Add beszel compose and secrets for agent

2026-02-13 14:31:16 +03:00
parent 9394795a75
commit 103286ed27
2 changed files with 74 additions and 0 deletions
--- a/hosts/home-morefine/docker/beszel/docker-compose.yaml
+++ b/hosts/home-morefine/docker/beszel/docker-compose.yaml
@@ -0,0 +1,48 @@
+services:
+  beszel:
+    image: henrygd/beszel
+    container_name: beszel
+    restart: unless-stopped
+    ports:
+      - "10.8.0.3:8090:8090"
+      - "127.0.0.1:8090:8090"
+    dns:
+      - 192.168.1.131 # pi-hole
+    networks:
+      - caddy_internal
+    volumes:
+      - /srv/rundata/beszel/beszel_data:/beszel_data
+      - /srv/rundata/beszel/beszel_socket:/beszel_socket
+
+  beszel-agent:
+    image: henrygd/beszel-agent-intel
+    container_name: beszel-agent
+    restart: unless-stopped
+    network_mode: host
+    devices:
+      - /dev/sda:/dev/sda
+      #      - /dev/sdb:/dev/sdb #usb adapter - doesn't work
+      #      - /dev/sdc:/dev/sdc #usb adapter - doуsn't work
+      - /dev/nvme0:/dev/nvme0
+      - /dev/dri/card0:/dev/dri/card0 # `ls /dev/dri` to find GPU name
+    cap_add:
+      - SYS_RAWIO # required for S.M.A.R.T. data
+      - SYS_ADMIN # required for NVMe S.M.A.R.T. data
+      - CAP_PERFMON # monitor intel gpu
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /srv/rundata/beszel/beszel_agent_data:/var/lib/beszel-agent
+      - /srv/rundata/beszel/beszel_socket:/beszel_socket
+      - /mnt/wd:/extra-filesystems/sdb1__wd:ro
+      - /media/vk/L200:/extra-filesystems/sdc1__l200:ro
+      # monitor other disks / partitions by mounting a folder in /extra-filesystems
+      # - /mnt/disk/.beszel:/extra-filesystems/sda1:ro
+    environment:
+      LISTEN: /beszel_socket/beszel.sock
+      HUB_URL: http://localhost:8090
+      KEY_FILE: /run/secrets/beszel/AGENT_KEY:ro
+      TOKEN: /run/secrets/beszel/AGENT_TOKEN:ro
+
+networks:
+  caddy_internal:
+    external: true
--- a/hosts/home-morefine/docker/beszel/secrets.sops.yaml
+++ b/hosts/home-morefine/docker/beszel/secrets.sops.yaml
@@ -0,0 +1,26 @@
+AGENT_KEY: ENC[AES256_GCM,data:bkBSQmQ+atPeM6NR6xuCI1Pj18515W+N6aVGV1qj8FkqQdW9NDIuUFQo9avmOvuVBgEwEGjmYopg5HjeOKiNTY8vmTY2uX4ep2NPn+wXLjQ=,iv:Addanwsq3oWc577n4rI4aQrAKHhHwgU54qDRDQrNoY8=,tag:7kc4ekRW3NjGHgV0h0pRlA==,type:str]
+AGENT_TOKEN: ENC[AES256_GCM,data:BThMKkVfuQPVrcWZyeCyX2zKB4zptIeRBy4aK3kpy4jYEJrR,iv:mf6QmzliYPmqSSm04POeAZ0vKKwUrg/BN/9T6trr2ec=,tag:HueCX4ET1qT+GCPltOiCAA==,type:str]
+sops:
+    age:
+        - recipient: age1ua9qahphsqf2x8ew2n4umapp23a66t0eccccc0d5etp82n8tsqgsfc8qjk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5YkhQajBITGFwa1AwNkpP
+            MHhwSWU3enNnTjhVMWtuNUR1cDFPSlVKRENvCmQxYnlpMHdYK0g1azNPdmVoQVBJ
+            ZGUyTXg4ZTJHTkRVV0ZqQVVJeGY4Y2cKLS0tIDZkS1hBM1FBbms3N3FUcHN2aXFM
+            SlNVeTR2MTdZUFNmdnhjMHhWaGUzbjAKjtHro6hKfxOtJrFvjTJOoT6Ao2vjvq3f
+            bupg08TbEdJogHQGi6wCwscCQiZm0UVLZoB5iVjLf5ybVP27CLEQMQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1nw388umnlxfj3cg9lqjyltghfx6w709nam8s2x826c3nxla9famq3uya73
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaE5VV25xL0h1ZmVlQzQy
+            b0VkK0t2UmNYQjROcFJHaE5Xb2lHTmtzY1RrCnZhRVNnRThWTzRpUEFRdXgvSisr
+            TElKUTVQYndYTFkyOWFFbkRtUWlWdTQKLS0tIGJwVng5VWE3c2J6YVk5UVlNUnpj
+            ckRzeFdwblpGN1ViQVNyaXNpWE9ucDQK0s8x0C8C+Z+HnOUx05HyyPU2B1EM5g0o
+            RAPVXu3jh9wy8zFQYILDuvTg5kbWiH73r09hy26UN1aAXxeWf20ufQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-02-13T11:29:44Z"
+    mac: ENC[AES256_GCM,data:36trL0c3r10+PZdbiKm3NgN0BkJwbWGeOesSJlh/SvUTeO9TD09pdd4J/6J/NGTq8GXhGviCUnE0hT76GepgGh9GNvpQQHyRBPlygYjMeoj3mX07yY48SbQTxvpiSgBkhswlvQ4PbpMFOwyALv84ie7Dusfnp+S65RNFLPl4sVU=,iv:IE26s69HxkDOn3LfuXIEUBVpyoZeh5eq4LD8ZRnXqCs=,tag:DDB6MkHpRYbSFLO0ameLVw==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0