mirror of
https://github.com/funkypenguin/geek-cookbook/
synced 2026-10-22 08:43:24 +00:00
Add markdown linting (without breaking the site this time!)
This commit is contained in:
David Young authored and GitHub committed
1 parent
52460b8ead
commit
22293fa93d
131 files changed
+668
-1361
No files matched your search
@@ -1,42 +0,0 @@
|
||||
# Containers
|
||||
|
||||
In the course of creating these recipes, I've often ended up creating containers with my own tweaks or changes. Below is a list of all the containers I've built. All of them are automatic builds, and the Dockerfiles and build logs are publicly available:
|
||||
|
||||
Name | Description | Badges
|
||||
--|--|--
|
||||
[funkypenguin/athena](https://hub.docker.com/r/funkypenguin/athena/)<br/>[](https://hub.docker.com/r/funkypenguin/athena/)| Athena cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/athena/)<br/>[](https://hub.docker.com/r/funkypenguin/athena/)
|
||||
[funkypenguin/alertmanager-discord](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)<br/>[](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)| AlertManager-compatible webhook to send Prometheus alerts to a Discord channel |[](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)<br/>[](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)
|
||||
[funkypenguin/aeon](https://hub.docker.com/r/funkypenguin/aeon/)<br/>[](https://hub.docker.com/r/funkypenguin/aeon/)| Aeon cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/aeon/)<br/>[](https://hub.docker.com/r/funkypenguin/aeon/)
|
||||
[funkypenguin/bittube](https://hub.docker.com/r/funkypenguin/bittube/)<br/>[](https://hub.docker.com/r/funkypenguin/bittube/)| BitTube cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/bittube/)<br/>[](https://hub.docker.com/r/funkypenguin/bittube/)
|
||||
[funkypenguin/cryptonote-nodejs-pool](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)| nodeJS-based mining pool for cryptonote-based mining pools, supporting advanced features like email/telegram notifications |[](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)
|
||||
[funkypenguin/conceal-core](https://hub.docker.com/r/funkypenguin/conceald/)<br/>[](https://hub.docker.com/r/funkypenguin/conceald//)| Conceal cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/conceald/)<br/>[](https://hub.docker.com/r/funkypenguin/conceald/)
|
||||
[funkypenguin/git-docker](https://hub.docker.com/r/funkypenguin/git-docker/)<br/>[](https://hub.docker.com/r/funkypenguin/git-docker/)| Git client in a docker container, for use on immutable OS (Atomic) hosts|[](https://hub.docker.com/r/funkypenguin/git-docker/)<br/>[](https://hub.docker.com/r/funkypenguin/git-docker/)
|
||||
[funkypenguin/home-assistant](https://hub.docker.com/r/funkypenguin/home-assistant/)<br/>[](https://hub.docker.com/r/funkypenguin/home-assistant//)| home-assistant |[](https://hub.docker.com/r/funkypenguin/home-assistant/)<br/>[](https://hub.docker.com/r/funkypenguin/home-assistant/)
|
||||
[funkypenguin/htpc-cron](https://hub.docker.com/r/funkypenguin/htpc-cron/)<br/>[](https://hub.docker.com/r/funkypenguin/htpc-cron/)| htpc-cron |[](https://hub.docker.com/r/funkypenguin/htpc-cron/)<br/>[](https://hub.docker.com/r/funkypenguin/htpc-cron/)
|
||||
[funkypenguin/kepl](https://hub.docker.com/r/funkypenguin/kepl/)<br/>[](https://hub.docker.com/r/funkypenguin/kepl/)| KEPL cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/kepl/)<br/>[](https://hub.docker.com/r/funkypenguin/kepl/)
|
||||
[funkypenguin/koson](https://hub.docker.com/r/funkypenguin/koson/)<br/>[](https://hub.docker.com/r/funkypenguin/koson/)| koson |[](https://hub.docker.com/r/funkypenguin/koson/)<br/>[](https://hub.docker.com/r/funkypenguin/koson/)
|
||||
[funkypenguin/loki](https://hub.docker.com/r/funkypenguin/loki/)<br/>[](https://hub.docker.com/r/funkypenguin/loki/)| loki |[](https://hub.docker.com/r/funkypenguin/loki/)<br/>[](https://hub.docker.com/r/funkypenguin/loki/)
|
||||
[funkypenguin/masari](https://hub.docker.com/r/funkypenguin/masari/)<br/>[](https://hub.docker.com/r/funkypenguin/masari//)| Masari cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/masari/)<br/>[](https://hub.docker.com/r/funkypenguin/masari/)
|
||||
[funkypenguin/monero](https://hub.docker.com/r/funkypenguin/monero/)<br/>[](https://hub.docker.com/r/funkypenguin/monero/)| Monero cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/monero/)<br/>[](https://hub.docker.com/r/funkypenguin/monero/)
|
||||
[funkypenguin/monkeytips](https://hub.docker.com/r/funkypenguin/monkeytips/)<br/>[](https://hub.docker.com/r/funkypenguin/monkeytips//)| MonkeyTips cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/monkeytips/)<br/>[](https://hub.docker.com/r/funkypenguin/monkeytips/)
|
||||
[funkypenguin/minio](https://hub.docker.com/r/funkypenguin/minio/)<br/>[](https://hub.docker.com/r/funkypenguin/minio/)| minio |[](https://hub.docker.com/r/funkypenguin/minio/)<br/>[](https://hub.docker.com/r/funkypenguin/minio/)
|
||||
[funkypenguin/mqtt-certbot-dns](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)<br/>[](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)| mqtt-certbot-dns |[](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)<br/>[](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)
|
||||
[funkypenguin/munin-server](https://hub.docker.com/r/funkypenguin/munin-server/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-server/)| munin-server |[](https://hub.docker.com/r/funkypenguin/munin-server/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-server/)
|
||||
[funkypenguin/munin-node](https://hub.docker.com/r/funkypenguin/munin-node/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-node/)| munin-node |[](https://hub.docker.com/r/funkypenguin/munin-node/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-node/)
|
||||
[funkypenguin/mwlib](https://hub.docker.com/r/funkypenguin/mwlib/)<br/>[](https://hub.docker.com/r/funkypenguin/mwlib/)| mwlib |[](https://hub.docker.com/r/funkypenguin/mwlib/)<br/>[](https://hub.docker.com/r/funkypenguin/mwlib/)
|
||||
[funkypenguin/mqttwarn](https://hub.docker.com/r/funkypenguin/mqttwarn/)<br/>[](https://hub.docker.com/r/funkypenguin/mqttwarn/)| mqttwarn |[](https://hub.docker.com/r/funkypenguin/mqttwarn/)<br/>[](https://hub.docker.com/r/funkypenguin/mqttwarn/)
|
||||
[funkypenguin/nginx-proxy-letsencrypt](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)<br/>[](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)| nginx-proxy-letsencrypt |[](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)<br/>[](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)
|
||||
[funkypenguin/nzbdrone](https://hub.docker.com/r/funkypenguin/nzbdrone/)<br/>[](https://hub.docker.com/r/funkypenguin/nzbdrone/)| nzbdrone |[](https://hub.docker.com/r/funkypenguin/nzbdrone/)<br/>[](https://hub.docker.com/r/funkypenguin/nzbdrone/)
|
||||
[funkypenguin/owntracks](https://hub.docker.com/r/funkypenguin/owntracks/)<br/>[](https://hub.docker.com/r/funkypenguin/owntracks//)| Owntracks |[](https://hub.docker.com/r/funkypenguin/owntracks/)<br/>[](https://hub.docker.com/r/funkypenguin/owntracks/)
|
||||
[funkypenguin/oauth2_proxy](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)<br/>[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)| OAuth2 proxy supporting self-signed upstream certs |[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)<br/>[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)
|
||||
[funkypenguin/plex](https://hub.docker.com/r/funkypenguin/plex/)<br/>[](https://hub.docker.com/r/funkypenguin/plex/)| plex |[](https://hub.docker.com/r/funkypenguin/plex/)<br/>[](https://hub.docker.com/r/funkypenguin/plex/)
|
||||
[funkypenguin/radarrsync](https://hub.docker.com/r/funkypenguin/radarrsync/)<br/>[](https://hub.docker.com/r/funkypenguin/radarrsync/)| Python script to sync multiple Radarr instances |[](https://hub.docker.com/r/funkypenguin/radarrsync/)<br/>[](https://hub.docker.com/r/funkypenguin/radarrsync/)
|
||||
[funkypenguin/ryo-currency](https://hub.docker.com/r/funkypenguin/ryo-currency/)<br/>[](https://hub.docker.com/r/funkypenguin/ryo-currency/)| RYO cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/ryo-currency/)<br/>[](https://hub.docker.com/r/funkypenguin/ryo-currency/)
|
||||
[funkypenguin/rtorrent](https://hub.docker.com/r/funkypenguin/rtorrent/)<br/>[](https://hub.docker.com/r/funkypenguin/rtorrent/)| rtorrent |[](https://hub.docker.com/r/funkypenguin/rtorrent/)<br/>[](https://hub.docker.com/r/funkypenguin/rtorrent/)
|
||||
[funkypenguin/sabnzbd](https://hub.docker.com/r/funkypenguin/sabnzbd/)<br/>[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)| sabnzbd |[](https://hub.docker.com/r/funkypenguin/sabnzbd/)<br/>[](https://hub.docker.com/r/funkypenguin/sabnzbd/)
|
||||
[funkypenguin/turtlecoind](https://hub.docker.com/r/funkypenguin/turtlecoind/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoind/)| turtlecoin |[](https://hub.docker.com/r/funkypenguin/turtlecoind/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoind/)
|
||||
[funkypenguin/temasek](https://hub.docker.com/r/funkypenguin/temasek/)<br/>[](https://hub.docker.com/r/funkypenguin/temasek/)| temasek |[](https://hub.docker.com/r/funkypenguin/temasek/)<br/>[](https://hub.docker.com/r/funkypenguin/temasek/)
|
||||
[funkypenguin/turtle-pool](https://hub.docker.com/r/funkypenguin/turtle-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/turtle-pool//)| turtle-pool |[](https://hub.docker.com/r/funkypenguin/turtle-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/turtle-pool/)
|
||||
[funkypenguin/turtlecoin](https://hub.docker.com/r/funkypenguin/turtlecoin/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoin/)| turtlecoin |[](https://hub.docker.com/r/funkypenguin/turtlecoin/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoin/)
|
||||
[funkypenguin/x-cash](https://hub.docker.com/r/funkypenguin/x-cash/)<br/>[](https://hub.docker.com/r/funkypenguin/x-cash/)| X-CASH cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/x-cash/)<br/>[](https://hub.docker.com/r/funkypenguin/x-cash/)
|
||||
[funkypenguin/xmrig-cpu](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)<br/>[](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)| xmrig-cpu |[](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)<br/>[](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)|
|
||||
@@ -14,4 +14,4 @@ Runtime data (*typically database files or files-in-use*) are stored in `/var/da
|
||||
|
||||
## Static data
|
||||
|
||||
Static data goes into `/var/data/[recipe name]`, and includes anything that can be safely backed up while a container is running. This includes database exports of the runtime data above.
|
||||
Static data goes into `/var/data/[recipe name]`, and includes anything that can be safely backed up while a container is running. This includes database exports of the runtime data above.
|
||||
@@ -1,52 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
Our HA platform design relies on Atomic OS, which only contains bare minimum elements to run containers.
|
||||
|
||||
So how can we use git on this system, to push/pull the changes we make to config files? With a container, of course!
|
||||
|
||||
## git-docker
|
||||
|
||||
I [made a simple container](https://github.com/funkypenguin/git-docker/blob/master/Dockerfile) which just basically executes git in the CWD:
|
||||
|
||||
To use it transparently, add an alias for the "git" command, or just download it with the rest of the [handy aliases](https://raw.githubusercontent.com/funkypenguin/geek-cookbook/master/examples/scripts/gcb-aliases.sh):
|
||||
|
||||
```
|
||||
alias git='docker run -v $PWD:/var/data -v \
|
||||
/var/data/git-docker/data/.ssh:/root/.ssh funkypenguin/git-docker git'
|
||||
```
|
||||
|
||||
## Setup SSH key
|
||||
|
||||
If you plan to actually _push_ using git, you'll need to setup an SSH keypair. You _could_ copy across whatever keypair you currently use, but it's probably more appropriate to generate a specific keypair for this purpose.
|
||||
|
||||
Generate your new SSH keypair by running:
|
||||
|
||||
```
|
||||
mkdir -p /var/data/git-docker/data/.ssh
|
||||
chmod 600 /var/data/git-docker/data/.ssh
|
||||
docker run -v /var/data/git-docker/data/.ssh:/root/.ssh funkypenguin/git-docker ssh-keygen -t ed25519 -f /root/.ssh/id_ed25519
|
||||
```
|
||||
|
||||
The output will look something like this:
|
||||
```
|
||||
Generating public/private ed25519 key pair.
|
||||
Enter passphrase (empty for no passphrase): Enter same passphrase again: Created directory '/root/.ssh'.
|
||||
Your identification has been saved in /root/.ssh/id_ed25519.
|
||||
Your public key has been saved in /root/.ssh/id_ed25519.pub.
|
||||
The key fingerprint is:
|
||||
SHA256:uZtriS7ypx7Q4kr+w++nHhHpcRfpf5MhxP3Wpx3H3hk root@a230749d8d8a
|
||||
The key's randomart image is:
|
||||
+--[ED25519 256]--+
|
||||
| .o . |
|
||||
| . ..o . |
|
||||
| + .... ...|
|
||||
| .. + .o . . E=|
|
||||
| o .o S . . ++B|
|
||||
| . o . . . +..+|
|
||||
| .o .. ... . . |
|
||||
|o..o..+.oo |
|
||||
|...=OX+.+. |
|
||||
+----[SHA256]-----+
|
||||
```
|
||||
|
||||
Now add the contents of /var/data/git-docker/data/.ssh/id_ed25519.pub to your git account, and off you go - just run "git" from your Atomic host as usual, and pretend that you have the client installed!
|
||||
@@ -41,4 +41,4 @@ In order to avoid IP addressing conflicts as we bring swarm networks up/down, we
|
||||
| [Duplicati](https://geek-cookbook.funkypenguin.co.nz/recipes/duplicati/) | 172.16.55.0/24 |
|
||||
| [Restic](https://geek-cookbook.funkypenguin.co.nz/recipes/restic/) | 172.16.56.0/24 |
|
||||
| [Jellyfin](https://geek-cookbook.funkypenguin.co.nz/recipes/jellyfin/) | 172.16.57.0/24 |
|
||||
| [Paperless NG](https://geek-cookbook.funkypenguin.co.nz/recipes/paperless/) | 172.16.58.0/24 |
|
||||
| [Paperless NG](https://geek-cookbook.funkypenguin.co.nz/recipes/paperless/) | 172.16.58.0/24 |
|
||||
@@ -1,3 +1,3 @@
|
||||
# Oauth2 proxy
|
||||
|
||||
I've deprecated the oauth2-proxy recipe in favor of [Traefik Forward Auth](/ha-docker-swarm/traefik-forward-auth/). It's infinitely more scalable and easier to manage!
|
||||
I've deprecated the oauth2-proxy recipe in favor of [Traefik Forward Auth](/ha-docker-swarm/traefik-forward-auth/). It's infinitely more scalable and easier to manage!
|
||||
@@ -10,13 +10,13 @@ In my case, I needed each docker node to connect via [OpenVPN](http://www.openvp
|
||||
|
||||
Yes, SELinux. Install a custom policy permitting a docker container to create tun interfaces, like this:
|
||||
|
||||
````
|
||||
````bash
|
||||
cat << EOF > docker-openvpn.te
|
||||
module docker-openvpn 1.0;
|
||||
|
||||
require {
|
||||
type svirt_lxc_net_t;
|
||||
class tun_socket create;
|
||||
type svirt_lxc_net_t;
|
||||
class tun_socket create;
|
||||
}
|
||||
|
||||
#============= svirt_lxc_net_t ==============
|
||||
@@ -35,7 +35,7 @@ Even with the SELinux policy above, I still need to insert the "tun" module into
|
||||
|
||||
Run the following to auto-insert the tun module on boot:
|
||||
|
||||
````
|
||||
````bash
|
||||
cat << EOF >> /etc/rc.d/rc.local
|
||||
# Insert the "tun" module so that the vpn-client container can access /dev/net/tun
|
||||
/sbin/modprobe tun
|
||||
@@ -47,7 +47,7 @@ chmod 755 /etc/rc.d/rc.local
|
||||
|
||||
Finally, for each node, I exported client credentials, and SCP'd them over to the docker node, into /root/my-vpn-configs-here/. I also had to use the NET_ADMIN cap-add parameter, as illustrated below:
|
||||
|
||||
````
|
||||
````bash
|
||||
docker run -d --name vpn-client \
|
||||
--restart=always --cap-add=NET_ADMIN --net=host \
|
||||
--device /dev/net/tun \
|
||||
@@ -55,4 +55,4 @@ docker run -d --name vpn-client \
|
||||
ekristen/openvpn-client --config /vpn/my-host-config.ovpn
|
||||
````
|
||||
|
||||
Now every time my node boots, it establishes a VPN tunnel back to my pfsense host and (_by using custom configuration directives in OpenVPN_) is assigned a static VPN IP.
|
||||
Now every time my node boots, it establishes a VPN tunnel back to my pfsense host and (_by using custom configuration directives in OpenVPN_) is assigned a static VPN IP.
|
||||
@@ -23,4 +23,4 @@ For a visual "top-like" display of your container's activity (_as well as a [det
|
||||
To execute, simply run `docker run --rm -ti --name ctop -v /var/run/docker.sock:/var/run/docker.sock quay.io/vektorlab/ctop:latest`
|
||||
|
||||
Example:
|
||||
|
||||
|
||||
Reference in new issue
Block a user