home: Only bind on wireguard interface
All checks were successful
ShellCheck / shellcheck (push) Successful in 18s

This commit is contained in:
Mathieu Strypsteen 2024-09-13 20:52:21 +02:00
parent 02c8707ac6
commit c48557104a
Signed by: mathieu
GPG key ID: 782A42E461BC6824
10 changed files with 10 additions and 10 deletions

View file

@ -5,7 +5,7 @@ Environment=HTTP_BASIC_AUTH_USERNAME=mathieu
Environment=PUPPETEER_WSS_ENDPOINT=ws://sandbox.server.home.arpa:3000 Environment=PUPPETEER_WSS_ENDPOINT=ws://sandbox.server.home.arpa:3000
Secret=HTTP_BASIC_AUTH_PASSWORD,type=env Secret=HTTP_BASIC_AUTH_PASSWORD,type=env
Secret=OPENAI_API_KEY,type=env Secret=OPENAI_API_KEY,type=env
PublishPort=8004:3000 PublishPort=10.0.1.2:8004:3000
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -4,7 +4,7 @@ UserNS=host
ReadOnly=false ReadOnly=false
Network=nginx.network Network=nginx.network
Volume=/var/lib/container-data/collabora.xml:/etc/coolwsd/coolwsd.xml:U,Z Volume=/var/lib/container-data/collabora.xml:/etc/coolwsd/coolwsd.xml:U,Z
PublishPort=8010:9980 PublishPort=10.0.1.2:8010:9980
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -4,7 +4,7 @@ Network=nginx.network
LogDriver=none LogDriver=none
Volume=/var/lib/system-config/container-config/element/config.json:/app/config.json:z,ro Volume=/var/lib/system-config/container-config/element/config.json:/app/config.json:z,ro
Tmpfs=/var/cache/nginx Tmpfs=/var/cache/nginx
PublishPort=8001:80 PublishPort=10.0.1.2:8001:80
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -12,7 +12,7 @@ Environment=GF_SMTP_HOST=vps.strypsteen.com:465
Environment=GF_SMTP_USER=monitoring Environment=GF_SMTP_USER=monitoring
Environment=GF_SMTP_FROM_ADDRESS=monitoring@strypsteen.me Environment=GF_SMTP_FROM_ADDRESS=monitoring@strypsteen.me
Secret=GF_SMTP_PASSWORD,type=env Secret=GF_SMTP_PASSWORD,type=env
PublishPort=8008:3000 PublishPort=10.0.1.2:8008:3000
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -3,7 +3,7 @@ Image=docker.io/grafana/loki
Network=nginx.network Network=nginx.network
Exec=-config.file=/etc/loki/local-config.yaml -log.level=warn -reporting.enabled=false Exec=-config.file=/etc/loki/local-config.yaml -log.level=warn -reporting.enabled=false
Volume=loki.volume:/loki:U,Z Volume=loki.volume:/loki:U,Z
PublishPort=8007:3100 PublishPort=10.0.1.2:8007:3100
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -5,7 +5,7 @@ After=network-online.target
Image=git.strypsteen.com/mathieu/monero Image=git.strypsteen.com/mathieu/monero
Network=nginx.network Network=nginx.network
Volume=monero.volume:/root/.bitmonero:U,Z Volume=monero.volume:/root/.bitmonero:U,Z
PublishPort=8012:18089 PublishPort=10.0.1.2:8012:18089
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -10,7 +10,7 @@ Entrypoint=sh
Exec=-c "chown -Rh www-data:www-data /var/www/html && busybox crond && /entrypoint.sh apache2-foreground > /dev/null" Exec=-c "chown -Rh www-data:www-data /var/www/html && busybox crond && /entrypoint.sh apache2-foreground > /dev/null"
Volume=nextcloud.volume:/var/www/html:U,Z Volume=nextcloud.volume:/var/www/html:U,Z
Environment=OVERWRITEPROTOCOL=https Environment=OVERWRITEPROTOCOL=https
PublishPort=8002:80 PublishPort=10.0.1.2:8002:80
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -6,7 +6,7 @@ Volume=/var/lib/system-config/container-config/prometheus/prometheus.yml:/promet
Volume=prometheus.volume:/prometheus/data:U,Z Volume=prometheus.volume:/prometheus/data:U,Z
Tmpfs=/prometheus Tmpfs=/prometheus
Secret=prometheus-config Secret=prometheus-config
PublishPort=8006:9090 PublishPort=10.0.1.2:8006:9090
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -10,7 +10,7 @@ Exec=run --config-path /etc/synapse/homeserver.yaml --config-path /etc/synapse.y
Volume=/var/lib/system-config/container-config/synapse:/etc/synapse:z,ro Volume=/var/lib/system-config/container-config/synapse:/etc/synapse:z,ro
Volume=/var/lib/container-data/synapse.yaml:/etc/synapse.yaml:z,ro Volume=/var/lib/container-data/synapse.yaml:/etc/synapse.yaml:z,ro
Volume=synapse.volume:/data:U,Z Volume=synapse.volume:/data:U,Z
PublishPort=8005:8080 PublishPort=10.0.1.2:8005:8080
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -14,7 +14,7 @@ Environment=DB_MONGO_LOCAL=false
Environment=DB_MONGO_URI=mongodb://systemd-mongodb/unifi Environment=DB_MONGO_URI=mongodb://systemd-mongodb/unifi
Environment=STATDB_MONGO_URI=mongodb://systemd-mongodb/unifi_stat Environment=STATDB_MONGO_URI=mongodb://systemd-mongodb/unifi_stat
PublishPort=8080:8080 PublishPort=8080:8080
PublishPort=8009:8443 PublishPort=10.0.1.2:8009:8443
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target