What do I enjoy SelfHosting so far? Basket of Services with TailScale

apt-get update && sudo apt-get upgrade && curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh && docker version

docker volume create nginx_data
docker volume create nginx_letsencrypt
docker network create nginx_default

docker run -d \
  --name nginx \
  --network nginx_default \
  --restart unless-stopped \
  -p 80:80 \
  -p 443:443 \
  -p 81:81 \
  -v nginx_data:/data \
  -v nginx_letsencrypt:/etc/letsencrypt \
  jc21/nginx-proxy-manager:latest

docker run -d \
  -p 8000:8000 \
  -p 9000:9000 \
  --name=portainer \
  --network nginx_default \
  --restart=always \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v portainer_data:/data \
  portainer/portainer-ce

ip -4 addr

sudo apt update
sudo apt install net-tools
ifconfig

version: '3'
services:
  ollama:
    image: ollama/ollama
    container_name: ollama
    ports:
      - "11434:11434"
    volumes:
      - ollama_data:/root/.ollama

  ollama-webui:
    image: ghcr.io/ollama-webui/ollama-webui:main
    container_name: ollama-webui
    ports:
      - "3000:8080" # 3000 is the port that you will access in your browser
    add-host:
      - "host.docker.internal:host-gateway"
    volumes:
      - ollama-webui_data:/app/backend/data
    restart: always
#     networks: ["nginx_default"] #optional

# networks: #optional
#   nginx_default: #optional
#     external: true #optional       

volumes:
  ollama_data:
  ollama-webui_data:

version: '3.8'
services:
  netdata:
    container_name: netdata #v1.45.0
    image: netdata/netdata
    ports:
      - '19999:19999'
    volumes:
      - netdataconfig:/etc/netdata
      - netdatalib:/var/lib/netdata
      - netdatacache:/var/cache/netdata
      - '/etc/passwd:/host/etc/passwd:ro'
      - '/etc/group:/host/etc/group:ro'
      - '/proc:/host/proc:ro'
      - '/sys:/host/sys:ro'
      - '/etc/os-release:/host/etc/os-release:ro'
    restart: unless-stopped
    cap_add:
      - SYS_PTRACE
    security_opt:
      - apparmor=unconfined
    #networks: ["nginx_nginx_network"] #optional 
 
volumes:
  netdataconfig:
  netdatalib:
  netdatacache:

# networks: #optional
#   nginx_nginx_network: #optional
#     external: true #optional

---
version: "2.1"
services:
  syncthing:
    image: syncthing/syncthing #ghcr.io/linuxserver/syncthing
    container_name: syncthing
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Rome
    volumes:
      - /home/Docker/Syncthing/config:/config
      - ~/user/Sync-Folder-Data:/data1 #
      - /media/user/TOSHIBA\ EXT/A-SYNC-CLOUD:/data2 #You can add more than one folder, even if different disk
      - /mnt/ext4_drive/Syncthing_Pixel8:/data3 #sudo mount /dev/sda2 /mnt/ext4_drive #when syncing a folder from your phone, choose /data3 in syncthing UI as destination
      #- "C:\\DOCKER\\Syncthing\\config:/config" #Example for Windows
      #- "D:\\Z_Sync:/dataD" ##Example for Windows
    ports:
      - 8384:8384  #UI for Syncthing
      - 22000:22000/tcp
      - 22000:22000/udp
      - 21027:21027/udp
    restart: unless-stopped
#     networks: ["nginx_default"] #optional

  filebrowser:
    image: filebrowser/filebrowser
    container_name: filebrowser
    ports:
      - 8080:80 #UI Filebrowser
    volumes:
      - /home/Docker/FileBrowser/config:/config
      #- /home/Docker/FileBrowser/data:/srv
      #- ~/user/Sync-Folder-Data:/srv #same as Syncthing!
      - /mnt/ext4_drive/Syncthing_Pixel8:/srv #/mnt/usb/Z_BackUP_HD-SDD:/srv
    restart: unless-stopped   
#     networks: ["nginx_default"] #optional

# networks: #optional
#   nginx_default: #optional
#     external: true #optional           

sudo chmod 777 /mnt/ext4_drive

version: "3.7"
services:

  pigallery2:
    image: bpatrik/pigallery2:latest #https://github.com/bpatrik/pigallery2
    container_name: pigallery2
    environment:
      - NODE_ENV=production
    volumes:
      - /home/Docker/pigallery/config:/app/data/config
      - /home/Docker/pigallery/tmp:/app/data/tmp
      - db_data:/app/data/db
      - /mnt/ext4_drive/Syncthing_Pixel8:/app/data/images:ro #your images folder
      #- "/mnt/ext4_drive/Syncthing_Pixel8:/app/data/images:ro"
    ports:
      - 8088:80
    restart: unless-stopped

volumes:
  db_data:

version: '3'
services:
  piwigo:
    container_name: piwigo
    image: lscr.io/linuxserver/piwigo:latest #piwigo-docker
    restart: always
    networks:
      - piwigo
    ports:
      - "84:80"
    volumes:
      - /home/Docker/piwigo/config:/config
      - /mnt/ext4_drive/Some/Path/Gallery:/gallery
  piwigodb:
    image: linuxserver/mariadb #supports x86 and ARM64->>https://github.com/xmanyou/piwigo-docker
    restart: always
    container_name: piwigo_mysql
    volumes:
      - /home/Docker/piwigo/db:/var/lib/mysql
    networks:
      - piwigo
    environment: #make sure to change these!!!
      - MYSQL_ROOT_PASSWORD=piwigo
      - MYSQL_PASSWORD=piwigo
      - MYSQL_DATABASE=piwigo
      - MYSQL_USER=piwigo

networks:
  piwigo:

nano docker-compose.yaml

name: immich

services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
    volumes:
      - ${UPLOAD_LOCATION}:/usr/src/app/upload
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - .env
    ports:
      - 2283:3001
    depends_on:
      - redis
      - database
    restart: always

  immich-machine-learning:
    container_name: immich_machine_learning
    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
    volumes:
      - model-cache:/cache
    env_file:
      - .env
    restart: always

  redis:
    container_name: immich_redis
    image: docker.io/redis:6.2-alpine@sha256:d6c2911ac51b289db208767581a5d154544f2b2fe4914ea5056443f62dc6e900
    healthcheck:
      test: redis-cli ping || exit 1
    restart: always

  database:
    container_name: immich_postgres
    image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
    environment:
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_USER: ${DB_USERNAME}
      POSTGRES_DB: ${DB_DATABASE_NAME}
      POSTGRES_INITDB_ARGS: '--data-checksums'
    volumes:
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
    healthcheck:
      test: pg_isready --dbname='${DB_DATABASE_NAME}' || exit 1; Chksum="$$(psql --dbname='${DB_DATABASE_NAME}' --username='${DB_USERNAME}' --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
      interval: 5m
      #start_interval: 30s
      start_period: 5m
    command: ["postgres", "-c" ,"shared_preload_libraries=vectors.so", "-c", 'search_path="$$user", public, vectors', "-c", "logging_collector=on", "-c", "max_wal_size=2GB", "-c", "shared_buffers=512MB", "-c", "wal_compression=on"]
    restart: always

volumes:
  model-cache:

nano .env #https://immich.app/docs/install/environment-variables/

# The location where your uploaded files are stored - IMPORTANT!!!
UPLOAD_LOCATION=./library #/mystorage/images
# The location where your database files are stored
DB_DATA_LOCATION=./postgres
# The Immich version to use.
IMMICH_VERSION=release
# PostgreSQL password. Change it to a secure one.
DB_PASSWORD=postgres_pass

# The values below this line do not need to be changed
#######################################################
DB_USERNAME=postgres
DB_DATABASE_NAME=immich

version: '3.8'

services:
  jellyfin:
    image: lscr.io/linuxserver/jellyfin
    container_name: jellyfin
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Rome
    ports:
      - "8096:8096"
    volumes:
      - "/home/youruser/Docker/Jellyfin:/config" #change it
      - "/home/youruser/Downloads:/data" #change it

  metube:
    image: ghcr.io/alexta69/metube
    container_name: metube
    restart: unless-stopped
    ports:
      - "8081:8081"
    volumes:
      - "/home/youruser/Downloads:/downloads"

version: "3.7"

services:
  searxng:
    image: searxng/searxng
    container_name: searxng
    ports:
      #- "${PORT}:8080"
      - "3003:8080"
    volumes:
      #- "${PWD}/searxng:/etc/searxng"
      - "/home/Docker/searxng:/etc/searxng"
    environment:
      #- BASE_URL=http://localhost:$PORT/
      - BASE_URL=http://localhost:3003/
      - INSTANCE_NAME=my-SearXNG-instance
      #- FORMAT=html json
  
  whoogle:
    image: benbusby/whoogle-search:latest
    container_name: whoogle
    ports:
      - 5000:5000 #accessible through the port 5000
    restart: unless-stopped
    networks: ["nginx_default"]


networks:
    nginx_default:
        external: true

docker run -it -p 8080:8080 adamboutcher/statping-ng #it also requires a DB

version: '3.3'
services:
  uptimekuma:
    container_name: uptimekuma
    image: 'louislam/uptime-kuma:1'
    ports:
      - '3001:3001'
    volumes:
      - /home/user_name/Docker/uptime-kuma/data:/app/data
    restart: unless-stopped
#     networks:
#       - cloudflare_tunnel
#       - nginx_default
            
    speedtest-tracker:
        image: ghcr.io/alexjustesen/speedtest-tracker:latest    
        container_name: speedtest-tracker
        ports:
            - 6050:80
            - 6443:443
        networks: ["nginx_nginx_network"]       
        # networks:
        #        nginx_nginx_network:   
        environment:
            - PUID=1000
            - PGID=1000
        volumes:
            - /home/Docker/speedtest:/config
        restart: unless-stopped


  openspeedtest:
    image: openspeedtest/latest
    container_name: openspeedtest
    ports:
      - "6040:3000" # THIS IS THE UI FOR OPENSPEEDTEST
      - "6041:3001"
    networks: #optional
      nginx_nginx_network:      #optional
    restart: unless-stopped

  myspeed:
    container_name: MySpeed
    image: 'germannewsmaker/myspeed'
    restart: unless-stopped
    ports:
      - '5216:5216'
    volumes:
      - data:/myspeed/data
volumes:
  data:    

networks:
  nginx_nginx_network:
    external: true

---
version: "2.1"
services:
  webtop:
    image: lscr.io/linuxserver/webtop:ubuntu-kde #latest #choose the one you want
    container_name: webtop3
    security_opt:
      - seccomp:unconfined #optional
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - SUBFOLDER=/ #optional
      - TITLE=Webtop #optional
    volumes:
      - /home/Docker/webtop3:/config
      - /var/run/docker.sock:/var/run/docker.sock #optional
    ports:
      - 2003:3000
      - 2033:3001
    devices:
      - /dev/dri:/dev/dri #optional
    shm_size: "2gb" #optional
    restart: unless-stopped
    networks:  #optional
      nginx_nginx_network:       #optional

  logseq:
    image: ghcr.io/logseq/logseq-webapp:latest
    ports:
      - "3000:3000"  # Expose Logseq on port 3000
    environment:
      - LOGSEQ_SERVER_PORT=3000  # Set the Logseq server port
    restart: unless-stopped
    # volumes:
      # - logseq_data:/path/to/data  # Uncomment and set the path if you need persistent storage

# Uncomment the following lines if you need persistent storage
# volumes:
  # logseq_data:

  timelite:
    container_name: timelite
    build: .
    env_file: .env
    ports:
      - "${PORT}:${PORT}"
    command: yarn next:start
    restart: unless-stopped

    db_leantime:
        ports:
          - '3306:3306'
        networks: 
          - leantime-net
        volumes:
          - ~/Docker/Leantime/db:/var/lib/mysql
        environment:
          - MYSQL_ROOT_PASSWORD=321.qwerty
          - MYSQL_DATABASE=leantime
          - MYSQL_USER=admin
          - MYSQL_PASSWORD=321.qwerty
        container_name: leantime_db
        image: linuxserver/mariadb                    #it will work for ARM or X86 ('mysql:5.7' only x86)
        restart: always
    leantime:
        ports:
            - '8483:80'
        networks: 
          - leantime-net
        volumes:
          - ~/Docker/Leantime/public:/var/www/html/public/userfiles
          - ~/Docker/Leantime:/var/www/html/userfiles          
        environment:
            - LEAN_DB_HOST=db_leantime
            - LEAN_DB_USER=admin
            - LEAN_DB_PASSWORD=321.qwerty
            - LEAN_DB_DATABASE=leantime          
        container_name: leantime
        image: 'leantime/leantime:latest'
        restart: always

networks:  #optional
  nginx_nginx_network:  #optional
    external: true         #optional
  leantime-net:
    external: false

sudo apt update
sudo apt install remmina
sudo apt install remmina-plugin-rdp remmina-plugin-vnc remmina-plugin-ssh

sudo apt update
sudo apt install tigervnc-standalone-server tigervnc-common
vncserver #You will be prompted to set a password and configure the VNC server for the first time.
#vncserver -kill :1

sudo apt update
sudo apt install tigervnc-viewer

sudo apt install flatpak
flatpak --version
#flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo

wget https://github.com/rustdesk/rustdesk/releases/download/1.2.3-1/rustdesk-1.2.3-x86_64.flatpak
flatpak install rustdesk-1.2.3-x86_64.flatpak

flatpak run com.rustdesk.RustDesk

version: '3'
services:
  cosmos-server:
    image: azukaar/cosmos-server:latest
    container_name: cosmos-server
    hostname: cosmos-server
    privileged: true
    restart: always
    ports:
      - "800:80"
      - "4433:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /:/mnt/host
      - /var/lib/cosmos:/config
    networks:
      - default

networks:
  default:

sudo parted /dev/sda1 print
lsblk -f /dev/sdb2 /dev/sda1 #see the format and the UUID of a couple of blocks
df -h /dev/sda1 #you will see if its mounted

sudo mkdir /mnt/data_mounted \
mount -t ntfs /dev/sdb1 /mnt/data_mounted/ #example with ntfs

#sudo /mnt/ext4_mount_point_folder
sudo nano /etc/fstab

#<device> <mountpoint> <filesystem> <mount options> <dump> <pass>
UUID=some-uuid-of-your-drive /mnt/ext4_mount_point_folder ext4 defaults 0 1

#sudo apt update
#sudo apt install ntfs-3g
#sudo mkdir /mnt/ntfs_drive

#mount
sudo ntfs-3g /dev/sda1 /mnt/ntfs_drive
lsblk -f

lscpu

sudo apt install sysbench 
sysbench cpu --threads=4 run #https://github.com/akopytov/sysbench#general-command-line-options

wget https://github.com/phoronix-test-suite/phoronix-test-suite/releases/download/v10.8.4/phoronix-test-suite_10.8.4_all.deb
sudo dpkg -i phoronix-test-suite_10.8.4_all.deb
sudo apt-get install -f

phoronix-test-suite benchmark smallpt
#phoronix-test-suite system-info

apt install cargo
time cargo install --git https://github.com/astral-sh/rye rye
#cargo install --git https://github.com/astral-sh/rye --rev ab5baa02580117358e097a91263bde011ff10d68 rye #at this point https://github.com/astral-sh/rye/commit/ab5baa02580117358e097a91263bde011ff10d68

version: '2'
services:
  fail2ban:
    image: crazymax/fail2ban:latest
    restart: unless-stopped
    network_mode: "host"
    cap_add:
    - NET_ADMIN
    - NET_RAW
    volumes:
    - /var/log:/var/log:ro
    - ~/Docker/fail2ban/data:/data
    env_file:
      - ./fail2ban.env