
 MM_SERVICESETTINGS_ENABLETESTING: "true"
 MM_PLUGINSETTINGS_AUTOMATICPREPACKAGEDPLUGINS: "true"
 MM_EXPERIMENTALSETTINGS_ENABLEAPPBAR: "true"
 MM_PLUGINSETTINGS_ENABLEUPLOADS: "true"
 MM_LOGSETTINGS_CONSOLELEVEL: "DEBUG"
 MM_LOGSETTINGS_FILELEVEL: "DEBUG"
 MM_FILESETTINGS_MAXFILESIZE: 123524266
 MM_FEATUREFLAGS_AppsEnabled: "true"
 MM_FEATUREFLAGS_PluginApps: "1.1.0" # https://github.com/mattermost/mattermost-plugin-apps/releases
 MM_SERVICESETTINGS_ENABLELOCALMODE: "true"
 MM_SERVICESETTINGS_ALLOWEDUNTRUSTEDINTERNALCONNECTIONS: ""

 mattermost_db:
 image: "postgres"
 container_name: mattermost_db
 restart: "unless-stopped"
 environment:
 POSTGRES_PASSWORD: "${MM_POSTGRES_PASSWORD}"
 POSTGRES_USER: "${MM_POSTGRES_USER}"
 POSTGRES_DB: "${MM_POSTGRES_DB}"

.env
5 lines

MM_POSTGRES_USER=postmm
MM_POSTGRES_PASSWORD=postmm
MM_POSTGRES_DB=postmm
MM_USER_EMAIL=
MM_USER_PASSWORD=postmm

Mermaid JS Live Editor - Diagram as Code

2024-01-15

Ref: https://github.com/mermaid-js/mermaid-live-editor

Mermaid JS Live Editor is a web-based tool that allows users to create and visualize diagrams using Mermaid syntax. It supports various types of diagrams, including flowcharts, sequence diagrams, class diagrams, and more. The live editor provides an interactive environment where users can write Mermaid code and see the rendered diagram in real-time. It is particularly useful for developers, technical writers, and anyone who needs to create diagrams quickly and efficiently. The Mermaid syntax is simple and intuitive, making it easy to learn and use.

MeTube - Web-Based Video Downloader

2024-01-15

MeTube is a web-based YouTube downloader that allows users to download videos from YouTube and other platforms. It features a user-friendly interface, making it easy to search for and download videos in various formats and resolutions. MeTube is designed to be efficient and straightforward, catering to users who want to manage their media content without the complexity of traditional downloaders.

Portainer Stack

Ref: https://github.com/alexta69/metube

yaml
9 lines

services:
 metube:
 image: ghcr.io/alexta69/metube
 container_name: metube
 restart: unless-stopped
 ports:
 - "8081:8081"
 volumes:
 - ./metube/downloads:/downloads

n8n - Workflow Automation Platform

2024-01-15

n8n is a powerful workflow automation tool that allows users to connect various services and automate tasks. It provides a visual interface for creating workflows, enabling users to design complex automations without needing extensive programming knowledge. n8n supports a wide range of integrations with popular applications and services, making it a versatile solution for automating repetitive tasks and streamlining processes.

Portainer Stack

yaml
40 lines

services:
 n8n:
 image: n8nio/n8n:latest
 restart: unless-stopped
 ports:
 - 8300:5678
 depends_on:
 - n8n-db
 environment:
 TZ: America/Toronto
 N8N_PORT: 5678
 DB_TYPE: postgresdb
 WEBHOOK_URL: http://10.1.3.160:8300
 DB_POSTGRESDB_HOST: n8n-db
 DB_POSTGRESDB_PORT: 5432
 DB_POSTGRESDB_DATABASE: ${POSTGRES_DB}
 DB_POSTGRESDB_USER: ${POSTGRES_USER}
 DB_POSTGRESDB_PASSWORD: ${POSTGRES_PASSWORD}
 N8N_SECURE_COOKIE: false
 volumes:
 - /root/n8n/n8n-data:/home/node/.n8n
 n8n-db:
 image: postgres:13-alpine
 user: "0:0"
 volumes:
 - /root/n8n/db-data:/var/lib/postgresql/data
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres"]
 interval: 10s
 timeout: 5s
 retries: 5
 environment:
 TZ: America/Toronto
 POSTGRES_USER: ${POSTGRES_USER}
 POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
 POSTGRES_DB: ${POSTGRES_DB}

volumes:
 n8n-n8n-data:
 n8n-db-data:

env
4 lines

POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=postgres
N8N_SECURE_COOKIE=false

Post setup, you may need to change permissions on the n8n-data and db-data directories to ensure that the n8n service can write to them. You can do this by running:

NextCloud - Self-Hosted Cloud Storage & Collaboration

2024-01-15

Portainer Stack

Ref: https://help.nextcloud.com/t/how-to-docker-compose-with-notify-push-2024/186721

yaml
27 lines

services:
 nc:
 image: nextcloud:apache
 environment:
 - POSTGRES_HOST=ncdb
 - POSTGRES_PASSWORD=nextcloud
 - POSTGRES_DB=nextcloud
 - POSTGRES_USER=nextcloud
 ports:
 - 8500:80
 restart: always
 volumes:
 - ./nextcloud/nc_data:/var/www/html
 ncdb:
 image: postgres:alpine
 environment:
 - POSTGRES_PASSWORD=nextcloud
 - POSTGRES_DB=nextcloud
 - POSTGRES_USER=nextcloud
 restart: always
 volumes:
 - ./nextcloud/db_data:/var/lib/postgresql/data
 expose:
 - 5432
volumes:
 db_data:
 nc_data:

NexTerm - Multi-Protocol Remote Access Client

2024-01-15

NexTerm is a versatile remote desktop client that supports multiple protocols, including RDP, VNC, and SSH. It is designed for IT professionals and users who need to access remote systems securely and efficiently. NexTerm provides a user-friendly interface for managing remote connections, making it an essential tool for remote access and administration.

Portainer Stack

yaml
12 lines

services:
 nexterm:
 image: germannewsmaker/nexterm:1.0.6-OPEN-PREVIEW
 container_name: nexterm
 hostname: nexterm
 restart: ${SHUFFLE_RESTART_POLICY:-unless-stopped}
 environment:
 - ENCRYPTION_KEY: $(openssl rand -hex 32)
 ports:
 - "${NEXTERMPORT:-6989}:6989"
 volumes:
 - /root/utility/nexterm:/app/data

Nginx Proxy Manager - Reverse Proxy with SSL

2024-01-15

Ref: Nginx Proxy Manager

This guide provides a Docker Compose setup for Nginx Proxy Manager, which allows you to manage your web applications and services with ease. It is designed to work with a Synology NAS or similar systems.

Portainer Setup

yaml
34 lines

services:
 nginx-proxy-manager:
 image: 'jc21/nginx-proxy-manager:latest'
 container_name: 'nginx-proxy-manager'
 hostname: 'nginx-proxy-manager'
 restart: unless-stopped
 ports:
 - '80:80' # Public HTTP Port
 - '443:443' # Public HTTPS Port
 - '81:81' # Admin Web Port
 environment:
 DB_POSTGRES_HOST: 'npm-db'
 DB_POSTGRES_PORT: '5432'
 DB_POSTGRES_USER: $NPM_DBUSER
 DB_POSTGRES_PASSWORD: $NPM_DBPASS
 DB_POSTGRES_NAME: 'npm'
 # DISABLE_IPV6: 'true'
 volumes:
 - /root/nxing/data:/data
 - /root/nxing/letsencrypt:/etc/letsencrypt
 depends_on:
 - npm-db

 npm-db:
 image: postgres:latest
 container_name: 'npm-db'
 hostname: 'npm-db'
 restart: unless-stopped
 environment:
 POSTGRES_USER: $NPM_DBUSER
 POSTGRES_PASSWORD: $NPM_DBPASS
 POSTGRES_DB: 'npm'
 volumes:
 - /root/nxing/postgres:/var/lib/postgresql/data

env
2 lines

NPM_DBUSER='nginx'
NPM_DBPASS='nginx'

Ollama & Open WebUI - Self-Hosted AI Models

2024-01-15

Ref: Docker Compose - usrbinkat

Ollama is a platform that allows users to run AI models locally, providing a self-hosted solution for machine learning applications. Open WebUI is a web interface that interacts with Ollama, enabling users to easily access and manage AI models through a user-friendly dashboard.

Portainer Stack

yaml
67 lines

services:
 open-webui:
 container_name: open-webui
 image: ghcr.io/open-webui/open-webui:main
 environment:
 - MODEL_DOWNLOAD_DIR=./models
 - OLLAMA_API_BASE_URL=http://ollama:11434
 - OLLAMA_API_URL=http://ollama:11434
 - LOG_LEVEL=debug
 - WEBUI_SECRET_KEY=your_secret_key # Add this to prevent logouts after updates
 volumes:
 - ./data:/data
 - ./models:/models
 - ./open-webui:/app/backend/data # Corrected path based on documentation
 ports:
 - "8081:8080"
 logging:
 driver: json-file
 options:
 max-size: "5m"
 max-file: "2"
 depends_on:
 - ollama
 extra_hosts:
 - "host.docker.internal:host-gateway"
 networks:
 - ollama
 restart: unless-stopped

 ollama:
 container_name: ollama
 image: ollama/ollama:latest
 #runtime: nvidia
 environment:
 - NVIDIA_VISIBLE_DEVICES=all
 - NVIDIA_DRIVER_CAPABILITIES=compute,utility
 - CUDA_VISIBLE_DEVICES=0
 - LOG_LEVEL=debug
 deploy:
 resources:
 reservations:
 devices:
 - driver: nvidia
 capabilities: [gpu]
 count: all
 volumes:
 - ./ollama:/root/.ollama
 - ./models:/models
 ports:
 - "11434:11434"
 logging:
 driver: json-file
 options:
 max-size: "5m"
 max-file: "2"
 networks:
 - ollama
 restart: unless-stopped

volumes:
 data:
 models:
 ollama:
 open-webui:
networks:
 ollama:
 driver: bridge

Paperless-ngx - Document Management System

2024-01-15

Paperless-ngx is a document management system designed for archiving and managing digital documents. It allows users to scan, upload, and organize documents efficiently, providing features like OCR (Optical Character Recognition) to make documents searchable. Paperless-ngx is self-hosted, ensuring data privacy and control over your documents.

Portainer Stack

yaml
40 lines

services:
 paperless-redis:
 image: 'docker.io/library/redis:7'
 volumes:
 - './paperless/redisdata:/data'
 restart: 'always'
 hostname: paperless-redis
 container_name: Paperless-Redis

 paperless-db:
 image: 'docker.io/library/postgres:16'
 environment:
 - POSTGRES_PASSWORD=paperless
 - POSTGRES_USER=paperless
 - POSTGRES_DB=paperless
 volumes:
 - './paperless/pgdata:/var/lib/postgresql/data'
 restart: 'always'
 hostname: paperless-db
 container_name: Paperless-DB

 paperless-ngx:
 image: 'ghcr.io/paperless-ngx/paperless-ngx:latest'
 environment:
 - PAPERLESS_REDIS=redis://Paperless-Redis:6379
 - PAPERLESS_DBHOST=Paperless-DB
 - PAPERLESS_OCR_LANGUAGE=eng
 - USERMAP_UID=1000
 - USERMAP_GID=1000
 - PAPERLESS_OCR_LANGUAGES=fra
 volumes:
 - './paperless/data:/usr/src/paperless/data'
 - './paperless/media:/usr/src/paperless/media'
 - './paperless/export:/usr/src/paperless/export'
 - './paperless/consume:/usr/src/paperless/consume'
 ports:
 - '8000:8000'
 restart: 'always'
 hostname: paperless-ngx
 container_name: Paperless-NGX

Photopea - Web-Based Image Editor

2024-01-15

Photopea is a web-based image editor that provides functionality similar to Adobe Photoshop. It supports a wide range of file formats, including PSD, XCF, Sketch, and more. Photopea is designed for graphic design, photo editing, and other creative tasks, making it a versatile tool for both professionals and hobbyists.

It offers features such as layers, filters, and advanced editing tools, allowing users to create and manipulate images directly in their web browser without the need for additional software installations.

Planka - Self-Hosted Kanban Board

2024-01-15

Planka is a kanban board application designed for managing tasks and projects. It provides a visual interface for organizing work, tracking progress, and collaborating with team members. Planka is suitable for agile project management and supports features like task assignment, due dates, and project boards.

Portainer Stack

yaml
49 lines

services:
 planka:
 image: ghcr.io/plankanban/planka:latest
 container_name: Planka
 restart: on-failure
 volumes:
 - ./Planka/user-avatars:/app/public/user-avatars
 - ./Planka/project-background-images:/app/public/project-background-images
 - ./Planka/attachments:/app/private/attachments
 ports:
 - 8200:1337
 environment:
 - BASE_URL=http://10.1.1.16:8200
 - DATABASE_URL=postgresql://postgres@postgres/planka
 - SECRET_KEY=notsecretkey
 - DEFAULT_ADMIN_EMAIL=planka@4n6post.com
 - DEFAULT_ADMIN_PASSWORD=planka@4n6post.com
 - DEFAULT_ADMIN_NAME=admin
 - DEFAULT_ADMIN_USERNAME=admin
 depends_on:
 - postgres
 networks:
 - planka-net

 postgres:
 image: postgres:14-alpine
 container_name: Planka_DB
 restart: on-failure
 volumes:
 - ./Planka/db-data:/var/lib/postgresql/data
 environment:
 - POSTGRES_DB=planka
 - POSTGRES_HOST_AUTH_METHOD=trust
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d planka"]
 interval: 10s
 timeout: 5s
 retries: 5
 networks:
 - planka-net

networks:
 planka-net:

volumes:
 db-data:
 user-avatars:
 project-background-images:
 attachments:

Portainer - Docker Container Management UI

2024-01-15

Portainer is a lightweight management UI that allows you to easily manage your Docker containers, images, networks, and volumes. It provides a user-friendly interface for monitoring and deploying applications, making it an essential tool for Docker users.

Portainer Stack

yaml
16 lines

services:
 portainer-ce:
 image: 'portainer/portainer-ce:latest'
 volumes:
 - '/var/run/docker.sock:/var/run/docker.sock'
 - 'portainer_data:/data'
 command: '-H unix:///var/run/docker.sock'
 ports:
 - '9443:9000'
 restart: 'always'
 hostname: portainer
 container_name: Portainer

volumes:
 portainer_data:
 driver: local

If you want an agent, this is the configuration:

QuakeJS - Classic FPS in Your Browser

2024-01-15

Ref: QuakeJS

Quake is a fast, lightweight, and highly customizable game server for the classic first-person shooter game. It allows players to host their own game sessions and provides a variety of options for customization and optimization.

Portainer Stack

yaml
11 lines

services:
 hal-quake:
 image: treyyoder/quakejs
 container_name: Quake
 restart: unless-stopped
 environment:
 - HTTP_PORT=666
 - SERVER=$IP
 ports:
 - "27960:27960"
 - "666:80"

env
1 lines

IP=your_ip_address

Regex101 - Regular Expression Tester

2024-01-15

Regex101 is a web-based tool designed for testing and debugging regular expressions. It provides an interactive environment where users can write, test, and visualize the behavior of regex patterns against sample text. This tool is particularly useful for developers, data analysts, and anyone who works with text processing and validation.

Regex101 Stack

yaml
7 lines

services:
 regex101:
 image: loopsun/regex101:latest
 container_name: regex101
 restart: always
 ports:
 - 8400:9090

TheHive - Security Incident Response Platform

2024-01-15

Ref: Strangebee - Installation

TheHive is a scalable, open-source Security Incident Response Platform (SIRP) designed to assist security teams in managing and responding to incidents effectively. It provides a web-based interface for incident management, collaboration, and integration with various security tools, making it suitable for organizations of all sizes.

Portainer Stack

yaml
24 lines

services:
 hal-thehive:
 image: thehiveproject/thehive4:4.1
 container_name: Thehive4
 restart: unless-stopped
 ports:
 - "8700:9000"
 volumes:
 - ./thehive/config/thehive/application.conf:/etc/thehive/application.conf
 - ./thehive/volumes/thehive/db:/opt/thp/thehive/db
 - ./thehive/volumes/thehive/index:/opt/thp/thehive/index
 - ./thehive/volumes/thehive/data:/opt/thp/thehive/data
 environment:
 - MAX_HEAP_SIZE=2G
 - HEAP_NEWSIZE=2G
 networks:
 - thehive
networks:
 thehive:

volumes:
 thehive_db:
 thehive_index:
 thehive_data:

TOSIOS - Multiplayer Web Game

2024-01-15

Ref: TOSIOS

TOSIOS is a self-hosted, open-source web game that supports multiple players. It is designed to be played in a web browser and offers a unique gaming experience with strategic elements. Players can join games, compete against each other, and enjoy the game without the need for any installations.

Portainer Stack

yaml
7 lines

services:
 tosios:
 image: halftheopposite/tosios
 container_name: tosios
 restart: always
 ports:
 - 3001:3001

Vaultwarden - Self-Hosted Password Manager

2024-01-15

Vaultwarden is a self-hosted password manager that provides a secure and convenient way to store and manage passwords. It is an open-source alternative to Bitwarden, allowing users to maintain control over their data while benefiting from a user-friendly interface and robust security features. Vaultwarden supports various authentication methods, including two-factor authentication, and offers features like password sharing, organization management, and secure note storage. It is designed to be lightweight and efficient, making it suitable for both personal and organizational use.

Velociraptor - Endpoint Visibility & Digital Forensics

2024-01-15

Velociraptor is a web-based tool designed for endpoint visibility and management. It provides a user-friendly interface for monitoring and managing endpoints, making it an essential tool for security professionals and system administrators.

Portainer Stack

yaml
18 lines

services:
 velociraptor:
 image: wlambert/velociraptor:latest
 container_name: Velociraptor
 hostname: velociraptor
 restart: unless-stopped
 ports:
 - "8000:8000"
 - "8001:8001"
 - "8889:8889"
 volumes:
 - ./velociraptor:/velociraptor/:rw
 environment:
 - VELOX_USER=${VELOX_USER}
 - VELOX_PASSWORD=${VELOX_PASSWORD}
 - VELOX_ROLE=${VELOX_ROLE}
 - VELOX_SERVER_URL=${VELOX_SERVER_URL}
 - VELOX_FRONTEND_HOSTNAME=${VELOX_FRONTEND_HOSTNAME}

env
6 lines

# VELOX_USER=admin
# VELOX_PASSWORD=admin
# VELOX_ROLE=administrator
# VELOX_SERVER_URL=https://10.1.1.16:8889
# VELOX_FRONTEND_HOSTNAME=MedaRaptor
# VELOX_SERVER_URL2=https://raptor.4n6post.com/

VS Code Server - Browser-Based IDE

2024-01-15

VSCode Server is a web-based version of Visual Studio Code that allows developers to work remotely on their projects using a web browser. It provides a full-featured development environment with support for extensions, debugging, and collaboration, making it an ideal tool for remote development workflows.

Portainer Stack

Default Password here: thepassword

yaml
20 lines

services:
 vscode:
 command: "code-server --install-extension esbenp.prettier-vscode ms-python.debugpy redhat.vscode-yaml redhat.vscode-xml gitlab.gitlab-workflow vscode-icons-team.vscode-icons yzhang.markdown-all-in-one mechatroner.rainbow-csv oderwat.indent-rainbow shd101wyy.markdown-preview-enhanced grapecity.gc-excelviewer bierner.markdown-mermaid bpruitt-goddard.mermaid-markdown-syntax-highlighting"
 image: "lscr.io/linuxserver/code-server:latest"
 environment:
 - PUID=1000
 - PGID=1000
 - TZ=Etc/UTC
 - PASSWORD=thepassword
 - HASHED_PASSWORD=
 - SUDO_PASSWORD=thepassword
 - SUDO_PASSWORD_HASH=
 - DEFAULT_WORKSPACE=/config/workspace
 volumes:
 - "./vscode:/config"
 ports:
 - "8443:8443"
 restart: "always"
 hostname: vscode
 container_name: VSCode

Watchtower - Automatic Docker Container Updates

2024-01-15

Ref: https://github.com/containrrr/watchtower.git

Watchtower is a tool designed to automatically update running Docker containers whenever a new image is available. It monitors your containers and checks for updates at specified intervals, ensuring that your applications are always running the latest versions without manual intervention.

Portainer Stack

yaml
8 lines

services:
 watchtower:
 image: containrrr/watchtower
 container_name: watchtower
 volumes:
 - /var/run/docker.sock:/var/run/docker.sock
 command: --interval 600 open-webui # Check for updates every 10 minutes
 restart: unless-stopped