diff --git a/homeassistant.yaml b/homeassistant.yaml deleted file mode 100755 index d958938..0000000 --- a/homeassistant.yaml +++ /dev/null @@ -1,279 +0,0 @@ -services: - homeassistant: - image: ghcr.io/home-assistant/home-assistant:stable - hostname: home -# security_opt: -# - no-new-privileges - networks: - - traefik_backend - - postgresql_db-backend -# dns_search: -# - traefik_backend - dns: - - 127.0.0.11 # Docker embedded DNS first -# - 192.168.4.30 # Your VIP as fallback (or your Pi-hole/router IP) - - 1.1.1.1 # Public fallback for external resolution -# network_mode: host - ports: - - 8123:8123 -# - target: 8123 -# published: 8123 -# protocol: tcp -# mode: host - volumes: - - /volume1/docker/Home Assistant/config:/config -# - /volume1/docker/Home Assistant/media:/media - - /volume1/docker/letsencrypt/certs:/ssl - - /var/run/docker.sock:/var/run/docker.sock - - /etc/localtime:/etc/localtime:ro -# privileged: true -# restart: always - healthcheck: - test: "bash -c 'printf \"GET / HTTP/1.1\n\n\" > /dev/tcp/127.0.0.1/8123; exit $$?;'" - interval: 90s - retries: 5 - start_period: 5s - timeout: 15s - deploy: -# endpoint_mode: vip -# placement: -# constraints: -# - node.hostname == docker-3 - labels: - - traefik.enable=true - - traefik.http.routers.hass.rule=Host(`home.${DOMAIN}`) - - traefik.http.routers.hass.tls=true - - traefik.http.routers.hass.tls.certresolver=letsencrypt - - traefik.http.routers.hass.entrypoints=websecure - - traefik.http.services.hass.loadbalancer.server.port=8123 - - traefik.swarm.network=traefik_backend - - traefik.http.services.hass.loadbalancer.server.scheme=https - - traefik.http.routers.hass.middlewares=crowdsec@file -# - traefik.http.routers.wss.rule=Host(`ws.${DOMAIN}`) -# - traefik.tcp.services.wss.loadbalancer.server.port=443 -# - traefik.http.routers.wss.entrypoints=websecure - - autoheal=true - resources: - limits: - cpus: '4' # Limit to 0.5 CPU core - memory: 4G - - frigate-nvr: - hostname: frigate -# privileged: true # this may not be necessary for all setups -# restart: always - image: ghcr.io/blakeblackshear/frigate:0.17.1 - cap_add: - - CAP_PERFMON - - SYS_ADMIN -## shm_size: "200mb" # update for your cameras based on calculation above -## devices: -# - /dev/bus/usb:/dev/bus/usb # Passes the USB Coral, needs to be modified for other versions -# - /dev/apex_0:/dev/apex_0 # Passes a PCIe Coral, follow driver instructions here https://coral.ai/docs/m2/get-started/#2a-on-linux -# - /dev/video11:/dev/video11 # For Raspberry Pi c4B - volumes: - - /etc/localtime:/etc/localtime:ro - - /volume1/docker/frigate/config:/config - - /volume1/docker/frigate/media:/media/frigate - - /volume1/docker/letsencrypt/certs/certs/nvr.${DOMAIN}.crt:/etc/letsencrypt/live/frigate/fullchain.pem - - /volume1/docker/letsencrypt/certs/private/nvr.${DOMAIN}.key:/etc/letsencrypt/live/frigate/privkey.pem - - /dev/dri/renderD128:/dev/dri/renderD128 # For intel hwaccel, needs to be updated for your hardware -# - /dev/dri:/dev/dri - - type: tmpfs ## Optional: #1GB of memory, reduces SSD/SD Card wear - target: /tmp/cache - tmpfs: - size: 500000000 - - type: tmpfs - target: /dev/shm - tmpfs: - size: 1500000000 -# ports: -# - target: 5000 -# published: 5000 -# protocol: tcp -# mode: host -# - "5000:5000" -# - "8971:8971" -# - "8554:8554" # RTSP feeds -# - "8555:8555/tcp" # WebRTC over tcp -# - "8555:8555/udp" # WebRTC over udp - environment: - FRIGATE_RTSP_PASSWORD: "${FRIGATE_RTSP_PASSWORD}" -# LIBVA_DRIVER_NAME: i965 -# OMP_NUM_THREADS: 10 - networks: - - traefik_backend - deploy: -# endpoint_mode: vip -# placement: -# constraints: -# - node.hostname == docker-3 - labels: - - traefik.enable=true - - traefik.http.routers.frigate-auth.rule=Host(`nvr.${DOMAIN}`) - - traefik.http.routers.frigate-ip.rule=Host(`nvr.${DOMAIN}`) && ClientIP(`10.0.0.0/8`) - - traefik.http.routers.frigate-auth.tls=true - - traefik.http.routers.frigate-ip.tls=true - - traefik.http.routers.frigate-auth.tls.certresolver=letsencrypt - - traefik.http.routers.frigate-ip.tls.certresolver=letsencrypt - - traefik.http.routers.frigate-auth.entrypoints=websecure - - traefik.http.routers.frigate-ip.entrypoints=websecure - - traefik.http.services.frigate.loadbalancer.server.port=5000 -# - traefik.http.routers.frigate-auth.middlewares=frigate-basicauth -# - traefik.http.middlewares.frigate-basicauth.basicauth.users=test:$$2a$$12$$1sIFlNKcNrEApe2IScpFwukd7l1j/uvfxk0GeuqIk0BBcO9Mk2F2u -# - traefik.http.services.frigate.loadbalancer.server.scheme=https - - traefik.swarm.network=traefik_backend - - traefik.http.routers.frigate-auth.middlewares=forwardAuth-authentik@file, crowdsec@file -# resources: -# limits: -# cpus: '4' -# memory: 6G - - MQTT: - command: - - "/usr/sbin/mosquitto" - - "-c" - - "/mosquitto/config/mosquitto.conf" - entrypoint: - - "/docker-entrypoint.sh" - image: "public.ecr.aws/docker/library/eclipse-mosquitto:latest" -# logging: -# driver: "db" -# options: {} -# ports: -# - "1883:1883/tcp" -# - "9001:9001/tcp" - stdin_open: true - tty: true -# healthcheck: -# test: "ash -c 'printf \"GET / HTTP/1.1\n\n\" > /dev/tcp/127.0.0.1/9001; exit $?;'" -# start_period: 90s -# timeout: 5s -# interval: 5s -# retries: 3 -# restart: always - hostname: mqtt - networks: - - traefik_backend - volumes: - - /volume1/docker/MQTT/config:/mosquitto/config - - /volume1/docker/MQTT/data:/mosquitto/data - - /volume1/docker/MQTT/log:/mosquitto/log - deploy: - endpoint_mode: dnsrr - labels: - - traefik.enable=true - - traefik.tcp.routers.mqtt.entrypoints=mqtt - - traefik.tcp.routers.mqtt.rule=HostSNI(`*`) -# - traefik.tcp.routers.postgres.tls=true - - traefik.tcp.services.mqtt.loadbalancer.server.port=1883 - - traefik.tcp.routers.mqtt.service=mqtt - - traefik.swarm.network=traefik_backend -# resources: -# limits: -# cpus: '0.001' -# memory: 128M - - Zigbee2MQTT: - command: - - "/sbin/tini" - - "--" - - "node" - - "index.js" - entrypoint: - - "docker-entrypoint.sh" - environment: - - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - - "NODE_ENV=production" - - "NODE_VERSION=14.18.1" - - "TZ=Pacific/Los_Angeles" - image: "ghcr.io/koenkk/zigbee2mqtt:latest" -# restart: always -# logging: -# driver: "db" -# options: {} - hostname: zb - networks: - - traefik_backend -# ports: -# - "8084:8080/tcp" - healthcheck: - test: "wget --no-verbose --tries=1 --header 'Host: zigbee2mqtt.koseduhemak.de' --spider http://localhost:8080 || exit 1" - start_period: 60s - interval: 5s - retries: 5 - timeout: 5s - -# healthcheck: -# test: "bash -c 'printf \"GET / HTTP/1.1\n\n\" > /dev/tcp/127.0.0.1/9001; exit $?;'" -# start_period: 90s -# timeout: 5s -# interval: 5s -# retries: 3 - stdin_open: true - tty: true - volumes: - - /volume1/docker/Zigbee2MQTT/data:/app/data - working_dir: "/app" - deploy: -# endpoint_mode: dnsrr #removed during frigate integration testing - labels: - - traefik.enable=true - - traefik.http.routers.zigbee.rule=Host(`zb.${DOMAIN}`) - - traefik.http.routers.zigbee.tls=true - - traefik.http.routers.zigbee.tls.certresolver=letsencrypt - - traefik.http.routers.zigbee.entrypoints=websecure - - traefik.http.services.zigbee.loadbalancer.server.port=8080 - - traefik.swarm.network=traefik_backend - - traefik.http.routers.zigbee.middlewares=forwardAuth-authentik@file, crowdsec@file -# - traefik.http.routers.zigbee.middlewares=auth -# - traefik.http.middlewares.auth.basicauth.users=test:$$2a$$12$$1sIFlNKcNrEApe2IScpFwukd7l1j/uvfxk0GeuqIk0BBcO9Mk2F2u - resources: - limits: - cpus: '1' - memory: 512M - - ESPHome: - image: ghcr.io/esphome/esphome:latest - volumes: - - /volume1/docker/esphome/config:/config -# - /etc/localtime:/etc/localtime:ro -# restart: always -# privileged: true - hostname: esp - networks: - - traefik_backend -# healthcheck: -# test: "bash -c 'printf \"GET / HTTP/1.1\n\n\" > /dev/tcp/127.0.0.1/6052; exit $$?;'" -# interval: 90s -# retries: 5 -# start_period: 5s -# timeout: 15s - deploy: -# endpoint_mode: dnsrr #removed during frigate integration testing - labels: - - traefik.enable=true - - traefik.http.routers.esphome.rule=Host(`esp.${DOMAIN}`) - - traefik.http.routers.esphome.tls=true - - traefik.http.routers.esphome.tls.certresolver=letsencrypt - - traefik.http.routers.esphome.entrypoints=websecure - - traefik.http.services.esphome.loadbalancer.server.port=6052 - - traefik.swarm.network=traefik_backend - - traefik.http.routers.esphome.middlewares=forwardAuth-authentik@file, crowdsec@file -# - traefik.http.routers.esphome.middlewares=auth -# - traefik.http.middlewares.auth.basicauth.users=test:$$2a$$12$$1sIFlNKcNrEApe2IScpFwukd7l1j/uvfxk0GeuqIk0BBcO9Mk2F2u - resources: - limits: - cpus: '10' - memory: 4G - -networks: - postgresql_db-backend: - external: true - traefik_backend: - external: true - traefik_frontend: - external: true - host: - name: host - external: true