Folder reorg if prep for using git runner

2026-01-10 21:25:19 -06:00 · 2026-01-10 21:25:19 -06:00 · 1a3749112d
commit 1a3749112d
parent 304e85e450
102 changed files with 833 additions and 244 deletions
--- a/compose/nas/.env
+++ b/compose/nas/.env
@ -0,0 +1,23 @@
+# You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables
+
+# The location where your uploaded files are stored
+UPLOAD_LOCATION=/srv/a18f546e-e9bf-4a8d-8b9d-02e7ec32b632/immich/library
+# The location where your database files are stored
+DB_DATA_LOCATION=/srv/a18f546e-e9bf-4a8d-8b9d-02e7ec32b632/immich/postgres
+
+
+
+# To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
+TZ=America/Chicago
+
+# The Immich version to use. You can pin this to a specific version like "v1.71.0"
+IMMICH_VERSION=v2
+
+# Connection secret for postgres. You should change it to a random password
+# Please use only the characters `A-Za-z0-9`, without special characters or spaces
+DB_PASSWORD=postgres
+
+# The values below this line do not need to be changed
+###################################################################################
+DB_USERNAME=postgres
+DB_DATABASE_NAME=immich
--- a/compose/nas/calibre.yaml
+++ b/compose/nas/calibre.yaml
@ -0,0 +1,40 @@
+services:
+  Calibre:
+    image: lscr.io/linuxserver/calibre:latest
+    container_name: calibre
+    hostname: calibre
+    environment:
+      - TZ=America/Chicago
+      - PGID=998
+      - PUID=1001 
+    networks:
+      - netgrimoire
+    volumes:
+      - /DockerVol/Calibre/Config:/config
+      - /DockerVol/Calibre/Plugins:/plugins
+      - /data/nfs/Baxter/Data/media:/data:shared
+    ports:
+      - 7070:8080 
+      - 7081:8081
+    restart: unless-stopped
+    security_opt:
+      - seccomp=unconfined
+   # deploy:
+    labels:
+      # - homepage.group=Library
+      # - homepage.name=Calibre
+      # - homepage.icon=calibre.png
+      # - homepage.href=http://calibre.netgrimoire.com
+      # - homepage.description=Calibre Library
+      # - kuma.calibre.http.name="Calibre"
+      # - kuma.calibre.http.url=http://calibre:8080
+      - caddy=calibre.netgrimoire.com
+      - caddy.import=authentik
+      - caddy.reverse_proxy="{{upstreams 8080}}"
+      # placement:
+      #   constraints:
+      #     - node.hostname == nas
+
+networks:
+  netgrimoire:
+    external: true 
--- a/compose/nas/cloud.yaml
+++ b/compose/nas/cloud.yaml
@ -0,0 +1,52 @@
+services:
+  nextcloud-aio-mastercontainer:
+    image: nextcloud/all-in-one:latest
+    init: true
+    restart: always
+    container_name: nextcloud-aio-mastercontainer # This line is not allowed to be changed as otherwise AIO will not work correctly
+    volumes:
+      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config # This line is not allowed to be changed as otherwise the built-in backup solution will not work
+      - /var/run/docker.sock:/var/run/docker.sock:ro # May be changed on macOS, Windows or docker rootless. See the applicable documentation. If adjusting, don't forget to also set 'WATCHTOWER_DOCKER_SOCKET_PATH'!
+      - /srv/ssd1/NextCloud-AIO:/var/www/html/data
+    networks:
+      - netgrimoire # add to the same network as docker run would do
+    ports:
+    #  - 80:80 # Can be removed when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else). See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
+      - 8080:8080
+    #  - 8443:8443 # Can be removed when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else). See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
+    environment: # Is needed when using any of the options below
+      # AIO_DISABLE_BACKUP_SECTION: false # Setting this to true allows to hide the backup section in the AIO interface. See https://github.com/nextcloud/all-in-one#how-to-disable-the-backup-section
+      # AIO_COMMUNITY_CONTAINERS: # With this variable, you can add community containers very easily. See https://github.com/nextcloud/all-in-one/tree/main/community-containers#community-containers
+      APACHE_PORT: 11000 # Is needed when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else). See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
+      APACHE_IP_BINDING: 0.0.0.0 # Should be set when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else) that is running on the same host. See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
+      APACHE_ADDITIONAL_NETWORK: netgrimoire # (Optional) Connect the apache container to an additional docker network. Needed when behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else) running in a different docker network on same server. See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
+      # BORG_RETENTION_POLICY: --keep-within=7d --keep-weekly=4 --keep-monthly=6 # Allows to adjust borgs retention policy. See https://github.com/nextcloud/all-in-one#how-to-adjust-borgs-retention-policy
+      # COLLABORA_SECCOMP_DISABLED: false # Setting this to true allows to disable Collabora's Seccomp feature. See https://github.com/nextcloud/all-in-one#how-to-disable-collaboras-seccomp-feature
+      NEXTCLOUD_DATADIR: /srv/ssd1/NextCloud-AIO # Allows to set the host directory for Nextcloud's datadir. ⚠️⚠️⚠️ Warning: do not set or adjust this value after the initial Nextcloud installation is done! See https://github.com/nextcloud/all-in-one#how-to-change-the-default-location-of-nextclouds-datadir
+      # NEXTCLOUD_MOUNT: /mnt/ # Allows the Nextcloud container to access the chosen directory on the host. See https://github.com/nextcloud/all-in-one#how-to-allow-the-nextcloud-container-to-access-directories-on-the-host
+      # NEXTCLOUD_UPLOAD_LIMIT: 16G # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-upload-limit-for-nextcloud
+      # NEXTCLOUD_MAX_TIME: 3600 # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-max-execution-time-for-nextcloud
+      # NEXTCLOUD_MEMORY_LIMIT: 512M # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-php-memory-limit-for-nextcloud
+      # NEXTCLOUD_TRUSTED_CACERTS_DIR: /path/to/my/cacerts # CA certificates in this directory will be trusted by the OS of the nextcloud container (Useful e.g. for LDAPS) See https://github.com/nextcloud/all-in-one#how-to-trust-user-defined-certification-authorities-ca
+      # NEXTCLOUD_STARTUP_APPS: deck twofactor_totp tasks calendar contacts notes # Allows to modify the Nextcloud apps that are installed on starting AIO the first time. See https://github.com/nextcloud/all-in-one#how-to-change-the-nextcloud-apps-that-are-installed-on-the-first-startup
+      # NEXTCLOUD_ADDITIONAL_APKS: imagemagick # This allows to add additional packages to the Nextcloud container permanently. Default is imagemagick but can be overwritten by modifying this value. See https://github.com/nextcloud/all-in-one#how-to-add-os-packages-permanently-to-the-nextcloud-container
+      # NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS: imagick # This allows to add additional php extensions to the Nextcloud container permanently. Default is imagick but can be overwritten by modifying this value. See https://github.com/nextcloud/all-in-one#how-to-add-php-extensions-permanently-to-the-nextcloud-container
+      # NEXTCLOUD_ENABLE_DRI_DEVICE: true # This allows to enable the /dev/dri device for containers that profit from it. ⚠️⚠️⚠️ Warning: this only works if the '/dev/dri' device is present on the host! If it should not exist on your host, don't set this to true as otherwise the Nextcloud container will fail to start! See https://github.com/nextcloud/all-in-one#how-to-enable-hardware-acceleration-for-nextcloud
+      # NEXTCLOUD_ENABLE_NVIDIA_GPU: true # This allows to enable the NVIDIA runtime and GPU access for containers that profit from it. ⚠️⚠️⚠️ Warning: this only works if an NVIDIA gpu is installed on the server. See https://github.com/nextcloud/all-in-one#how-to-enable-hardware-acceleration-for-nextcloud.
+      # NEXTCLOUD_KEEP_DISABLED_APPS: false # Setting this to true will keep Nextcloud apps that are disabled in the AIO interface and not uninstall them if they should be installed. See https://github.com/nextcloud/all-in-one#how-to-keep-disabled-apps
+      SKIP_DOMAIN_VALIDATION: true # This should only be set to true if things are correctly configured. See https://github.com/nextcloud/all-in-one?tab=readme-ov-file#how-to-skip-the-domain-validation
+      # TALK_PORT: 3478 # This allows to adjust the port that the talk container is using which is exposed on the host. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-talk-port
+      # WATCHTOWER_DOCKER_SOCKET_PATH: /var/run/docker.sock # Needs to be specified if the docker socket on the host is not located in the default '/var/run/docker.sock'. Otherwise mastercontainer updates will fail. For macos it needs to be '/var/run/docker.sock'
+    # security_opt: ["label:disable"] # Is needed when using SELinux
+ 
+
+volumes: # If you want to store the data on a different drive, see https://github.com/nextcloud/all-in-one#how-to-store-the-filesinstallation-on-a-separate-drive
+  nextcloud_aio_mastercontainer:
+    name: nextcloud_aio_mastercontainer # This line is not allowed to be changed as otherwise the built-in backup solution will not work
+
+
+networks:
+  netgrimoire:
+    external: true   
+
+  
--- a/compose/nas/immich.yaml
+++ b/compose/nas/immich.yaml
@ -0,0 +1,91 @@
+#
+# WARNING: Make sure to use the docker-compose.yml of the current release:
+#
+# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
+#
+# The compose file on main may not be compatible with the latest release.
+#
+name: immich
+
+services:
+  immich-server:
+    container_name: immich_server
+    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
+    # extends:
+    #   file: hwaccel.transcoding.yml
+    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
+    volumes:
+      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
+      - ${UPLOAD_LOCATION}:/usr/src/app/upload
+      - /etc/localtime:/etc/localtime:ro
+      - /srv/a18f546e-e9bf-4a8d-8b9d-02e7ec32b632:/mergerfs
+      - /srv/ssd1:/nextcloud
+
+
+    env_file:
+      - .env
+    ports:
+      - '2283:2283'
+    networks:
+      - netgrimoire
+      - immich
+    depends_on:
+      - redis
+      - database
+    #restart: always
+    healthcheck:
+      disable: false
+
+  immich-machine-learning:
+    container_name: immich_machine_learning
+    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
+    # Example tag: ${IMMICH_VERSION:-release}-cuda
+    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
+    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
+    #   file: hwaccel.ml.yml
+    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    volumes:
+      - model-cache:/cache
+    env_file:
+      - .env
+    restart: always
+    networks:
+      - immich
+    healthcheck:
+      disable: false
+
+  redis:
+    container_name: immich_redis
+    image: docker.io/valkey/valkey:8@sha256:81db6d39e1bba3b3ff32bd3a1b19a6d69690f94a3954ec131277b9a26b95b3aa
+    networks:
+      - immich    
+    healthcheck:
+      test: redis-cli ping || exit 1
+    restart: always
+
+  database:
+    container_name: immich_postgres
+    #image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
+
+    environment:
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_USER: ${DB_USERNAME}
+      POSTGRES_DB: ${DB_DATABASE_NAME}
+      POSTGRES_INITDB_ARGS: '--data-checksums'
+    volumes:
+      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
+      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
+    networks:
+      - immich
+    
+    restart: always
+
+volumes:
+  model-cache:
+
+networks:
+  netgrimoire:
+    external: true  
+  immich:
+    external: true 
--- a/compose/nas/monitor.yaml
+++ b/compose/nas/monitor.yaml
@ -0,0 +1,49 @@
+services:  
+  scrutiny:  
+      image: ghcr.io/analogj/scrutiny:master-omnibus
+      container_name: scrutiny
+      hostname: scrutiny
+      networks:
+        - netgrimoire
+      ports:
+        - 8081:8080   
+        - 8086:8086
+      cap_add:    
+        - SYS_RAWIO
+      devices:
+        - "/dev/sda"
+        - "/dev/sdb"
+        - "/dev/sdc"
+        - "/dev/sdd"
+        - "/dev/sde"
+        - "/dev/sdf"
+        - "/dev/sdg"
+        # - "/dev/sdh"
+        # - "/dev/sdi"
+        # - "/dev/sdj"
+      volumes:
+        - /run/udev:/run/udev:ro
+        - /DockerVol/scrutiny/config:/opt/scrutiny/config
+        - /DockerVol/scrutiny/influxdb:/opt/scrutiny/influxdb
+
+
+  glances:
+    image: nicolargo/glances
+    container_name: glances
+    hostname: glances
+    restart: always
+    network_mode: host
+    privileged: true
+    pid: host
+    volumes:
+      - /DockerVol/glances/config:/glances/conf
+      - /var/run/docker.sock:/var/run/docker.sock
+    environment:
+      - TZ=America/Chicago
+      - "GLANCES_OPT=-w"
+    ports:
+      - 61208-61209:61208-61209
+
+networks:
+  netgrimoire:
+    external: true   
--- a/compose/nas/namer.yaml
+++ b/compose/nas/namer.yaml
@ -0,0 +1,24 @@
+services:
+
+  namer:
+    container_name: namer
+    image: ghcr.io/theporndatabase/namer:latest
+    networks:
+      - netgrimoire
+    environment:
+      - PUID=1001
+      - PGID=998
+      - TZ=America/Chicago
+      - NAMER_CONFIG=/config/namer.cfg
+    volumes:
+      - /DockerVol/namer/:/config 
+      - /data/nfs/Baxter/Green/:/data 
+    ports:
+      - 6980:6980
+    restart: always
+ 
+
+
+networks:
+  netgrimoire:
+    external: true 
--- a/compose/nas/stash.yaml
+++ b/compose/nas/stash.yaml
@ -0,0 +1,39 @@
+services:
+  stash:
+    image: stashapp/stash:latest
+    container_name: stash
+    networks:
+      - netgrimoire
+    restart: unless-stopped
+    ## the container's port must be the same with the STASH_PORT in the environment section
+    ports:
+      - 9999:9999
+    ## If you intend to use stash's DLNA functionality uncomment the below network mode and c
+    # network_mode: host
+    environment:
+      - STASH_STASH=/data/
+      - STASH_GENERATED=/generated/
+      - STASH_METADATA=/metadata/
+      - STASH_CACHE=/cache/
+      - STASH_GRAPHQL_PLAYGROUND=true
+      ## Adjust below to change default port (9999)
+      - STASH_PORT=9999
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      ## Adjust below paths (the left part) to your liking.
+      ## E.g. you can change ./config:/root/.stash to ./stash:/root/.stash
+      
+      ## Keep configs, scrapers, and plugins here.
+      - /DockerVol/Stash/config:/root/.stash
+      ## Point this at your collection.
+      - /data/nfs/Baxter/Green:/data
+      ## This is where your stash's metadata lives
+      - /DockerVol/Stash/metadata:/metadata
+      ## Any other cache content.
+      - ./DockerVol/Stash/cache:/cache
+      ## Where to store generated content (screenshots,previews,transcodes,sprites)
+      - /DockerVol/Stash/generated:/generated  
+
+networks:
+  netgrimoire:
+    external: true   
--- a/compose/nas/windows7.yaml
+++ b/compose/nas/windows7.yaml
@ -0,0 +1,27 @@
+services:
+  windows:
+    image: dockurr/windows
+    container_name: win7
+    devices:
+      - /dev/kvm:/dev/kvm
+    cap_add:
+      - NET_ADMIN
+    ports:
+      - 8006:8006
+      - 3389:3389/tcp
+      - 3389:3389/udp
+    stop_grace_period: 2m
+    # restart: on-failure
+    environment:
+      VERSION: "7u"
+      RAM_SIZE: "4G"
+      CPU_CORES: "4"
+      DISK_SIZE: "64G"
+      DISK2_SIZE: "256G"
+      USERNAME: "traveler"
+      PASSWORD: "H@rvey"
+      # QEMU_OPTS: "-drive file=/disk/data.vhd,format=vpc,if=virtio"
+      # EXTRA_DISKS: /disk/data.vhd
+    volumes:
+      - /srv/6e859070-caa4-472f-bb3c-53fb44e1bcc9/DockerVol/windows7/:/storage
+      - /srv/6e859070-caa4-472f-bb3c-53fb44e1bcc9/DockerVol/windows7/storage/:/storage2