added service adguard

stacks/apps/vikunja/stack.yml

@@ -1,60 +0,0 @@
-services:
-  vikunja:
-    image: vikunja/vikunja:latest
-    environment:
-      VIKUNJA_DATABASE_TYPE: postgres
-      VIKUNJA_DATABASE_HOST: 10.0.4.10
-      VIKUNJA_DATABASE_USER: admin
-      VIKUNJA_DATABASE_PASSWORD_FILE: /run/secrets/postgres-master
-      VIKUNJA_DATABASE_DATABASE: vikunja
-      VIKUNJA_SERVICE_PUBLICURL: https://tasks.frostlabs.me
-      VIKUNJA_SERVICE_JWTSECRET_FILE: /run/secrets/vikunja-jwt
-      # OIDC/SSO Configuration for Authentik
-      OIDC_CLIENT_ID: fAkamae10Kz4QnqhAW2pqvyIEpCQWz9yiNVUEcNf
-      OIDC_CLIENT_SECRET: FpLWS72MXH9vReiNEQFCxybUe4OOdiiNPmKNeg6iY7GICpLupF0CQaqqTEzPnwvrDUNEz9I2nwsI3BUP23AQ49ESquhn6d5IZfqRMVSKC7FTzVSLqkQzDCW5SkyJyo83
-      OIDC_AUTH_URI: https://auth.frostlabs.me/application/o/authorize/
-      OIDC_TOKEN_URI: https://auth.frostlabs.me/application/o/token/
-      OIDC_USERINFO_URI: https://auth.frostlabs.me/application/o/userinfo/
-      OIDC_LOGOUT_URI: https://auth.frostlabs.me/application/o/vikunja/end-session/
-      OIDC_USERNAME_CLAIM: preferred_username
-      OIDC_DISPLAY_NAME: Authentik
-      OIDC_SCOPES: openid profile email
-    secrets:
-      - postgres-master
-      - vikunja-jwt
-    volumes:
-      - /home/doc/projects/swarm-data/appdata/vikunja/files:/app/vikunja/files
-      - /home/doc/projects/swarm/stacks/apps/vikunja/config.yml:/etc/vikunja/config.yml:ro
-    networks:
-      - homelab
-    # healthcheck:
-    #   test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:3456/api/v1/info"]
-    #   interval: 30s
-    #   timeout: 5s
-    #   retries: 3
-    #   start_period: 30s
-    deploy:
-      replicas: 1
-      resources:
-        limits:
-          memory: 1G
-          cpus: '1.0'
-        reservations:
-          memory: 512M
-      labels:
-        - "traefik.enable=true"
-        - "traefik.http.routers.vikunja.rule=Host(`tasks.frostlabs.me`)"
-        - "traefik.http.routers.vikunja.entrypoints=websecure"
-        - "traefik.http.routers.vikunja.tls.certresolver=cloudflare"
-        - "traefik.http.services.vikunja.loadbalancer.server.port=3456"
-        - "traefik.swarm.network=homelab"
-
-networks:
-  homelab:
-    external: true
-
-secrets:
-  postgres-master:
-    external: true
-  vikunja-jwt:
-    external: true

stacks/core/adguard/stack.yml

@@ -0,0 +1,44 @@
+services:
+  adguard:
+    image: adguard/adguardhome:latest
+    ports:
+    - target: 53
+      published: 53
+      protocol: udp
+      mode: host
+    - target: 53
+      published: 53
+      protocol: tcp
+      mode: host
+    - target: 3000
+      published: 3000
+      protocol: tcp
+      mode: host
+    volumes:
+    - /home/doc/projects/swarm-data/appdata/adguard/work:/opt/adguardhome/work
+    - /home/doc/projects/swarm-data/appdata/adguard/conf:/opt/adguardhome/conf
+    networks:
+    - homelab
+    deploy:
+      mode: replicated
+      replicas: 1
+      placement:
+        constraints:
+        - node.hostname == p0
+      resources:
+        limits:
+          memory: 512M
+          cpus: '0.5'
+        reservations:
+          memory: 256M
+      labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.adguard.rule=Host(`dns.home.frostlabs.me`)"
+      - "traefik.http.routers.adguard.entrypoints=websecure"
+      - "traefik.http.routers.adguard.tls=true"
+      - "traefik.http.routers.adguard.service=adguard"
+      - "traefik.http.services.adguard.loadbalancer.server.port=3000"
+
+networks:
+  homelab:
+    external: true

stacks/core/portainer/stack.yml

@@ -6,6 +6,8 @@ services:
     - /home/doc/projects/swarm-data/appdata/portainer:/data
     networks:
     - homelab
+    ports:
+    - 9000:9000
     deploy:
       mode: replicated
       replicas: 1
@@ -15,9 +17,10 @@ services:
       labels:
       - "traefik.enable=true"
       - "traefik.swarm.network=homelab"
-      - "traefik.http.routers.portainer.rule=Host(`portainer.frostlabs.me`)"
+      - "traefik.http.routers.portainer.rule=Host(`portainer.home.frostlabs.me`)"
       - "traefik.http.routers.portainer.entrypoints=websecure"
-      - "traefik.http.routers.portainer.tls.certresolver=cloudflare"
+      - "traefik.http.routers.portainer.tls=true"
+      - "traefik.http.routers.portainer.service=portainer"
       - "traefik.http.services.portainer.loadbalancer.server.port=9000"
 
   agent: