matusnovak / homelab

Homelab configuration via docker-compose
The Unlicense
29 stars 2 forks source link

Homelab v1.2 #7

Closed matusnovak closed 4 years ago

matusnovak commented 4 years ago

Added codeserver service

Added code-server which uses linuxserver/code-server image. Can be accessed at https://codeserver.${DOMAIN_NAME}/

Added organizr service

Added organizr which uses linuxserver/organizr image. Can be accessed at https://${DOMAIN_NAME}/ (no subdomain, so it is the homepage). Some services do not have iframe security options header and some services do. Due to this the allowframe@file traefik middleware has been added to services that need it. It allows iframe embedding on any ${DOMAIN_NAME} and *.${DOMAIN_NAME} domains.

Added authelia which uses openldap as authentication backed

Previously some services (Traefik, Alertmanager, Prometheus, Adminer) have used the traefik basic auth system. This was replaced by Authelia. It works in the same way, except it uses OpenLDAP for authentication. At the moment it is configured so that user that wants to access the domain needs to belong to a specific OpenLDAP group. (See templates/authelia/configuration.yml file, look for rules:). These groups need to be created on OpenLDAP. The group must be groupOfUniqueNames with a uniqueMember (select Default and look for groupOfUniqueNames when creating a new child entry in ou=groups).

Updated Pi-hole version

Updated to v5.1

Fixed Pi-hole loses DNS1 entry on reload

Pi-Hole seems to lose the custom DNS settings on re-creation. The updated version and env variable DNS1 pointing to Cloudflare DNS-over-HTTPS container seems to fix the problem.