new: add Umami

README.md

@@ -0,0 +1,71 @@
+# Homelab
+
+## Description
+This repository list all my services hosted on several machines of my homelab using Podman
+
+## List of services (WIP)
+
+Web services:
+- Caddy
+- Dockge
+- Excalidraw
+- It-tools
+- Umami
+- Hugo
+- Whoogle
+- Wikijs
+- Stirling-pdf
+- Redlib
+- Homepage
+- yarr
+- Traefik
+- Ntfy
+- Pihole
+
+Security and Authentication:
+- Fail2ban
+- Authelia
+- Wireguard
+- lldap
+
+Development:
+- Gitea
+- Gitea Actions Runner
+- code-server
+
+Monitoring and Logging:
+- Grafana
+- Prometheus
+- Prometheus Node Exporter
+- Prometheus Blackbox Exporter
+- cAdvisor
+- victoria-metrics
+- Alertmanager
+- Vector
+- Loki
+- Diun
+- Dozzle
+
+File management and Backup:
+- Filebrowser
+- Syncthing
+- Linkding
+- shiori
+
+Multimedia:
+- jellyfin
+- sonarr
+- radarr
+- lidarr
+- bazarr
+- jellyseerr
+- jackett
+- flaresolverr
+- transmission
+- joal
+- pigallery2
+
+# Roadmap
+
+- Deploying containers with either Renovate or Ansible
+- K8s, ArgoCD ?

umami/.env.example

@@ -0,0 +1,4 @@
+SECRET=replace-me-with-a-random-string
+DB=umami
+USER=user
+PASS=password

umami/compose.yml

@@ -0,0 +1,42 @@
+services:
+  umami:
+    container_name: umami
+    image: ghcr.io/umami-software/umami:postgresql-latest
+    environment:
+      DATABASE_URL: postgresql://$USER:$PASS@umami-db:5432/$DB
+      DATABASE_TYPE: postgresql
+      APP_SECRET: $SECRET
+    depends_on:
+      - umami-db
+    restart: unless-stopped
+    networks:
+      - umami
+      - proxy
+    labels:
+      # Caddy
+      caddy: "*.{$$INT_DOMAIN}"
+      caddy.1_@umami: host umami.{$$INT_DOMAIN}
+      caddy.1_handle: "@umami"
+      caddy.1_handle.reverse_proxy: "{{upstreams 3000}}"
+      # Get real client public IP if behind another proxy
+      # caddy.1_handle.reverse_proxy.header_up: X-Forwarded-For {header.X-Real-IP}
+      # Diun
+      diun.enable: true
+      
+  umami-db:
+    container_name: umami-db
+    image: postgres:15-alpine
+    environment:
+      POSTGRES_DB: $DB
+      POSTGRES_USER: $USER
+      POSTGRES_PASSWORD: $PASS
+    volumes:
+      - ./appdb:/var/lib/postgresql/data
+    restart: unless-stopped
+    networks:
+      - umami
+networks:
+  umami:
+    external: true
+  proxy:
+    external: true

whoogle/compose.yml

@@ -0,0 +1,20 @@
+services:
+  whoogle:
+    container_name: whoogle
+    image: benbusby/whoogle-search
+    env_file: .env
+    restart: unless-stopped
+    networks:
+      - dmz
+    labels:
+      # Caddy
+      caddy: "*.{$$INT_DOMAIN}"
+      caddy.1_@search: host search.{$$INT_DOMAIN}
+      caddy.1_handle: "@search"
+      caddy.1_handle.reverse_proxy: "{{upstreams 5000}}"
+      # Diun
+      diun.enable: true
+
+networks:
+  dmz:
+    external: true