Merge pull request 'feat/kener' (#9) from feat/kener into main

Reviewed-on: forust/homelab#9

checkmk/compose.yaml

@@ -13,6 +13,7 @@ services:
     environment:
       - CMK_PASSWORD=${CMK_PASSWORD:-password}
       - CMK_SITE_ID=cmk
+      - TZ=${TZ:-Etc/UTC}
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=proxy"

errorpages/compose.yaml

@@ -2,6 +2,7 @@ services:
   errorpage:
     build: .
     container_name: error-pages
+    restart: unless-stopped
     ports:
       - 1234:80
     networks:

kener/.env.example

@@ -0,0 +1,3 @@
+KENER_SECRET_KEY=your_secret_key_here
+ORIGIN=http://localhost:3000
+TZ=Etc/UTC

kener/compose.yaml

@@ -0,0 +1,39 @@
+services:
+  kener:
+    image: rajnandan1/kener:latest
+    container_name: kener
+    restart: unless-stopped
+    # ports:
+    #   - 3000:3000/tcp
+    environment:
+      - KENER_SECRET_KEY=${KENER_SECRET_KEY?Kener requires a secret key}
+      - ORIGIN=${ORIGIN:-http://localhost:3000}
+      - TZ:${TZ:-Etc/UTC}
+    volumes:
+      - db:/app/database
+      - uploads:/app/uploads
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.services.kener.loadbalancer.server.port=3000"
+
+      # Prod Router
+      - "traefik.http.routers.kener.rule=Host(`status.forust.xyz`)"
+      - "traefik.http.routers.kener.entrypoints=websecure"
+      - "traefik.http.routers.kener.tls=true"
+      # Local Router
+      - "traefik.http.routers.kener-local.rule=Host(`status.workstation.internal`)"
+      - "traefik.http.routers.kener-local.entrypoints=websecure"
+      - "traefik.http.routers.kener-local.tls=true"
+      # Dev Router
+      - "traefik.http.routers.kener-dev.rule=Host(`status.gigaforust.internal`)"
+      - "traefik.http.routers.kener-dev.entrypoints=websecure"
+      - "traefik.http.routers.kener-dev.tls=true"
+    networks:
+      - proxy
+volumes:
+  db:
+  uploads:
+networks:
+  proxy:
+    external: true

metube/compose.yaml

@@ -23,7 +23,7 @@ services:
       - "traefik.http.routers.metube.middlewares=security-chain@file"
       - "traefik.http.routers.metube.tls=true"
       # Local Router
-      - "traefik.http.routers.metube-local.rule=Host(`metube.workstation.internal`))"
+      - "traefik.http.routers.metube-local.rule=Host(`metube.workstation.internal`)"
       - "traefik.http.routers.metube-local.entrypoints=websecure"
       - "traefik.http.routers.metube-local.middlewares=security-headers@file"
       - "traefik.http.routers.metube-local.tls=true"

traefik/dynamic/tls.yml

@@ -1,17 +1,17 @@
 # TLS Configuration
-# tls:
+tls:
-#   certificates:
+  certificates:
-#     # Cloudflare Origin CA *.forust.xyz
+    # Cloudflare Origin CA *.forust.xyz
-#     - certFile: /certs/cloudflare.pem
+    # - certFile: /certs/cloudflare.pem
-#       keyFile: /certs/cloudflare.key
+    #   keyFile: /certs/cloudflare.key
-#     - certFile: /certs/xdfnx.pem
+    - certFile: /certs/xdfnx.pem
-#       keyFile: /certs/xdfnx.key
+      keyFile: /certs/xdfnx.key
-   stores:
+  stores:
-     default:
+    default:
-       defaultCertificate:
+      defaultCertificate:
-         # Fallback local certificate
+        # Fallback local certificate
-         certFile: /certs/gigaforust.internal+1.pem
+        certFile: /certs/gigaforust.internal+1.pem
-         keyFile: /certs/gigaforust.internal+1-key.pem
+        keyFile: /certs/gigaforust.internal+1-key.pem
 
   options:
     default: