diff --git a/alaka-defaults.yml b/alaka-defaults.yml new file mode 100644 index 0000000..746ff41 --- /dev/null +++ b/alaka-defaults.yml @@ -0,0 +1,97 @@ +GLOBALS: + bbb_url: https://talk.example.com/bigbluebutton/ + bbb_secret: your_super_secret_password + turn_url: "turns:talk.example.com:5349?transport=tcp" + turn_secret: your_super_secret_password + basic_auth_password: your_super_secret_password + loki_url: https://loki.monitoring.example.com/loki/api/v1/push + basic_auth_hash: your_super_secret_password +authentik: + env: + EXTRA_DOMAINS: ', `example.com`' + DEFAULT_LANGUAGE: de + APPLICATIONS: '{"Calendar": "https://nextcloud.example.com/apps/calendar/", "BBB": "https://nextcloud.example.com/apps/bbb"}' + uncomment: + - calendar.svg + - bbb.jpg + execute: + - worker set_admin_pass + - worker apply_blueprints + - worker add_applications + - local set_icons +nextcloud: + env: + DEFAULT_QUOTA: "100 MB" + APPS: "calendar" + BBB_URL: "{{bbb_url}}" + uncomment: + - compose.apps.yml + - SECRET_BBB_SECRET_VERSION + secrets: + bbb_secret: "{{bbb_secret}}" + execute: + - app install_bbb + - app set_default_quota + - app install_apps + - app run_occ 'app:disable dashboard' +wordpress: + env: + LOCALE: 'de_DE' + DEFAULT_USER_ROLE: administrator + uncomment: + - EXTRA_DOMAINS + execute: + - app core_install +matrix-synapse: + env: + ENCRYPTED_BY_DEFAULT: off + TURN_URIS: '[{{turn_url}}]' + RETENTION_MAX_LIFETIME: 2y + ALLOWED_LIFETIME_MAX: 2y + uncomment: + - POST_DEPLOY_CMDS + - compose.turn.yml + - TURN_ENABLED + - TURN_ALLOW_GUESTS + - SECRET_TURN_SHARED_SECRET_VERSION + secrets: + turn_shared_secret: "{{turn_secret}}" +wekan: + uncomment: + - PASSWORD_LOGIN_ENABLED +backup-bot-two: + uncomment: + - SECRET_AWS_SECRET_ACCESS_KEY_VERSION + - compose.s3.yml +onlyoffice: + env: + AUTO_ASSEMBLY_ENABLED: "true" +outline: + env: + DEFAULT_LANGUAGE: de_DE +hedgedoc: + env: + CMD_ALLOW_ANONYMOUS: true + CMD_ALLOW_ANONYMOUS_EDITS: true + CMD_ALLOW_FREEURL: true + CMD_COOKIE_POLICY: none +traefik: + env: + DASHBOARD_ENABLED: false + METRICS_ENABLED: 1 + BASIC_AUTH: 1 + secrets: + usersfile: "{{basic_auth_hash}}" + uncomment: + - compose.host.yml + - compose.metrics.yml + - compose.basicauth.yml + - SECRET_USERSFILE_VERSION +monitoring-ng: + env: + LOKI_PUSH_URL: "{{loki_url}}" + uncomment: + - compose.promtail.yml + - SECRET_BASIC_AUTH_VERSION + secrets: + basic_auth: "{{basic_auth_password}}" diff --git a/alaka-smtp.yml b/alaka-smtp.yml new file mode 100644 index 0000000..322ca14 --- /dev/null +++ b/alaka-smtp.yml @@ -0,0 +1,107 @@ +GLOBALS: + smtp_password: your_super_secret_password + smtp_password_urlencoded: your_super_secret_password + smtp_user: noreply + smtp_domain: example.com + smtp_host: mail.example.com +authentik: + env: + AUTHENTIK_EMAIL__HOST: "{{smtp_host}}" + AUTHENTIK_EMAIL__USERNAME: "{{smtp_user}}@{{smtp_domain}}" + AUTHENTIK_EMAIL__FROM: "{{smtp_user}}@{{smtp_domain}}" + secrets: + email_pass: "{{smtp_password}}" +nextcloud: + env: + SMTP_AUTHTYPE: LOGIN + SMTP_HOST: "{{smtp_host}}" + SMTP_SECURE: tls + SMTP_NAME: "{{smtp_user}}@{{smtp_domain}}" + SMTP_PORT: 587 + MAIL_FROM_ADDRESS: "{{smtp_user}}" + MAIL_DOMAIN: "{{smtp_domain}}" + uncomment: + - compose.smtp.yml + - SECRET_SMTP_PASSWORD_VERSION + - compose.apps.yml + secrets: + smtp_password: "{{smtp_password}}" +wordpress: + env: + SMTP_HOST: "{{smtp_host}}" + MAIL_FROM: "{{smtp_user}}@{{smtp_domain}}" + SMTP_USER: "{{smtp_user}}@{{smtp_domain}}" + ADMIN_EMAIL: "{{smtp_user}}@{{smtp_domain}}" + uncomment: + - SMTP_PORT + - SMTP_AUTH + - SMTP_OVERRIDE_FROM + - SMTP_TLS + - SECRET_SMTP_PASSWORD_VERSION + - compose.smtp.yml + - compose.mailrelay.yml + secrets: + smtp_password: "{{smtp_password}}" +vikunja: + env: + SMTP_HOST: "{{smtp_host}}" + SMTP_AUTHTYPE: login + SMTP_USER: "{{smtp_user}}" + SMTP_FROM_EMAIL: "{{smtp_user}}@{{smtp_domain}}" + uncomment: + - compose.smtp.yml + - SMTP_ENABLED + - SECRET_SMTP_PASSWORD_VERSION + secrets: + smtp_password: "{{smtp_password}}" +matrix-synapse: + env: + ADMIN_EMAIL: "{{smtp_user}}@{{smtp_domain}}" + SMTP_APP_NAME: mail + SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}" + SMTP_HOST: "{{smtp_host}}" + SMTP_PORT: 587 + SMTP_USER: "{{smtp_user}}@{{smtp_domain}}" + uncomment: + - compose.smtp.yml + - SMTP_ENABLED + - SECRET_SMTP_PASSWORD_VERSION + secrets: + smtp_password: "{{smtp_password}}" +wekan: + env: + MAIL_URL: "smtp://{{smtp_user}}%40{{smtp_domain}}:{{smtp_password_urlencoded}}@{{smtp_host}}:587" + MAIL_FROM: "Wekan Notifications <{{smtp_user}}@{{smtp_domain}}>" +outline: + env: + SMTP_HOST: "{{smtp_host}}" + SMTP_PORT: 465 + SMTP_USERNAME: "{{smtp_user}}@{{smtp_domain}}" + SMTP_FROM_EMAIL: "{{smtp_user}}@{{smtp_domain}}" + uncomment: + - compose.smtp.yml + - SMTP_ENABLED + - SMTP_SECURE + - SECRET_SMTP_PASSWORD_VERSION + secrets: + smtp_password: "{{smtp_password}}" +rallly: + env: + SUPPORT_EMAIL: "{{smtp_user}}@{{smtp_domain}}" + SMTP_HOST: "{{smtp_host}}" + SMTP_USER: "{{smtp_user}}@{{smtp_domain}}" + secrets: + smtp_pwd: "{{smtp_password}}" +pretix: + env: + SMTP_FROM: "{{smtp_user}}@{{smtp_domain}}" + SMTP_HOST: "{{smtp_host}}" + SMTP_USER: "{{smtp_user}}@{{smtp_domain}}" + SMTP_PORT: 587 + SMTP_TLS: on + SMTP_SSL: off + secrets: + smtp_password: "{{smtp_password}}" +traefik: + env: + LETS_ENCRYPT_EMAIL: "{{smtp_user}}@{{smtp_domain}}" diff --git a/alaka-subdomains.yml b/alaka-subdomains.yml new file mode 100644 index 0000000..85c93b9 --- /dev/null +++ b/alaka-subdomains.yml @@ -0,0 +1,28 @@ +authentik: + subdomain: login.example.com +nextcloud: + subdomain: files.example.com +wordpress: + subdomain: blog.example.com +vikunja: + subdomain: todo.example.com +matrix-synapse: + subdomain: matrix.example.com +element-web: + subdomain: chat.example.com +wekan: + subdomain: board.example.com +backup-bot-two: + subdomain: backup.example.com +onlyoffice: + subdomain: office.example.com +outline: + subdomain: outline.example.com +rallly: + subdomain: poll.example.com +hedgedoc: + subdomain: pad.example.com +pretix: + subdomain: tickets.example.com +monitoring-ng: + subdomain: monitoring.example.com diff --git a/alaka-versions.yml b/alaka-versions.yml new file mode 100644 index 0000000..efeec2d --- /dev/null +++ b/alaka-versions.yml @@ -0,0 +1,30 @@ +authentik: + version: 3.2.4+2023.6.1 +wekan: + version: 2.1.0+v7.30 +nextcloud: + version: 5.0.3+27.0.1-fpm +onlyoffice: + version: 2.6.2+7.4.0 +collabora: + version: 2.7.1+23.05.10.1.1 +wordpress: + version: 2.5.2+6.3.0 +vikunja: + version: 0.4.0+0.22.1 +matrix-synapse: + version: 5.0.2+v1.93.0 +element-web: + version: 0.7.0+v1.11.63 +rallly: + version: 0.4.1+2.11.1 +hedgedoc: + version: 1.0.1+1.9.9 +pretix: + version: 1.0.0+2024.1.0 +traefik: + version: 2.4.3+v2.10.5 +backup-bot-two: + version: chaos +monitoring-ng: + version: 1.1.0+v1.7.0