feat(demo): restore ArchiveBox, TubeArchivist, Atuin and fix all service configs

Restore 3 services that were previously removed due to health issues,
bringing the stack to 16 services. Add companion services (Elasticsearch,
Redis) required by TubeArchivist.

Key changes:
- Add ArchiveBox with proper health check and admin credentials
- Add TubeArchivist with ta-redis and ta-elasticsearch companions
- Add Atuin server with correct `server start` command and TCP health check
- Fix Wakapi health check to use /app/healthcheck binary
- Add Grafana provisioning bind mount for datasources/dashboards
- Add Homepage config bind mount for docker.yaml
- Fix Docker Socket Proxy label (remove unreachable localhost:4005 href)
- Fix credentials: INFLUXDB_ADMIN_USER and TA_USERNAME → admin
- Fix Grafana datasources.yml user to match
- Fix homepage/docker.yaml to contain Docker provider config
- Add all missing env vars (TA_PASSWORD, ELASTIC_PASSWORD, ES_JAVA_OPTS, etc.)
- Remove Pi-hole port 53 bindings (DNS not needed for demo)
- Bump template version to 2.0

💘 Generated with Crush

Assisted-by: GLM-5.1 via Crush <crush@charm.land>
This commit is contained in:
reachableceo
2026-04-27 13:06:31 -05:00
parent ed2dbea6c0
commit 077f483faf
5 changed files with 269 additions and 140 deletions

View File

@@ -8,7 +8,7 @@ datasources:
access: proxy access: proxy
url: http://influxdb:8086 url: http://influxdb:8086
database: demo_metrics database: demo_metrics
user: demo_admin user: admin
password: demo_password password: demo_password
isDefault: true isDefault: true
jsonData: jsonData:

View File

@@ -1,34 +1,6 @@
--- ---
# TSYS Developer Support Stack - Homepage Configuration # TSYS Developer Support Stack - Homepage Docker Integration
# This file will be automatically generated by Homepage service discovery # Connects Homepage to Docker for automatic service discovery
providers: my-docker:
openweathermap: openweathermapapikey socket: docker-socket-proxy:2375
longshore: longshoreapikey
widgets:
- resources:
cpu: true
memory: true
disk: true
- search:
provider: duckduckgo
target: _blank
- datetime:
format:
dateStyle: long
timeStyle: short
hour12: true
bookmarks:
- Development:
- Github:
- abbr: GH
href: https://github.com/
- Docker Hub:
- abbr: DH
href: https://hub.docker.com/
- Documentation:
- TSYS Docs:
- abbr: TSYS
href: https://docs.tsys.dev/

View File

@@ -1,12 +1,12 @@
# TSYS Developer Support Stack - Demo Environment Configuration # TSYS Developer Support Stack - Demo Environment Configuration
# Project Identification # Project Identification
COMPOSE_PROJECT_NAME=tsysdevstack-supportstack-demo COMPOSE_PROJECT_NAME=kneldevstack-supportstack-demo
COMPOSE_NETWORK_NAME=tsysdevstack-supportstack-demo-network COMPOSE_NETWORK_NAME=kneldevstack-supportstack-demo-network
# Dynamic User Detection (to be auto-populated by scripts) # Dynamic User Detection (to be auto-populated by scripts)
DEMO_UID=1000 DEMO_UID=1000
DEMO_GID=1000 DEMO_GID=1000
DEMO_DOCKER_GID=996 DEMO_DOCKER_GID=986
# Port Assignments (4000-4099 range) # Port Assignments (4000-4099 range)
HOMEPAGE_PORT=4000 HOMEPAGE_PORT=4000
@@ -59,7 +59,7 @@ DOCKER_SOCKET_PROXY_PLUGINS=0
# InfluxDB Configuration # InfluxDB Configuration
INFLUXDB_ORG=tsysdemo INFLUXDB_ORG=tsysdemo
INFLUXDB_BUCKET=demo_metrics INFLUXDB_BUCKET=demo_metrics
INFLUXDB_ADMIN_USER=demo_admin INFLUXDB_ADMIN_USER=admin
INFLUXDB_ADMIN_PASSWORD=demo_password INFLUXDB_ADMIN_PASSWORD=demo_password
INFLUXDB_AUTH_TOKEN=demo_token_replace_in_production INFLUXDB_AUTH_TOKEN=demo_token_replace_in_production
@@ -76,7 +76,7 @@ WEBTHEME=default-darker
ARCHIVEBOX_SECRET_KEY=demo_secret_replace_in_production ARCHIVEBOX_SECRET_KEY=demo_secret_replace_in_production
# Tube Archivist Configuration # Tube Archivist Configuration
TA_HOST=tubearchivist TA_HOST=http://localhost:4014
TA_PORT=4014 TA_PORT=4014
TA_DEBUG=false TA_DEBUG=false
@@ -84,6 +84,11 @@ TA_DEBUG=false
WAKAPI_PASSWORD_SALT=demo_salt_replace_in_production WAKAPI_PASSWORD_SALT=demo_salt_replace_in_production
# Atuin Configuration # Atuin Configuration
ATUIN_HOST=atuin ATUIN_HOST=0.0.0.0
ATUIN_PORT=4018 ATUIN_OPEN_REGISTRATION=true
ATUIN_OPEN_REGISTRATION=true TA_PASSWORD=demo_password
ELASTIC_PASSWORD=demo_password
ES_JAVA_OPTS="-Xms512m -Xmx512m"
ARCHIVEBOX_ADMIN_USER=admin
ARCHIVEBOX_ADMIN_PASSWORD=demo_password
TA_USERNAME=admin

View File

@@ -1,11 +1,11 @@
--- ---
# TSYS Developer Support Stack - Docker Compose Template # TSYS Developer Support Stack - Docker Compose Template
# Version: 1.0 # Version: 2.0
# Purpose: Demo deployment with dynamic configuration # Purpose: Demo deployment with dynamic configuration
# ⚠️ DEMO CONFIGURATION ONLY - NOT FOR PRODUCTION # DEMO CONFIGURATION ONLY - NOT FOR PRODUCTION
networks: networks:
tsysdevstack-supportstack-demo-network: kneldevstack-supportstack-demo-network:
driver: bridge driver: bridge
ipam: ipam:
config: config:
@@ -13,42 +13,45 @@ networks:
gateway: 192.168.3.1 gateway: 192.168.3.1
volumes: volumes:
tsysdevstack-supportstack-demo_homepage_data: kneldevstack-supportstack-demo_homepage_data:
driver: local driver: local
tsysdevstack-supportstack-demo_pihole_data: kneldevstack-supportstack-demo_pihole_data:
driver: local driver: local
tsysdevstack-supportstack-demo_dockhand_data: kneldevstack-supportstack-demo_dockhand_data:
driver: local driver: local
kneldevstack-supportstack-demo_influxdb_data:
tsysdevstack-supportstack-demo_influxdb_data:
driver: local driver: local
tsysdevstack-supportstack-demo_grafana_data: kneldevstack-supportstack-demo_grafana_data:
driver: local driver: local
tsysdevstack-supportstack-demo_drawio_data: kneldevstack-supportstack-demo_drawio_data:
driver: local driver: local
tsysdevstack-supportstack-demo_kroki_data: kneldevstack-supportstack-demo_kroki_data:
driver: local driver: local
tsysdevstack-supportstack-demo_atomictracker_data: kneldevstack-supportstack-demo_atomictracker_data:
driver: local driver: local
tsysdevstack-supportstack-demo_archivebox_data: kneldevstack-supportstack-demo_archivebox_data:
driver: local driver: local
tsysdevstack-supportstack-demo_tubearchivist_data: kneldevstack-supportstack-demo_tubearchivist_data:
driver: local driver: local
tsysdevstack-supportstack-demo_wakapi_data: kneldevstack-supportstack-demo_ta_redis_data:
driver: local driver: local
tsysdevstack-supportstack-demo_mailhog_data: kneldevstack-supportstack-demo_ta_es_data:
driver: local driver: local
tsysdevstack-supportstack-demo_atuin_data: kneldevstack-supportstack-demo_wakapi_data:
driver: local
kneldevstack-supportstack-demo_mailhog_data:
driver: local
kneldevstack-supportstack-demo_atuin_data:
driver: local driver: local
services: services:
# Docker Socket Proxy - Security Layer # Docker Socket Proxy - Security Layer
docker-socket-proxy: docker-socket-proxy:
image: tecnativa/docker-socket-proxy:latest image: tecnativa/docker-socket-proxy:latest
container_name: "tsysdevstack-supportstack-demo-docker-socket-proxy" container_name: "kneldevstack-supportstack-demo-docker-socket-proxy"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
environment: environment:
@@ -67,20 +70,20 @@ services:
homepage.group: "Infrastructure" homepage.group: "Infrastructure"
homepage.name: "Docker Socket Proxy" homepage.name: "Docker Socket Proxy"
homepage.icon: "docker" homepage.icon: "docker"
homepage.href: "http://localhost:4005" homepage.description: "Secure proxy for Docker socket access (internal only)"
homepage.description: "Secure proxy for Docker socket access"
# Homepage - Central Dashboard # Homepage - Central Dashboard
homepage: homepage:
image: ghcr.io/gethomepage/homepage:latest image: ghcr.io/gethomepage/homepage:latest
container_name: "tsysdevstack-supportstack-demo-homepage" container_name: "kneldevstack-supportstack-demo-homepage"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4000:3000" - "4000:3000"
volumes: volumes:
- tsysdevstack-supportstack-demo_homepage_data:/app/config - kneldevstack-supportstack-demo_homepage_data:/app/config
- ./config/homepage:/app/config/default:ro
environment: environment:
- PUID=1000 - PUID=1000
- PGID=1000 - PGID=1000
@@ -100,16 +103,14 @@ services:
# Pi-hole - DNS Management # Pi-hole - DNS Management
pihole: pihole:
image: pihole/pihole:latest image: pihole/pihole:latest
container_name: "tsysdevstack-supportstack-demo-pihole" container_name: "kneldevstack-supportstack-demo-pihole"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4006:80" - "4006:80"
- "53:53/tcp"
- "53:53/udp"
volumes: volumes:
- tsysdevstack-supportstack-demo_pihole_data:/etc/pihole - kneldevstack-supportstack-demo_pihole_data:/etc/pihole
environment: environment:
- TZ=UTC - TZ=UTC
- WEBPASSWORD=demo_password - WEBPASSWORD=demo_password
@@ -132,14 +133,14 @@ services:
# Dockhand - Docker Management # Dockhand - Docker Management
dockhand: dockhand:
image: fnsys/dockhand:latest image: fnsys/dockhand:latest
container_name: "tsysdevstack-supportstack-demo-dockhand" container_name: "kneldevstack-supportstack-demo-dockhand"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4007:3000" - "4007:3000"
volumes: volumes:
- tsysdevstack-supportstack-demo_dockhand_data:/app/data - kneldevstack-supportstack-demo_dockhand_data:/app/data
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
environment: environment:
- PUID=1000 - PUID=1000
@@ -160,17 +161,17 @@ services:
# InfluxDB - Time Series Database # InfluxDB - Time Series Database
influxdb: influxdb:
image: influxdb:2.7-alpine image: influxdb:2.7-alpine
container_name: "tsysdevstack-supportstack-demo-influxdb" container_name: "kneldevstack-supportstack-demo-influxdb"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4008:8086" - "4008:8086"
volumes: volumes:
- tsysdevstack-supportstack-demo_influxdb_data:/var/lib/influxdb2 - kneldevstack-supportstack-demo_influxdb_data:/var/lib/influxdb2
environment: environment:
- DOCKER_INFLUXDB_INIT_MODE=setup - DOCKER_INFLUXDB_INIT_MODE=setup
- DOCKER_INFLUXDB_INIT_USERNAME=demo_admin - DOCKER_INFLUXDB_INIT_USERNAME=admin
- DOCKER_INFLUXDB_INIT_PASSWORD=demo_password - DOCKER_INFLUXDB_INIT_PASSWORD=demo_password
- DOCKER_INFLUXDB_INIT_ORG=tsysdemo - DOCKER_INFLUXDB_INIT_ORG=tsysdemo
- DOCKER_INFLUXDB_INIT_BUCKET=demo_metrics - DOCKER_INFLUXDB_INIT_BUCKET=demo_metrics
@@ -193,18 +194,20 @@ services:
# Grafana - Visualization Platform # Grafana - Visualization Platform
grafana: grafana:
image: grafana/grafana:latest image: grafana/grafana:latest
container_name: "tsysdevstack-supportstack-demo-grafana" container_name: "kneldevstack-supportstack-demo-grafana"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4009:3000" - "4009:3000"
volumes: volumes:
- tsysdevstack-supportstack-demo_grafana_data:/var/lib/grafana - kneldevstack-supportstack-demo_grafana_data:/var/lib/grafana
- ./config/grafana:/etc/grafana/provisioning:ro
environment: environment:
- GF_SECURITY_ADMIN_USER=admin - GF_SECURITY_ADMIN_USER=admin
- GF_SECURITY_ADMIN_PASSWORD=demo_password - GF_SECURITY_ADMIN_PASSWORD=demo_password
- GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-simple-json-datasource - GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-simple-json-datasource
- GF_SERVER_HTTP_PORT=3000
- PUID=1000 - PUID=1000
- PGID=1000 - PGID=1000
labels: labels:
@@ -223,14 +226,14 @@ services:
# Draw.io - Diagramming Server # Draw.io - Diagramming Server
drawio: drawio:
image: fjudith/draw.io:latest image: fjudith/draw.io:latest
container_name: "tsysdevstack-supportstack-demo-drawio" container_name: "kneldevstack-supportstack-demo-drawio"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4010:8080" - "4010:8080"
volumes: volumes:
- tsysdevstack-supportstack-demo_drawio_data:/root - kneldevstack-supportstack-demo_drawio_data:/root
environment: environment:
- PUID=1000 - PUID=1000
- PGID=1000 - PGID=1000
@@ -250,14 +253,14 @@ services:
# Kroki - Diagrams as a Service # Kroki - Diagrams as a Service
kroki: kroki:
image: yuzutech/kroki:latest image: yuzutech/kroki:latest
container_name: "tsysdevstack-supportstack-demo-kroki" container_name: "kneldevstack-supportstack-demo-kroki"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4011:8000" - "4011:8000"
volumes: volumes:
- tsysdevstack-supportstack-demo_kroki_data:/data - kneldevstack-supportstack-demo_kroki_data:/data
environment: environment:
- KROKI_SAFE_MODE=secure - KROKI_SAFE_MODE=secure
- PUID=1000 - PUID=1000
@@ -278,14 +281,14 @@ services:
# Atomic Tracker - Habit Tracking # Atomic Tracker - Habit Tracking
atomictracker: atomictracker:
image: ghcr.io/majorpeter/atomic-tracker:v1.3.1 image: ghcr.io/majorpeter/atomic-tracker:v1.3.1
container_name: "tsysdevstack-supportstack-demo-atomictracker" container_name: "kneldevstack-supportstack-demo-atomictracker"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4012:8080" - "4012:8080"
volumes: volumes:
- tsysdevstack-supportstack-demo_atomictracker_data:/app/data - kneldevstack-supportstack-demo_atomictracker_data:/app/data
environment: environment:
- NODE_ENV=production - NODE_ENV=production
- PUID=1000 - PUID=1000
@@ -306,16 +309,22 @@ services:
# ArchiveBox - Web Archiving # ArchiveBox - Web Archiving
archivebox: archivebox:
image: archivebox/archivebox:latest image: archivebox/archivebox:latest
container_name: "tsysdevstack-supportstack-demo-archivebox" container_name: "kneldevstack-supportstack-demo-archivebox"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4013:8000" - "4013:8000"
volumes: volumes:
- tsysdevstack-supportstack-demo_archivebox_data:/data - kneldevstack-supportstack-demo_archivebox_data:/data
environment: environment:
- SECRET_KEY=demo_secret_replace_in_production - ADMIN_USERNAME=admin
- ADMIN_PASSWORD=demo_password
- ALLOWED_HOSTS=*
- CSRF_TRUSTED_ORIGINS=http://localhost:4013
- PUBLIC_INDEX=True
- PUBLIC_SNAPSHOTS=True
- PUBLIC_ADD_VIEW=False
- PUID=1000 - PUID=1000
- PGID=1000 - PGID=1000
labels: labels:
@@ -325,48 +334,106 @@ services:
homepage.href: "http://localhost:4013" homepage.href: "http://localhost:4013"
homepage.description: "Web archiving solution" homepage.description: "Web archiving solution"
healthcheck: healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", test: ["CMD", "curl", "-fsS",
"http://localhost:8000"] "http://localhost:8000/health/"]
interval: 30s
timeout: 10s
retries: 5
start_period: 60s
# Tube Archivist - Redis
ta-redis:
image: redis:7-alpine
container_name: "kneldevstack-supportstack-demo-ta-redis"
restart: unless-stopped
networks:
- kneldevstack-supportstack-demo-network
volumes:
- kneldevstack-supportstack-demo_ta_redis_data:/data
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 30s interval: 30s
timeout: 10s timeout: 10s
retries: 3 retries: 3
# Tube Archivist - Elasticsearch
ta-elasticsearch:
image: elasticsearch:8.12.0
container_name: "kneldevstack-supportstack-demo-ta-elasticsearch"
restart: unless-stopped
networks:
- kneldevstack-supportstack-demo-network
volumes:
- kneldevstack-supportstack-demo_ta_es_data:/usr/share/elasticsearch/data
environment:
- discovery.type=single-node
- ES_JAVA_OPTS=-Xms512m -Xmx512m
- xpack.security.enabled=false
- xpack.security.http.ssl.enabled=false
- bootstrap.memory_lock=true
- path.repo=/usr/share/elasticsearch/data/snapshot
ulimits:
memlock:
soft: -1
hard: -1
healthcheck:
test: ["CMD-SHELL", "curl -sf http://localhost:9200/_cluster/health || exit 1"]
interval: 30s
timeout: 10s
retries: 10
start_period: 60s
# Tube Archivist - YouTube Archiving # Tube Archivist - YouTube Archiving
tubearchivist: tubearchivist:
image: bbilly1/tubearchivist:latest image: bbilly1/tubearchivist:latest
container_name: "tsysdevstack-supportstack-demo-tubearchivist" container_name: "kneldevstack-supportstack-demo-tubearchivist"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4014:8000" - "4014:8000"
volumes: volumes:
- tsysdevstack-supportstack-demo_tubearchivist_data:/cache - kneldevstack-supportstack-demo_tubearchivist_data:/cache
environment: environment:
- TA_HOST=tubearchivist - ES_URL=http://ta-elasticsearch:9200
- TA_PORT=4014 - REDIS_CON=redis://ta-redis:6379
- TA_DEBUG=false - ELASTIC_PASSWORD=demo_password
- TA_USERNAME=demo - HOST_UID=1000
- PUID=1000 - HOST_GID=1000
- PGID=1000 - TA_HOST=http://localhost:4014
- TA_USERNAME=admin
- TA_PASSWORD=demo_password
- TZ=UTC
depends_on:
ta-redis:
condition: service_healthy
ta-elasticsearch:
condition: service_healthy
labels: labels:
homepage.group: "Developer Tools" homepage.group: "Developer Tools"
homepage.name: "Tube Archivist" homepage.name: "Tube Archivist"
homepage.icon: "tube-archivist" homepage.icon: "tube-archivist"
homepage.href: "http://localhost:4014" homepage.href: "http://localhost:4014"
homepage.description: "YouTube video archiving" homepage.description: "YouTube video archiving"
healthcheck:
test: ["CMD", "curl", "-f", "--silent",
"http://localhost:8000/api/health/"]
interval: 30s
timeout: 10s
retries: 5
start_period: 120s
# Wakapi - Time Tracking # Wakapi - Time Tracking
wakapi: wakapi:
image: ghcr.io/muety/wakapi:latest image: ghcr.io/muety/wakapi:latest
container_name: "tsysdevstack-supportstack-demo-wakapi" container_name: "kneldevstack-supportstack-demo-wakapi"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4015:3000" - "4015:3000"
volumes: volumes:
- tsysdevstack-supportstack-demo_wakapi_data:/data - kneldevstack-supportstack-demo_wakapi_data:/data
environment: environment:
- WAKAPI_PASSWORD_SALT=demo_salt_replace_in_production - WAKAPI_PASSWORD_SALT=demo_salt_replace_in_production
- PUID=1000 - PUID=1000
@@ -378,8 +445,7 @@ services:
homepage.href: "http://localhost:4015" homepage.href: "http://localhost:4015"
homepage.description: "Open-source WakaTime alternative" homepage.description: "Open-source WakaTime alternative"
healthcheck: healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", test: ["CMD", "/app/healthcheck"]
"http://localhost:3000"]
interval: 30s interval: 30s
timeout: 10s timeout: 10s
retries: 3 retries: 3
@@ -387,14 +453,14 @@ services:
# MailHog - Email Testing # MailHog - Email Testing
mailhog: mailhog:
image: mailhog/mailhog:latest image: mailhog/mailhog:latest
container_name: "tsysdevstack-supportstack-demo-mailhog" container_name: "kneldevstack-supportstack-demo-mailhog"
restart: unless-stopped restart: unless-stopped
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4017:8025" - "4017:8025"
volumes: volumes:
- tsysdevstack-supportstack-demo_mailhog_data:/maildir - kneldevstack-supportstack-demo_mailhog_data:/maildir
environment: environment:
- PUID=1000 - PUID=1000
- PGID=1000 - PGID=1000
@@ -411,25 +477,35 @@ services:
timeout: 10s timeout: 10s
retries: 3 retries: 3
# Atuin - Shell History # Atuin - Shell History Synchronization
atuin: atuin:
image: ghcr.io/atuinsh/atuin:v18.10.0 image: ghcr.io/atuinsh/atuin:v18.10.0
container_name: "tsysdevstack-supportstack-demo-atuin" container_name: "kneldevstack-supportstack-demo-atuin"
restart: unless-stopped restart: unless-stopped
command: server start command:
- server
- start
networks: networks:
- tsysdevstack-supportstack-demo-network - kneldevstack-supportstack-demo-network
ports: ports:
- "4018:8888" - "4018:8888"
volumes: volumes:
- tsysdevstack-supportstack-demo_atuin_data:/config - kneldevstack-supportstack-demo_atuin_data:/config
environment: environment:
- ATUIN_HOST=0.0.0.0
- ATUIN_PORT=8888
- ATUIN_OPEN_REGISTRATION=true
- ATUIN_DB_URI=sqlite:///config/atuin.db - ATUIN_DB_URI=sqlite:///config/atuin.db
- PUID=1000 - RUST_LOG=info,atuin_server=info
- PGID=1000
labels: labels:
homepage.group: "Developer Tools" homepage.group: "Developer Tools"
homepage.name: "Atuin" homepage.name: "Atuin"
homepage.icon: "atuin" homepage.icon: "atuin"
homepage.href: "http://localhost:4018" homepage.href: "http://localhost:4018"
homepage.description: "Magical shell history synchronization" homepage.description: "Magical shell history synchronization"
healthcheck:
test: ["CMD", "bash", "-c", "echo > /dev/tcp/localhost/8888"]
interval: 30s
timeout: 10s
retries: 5
start_period: 30s

View File

@@ -1,8 +1,8 @@
--- ---
# TSYS Developer Support Stack - Docker Compose Template # TSYS Developer Support Stack - Docker Compose Template
# Version: 1.0 # Version: 2.0
# Purpose: Demo deployment with dynamic configuration # Purpose: Demo deployment with dynamic configuration
# ⚠️ DEMO CONFIGURATION ONLY - NOT FOR PRODUCTION # DEMO CONFIGURATION ONLY - NOT FOR PRODUCTION
networks: networks:
${COMPOSE_NETWORK_NAME}: ${COMPOSE_NETWORK_NAME}:
@@ -19,7 +19,6 @@ volumes:
driver: local driver: local
${COMPOSE_PROJECT_NAME}_dockhand_data: ${COMPOSE_PROJECT_NAME}_dockhand_data:
driver: local driver: local
${COMPOSE_PROJECT_NAME}_influxdb_data: ${COMPOSE_PROJECT_NAME}_influxdb_data:
driver: local driver: local
${COMPOSE_PROJECT_NAME}_grafana_data: ${COMPOSE_PROJECT_NAME}_grafana_data:
@@ -34,6 +33,10 @@ volumes:
driver: local driver: local
${COMPOSE_PROJECT_NAME}_tubearchivist_data: ${COMPOSE_PROJECT_NAME}_tubearchivist_data:
driver: local driver: local
${COMPOSE_PROJECT_NAME}_ta_redis_data:
driver: local
${COMPOSE_PROJECT_NAME}_ta_es_data:
driver: local
${COMPOSE_PROJECT_NAME}_wakapi_data: ${COMPOSE_PROJECT_NAME}_wakapi_data:
driver: local driver: local
${COMPOSE_PROJECT_NAME}_mailhog_data: ${COMPOSE_PROJECT_NAME}_mailhog_data:
@@ -67,8 +70,7 @@ services:
homepage.group: "Infrastructure" homepage.group: "Infrastructure"
homepage.name: "Docker Socket Proxy" homepage.name: "Docker Socket Proxy"
homepage.icon: "docker" homepage.icon: "docker"
homepage.href: "http://localhost:${DOCKER_SOCKET_PROXY_PORT}" homepage.description: "Secure proxy for Docker socket access (internal only)"
homepage.description: "Secure proxy for Docker socket access"
# Homepage - Central Dashboard # Homepage - Central Dashboard
homepage: homepage:
@@ -81,6 +83,7 @@ services:
- "${HOMEPAGE_PORT}:3000" - "${HOMEPAGE_PORT}:3000"
volumes: volumes:
- ${COMPOSE_PROJECT_NAME}_homepage_data:/app/config - ${COMPOSE_PROJECT_NAME}_homepage_data:/app/config
- ./config/homepage:/app/config/default:ro
environment: environment:
- PUID=${DEMO_UID} - PUID=${DEMO_UID}
- PGID=${DEMO_GID} - PGID=${DEMO_GID}
@@ -106,8 +109,6 @@ services:
- ${COMPOSE_NETWORK_NAME} - ${COMPOSE_NETWORK_NAME}
ports: ports:
- "${PIHOLE_PORT}:80" - "${PIHOLE_PORT}:80"
- "53:53/tcp"
- "53:53/udp"
volumes: volumes:
- ${COMPOSE_PROJECT_NAME}_pihole_data:/etc/pihole - ${COMPOSE_PROJECT_NAME}_pihole_data:/etc/pihole
environment: environment:
@@ -201,10 +202,12 @@ services:
- "${GRAFANA_PORT}:3000" - "${GRAFANA_PORT}:3000"
volumes: volumes:
- ${COMPOSE_PROJECT_NAME}_grafana_data:/var/lib/grafana - ${COMPOSE_PROJECT_NAME}_grafana_data:/var/lib/grafana
- ./config/grafana:/etc/grafana/provisioning:ro
environment: environment:
- GF_SECURITY_ADMIN_USER=${GF_SECURITY_ADMIN_USER} - GF_SECURITY_ADMIN_USER=${GF_SECURITY_ADMIN_USER}
- GF_SECURITY_ADMIN_PASSWORD=${GF_SECURITY_ADMIN_PASSWORD} - GF_SECURITY_ADMIN_PASSWORD=${GF_SECURITY_ADMIN_PASSWORD}
- GF_INSTALL_PLUGINS=${GF_INSTALL_PLUGINS} - GF_INSTALL_PLUGINS=${GF_INSTALL_PLUGINS}
- GF_SERVER_HTTP_PORT=3000
- PUID=${DEMO_UID} - PUID=${DEMO_UID}
- PGID=${DEMO_GID} - PGID=${DEMO_GID}
labels: labels:
@@ -315,7 +318,13 @@ services:
volumes: volumes:
- ${COMPOSE_PROJECT_NAME}_archivebox_data:/data - ${COMPOSE_PROJECT_NAME}_archivebox_data:/data
environment: environment:
- SECRET_KEY=${ARCHIVEBOX_SECRET_KEY} - ADMIN_USERNAME=${ARCHIVEBOX_ADMIN_USER}
- ADMIN_PASSWORD=${ARCHIVEBOX_ADMIN_PASSWORD}
- ALLOWED_HOSTS=*
- CSRF_TRUSTED_ORIGINS=http://localhost:${ARCHIVEBOX_PORT}
- PUBLIC_INDEX=True
- PUBLIC_SNAPSHOTS=True
- PUBLIC_ADD_VIEW=False
- PUID=${DEMO_UID} - PUID=${DEMO_UID}
- PGID=${DEMO_GID} - PGID=${DEMO_GID}
labels: labels:
@@ -325,12 +334,55 @@ services:
homepage.href: "http://localhost:${ARCHIVEBOX_PORT}" homepage.href: "http://localhost:${ARCHIVEBOX_PORT}"
homepage.description: "Web archiving solution" homepage.description: "Web archiving solution"
healthcheck: healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", test: ["CMD", "curl", "-fsS",
"http://localhost:8000"] "http://localhost:8000/health/"]
interval: ${HEALTH_CHECK_INTERVAL}
timeout: ${HEALTH_CHECK_TIMEOUT}
retries: 5
start_period: 60s
# Tube Archivist - Redis
ta-redis:
image: redis:7-alpine
container_name: "${COMPOSE_PROJECT_NAME}-ta-redis"
restart: unless-stopped
networks:
- ${COMPOSE_NETWORK_NAME}
volumes:
- ${COMPOSE_PROJECT_NAME}_ta_redis_data:/data
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: ${HEALTH_CHECK_INTERVAL} interval: ${HEALTH_CHECK_INTERVAL}
timeout: ${HEALTH_CHECK_TIMEOUT} timeout: ${HEALTH_CHECK_TIMEOUT}
retries: ${HEALTH_CHECK_RETRIES} retries: ${HEALTH_CHECK_RETRIES}
# Tube Archivist - Elasticsearch
ta-elasticsearch:
image: elasticsearch:8.12.0
container_name: "${COMPOSE_PROJECT_NAME}-ta-elasticsearch"
restart: unless-stopped
networks:
- ${COMPOSE_NETWORK_NAME}
volumes:
- ${COMPOSE_PROJECT_NAME}_ta_es_data:/usr/share/elasticsearch/data
environment:
- discovery.type=single-node
- ES_JAVA_OPTS=${ES_JAVA_OPTS}
- xpack.security.enabled=false
- xpack.security.http.ssl.enabled=false
- bootstrap.memory_lock=true
- path.repo=/usr/share/elasticsearch/data/snapshot
ulimits:
memlock:
soft: -1
hard: -1
healthcheck:
test: ["CMD-SHELL", "curl -sf http://localhost:9200/_cluster/health || exit 1"]
interval: ${HEALTH_CHECK_INTERVAL}
timeout: ${HEALTH_CHECK_TIMEOUT}
retries: 10
start_period: 60s
# Tube Archivist - YouTube Archiving # Tube Archivist - YouTube Archiving
tubearchivist: tubearchivist:
image: bbilly1/tubearchivist:latest image: bbilly1/tubearchivist:latest
@@ -343,18 +395,33 @@ services:
volumes: volumes:
- ${COMPOSE_PROJECT_NAME}_tubearchivist_data:/cache - ${COMPOSE_PROJECT_NAME}_tubearchivist_data:/cache
environment: environment:
- ES_URL=http://ta-elasticsearch:9200
- REDIS_CON=redis://ta-redis:6379
- ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
- HOST_UID=${DEMO_UID}
- HOST_GID=${DEMO_GID}
- TA_HOST=${TA_HOST} - TA_HOST=${TA_HOST}
- TA_PORT=${TA_PORT} - TA_USERNAME=${TA_USERNAME}
- TA_DEBUG=${TA_DEBUG} - TA_PASSWORD=${TA_PASSWORD}
- TA_USERNAME=demo - TZ=UTC
- PUID=${DEMO_UID} depends_on:
- PGID=${DEMO_GID} ta-redis:
condition: service_healthy
ta-elasticsearch:
condition: service_healthy
labels: labels:
homepage.group: "Developer Tools" homepage.group: "Developer Tools"
homepage.name: "Tube Archivist" homepage.name: "Tube Archivist"
homepage.icon: "tube-archivist" homepage.icon: "tube-archivist"
homepage.href: "http://localhost:${TUBE_ARCHIVIST_PORT}" homepage.href: "http://localhost:${TUBE_ARCHIVIST_PORT}"
homepage.description: "YouTube video archiving" homepage.description: "YouTube video archiving"
healthcheck:
test: ["CMD", "curl", "-f", "--silent",
"http://localhost:8000/api/health/"]
interval: ${HEALTH_CHECK_INTERVAL}
timeout: ${HEALTH_CHECK_TIMEOUT}
retries: 5
start_period: 120s
# Wakapi - Time Tracking # Wakapi - Time Tracking
wakapi: wakapi:
@@ -378,8 +445,7 @@ services:
homepage.href: "http://localhost:${WAKAPI_PORT}" homepage.href: "http://localhost:${WAKAPI_PORT}"
homepage.description: "Open-source WakaTime alternative" homepage.description: "Open-source WakaTime alternative"
healthcheck: healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", test: ["CMD", "/app/healthcheck"]
"http://localhost:3000"]
interval: ${HEALTH_CHECK_INTERVAL} interval: ${HEALTH_CHECK_INTERVAL}
timeout: ${HEALTH_CHECK_TIMEOUT} timeout: ${HEALTH_CHECK_TIMEOUT}
retries: ${HEALTH_CHECK_RETRIES} retries: ${HEALTH_CHECK_RETRIES}
@@ -411,12 +477,14 @@ services:
timeout: ${HEALTH_CHECK_TIMEOUT} timeout: ${HEALTH_CHECK_TIMEOUT}
retries: ${HEALTH_CHECK_RETRIES} retries: ${HEALTH_CHECK_RETRIES}
# Atuin - Shell History # Atuin - Shell History Synchronization
atuin: atuin:
image: ghcr.io/atuinsh/atuin:v18.10.0 image: ghcr.io/atuinsh/atuin:v18.10.0
container_name: "${COMPOSE_PROJECT_NAME}-atuin" container_name: "${COMPOSE_PROJECT_NAME}-atuin"
restart: unless-stopped restart: unless-stopped
command: server start command:
- server
- start
networks: networks:
- ${COMPOSE_NETWORK_NAME} - ${COMPOSE_NETWORK_NAME}
ports: ports:
@@ -424,12 +492,20 @@ services:
volumes: volumes:
- ${COMPOSE_PROJECT_NAME}_atuin_data:/config - ${COMPOSE_PROJECT_NAME}_atuin_data:/config
environment: environment:
- ATUIN_HOST=${ATUIN_HOST}
- ATUIN_PORT=8888
- ATUIN_OPEN_REGISTRATION=${ATUIN_OPEN_REGISTRATION}
- ATUIN_DB_URI=sqlite:///config/atuin.db - ATUIN_DB_URI=sqlite:///config/atuin.db
- PUID=${DEMO_UID} - RUST_LOG=info,atuin_server=info
- PGID=${DEMO_GID}
labels: labels:
homepage.group: "Developer Tools" homepage.group: "Developer Tools"
homepage.name: "Atuin" homepage.name: "Atuin"
homepage.icon: "atuin" homepage.icon: "atuin"
homepage.href: "http://localhost:${ATUIN_PORT}" homepage.href: "http://localhost:${ATUIN_PORT}"
homepage.description: "Magical shell history synchronization" homepage.description: "Magical shell history synchronization"
healthcheck:
test: ["CMD", "bash", "-c", "echo > /dev/tcp/localhost/8888"]
interval: ${HEALTH_CHECK_INTERVAL}
timeout: ${HEALTH_CHECK_TIMEOUT}
retries: 5
start_period: 30s