portainer-stacks/docker-compose-default.yml

services:
  registry2:
    image: registry:2.8.3
    container_name: registry2
    user: "1000:100"
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.79
    ports:
      - "5121:5000"
    #environment:
    #  - REGISTRY_AUTH=htpasswd
    #  - REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm
    #  - REGISTRY_AUTH_HTPASSWD_PATH=/var/lib/registry/auth/htpasswd
    volumes:
      #- "/data/Docker/.Privat/Registry:/var/lib/registry"
      #- "/data/Docker/.Privat/dockerregistry/config.yml:/etc/docker/registry/config.yml"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
  registry-ui:
    image: joxit/docker-registry-ui:main
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.13
    ports:
      - 5380:80
    environment:
      - SINGLE_REGISTRY=true
      - REGISTRY_TITLE=Docker Registry UI
      - DELETE_IMAGES=true
      - SHOW_CONTENT_DIGEST=true
      - NGINX_PROXY_PASS_URL=http://registry.dissertori.lan:5000
      - SHOW_CATALOG_NB_TAGS=true
      - CATALOG_MIN_BRANCHES=1
      - CATALOG_MAX_BRANCHES=1
      - TAGLIST_PAGE_SIZE=100
      - REGISTRY_SECURED=false
      - CATALOG_ELEMENTS_LIMIT=1000
    container_name: registry-ui
  jellyfin:
    image: jellyfin/jellyfin:latest
    runtime: nvidia
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: 1
              capabilities: [gpu,video,graphics,display,compute,utility]
    container_name: jellyfin
    user: "1000:100"
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.3
    ports:
      - "8096:8096"
      - "1900:1900/udp"
    devices:
       - /dev/dri/renderD128:/dev/dri/renderD128
    #   - /dev/dri/card0:/dev/dri/card0
    #   - /dev/dri/card1:/dev/dri/card1
    volumes:
      - "/data/Docker/.Privat/Jellyfin/config:/config"
      - "/data/Bilder:/data/Bilder"
      - "/data/Musik:/data/Musik"
      - "/data/Videos:/data/Videos"
      - "/data/Docker/.Privat/Jellyfin/media:/media"
      - "/data/Docker/.Privat/Jellyfin/cache:/cache"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
      #- "/usr/lib/x86_64-linux-gnu/libcuda.so.1:/usr/lib/x86_64-linux-gnu/libcuda.so.1:ro"
  bitwarden:
    image: vaultwarden/server:1.32.7-alpine
    container_name: bitwarden
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.4
    ports:
      - "8011:80"
    environment:
      - DOMAIN=https://bitwarden.dissertori.lan
      - SMTP_HOST=smtp.liwest.at
      - SMTP_FROM=roman.dissertori@liwest.at
      - SMTP_FROM_NAME=Roman Dissertori
      - SMTP_SECURITY=starttls # ("starttls", "force_tls", "off") Enable a secure connection. Default is "starttls" (Explicit - ports 587 or 25), "force_tls" (Implicit - port 465) or "off", no encryption (port 25)
      - SMTP_PORT=587          # Ports 587 (submission) and 25 (smtp) are standard without encryption and with encryption via STARTTLS (Explicit TLS). Port 465 (submissions) is used for encrypted submission (Implicit TLS).
      - SMTP_USERNAME=mf109918
      - SMTP_PASSWORD=wercvbhg
      - SMTP_TIMEOUT=15
    volumes:
      - "/data/Docker/.Privat/Bitwarden/data:/data"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
  bitwarden-maria-db:
    image: mariadb:10.5.4
    container_name: bitwarden-maria-db
    user: "1000:100"
    restart: "unless-stopped"
    command: --default-authentication-plugin=mysql_native_password
    environment:
      - MYSQL_ROOT_PASSWORD=0stiegl0
      - MYSQL_ROOT_HOST=%
      - MYSQL_DATABASE=bitwarden
      - MYSQL_USER=bitwarden
      - MYSQL_PASSWORD=0stiegl0
    networks:
      default:
        ipv4_address: 172.20.0.41
    ports:
      - "3318:3306"
    volumes:
      - "/data/Docker/.Privat/Bitwarden/Mariadb/mysql:/var/lib/mysql"
      - "/data/Docker/.Privat/Bitwarden/Mariadb/conf.d:/etc/mysql/conf.d"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
  jenkins:
    image: jenkins/jenkins:2.492.1-lts-jdk17
    container_name: jenkins
    user: "1000:100"
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.7
    ports:
      - "8083:8080"
    environment:
      - JAVA_ARGS="-Djava.awt.headless=true -Dfile.encoding=UTF-8"
      - JAVA_OPTS="-Xmx2048m"
    extra_hosts:
      - "registry.dissertori.lan:10.0.1.5"
      - "sonarqube.dissertori.lan:10.0.1.5"
      - "arm64.dissertori.lan:10.0.1.20"
    volumes:
      - "/data/Docker/.Privat/Jenkins:/var/jenkins_home"
      - "/var/run/docker.sock:/var/run/docker.sock"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
      - "/usr/libexec/docker/cli-plugins:/usr/libexec/docker/cli-plugins"
      - "/usr/bin/docker:/usr/bin/docker"
      #- "/etc/docker:/etc/docker"
      #- "/etc/ssl/certs:/etc/ssl/certs:ro"
      #- "/home/roman/.docker/config.json:/var/jenkins_home/.docker/config.json"
  nextcloud-redis:
    image: redis:7.0.12-bookworm
    container_name: nextcloud-redis
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.63
  nextcloud:
    #image: nextcloud:27.1.4-apache
    image: nextcloud:28.0.5-apache
    container_name: nextcloud
    restart: unless-stopped
    environment:
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - MYSQL_PASSWORD=0stiegl0
      - MYSQL_HOST=nextcloud-maria-db
      - TZ=Europe/Vienna
      - SMTP_HOST=smtp.liwest.at
      - SMTP_FROM=roman.dissertori@liwest.at
      - SMTP_PORT=587
      - SMTP_SSL=true
      - SMTP_USERNAME=mf109918
      - SMTP_PASSWORD=wercvbhg
      - OVERWRITEPROTOCOL=https
      - PHP_MEMORY_LIMIT=512M
    user: "1000:100"
    networks:
      default:
        ipv4_address: 172.20.0.9
    ports:
      - "8091:8080"
    volumes:
      - "/data/Dokumente:/data/Dokumente"
      - "/data/Musik:/data/Musik"
      - "/data/Videos:/data/Videos"
      - "/data/Bilder:/data/Bilder"
      - "/data/Syncthing/Roman/Gaming:/data/Syncthing/Roman/Gaming"
      - "/data/Docker/.Privat/Nextcloud/html:/var/www/html"
      - "/data/Docker/.Privat/Nextcloud/apache/ports.conf:/etc/apache2/ports.conf"
      - "/data/Docker/.Privat/Nextcloud/apache/000-default.conf:/etc/apache2/sites-available/000-default.conf"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
    depends_on:
      - "nextcloud-maria-db"
      - "nextcloud-redis"
  nextcloud-maria-db:
    image: mariadb:10.5.4
    container_name: nextcloud-maria-db
    user: "1000:100"
    restart: "unless-stopped"
    command: --default-authentication-plugin=mysql_native_password
    environment:
      - MYSQL_ROOT_PASSWORD=0stiegl0
      - MYSQL_ROOT_HOST=%
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - MYSQL_PASSWORD=0stiegl0
    networks:
      default:
        ipv4_address: 172.20.0.35
    ports:
      - "3316:3306"
    volumes:
      - "/data/Docker/.Privat/Nextcloud/Mariadb/databases:/var/lib/mysql"
      - "/data/Docker/.Privat/Nextcloud/Mariadb/conf.d:/etc/mysql/conf.d"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
  elk:
    image: sebp/elk:oss-8.15.1
    container_name: elk
    #user: 1000:100
    restart: unless-stopped
    environment:
      #- ES_HEAP_SIZE=2GB
      #- LS_HEAP_SIZE=1GB
      #- KIBANA_GID=1000
      #- KIBANA_UID=1000
      #- LOGSTASH_GID=1000
      #- LOGSTASH_UID=1000
      #- ES_GID=1000
      #- ES_UID=1000
      - TZ=Europe/Vienna
    networks:
      default:
        ipv4_address: 172.20.0.10
    ports:
      - "5044:5044"
      - "5601:5601"
      - "9200:9200"
    volumes:
      - "/data/Docker/.Privat/ELK/elasticsearch/config/:/opt/elasticsearch/config/"
      - "elk_logstash_config:/opt/kibana/config"
      - "elk_kibana_config:/opt/logstash/config"
      - "elk_kibana_data:/opt/kibana/data"
      - "elk_logstash_data:/opt/logstash/data"
      #- "/data/Docker/.Privat/ELK/logstash/conf.d:/etc/logstash/conf.d"

  syncthing:
    image: syncthing/syncthing:latest
    container_name: syncthing
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.34
    ports:
      - "21027:21027/udp"
      - "22000:22000/tcp"
      - "22001:22001/tcp"
    volumes:
      - "/data/Docker/.Privat/Syncthing:/var/syncthing"
      - "/data/Syncthing:/data"
      - "/data/encrypted/:/data2/encrypted"
      - "/mnt/usb1/syncthing-backup:/data/roman-syncthing-backup"
      - "/etc/localtime:/etc/localtime:ro"
      - "/etc/timezone:/etc/timezone:ro"
  sonarqube:
    image: sonarqube:lts-community
    container_name: sonarqube
    restart: unless-stopped
    networks:
      default:
        ipv4_address: 172.20.0.40
    ports:
      - 9020:9000
    environment:
    - SONARQUBE_JDBC_USERNAME=sa
    - SONARQUBE_JDBC_PASSWORD=0Stiegl0
    - SONARQUBE_JDBC_URL=jdbc:sqlserver://mssql:1433;databaseName=SonarQube;
    user: "1000:100"
    stop_signal: SIGINT
    volumes:
      - "/data/Docker/.Privat/Sonarqube/conf:/opt/sonarqube/conf"
      - "/data/Docker/.Privat/Sonarqube/data:/opt/sonarqube/data"
      - "/data/Docker/.Privat/Sonarqube/logs:/opt/sonarqube/logs"
      - "/data/Docker/.Privat/Sonarqube/extensions:/opt/sonarqube/extensions"
      - "/data/Docker/.Privat/Sonarqube/temp:/opt/sonarqube/temp"
    depends_on:
      - "mssql"
  mssql:
    restart: unless-stopped
    image: mcr.microsoft.com/mssql/server:2019-CU5-ubuntu-16.04
    container_name: mssql
    networks:
      default:
        ipv4_address: 172.20.0.51
    environment:
       ACCEPT_EULA: "Y"
       SA_PASSWORD: "0Stiegl0"
       MSSQL_PID: "Developer"
    volumes:
      - "/data/Docker/.Privat/Mssql/data:/var/opt/mssql/data/"
    ports:
      - "1434:1433"
  mssql-newer:
    restart: unless-stopped
    image: mcr.microsoft.com/mssql/server:2022-latest
    container_name: mssql-newer
    networks:
      default:
        ipv4_address: 172.20.0.52
    environment:
       ACCEPT_EULA: "Y"
       SA_PASSWORD: "0Stiegl0"
       MSSQL_PID: "Developer"
    volumes:
      - "/data/Docker/.Privat/Mssql_newer/data:/var/opt/mssql/data/"
    ports:
      - "1435:1433"
  wakeonlan:
    restart: unless-stopped
    image: anjia0532/wakeonlan
    container_name: wakeonlan
    network_mode: host
  librespeed:
    image: lscr.io/linuxserver/librespeed:latest
    container_name: librespeed
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - PASSWORD=0stiegl0
    networks:
      default:
        ipv4_address: 172.20.0.98
    ports:
      - 8687:80
    restart: unless-stopped
  grafana:
    image: grafana/grafana:11.0.0
    container_name: grafana
    user: "1000:100"
    networks:
      default:
        ipv4_address: 172.20.0.99
    ports:
      - 3001:3000
    restart: unless-stopped
    volumes:
      - "/data/Docker/.Privat/Grafana:/var/lib/grafana"

networks:
  default:
      name: nginx
      external: true
volumes:
  elk_elastic_config:
  elk_logstash_config:
  elk_kibana_config:
  elk_logstash_data:
  elk_kibana_data: