Stocks

2024-10-12 20:48:09 +01:00
parent 2e868a6015
commit c487d5cec4
22 changed files with 173 additions and 57 deletions
@@ -8,7 +8,7 @@
    api_host: 10.0.2.2
    password: "{{ lxc_password }}"
    hostname: geoguessr
-    ostemplate: "local:vztmpl/debian-12-standard_12.0-1_amd64.tar.zst"
+    ostemplate: "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst"
    netif: "{'net0':'name=eth0,\
      gw=10.0.0.1,\
      ip=10.0.2.39/21,\
@@ -0,0 +1,16 @@
+COMPOSE_PROJECT_NAME=ghostfolio
+
+# CACHE
+REDIS_HOST=localhost
+REDIS_PORT=6379
+REDIS_PASSWORD={{ ghostfolio_redis_pass }}
+
+# POSTGRES
+POSTGRES_DB=ghostfolio-db
+POSTGRES_USER=ghostfolio
+POSTGRES_PASSWORD={{ ghostfolio_postgres_pass }}
+
+# VARIOUS
+ACCESS_TOKEN_SALT={{ ghostfolio_token_salt }}
+DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@localhost:5432/${POSTGRES_DB}?connect_timeout=300&sslmode=prefer
+JWT_SECRET_KEY={{ ghostfolio_jwt }}
@@ -0,0 +1,64 @@
+services:
+  ghostfolio:
+    image: docker.io/ghostfolio/ghostfolio:latest
+    init: true
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
+    env_file:
+      - .env
+    environment:
+      DATABASE_URL: postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}?connect_timeout=300&sslmode=prefer
+      REDIS_HOST: redis
+      REDIS_PASSWORD: ${REDIS_PASSWORD}
+    ports:
+      - 3333:3333
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    healthcheck:
+      test: ['CMD-SHELL', 'curl -f http://localhost:3333/api/v1/health']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  postgres:
+    image: docker.io/library/postgres:15
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_READ_SEARCH
+      - FOWNER
+      - SETGID
+      - SETUID
+    security_opt:
+      - no-new-privileges:true
+    env_file:
+      - .env
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    volumes:
+      - /data/postgres:/var/lib/postgresql/data
+
+  redis:
+    image: docker.io/library/redis:alpine
+    user: '999:1000'
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
+    env_file:
+      - .env
+    command: ['redis-server', '--requirepass', $REDIS_PASSWORD]
+    healthcheck:
+      test: ['CMD-SHELL', 'redis-cli --pass $REDIS_PASSWORD ping | grep PONG']
+      interval: 10s
+      timeout: 5s
+      retries: 5
@@ -2,13 +2,13 @@
 - name: Create container
  community.general.proxmox:
    vmid: 640
-    node: impa
+    node: purah
    api_user: root@pam
    api_password: "{{ proxmox_api_password }}"
    api_host: 10.0.2.2
    password: "{{ lxc_password }}"
-    hostname: n8n
-    ostemplate: "local:vztmpl/debian-12-standard_12.2-1_amd64.tar.zst"
+    hostname: ghostfolio
+    ostemplate: "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst"
    netif: "{'net0':'name=eth0,\
      gw=10.0.0.1,\
      ip=10.0.2.40/21,\
@@ -24,7 +24,7 @@
      - nesting=1
      - keyctl=1
    mounts: '{
-      "mp0":"ssd250:2,mp=/data,backup=1"
+      "mp0":"purah-mirror-860gb:10,mp=/data,backup=1"
      }'
-    disk: ssd250:10
+    disk: purah-mirror-860gb:20
    force: yes
@@ -8,7 +8,7 @@
    api_host: 10.0.2.2
    password: "{{ lxc_password }}"
    hostname: immich
-    ostemplate: "local:vztmpl/debian-12-standard_12.2-1_amd64.tar.zst"
+    ostemplate: "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst"
    netif: "{'net0':'name=eth0,\
      gw=10.0.0.1,\
      ip=10.0.2.18/21,\
@@ -1 +0,0 @@
-WEBHOOK_URL=https://n8n.lino.cooking/
@@ -1,12 +0,0 @@
-version: "3"
-services:
-  n8n:
-    container_name: n8n
-    image: docker.n8n.io/n8nio/n8n
-    restart: always
-    env_file:
-      - .env
-    ports:
-      - 5678:5678
-    volumes:
-      - /data/n8n:/home/node/.n8n 
@@ -8,7 +8,7 @@
    api_host: 10.0.2.2
    password: "{{ lxc_password }}"
    hostname: nginx-proxy-manager
-    ostemplate: "local:vztmpl/debian-12-standard_12.0-1_amd64.tar.zst"
+    ostemplate: "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst"
    netif: "{'net0':'name=eth0,\
      gw=10.0.0.1,\
      ip=10.0.2.37/21,\
@@ -7,7 +7,7 @@ server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

-    server_name n8n.*;
+    server_name stocks.*;

    include /config/nginx/ssl.conf;

@@ -17,7 +17,7 @@ server {
    #include /config/nginx/ldap-server.conf;

    # enable for Authelia (requires authelia-location.conf in the location block)
-    # include /config/nginx/authelia-server.conf;
+    include /config/nginx/authelia-server.conf;

    # enable for Authentik (requires authentik-location.conf in the location block)
    #include /config/nginx/authentik-server.conf;
@@ -31,7 +31,7 @@ server {
        #include /config/nginx/ldap-location.conf;

        # enable for Authelia (requires authelia-server.conf in the server block)
-        # include /config/nginx/authelia-location.conf;
+        include /config/nginx/authelia-location.conf;

        # enable for Authentik (requires authentik-server.conf in the server block)
        #include /config/nginx/authentik-location.conf;
@@ -39,9 +39,18 @@ server {
        include /config/nginx/proxy.conf;
        include /config/nginx/resolver.conf;
        set $upstream_app 10.0.2.40;
-        set $upstream_port 5678;
+        set $upstream_port 3333;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;

    }
-}
+
+    location ~ (/stocks)?/api {
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app 10.0.2.40;
+        set $upstream_port 3333;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+    }
+}
@@ -8,7 +8,7 @@
    api_host: 10.0.2.2
    password: "{{ lxc_password }}"
    hostname: upsnap
-    ostemplate: "local:vztmpl/debian-12-standard_12.0-1_amd64.tar.zst"
+    ostemplate: "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst"
    netif: "{'net0':'name=eth0,\
      gw=10.0.0.1,\
      ip=10.0.2.38/21,\