add basic container, configure git repo structure, add sops addon

hosts/home-morefine/docker/caddy/Caddyfile

@@ -0,0 +1,147 @@
+{
+    admin :2019
+    # email me@example.com
+}
+
+# A
+ai.catmedved.com {
+    reverse_proxy http://librechat:3080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+auth.catmedved.com {
+    reverse_proxy http://authentik_server:9000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# B
+beszel.catmedved.com {
+    reverse_proxy http://beszel:8090
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# C
+caddy-minipc.catmedved.com {
+    reverse_proxy http://caddyui:8000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# D
+databasus.catmedved.com {
+    reverse_proxy http://databasus:4005
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+drone.catmedved.com {
+    reverse_proxy http://drone:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# F
+files-minipc.catmedved.com {
+    reverse_proxy /outpost.goauthentik.io* https://auth.catmedved.com {
+        header_up Host {host}
+    }
+    reverse_proxy http://filebrowser:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+films.catmedved.com {
+    reverse_proxy http://jellyfin:8096
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# G
+gameyfin.catmedved.com {
+    reverse_proxy http://gameyfin:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+gitea.catmedved.com {
+    reverse_proxy http://gitea.catmedved.com:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+glances-minipc.catmedved.com {
+    reverse_proxy http://glances:61208
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# H
+home.catmedved.com {
+    reverse_proxy http://homepage:3000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# M
+myspeed-minipc.catmedved.com {
+    reverse_proxy http://myspeed:5216
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+music.catmedved.com {
+    reverse_proxy http://navidrome:4533
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# N
+nocodb.catmedved.com {
+    reverse_proxy http://nocodb:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# P
+passwords.catmedved.com {
+    reverse_proxy http://vaultwarden:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+pihole.catmedved.com {
+    reverse_proxy http://pihole:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+photo.catmedved.com {
+    reverse_proxy http://immich_server:2283
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# S
+speedtest-minipc.catmedved.com {
+    reverse_proxy http://speedtest-tracker:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+sync-minipc.catmedved.com {
+    reverse_proxy http://172.24.0.1:8384 {
+        header_up Host {upstream_hostport}
+    }
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# T
+transmission.catmedved.com {
+    reverse_proxy transmission:9091
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# W
+weatherapp.catmedved.com {
+    reverse_proxy http://weatherapp:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+wekan.catmedved.com {
+    reverse_proxy http://wekan:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+wikijs.catmedved.com {
+    reverse_proxy http://wikijs:3000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+whatsupdocker-minipc.catmedved.com {
+    reverse_proxy http://whatsupdocker:3000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}

hosts/home-morefine/docker/caddy/docker-compose.yml

@@ -0,0 +1,25 @@
+services:
+  caddy:
+    image: caddy:latest
+    container_name: caddy
+    restart: unless-stopped
+    networks:
+      - caddy_internal
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - /home/vk/certs/catmedved.com:/etc/caddy/certs:ro
+      - caddy_data:/data
+      - caddy_config:/config
+    environment:
+      - TZ=Europe/Minsk
+
+networks:
+  caddy_internal:
+    external: true
+
+volumes:
+  caddy_data:
+  caddy_config:

hosts/home-morefine/docker/jellyfin/docker-compose.yaml

@@ -0,0 +1,35 @@
+services:
+  jellyfin:
+    image: jellyfin/jellyfin:latest
+    container_name: jellyfin
+    hostname: Films
+    networks:
+      - caddy_internal
+    dns:
+      - 192.168.1.131 # pi-hole
+    volumes:
+      - ~/docker/jellyfin/config:/config
+      - ~/docker/jellyfin/cache:/cache
+      - /media/vk/L200/Media:/media
+      - /mnt/wd:/media_wd
+    #  - /path/to/media2:/media2:ro
+    devices:
+      - /dev/dri:/dev/dri
+    restart: 'unless-stopped'
+
+    #ports:
+    #  - 8096:8096
+    #  - 7359:7359/udp
+
+
+    # Optional - alternative address used for autodiscovery
+    #environment:
+    #  - JELLYFIN_PublishedServerUrl=http://media.local
+    # Optional - may be necessary for docker healthcheck to pass if running in host network mode
+    #extra_hosts:
+    #  - "host.docker.internal:host-gateway"
+
+networks:
+  caddy_internal:
+    name: caddy_internal
+    external: true