Initial homelab infrastructure
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Cursor
@@ -0,0 +1,29 @@
|
|||||||
|
# Copy to .env and fill in. Never commit .env to git.
|
||||||
|
|
||||||
|
# Let's Encrypt / Traefik
|
||||||
|
ACME_EMAIL=
|
||||||
|
|
||||||
|
# Pi-hole admin password
|
||||||
|
PIHOLE_PASSWORD=
|
||||||
|
|
||||||
|
# Traefik basic auth – generate: htpasswd -nb username password
|
||||||
|
# Then add to traefik/dynamic.yml middlewares.auth.basicAuth.users
|
||||||
|
TRAEFIK_AUTH_USERS=
|
||||||
|
|
||||||
|
# WOL API & Dashboard
|
||||||
|
WOL_API_USER=
|
||||||
|
WOL_API_PASS=
|
||||||
|
# WEATHER_API_KEY= # OpenWeatherMap – optional for dashboard
|
||||||
|
# WEATHER_CITY=
|
||||||
|
# WOL_DEVICES=desktop:AA:BB:CC:DD:EE:FF:192.168.1.10 (name:mac:ip)
|
||||||
|
# WOL_BROADCAST_IP=192.168.0.255
|
||||||
|
|
||||||
|
# Drone CI (Gitea OAuth app, redirect https://drone.zea.lt/login)
|
||||||
|
DRONE_GITEA_CLIENT_ID=
|
||||||
|
DRONE_GITEA_CLIENT_SECRET=
|
||||||
|
DRONE_RPC_SECRET=
|
||||||
|
DRONE_ADMIN_USER=
|
||||||
|
|
||||||
|
# CUPS printer admin
|
||||||
|
CUPSADMIN=admin
|
||||||
|
CUPSPASSWORD=
|
||||||
+30
@@ -0,0 +1,30 @@
|
|||||||
|
# Sensitive data – never commit
|
||||||
|
.env
|
||||||
|
traefik/letsencrypt/
|
||||||
|
traefik/dynamic.yml
|
||||||
|
pihole/etc-pihole/
|
||||||
|
pihole/etc-dnsmasq.d/
|
||||||
|
wireguard/config/
|
||||||
|
cups/config/
|
||||||
|
|
||||||
|
# Data dirs – keep docker-compose.yml, ignore runtime data
|
||||||
|
gitea/data/
|
||||||
|
gitea/indexers/
|
||||||
|
gitea/log/
|
||||||
|
gitea/ssh/
|
||||||
|
gitea/gitea/
|
||||||
|
gitea/git/
|
||||||
|
registry/*
|
||||||
|
!registry/docker-compose.yml
|
||||||
|
drone/*
|
||||||
|
!drone/docker-compose.yml
|
||||||
|
uptime-kuma/*
|
||||||
|
!uptime-kuma/docker-compose.yml
|
||||||
|
|
||||||
|
# Backups (may contain old secrets)
|
||||||
|
*.bak
|
||||||
|
docker-compose.override.yml
|
||||||
|
|
||||||
|
# Logs & temp
|
||||||
|
*.log
|
||||||
|
.DS_Store
|
||||||
@@ -0,0 +1,246 @@
|
|||||||
|
# Homelab Additions Plan: Kuma, Watchtower, Drone CI, CUPS Printer
|
||||||
|
|
||||||
|
## Overview
|
||||||
|
|
||||||
|
Add four new capabilities to the homelab:
|
||||||
|
|
||||||
|
1. **Uptime Kuma** – Monitor service availability (HTTP, ping, etc.)
|
||||||
|
2. **Watchtower** – Auto-update container images
|
||||||
|
3. **Drone CI** – CI/CD for Gitea repos (server + Docker runner)
|
||||||
|
4. **CUPS** – USB printer sharing for remote printing
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 1. Uptime Kuma
|
||||||
|
|
||||||
|
- **Image:** `louislam/uptime-kuma:1`
|
||||||
|
- **Port:** 3001
|
||||||
|
- **Data:** `./uptime-kuma:/app/data`
|
||||||
|
- **Traefik:** `kuma.zea.lt` with basic auth (same as other admin services)
|
||||||
|
- **Optional:** Mount `/var/run/docker.sock` for container monitoring
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 2. Watchtower
|
||||||
|
|
||||||
|
**Note:** Watchtower [is no longer maintained](https://github.com/containrrr/watchtower/discussions/2135). Alternatives:
|
||||||
|
- **WUD (What's Up Docker)** – Web UI, manual/controlled updates, notifications
|
||||||
|
- **Diun** – Notifications only (you decide when to update)
|
||||||
|
|
||||||
|
If you still want Watchtower for automatic updates, it works but may not receive future fixes.
|
||||||
|
|
||||||
|
- **Image:** `containrrr/watchtower`
|
||||||
|
- **Config:** Mount `/var/run/docker.sock`, run with `--schedule "0 0 4 * * *"` (daily at 4 AM) or `--interval 86400`
|
||||||
|
- **Optional:** `WATCHTOWER_CLEANUP=true` to remove old images
|
||||||
|
- **Label:** Add `com.centurylinklabs.watchtower.enable=false` to services you want to exclude (e.g. Traefik, WireGuard)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 3. Drone CI
|
||||||
|
|
||||||
|
Requires **Gitea OAuth app** (manual step before starting Drone):
|
||||||
|
|
||||||
|
1. In Gitea: **Settings → Applications → Create OAuth2 Application**
|
||||||
|
2. **Application Name:** Drone
|
||||||
|
3. **Redirect URI:** `https://drone.zea.lt/login`
|
||||||
|
4. **Confidential Client:** checked
|
||||||
|
5. Save and copy **Client ID** and **Client Secret**
|
||||||
|
|
||||||
|
Components:
|
||||||
|
|
||||||
|
### Drone Server
|
||||||
|
|
||||||
|
- **Image:** `drone/drone:2`
|
||||||
|
- **Database:** SQLite in `/data` (simplest for homelab)
|
||||||
|
- **Env:** `DRONE_GITEA_*`, `DRONE_RPC_SECRET`, `DRONE_SERVER_HOST`, `DRONE_SERVER_PROTO`
|
||||||
|
- **Traefik:** `drone.zea.lt`
|
||||||
|
|
||||||
|
### Drone Docker Runner
|
||||||
|
|
||||||
|
- **Image:** `drone/drone-runner-docker:1`
|
||||||
|
- **Volume:** `/var/run/docker.sock`
|
||||||
|
- **Env:** `DRONE_RPC_HOST=drone`, `DRONE_RPC_PROTO=http`, `DRONE_RPC_SECRET=<same as server>`
|
||||||
|
- **Network:** `homelab` (to reach Gitea, Registry)
|
||||||
|
|
||||||
|
**Critical:** `DRONE_GITEA_SERVER` must be reachable from the Drone server. Use `https://git.zea.lt` (external URL) for OAuth; internal `http://gitea:3000` can cause callback issues when Gitea redirects.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 4. CUPS (USB Printer via Docker)
|
||||||
|
|
||||||
|
- **Image:** `infra7/cups:latest` (supports arm64 for Raspberry Pi)
|
||||||
|
- **Device:** `--device /dev/bus/usb`
|
||||||
|
- **Ports:** `631:631` (IPP + web admin)
|
||||||
|
- **Env:** `CUPSADMIN`, `CUPSPASSWORD` (or Docker secrets)
|
||||||
|
- **Volume:** `./cups/config:/etc/cups` for persistence
|
||||||
|
- **Traefik:** `print.zea.lt` for web admin (optional)
|
||||||
|
|
||||||
|
**Remote printing:**
|
||||||
|
|
||||||
|
- Clients add printer: `ipp://YOUR_SERVER_IP:631/printers/<printer-name>`
|
||||||
|
- Or via `print.zea.lt` if you proxy IPP (less common)
|
||||||
|
|
||||||
|
**USB setup:**
|
||||||
|
|
||||||
|
1. Plug in printer
|
||||||
|
2. Run `lsusb` on host to verify
|
||||||
|
3. Ensure Docker can access `/dev/bus/usb` (permissions)
|
||||||
|
4. Open `http://YOUR_SERVER_IP:631` or `https://print.zea.lt` and add printer
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## DNS Updates
|
||||||
|
|
||||||
|
Add to `pihole/etc-dnsmasq.d/02-custom.conf`:
|
||||||
|
|
||||||
|
```
|
||||||
|
address=/kuma.zea.lt/YOUR_SERVER_IP
|
||||||
|
address=/drone.zea.lt/YOUR_SERVER_IP
|
||||||
|
address=/print.zea.lt/YOUR_SERVER_IP
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Docker Compose Additions (draft)
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
### 📊 Uptime Kuma ###
|
||||||
|
uptime-kuma:
|
||||||
|
image: louislam/uptime-kuma:1
|
||||||
|
container_name: uptime-kuma
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- ./uptime-kuma:/app/data
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock # optional: monitor containers
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.kuma.rule=Host(`kuma.zea.lt`)"
|
||||||
|
- "traefik.http.routers.kuma.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.kuma.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.kuma.middlewares=auth"
|
||||||
|
- "traefik.http.services.kuma.loadbalancer.server.port=3001"
|
||||||
|
|
||||||
|
### 🔄 Watchtower ###
|
||||||
|
watchtower:
|
||||||
|
image: containrrr/watchtower:latest
|
||||||
|
container_name: watchtower
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
environment:
|
||||||
|
- WATCHTOWER_SCHEDULE=0 0 4 * * *
|
||||||
|
- WATCHTOWER_CLEANUP=true
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
|
||||||
|
### 🚀 Drone CI ###
|
||||||
|
drone-server:
|
||||||
|
image: drone/drone:2
|
||||||
|
container_name: drone
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
- DRONE_GITEA_SERVER=https://git.zea.lt
|
||||||
|
- DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID}
|
||||||
|
- DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET}
|
||||||
|
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
||||||
|
- DRONE_SERVER_HOST=drone.zea.lt
|
||||||
|
- DRONE_SERVER_PROTO=https
|
||||||
|
- DRONE_USER_CREATE=username:YOUR_GITEA_USER,admin:true # first admin
|
||||||
|
volumes:
|
||||||
|
- ./drone:/data
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.drone.rule=Host(`drone.zea.lt`)"
|
||||||
|
- "traefik.http.routers.drone.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.drone.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.drone.middlewares=auth"
|
||||||
|
- "traefik.http.services.drone.loadbalancer.server.port=80"
|
||||||
|
|
||||||
|
drone-runner:
|
||||||
|
image: drone/drone-runner-docker:1
|
||||||
|
container_name: drone-runner
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
environment:
|
||||||
|
- DRONE_RPC_HOST=drone
|
||||||
|
- DRONE_RPC_PROTO=http
|
||||||
|
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
||||||
|
- DRONE_RUNNER_CAPACITY=2
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
|
||||||
|
### 🖨️ CUPS Printer Server ###
|
||||||
|
cups:
|
||||||
|
image: infra7/cups:latest
|
||||||
|
container_name: cups
|
||||||
|
restart: always
|
||||||
|
ulimits:
|
||||||
|
nofile:
|
||||||
|
soft: 65536
|
||||||
|
hard: 65536
|
||||||
|
devices:
|
||||||
|
- /dev/bus/usb:/dev/bus/usb
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/London
|
||||||
|
- CUPSADMIN=${CUPSADMIN:-admin}
|
||||||
|
- CUPSPASSWORD=${CUPSPASSWORD}
|
||||||
|
volumes:
|
||||||
|
- ./cups/config:/etc/cups
|
||||||
|
ports:
|
||||||
|
- "631:631"
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.print.rule=Host(`print.zea.lt`)"
|
||||||
|
- "traefik.http.routers.print.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.print.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.services.print.loadbalancer.server.port=631"
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## .env Additions
|
||||||
|
|
||||||
|
```
|
||||||
|
# Drone CI (create OAuth app in Gitea first)
|
||||||
|
DRONE_GITEA_CLIENT_ID=your-client-id
|
||||||
|
DRONE_GITEA_CLIENT_SECRET=your-client-secret
|
||||||
|
DRONE_RPC_SECRET=<openssl rand -hex 16>
|
||||||
|
|
||||||
|
# CUPS printer admin
|
||||||
|
CUPSADMIN=admin
|
||||||
|
CUPSPASSWORD=your-secure-password
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Implementation Order
|
||||||
|
|
||||||
|
1. Add DNS entries for `kuma.zea.lt`, `drone.zea.lt`, `print.zea.lt`
|
||||||
|
2. Create directories: `mkdir -p uptime-kuma drone cups/config`
|
||||||
|
3. Add services to `docker-compose.yml`
|
||||||
|
4. Add secrets to `.env`
|
||||||
|
5. Create Gitea OAuth app
|
||||||
|
6. `docker compose up -d` for new services
|
||||||
|
7. Plug in USB printer, access CUPS at `https://print.zea.lt` or `:631`, add printer
|
||||||
|
8. Open Drone at `https://drone.zea.lt`, activate repos
|
||||||
|
9. Configure Uptime Kuma monitors for your services
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Watchtower Exclusions (optional)
|
||||||
|
|
||||||
|
To prevent Watchtower from updating critical services (Traefik, WireGuard), add:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
labels:
|
||||||
|
- "com.centurylinklabs.watchtower.enable=false"
|
||||||
|
```
|
||||||
|
|
||||||
|
To services: `traefik`, `wireguard`, optionally `pihole`.
|
||||||
@@ -0,0 +1,20 @@
|
|||||||
|
# Secrets Checklist – Never Commit
|
||||||
|
|
||||||
|
Before pushing to git, ensure these are **only** in `.env` (gitignored):
|
||||||
|
|
||||||
|
| Variable | Used by | Example |
|
||||||
|
|----------|---------|---------|
|
||||||
|
| `ACME_EMAIL` | Traefik | Your email for Let's Encrypt |
|
||||||
|
| `PIHOLE_PASSWORD` | Pi-hole | Web UI password |
|
||||||
|
| `TRAEFIK_AUTH_USERS` | traefik/dynamic.yml | `htpasswd -nb user pass` |
|
||||||
|
| `WOL_API_USER` / `WOL_API_PASS` | Dashboard, WOL API | Basic auth |
|
||||||
|
| `WOL_DEVICES` | WOL API | `desktop:MAC:IP` format |
|
||||||
|
| `DRONE_GITEA_CLIENT_ID` / `SECRET` | Drone | OAuth from Gitea |
|
||||||
|
| `DRONE_RPC_SECRET` | Drone | `openssl rand -hex 16` |
|
||||||
|
| `DRONE_ADMIN_USER` | Drone | Your Gitea username |
|
||||||
|
| `CUPSADMIN` / `CUPSPASSWORD` | CUPS | Printer admin |
|
||||||
|
| `WEATHER_API_KEY` / `WEATHER_CITY` | Dashboard | OpenWeatherMap (optional) |
|
||||||
|
|
||||||
|
**Files always gitignored:** `.env`, `traefik/dynamic.yml`, `traefik/letsencrypt/`, data dirs (gitea, pihole, etc.)
|
||||||
|
|
||||||
|
**Verify before push:** `git status` – `.env` and `traefik/dynamic.yml` must not appear.
|
||||||
@@ -0,0 +1,27 @@
|
|||||||
|
services:
|
||||||
|
cups:
|
||||||
|
image: infra7/cups:latest
|
||||||
|
container_name: cups
|
||||||
|
restart: always
|
||||||
|
ulimits:
|
||||||
|
nofile:
|
||||||
|
soft: 65536
|
||||||
|
hard: 65536
|
||||||
|
devices:
|
||||||
|
- /dev/bus/usb:/dev/bus/usb
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/London
|
||||||
|
- CUPSADMIN=${CUPSADMIN:-admin}
|
||||||
|
- CUPSPASSWORD=${CUPSPASSWORD}
|
||||||
|
volumes:
|
||||||
|
- ./config:/etc/cups
|
||||||
|
ports:
|
||||||
|
- "6363:631"
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.print.rule=Host(`print.zea.lt`)"
|
||||||
|
- "traefik.http.routers.print.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.print.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.services.print.loadbalancer.server.port=631"
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
FROM python:3.11-slim
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
|
||||||
|
COPY requirements.txt requirements.txt
|
||||||
|
RUN pip install -r requirements.txt
|
||||||
|
|
||||||
|
COPY . .
|
||||||
|
|
||||||
|
EXPOSE 8080
|
||||||
|
|
||||||
|
CMD ["python", "app.py"]
|
||||||
@@ -0,0 +1,116 @@
|
|||||||
|
from flask import Flask, render_template, jsonify, request, Response
|
||||||
|
import requests
|
||||||
|
import os
|
||||||
|
from functools import wraps
|
||||||
|
from requests.auth import HTTPBasicAuth
|
||||||
|
|
||||||
|
app = Flask(__name__)
|
||||||
|
|
||||||
|
WOL_API_URL = os.getenv("WOL_API_URL", "https://wol.zea.lt")
|
||||||
|
WOL_API_USER = os.getenv("WOL_API_USER")
|
||||||
|
WOL_API_PASS = os.getenv("WOL_API_PASS")
|
||||||
|
WEATHER_API_KEY = os.getenv("WEATHER_API_KEY")
|
||||||
|
WEATHER_CITY = os.getenv("WEATHER_CITY", "")
|
||||||
|
|
||||||
|
|
||||||
|
def _fetch_wol_status():
|
||||||
|
"""Fetch device list and status from WOL API (single source of truth)."""
|
||||||
|
try:
|
||||||
|
auth = (
|
||||||
|
HTTPBasicAuth(WOL_API_USER, WOL_API_PASS)
|
||||||
|
if WOL_API_USER and WOL_API_PASS
|
||||||
|
else None
|
||||||
|
)
|
||||||
|
r = requests.get(
|
||||||
|
f"{WOL_API_URL}/status",
|
||||||
|
auth=auth,
|
||||||
|
timeout=5,
|
||||||
|
)
|
||||||
|
if r.ok:
|
||||||
|
return r.json().get("devices", {})
|
||||||
|
except requests.RequestException:
|
||||||
|
pass
|
||||||
|
return {}
|
||||||
|
|
||||||
|
|
||||||
|
def check_auth(username, password):
|
||||||
|
return username == WOL_API_USER and password == WOL_API_PASS
|
||||||
|
|
||||||
|
|
||||||
|
def authenticate():
|
||||||
|
"""Sends a 401 response that enables basic auth."""
|
||||||
|
return Response(
|
||||||
|
"Could not verify your access level for that URL.\n"
|
||||||
|
"You have to login with proper credentials",
|
||||||
|
401,
|
||||||
|
{"WWW-Authenticate": 'Basic realm="Login Required"'},
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
def requires_auth(f):
|
||||||
|
@wraps(f)
|
||||||
|
def decorated(*args, **kwargs):
|
||||||
|
auth = request.authorization
|
||||||
|
if not auth or not check_auth(auth.username, auth.password):
|
||||||
|
return authenticate()
|
||||||
|
return f(*args, **kwargs)
|
||||||
|
|
||||||
|
return decorated
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/")
|
||||||
|
def dashboard():
|
||||||
|
devices_data = _fetch_wol_status()
|
||||||
|
devices = {k: v.get("mac", "") for k, v in devices_data.items()}
|
||||||
|
status = {k: v.get("online", False) for k, v in devices_data.items()}
|
||||||
|
return render_template(
|
||||||
|
"dashboard.html",
|
||||||
|
devices=devices,
|
||||||
|
status=status,
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/wake/<device>", methods=["POST"])
|
||||||
|
@requires_auth
|
||||||
|
def wake_device(device):
|
||||||
|
devices_data = _fetch_wol_status()
|
||||||
|
if device not in devices_data:
|
||||||
|
return jsonify({"error": "Device not found"}), 404
|
||||||
|
try:
|
||||||
|
auth = HTTPBasicAuth(WOL_API_USER, WOL_API_PASS)
|
||||||
|
r = requests.post(
|
||||||
|
f"{WOL_API_URL}/wake/{device}",
|
||||||
|
auth=auth,
|
||||||
|
timeout=5,
|
||||||
|
)
|
||||||
|
if r.ok:
|
||||||
|
return jsonify({"message": f"Wake command sent to {device}"})
|
||||||
|
return jsonify({"error": f"Failed to send wake command: {r.text}"}), r.status_code
|
||||||
|
except requests.RequestException as e:
|
||||||
|
return jsonify({"error": str(e)}), 500
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/weather")
|
||||||
|
def weather():
|
||||||
|
"""Proxy for OpenWeatherMap – keeps API key server-side."""
|
||||||
|
if not WEATHER_API_KEY or not WEATHER_CITY:
|
||||||
|
return jsonify({"error": "Weather not configured"}), 503
|
||||||
|
try:
|
||||||
|
r = requests.get(
|
||||||
|
"https://api.openweathermap.org/data/2.5/weather",
|
||||||
|
params={
|
||||||
|
"q": WEATHER_CITY,
|
||||||
|
"appid": WEATHER_API_KEY,
|
||||||
|
"units": "metric",
|
||||||
|
},
|
||||||
|
timeout=5,
|
||||||
|
)
|
||||||
|
if r.ok:
|
||||||
|
return jsonify(r.json())
|
||||||
|
except requests.RequestException:
|
||||||
|
pass
|
||||||
|
return jsonify({"error": "Weather unavailable"}), 503
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
app.run(host="0.0.0.0", port=8080)
|
||||||
@@ -0,0 +1,21 @@
|
|||||||
|
services:
|
||||||
|
dashboard:
|
||||||
|
build: .
|
||||||
|
container_name: dashboard
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
- WOL_API_URL=${WOL_API_URL:-https://wol.zea.lt}
|
||||||
|
- WOL_API_USER=${WOL_API_USER}
|
||||||
|
- WOL_API_PASS=${WOL_API_PASS}
|
||||||
|
- WEATHER_API_KEY=${WEATHER_API_KEY}
|
||||||
|
- WEATHER_CITY=${WEATHER_CITY}
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
ports:
|
||||||
|
- "8080:8080"
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.dashboard.rule=Host(`zea.lt`)"
|
||||||
|
- "traefik.http.routers.dashboard.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.dashboard.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.dashboard.middlewares=auth@file"
|
||||||
@@ -0,0 +1,2 @@
|
|||||||
|
Flask==2.3.2
|
||||||
|
requests==2.31.0
|
||||||
@@ -0,0 +1,197 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8" />
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0"/>
|
||||||
|
<title>HomeLab Dashboard</title>
|
||||||
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet" />
|
||||||
|
<link href="https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css" rel="stylesheet" />
|
||||||
|
<style>
|
||||||
|
html, body {
|
||||||
|
height: 100%;
|
||||||
|
margin: 0;
|
||||||
|
background: linear-gradient(135deg, #0f2027, #203a43, #2c5364);
|
||||||
|
color: #fff;
|
||||||
|
font-family: 'Segoe UI', sans-serif;
|
||||||
|
}
|
||||||
|
|
||||||
|
.container {
|
||||||
|
min-height: 100vh;
|
||||||
|
padding: 2rem;
|
||||||
|
display: flex;
|
||||||
|
flex-direction: column;
|
||||||
|
gap: 2rem;
|
||||||
|
}
|
||||||
|
|
||||||
|
.clock {
|
||||||
|
font-size: 5rem;
|
||||||
|
font-weight: bold;
|
||||||
|
text-align: center;
|
||||||
|
}
|
||||||
|
|
||||||
|
.date {
|
||||||
|
font-size: 1.5rem;
|
||||||
|
text-align: center;
|
||||||
|
}
|
||||||
|
|
||||||
|
.weather {
|
||||||
|
text-align: center;
|
||||||
|
font-size: 1.2rem;
|
||||||
|
}
|
||||||
|
|
||||||
|
input[type="search"] {
|
||||||
|
width: 100%;
|
||||||
|
padding: 0.75rem 1rem;
|
||||||
|
border-radius: 0.5rem;
|
||||||
|
border: none;
|
||||||
|
margin: 1rem auto 2rem;
|
||||||
|
font-size: 1.1rem;
|
||||||
|
max-width: 600px;
|
||||||
|
}
|
||||||
|
|
||||||
|
.card-grid {
|
||||||
|
display: grid;
|
||||||
|
grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));
|
||||||
|
gap: 1.5rem;
|
||||||
|
}
|
||||||
|
|
||||||
|
.device-card, .service-card {
|
||||||
|
background: rgba(255, 255, 255, 0.06);
|
||||||
|
border-radius: 1rem;
|
||||||
|
padding: 1.25rem;
|
||||||
|
box-shadow: 0 4px 20px rgba(0,0,0,0.3);
|
||||||
|
transition: transform 0.2s ease;
|
||||||
|
display: flex;
|
||||||
|
flex-direction: column;
|
||||||
|
align-items: center;
|
||||||
|
text-align: center;
|
||||||
|
}
|
||||||
|
|
||||||
|
.device-card:hover, .service-card:hover {
|
||||||
|
transform: scale(1.03);
|
||||||
|
background: rgba(255, 255, 255, 0.09);
|
||||||
|
}
|
||||||
|
|
||||||
|
.device-status {
|
||||||
|
font-size: 2rem;
|
||||||
|
margin-bottom: 0.5rem;
|
||||||
|
}
|
||||||
|
|
||||||
|
.btn-wake {
|
||||||
|
padding: 0.5rem 1.25rem;
|
||||||
|
font-size: 0.95rem;
|
||||||
|
border-radius: 0.5rem;
|
||||||
|
margin-top: 0.5rem;
|
||||||
|
}
|
||||||
|
|
||||||
|
a {
|
||||||
|
color: #0dcaf0;
|
||||||
|
text-decoration: none;
|
||||||
|
font-size: 1.1rem;
|
||||||
|
}
|
||||||
|
|
||||||
|
a:hover {
|
||||||
|
text-decoration: underline;
|
||||||
|
}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="container">
|
||||||
|
<div class="clock" id="clock"></div>
|
||||||
|
<div class="date" id="date"></div>
|
||||||
|
<div class="weather" id="weather">Loading weather...</div>
|
||||||
|
|
||||||
|
<input type="search" id="search" placeholder="Search Google or type a URL..." onkeydown="searchInput(event)" />
|
||||||
|
|
||||||
|
<section>
|
||||||
|
<h2>Services</h2>
|
||||||
|
<div class="card-grid">
|
||||||
|
<div class="service-card"><a href="https://git.zea.lt">🗂️ Gitea</a></div>
|
||||||
|
<div class="service-card"><a href="https://registry.zea.lt">📦 Docker Registry</a></div>
|
||||||
|
<div class="service-card"><a href="https://traefik.zea.lt">📊 Traefik Dashboard</a></div>
|
||||||
|
<div class="service-card"><a href="https://wol.zea.lt">🖲️ Wake-on-LAN API</a></div>
|
||||||
|
<div class="service-card"><a href="https://kuma.zea.lt">📈 Uptime Kuma</a></div>
|
||||||
|
<div class="service-card"><a href="https://drone.zea.lt">🚀 Drone CI</a></div>
|
||||||
|
<div class="service-card"><a href="https://print.zea.lt">🖨️ Printer (CUPS)</a></div>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
<section>
|
||||||
|
<h2>Devices</h2>
|
||||||
|
<div class="card-grid">
|
||||||
|
{% for dev, mac in devices.items() %}
|
||||||
|
<div class="device-card">
|
||||||
|
<div class="device-status">
|
||||||
|
{% if status[dev] %}
|
||||||
|
🟢
|
||||||
|
{% else %}
|
||||||
|
🔴
|
||||||
|
{% endif %}
|
||||||
|
</div>
|
||||||
|
<h5>{{ dev|capitalize }}</h5>
|
||||||
|
<button
|
||||||
|
class="btn btn-{{ 'secondary' if status[dev] else 'primary' }} btn-wake"
|
||||||
|
{% if status[dev] %}disabled{% endif %}
|
||||||
|
onclick="wake('{{ dev }}')">
|
||||||
|
Wake
|
||||||
|
</button>
|
||||||
|
</div>
|
||||||
|
{% endfor %}
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
// Clock & date
|
||||||
|
function updateClock() {
|
||||||
|
const now = new Date();
|
||||||
|
const clock = now.toLocaleTimeString();
|
||||||
|
const date = now.toLocaleDateString(undefined, {
|
||||||
|
weekday: 'long', year: 'numeric', month: 'long', day: 'numeric'
|
||||||
|
});
|
||||||
|
document.getElementById('clock').textContent = clock;
|
||||||
|
document.getElementById('date').textContent = date;
|
||||||
|
}
|
||||||
|
setInterval(updateClock, 1000);
|
||||||
|
updateClock();
|
||||||
|
|
||||||
|
// Weather (fetched via server proxy – API key stays server-side)
|
||||||
|
async function fetchWeather() {
|
||||||
|
const res = await fetch('/weather');
|
||||||
|
if (!res.ok) return document.getElementById('weather').textContent = 'Weather unavailable';
|
||||||
|
const data = await res.json();
|
||||||
|
if (data.error) return document.getElementById('weather').textContent = 'Weather unavailable';
|
||||||
|
const temp = data.main.temp.toFixed(1);
|
||||||
|
const desc = data.weather[0].description;
|
||||||
|
const icon = data.weather[0].icon;
|
||||||
|
const city = data.name;
|
||||||
|
document.getElementById('weather').innerHTML =
|
||||||
|
`<img src="https://openweathermap.org/img/wn/${icon}.png" alt="" /> ${city}: ${temp}°C, ${desc}`;
|
||||||
|
}
|
||||||
|
fetchWeather();
|
||||||
|
|
||||||
|
// Wake device
|
||||||
|
async function wake(device) {
|
||||||
|
const resp = await fetch(`/wake/${device}`, { method: 'POST' });
|
||||||
|
const data = await resp.json();
|
||||||
|
alert(data.message || data.error);
|
||||||
|
location.reload();
|
||||||
|
}
|
||||||
|
|
||||||
|
// Smart search
|
||||||
|
function searchInput(e) {
|
||||||
|
if (e.key === 'Enter') {
|
||||||
|
let q = e.target.value.trim();
|
||||||
|
if (!q) return;
|
||||||
|
if (!q.startsWith('http') && q.includes('.') && !q.includes(' ')) {
|
||||||
|
if (!q.startsWith('http://') && !q.startsWith('https://')) q = 'http://' + q;
|
||||||
|
location.href = q;
|
||||||
|
} else {
|
||||||
|
location.href = 'https://www.google.com/search?q=' + encodeURIComponent(q);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
|
||||||
@@ -0,0 +1,22 @@
|
|||||||
|
# Homelab aggregator – runs all per-folder compose files
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# From root (all services): docker compose up -d
|
||||||
|
# Single folder: cd traefik && docker compose up -d
|
||||||
|
# (create network first: docker network create homelab)
|
||||||
|
#
|
||||||
|
# Requires: Docker Compose v2.20+ (include support)
|
||||||
|
# Network "homelab" is created by traefik (must start traefik first for others)
|
||||||
|
|
||||||
|
include:
|
||||||
|
- path: traefik/docker-compose.yml
|
||||||
|
- path: gitea/docker-compose.yml
|
||||||
|
- path: registry/docker-compose.yml
|
||||||
|
- path: wol-api/docker-compose.yml
|
||||||
|
- path: pihole/docker-compose.yml
|
||||||
|
- path: wireguard/docker-compose.yml
|
||||||
|
- path: dashboard/docker-compose.yml
|
||||||
|
- path: uptime-kuma/docker-compose.yml
|
||||||
|
- path: watchtower/docker-compose.yml
|
||||||
|
- path: drone/docker-compose.yml
|
||||||
|
- path: cups/docker-compose.yml
|
||||||
@@ -0,0 +1,38 @@
|
|||||||
|
services:
|
||||||
|
drone:
|
||||||
|
image: drone/drone:2
|
||||||
|
container_name: drone
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
- DRONE_GITEA_SERVER=https://git.zea.lt
|
||||||
|
- DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID}
|
||||||
|
- DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET}
|
||||||
|
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
||||||
|
- DRONE_SERVER_HOST=drone.zea.lt
|
||||||
|
- DRONE_SERVER_PROTO=https
|
||||||
|
- DRONE_USER_CREATE=username:${DRONE_ADMIN_USER},admin:true
|
||||||
|
volumes:
|
||||||
|
- .:/data
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.drone.rule=Host(`drone.zea.lt`)"
|
||||||
|
- "traefik.http.routers.drone.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.drone.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.drone.middlewares=auth@file"
|
||||||
|
- "traefik.http.services.drone.loadbalancer.server.port=80"
|
||||||
|
|
||||||
|
drone-runner:
|
||||||
|
image: drone/drone-runner-docker:1
|
||||||
|
container_name: drone-runner
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
environment:
|
||||||
|
- DRONE_RPC_HOST=drone
|
||||||
|
- DRONE_RPC_PROTO=http
|
||||||
|
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
||||||
|
- DRONE_RUNNER_CAPACITY=2
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
@@ -0,0 +1,19 @@
|
|||||||
|
services:
|
||||||
|
gitea:
|
||||||
|
image: gitea/gitea:latest
|
||||||
|
container_name: gitea
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
- USER_UID=1000
|
||||||
|
- USER_GID=1000
|
||||||
|
- GITEA__server__ROOT_URL=https://git.zea.lt
|
||||||
|
volumes:
|
||||||
|
- .:/data
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.gitea.rule=Host(`git.zea.lt`)"
|
||||||
|
- "traefik.http.routers.gitea.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.gitea.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.services.gitea.loadbalancer.server.port=3000"
|
||||||
@@ -0,0 +1,22 @@
|
|||||||
|
services:
|
||||||
|
pihole:
|
||||||
|
image: pihole/pihole:latest
|
||||||
|
container_name: pihole
|
||||||
|
restart: always
|
||||||
|
network_mode: host
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/London
|
||||||
|
- WEBPASSWORD=${PIHOLE_PASSWORD:-admin}
|
||||||
|
- WEBPORT=8080
|
||||||
|
- DNSMASQ_LISTENING=all
|
||||||
|
volumes:
|
||||||
|
- ./etc-pihole:/etc/pihole
|
||||||
|
- ./etc-dnsmasq.d:/etc/dnsmasq.d
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.pihole.rule=Host(`pihole.zea.lt`)"
|
||||||
|
- "traefik.http.routers.pihole.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.pihole.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.pihole.middlewares=pihole-prefix"
|
||||||
|
- "traefik.http.middlewares.pihole-prefix.addprefix.prefix=/admin"
|
||||||
|
- "traefik.http.services.pihole.loadbalancer.server.port=8080"
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
services:
|
||||||
|
registry:
|
||||||
|
image: registry:2
|
||||||
|
container_name: registry
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- .:/var/lib/registry
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.registry.rule=Host(`registry.zea.lt`)"
|
||||||
|
- "traefik.http.routers.registry.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.registry.tls.certresolver=leresolver"
|
||||||
Executable
+36
@@ -0,0 +1,36 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# Configure homelab repo to push to both Gitea (local) and remote (e.g. GitHub)
|
||||||
|
# Run once after: git init && git add . && git commit -m "Initial homelab config"
|
||||||
|
#
|
||||||
|
# Usage: ./setup-git-dual-remote.sh [gitea_url] [remote_url]
|
||||||
|
# Example: ./setup-git-dual-remote.sh https://git.zea.lt/USER/homelab.git https://github.com/USER/homelab.git
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
GITEA_URL="${1:?Usage: $0 <gitea_repo_url> <remote_repo_url>}"
|
||||||
|
REMOTE_URL="${2:?Usage: $0 <gitea_repo_url> <remote_repo_url>}"
|
||||||
|
|
||||||
|
cd "$(dirname "$0")"
|
||||||
|
|
||||||
|
if [[ ! -d .git ]]; then
|
||||||
|
echo "Initializing git..."
|
||||||
|
git init
|
||||||
|
git add .
|
||||||
|
git commit -m "Initial homelab infrastructure" || true
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Remove default origin if it exists (e.g. from clone)
|
||||||
|
git remote remove origin 2>/dev/null || true
|
||||||
|
|
||||||
|
# Add origin with dual push URLs – one push goes to both
|
||||||
|
git remote add origin "$GITEA_URL"
|
||||||
|
git remote set-url --add --push origin "$GITEA_URL"
|
||||||
|
git remote set-url --add --push origin "$REMOTE_URL"
|
||||||
|
|
||||||
|
echo "Dual remote configured."
|
||||||
|
echo " Local (Gitea): $GITEA_URL"
|
||||||
|
echo " Remote backup: $REMOTE_URL"
|
||||||
|
echo ""
|
||||||
|
echo "Create both repos first (empty, no readme). Then:"
|
||||||
|
echo " git branch -M main"
|
||||||
|
echo " git push -u origin main"
|
||||||
Executable
+161
@@ -0,0 +1,161 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
BASE_DIR="$HOME/homelab"
|
||||||
|
DASHBOARD_DIR="$BASE_DIR/dashboard"
|
||||||
|
TEMPLATES_DIR="$DASHBOARD_DIR/templates"
|
||||||
|
DOCKER_COMPOSE_FILE="$BASE_DIR/docker-compose.yml"
|
||||||
|
|
||||||
|
echo "Creating dashboard directory structure..."
|
||||||
|
mkdir -p "$TEMPLATES_DIR"
|
||||||
|
|
||||||
|
echo "Writing app.py..."
|
||||||
|
cat > "$DASHBOARD_DIR/app.py" << 'EOF'
|
||||||
|
from flask import Flask, render_template, jsonify, request
|
||||||
|
import subprocess
|
||||||
|
import requests
|
||||||
|
|
||||||
|
app = Flask(__name__)
|
||||||
|
|
||||||
|
DEVICES = {
|
||||||
|
"desktop": "AA:BB:CC:DD:EE:FF", # Replace with real MAC
|
||||||
|
}
|
||||||
|
|
||||||
|
DEVICE_IPS = {
|
||||||
|
"desktop": "192.168.1.10", # Replace with real IP
|
||||||
|
}
|
||||||
|
|
||||||
|
WOL_API_URL = "https://wol.zea.lt"
|
||||||
|
|
||||||
|
def ping_host(ip):
|
||||||
|
try:
|
||||||
|
subprocess.check_output(['ping', '-c', '1', '-W', '1', ip])
|
||||||
|
return True
|
||||||
|
except subprocess.CalledProcessError:
|
||||||
|
return False
|
||||||
|
|
||||||
|
@app.route('/')
|
||||||
|
def dashboard():
|
||||||
|
status = {dev: ping_host(ip) for dev, ip in DEVICE_IPS.items()}
|
||||||
|
return render_template('dashboard.html', devices=DEVICES, status=status)
|
||||||
|
|
||||||
|
@app.route('/wake/<device>', methods=['POST'])
|
||||||
|
def wake_device(device):
|
||||||
|
if device not in DEVICES:
|
||||||
|
return jsonify({"error": "Device not found"}), 404
|
||||||
|
try:
|
||||||
|
r = requests.post(f"{WOL_API_URL}/wake/{device}")
|
||||||
|
if r.ok:
|
||||||
|
return jsonify({"message": f"Wake command sent to {device}"})
|
||||||
|
else:
|
||||||
|
return jsonify({"error": f"Failed to send wake command: {r.text}"}), r.status_code
|
||||||
|
except Exception as e:
|
||||||
|
return jsonify({"error": str(e)}), 500
|
||||||
|
|
||||||
|
if __name__ == '__main__':
|
||||||
|
app.run(host='0.0.0.0', port=8080)
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo "Writing dashboard.html template..."
|
||||||
|
cat > "$TEMPLATES_DIR/dashboard.html" << 'EOF'
|
||||||
|
<!doctype html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<title>HomeLab Dashboard</title>
|
||||||
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet" />
|
||||||
|
</head>
|
||||||
|
<body class="p-4">
|
||||||
|
<h1>HomeLab Dashboard</h1>
|
||||||
|
|
||||||
|
<h2>Services</h2>
|
||||||
|
<ul>
|
||||||
|
<li><a href="https://git.zea.lt" target="_blank">Gitea</a></li>
|
||||||
|
<li><a href="https://registry.zea.lt" target="_blank">Docker Registry</a></li>
|
||||||
|
<li><a href="https://traefik.zea.lt" target="_blank">Traefik Dashboard</a></li>
|
||||||
|
<li><a href="https://wol.zea.lt" target="_blank">Wake-on-LAN API</a></li>
|
||||||
|
</ul>
|
||||||
|
|
||||||
|
<h2>Devices</h2>
|
||||||
|
<table class="table table-bordered" style="max-width:600px;">
|
||||||
|
<thead>
|
||||||
|
<tr>
|
||||||
|
<th>Device</th>
|
||||||
|
<th>Status</th>
|
||||||
|
<th>Action</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
<tbody>
|
||||||
|
{% for device, mac in devices.items() %}
|
||||||
|
<tr>
|
||||||
|
<td>{{ device }}</td>
|
||||||
|
<td>
|
||||||
|
{% if status[device] %}
|
||||||
|
<span class="badge bg-success">Online</span>
|
||||||
|
{% else %}
|
||||||
|
<span class="badge bg-danger">Offline</span>
|
||||||
|
{% endif %}
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<button class="btn btn-primary btn-sm" onclick="wake('{{ device }}')">Wake</button>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
{% endfor %}
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
async function wake(device) {
|
||||||
|
const resp = await fetch(`/wake/${device}`, { method: 'POST' });
|
||||||
|
const data = await resp.json();
|
||||||
|
alert(data.message || data.error);
|
||||||
|
}
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo "Writing Dockerfile..."
|
||||||
|
cat > "$DASHBOARD_DIR/Dockerfile" << 'EOF'
|
||||||
|
FROM python:3.11-slim
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
COPY requirements.txt requirements.txt
|
||||||
|
RUN pip install -r requirements.txt
|
||||||
|
|
||||||
|
COPY . .
|
||||||
|
|
||||||
|
EXPOSE 8080
|
||||||
|
|
||||||
|
CMD ["python", "app.py"]
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo "Writing requirements.txt..."
|
||||||
|
cat > "$DASHBOARD_DIR/requirements.txt" << 'EOF'
|
||||||
|
Flask==2.3.2
|
||||||
|
requests==2.31.0
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Backup docker-compose.yml just in case
|
||||||
|
cp "$DOCKER_COMPOSE_FILE" "$DOCKER_COMPOSE_FILE.bak"
|
||||||
|
|
||||||
|
echo "Updating docker-compose.yml to add dashboard service..."
|
||||||
|
# Append dashboard service before the last line if it ends with '...' or just at end
|
||||||
|
# If docker-compose.yml uses version 3+ it should be fine
|
||||||
|
cat >> "$DOCKER_COMPOSE_FILE" << 'EOF'
|
||||||
|
|
||||||
|
dashboard:
|
||||||
|
build: ./dashboard
|
||||||
|
container_name: dashboard
|
||||||
|
restart: always
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.dashboard.rule=Host(`dashboard.zea.lt`)"
|
||||||
|
- "traefik.http.routers.dashboard.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.dashboard.tls.certresolver=leresolver"
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo "Setup complete! You can now run:"
|
||||||
|
echo "cd $BASE_DIR && docker-compose build dashboard && docker-compose up -d dashboard"
|
||||||
|
|
||||||
Executable
+200
@@ -0,0 +1,200 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Homelab Setup Script
|
||||||
|
echo "🏠 Setting up homelab directories and files..."
|
||||||
|
|
||||||
|
# Create main directories
|
||||||
|
mkdir -p traefik/letsencrypt
|
||||||
|
mkdir -p gitea
|
||||||
|
mkdir -p registry
|
||||||
|
mkdir -p wol-api
|
||||||
|
mkdir -p pihole/etc-pihole
|
||||||
|
mkdir -p pihole/etc-dnsmasq.d
|
||||||
|
mkdir -p wireguard/config
|
||||||
|
|
||||||
|
# Set proper permissions
|
||||||
|
chmod 600 traefik/letsencrypt
|
||||||
|
chmod 755 gitea registry pihole/etc-pihole pihole/etc-dnsmasq.d wireguard/config
|
||||||
|
|
||||||
|
# Create .env file
|
||||||
|
cat > .env << 'EOF'
|
||||||
|
# Pi-hole admin password
|
||||||
|
PIHOLE_PASSWORD=your_secure_password_here
|
||||||
|
|
||||||
|
# Change this to a secure password!
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create basic traefik.yml config
|
||||||
|
cat > traefik/traefik.yml << 'EOF'
|
||||||
|
# Static configuration
|
||||||
|
api:
|
||||||
|
dashboard: true
|
||||||
|
insecure: false
|
||||||
|
|
||||||
|
entryPoints:
|
||||||
|
web:
|
||||||
|
address: ":80"
|
||||||
|
http:
|
||||||
|
redirections:
|
||||||
|
entryPoint:
|
||||||
|
to: websecure
|
||||||
|
scheme: https
|
||||||
|
permanent: true
|
||||||
|
websecure:
|
||||||
|
address: ":443"
|
||||||
|
|
||||||
|
providers:
|
||||||
|
docker:
|
||||||
|
endpoint: "unix:///var/run/docker.sock"
|
||||||
|
exposedByDefault: false
|
||||||
|
|
||||||
|
certificatesResolvers:
|
||||||
|
leresolver:
|
||||||
|
acme:
|
||||||
|
httpChallenge:
|
||||||
|
entryPoint: web
|
||||||
|
email: your-email@example.com
|
||||||
|
storage: /letsencrypt/acme.json
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create basic WOL API Dockerfile
|
||||||
|
cat > wol-api/Dockerfile << 'EOF'
|
||||||
|
FROM python:3.9-slim
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Install wake-on-lan package
|
||||||
|
RUN pip install flask wakeonlan
|
||||||
|
|
||||||
|
COPY app.py .
|
||||||
|
|
||||||
|
EXPOSE 5000
|
||||||
|
|
||||||
|
CMD ["python", "app.py"]
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create basic WOL API application
|
||||||
|
cat > wol-api/app.py << 'EOF'
|
||||||
|
from flask import Flask, request, jsonify
|
||||||
|
from wakeonlan import send_magic_packet
|
||||||
|
import logging
|
||||||
|
|
||||||
|
app = Flask(__name__)
|
||||||
|
logging.basicConfig(level=logging.INFO)
|
||||||
|
|
||||||
|
# Define your devices here
|
||||||
|
DEVICES = {
|
||||||
|
"desktop": "00:11:22:33:44:55", # Replace with actual MAC addresses
|
||||||
|
"laptop": "AA:BB:CC:DD:EE:FF",
|
||||||
|
# Add more devices as needed
|
||||||
|
}
|
||||||
|
|
||||||
|
@app.route('/wake/<device>', methods=['POST'])
|
||||||
|
def wake_device(device):
|
||||||
|
if device not in DEVICES:
|
||||||
|
return jsonify({"error": "Device not found"}), 404
|
||||||
|
|
||||||
|
try:
|
||||||
|
mac_address = DEVICES[device]
|
||||||
|
send_magic_packet(mac_address)
|
||||||
|
app.logger.info(f"Magic packet sent to {device} ({mac_address})")
|
||||||
|
return jsonify({"message": f"Wake-on-LAN packet sent to {device}"}), 200
|
||||||
|
except Exception as e:
|
||||||
|
app.logger.error(f"Error sending wake packet: {e}")
|
||||||
|
return jsonify({"error": "Failed to send wake packet"}), 500
|
||||||
|
|
||||||
|
@app.route('/devices', methods=['GET'])
|
||||||
|
def list_devices():
|
||||||
|
return jsonify({"devices": list(DEVICES.keys())})
|
||||||
|
|
||||||
|
@app.route('/health', methods=['GET'])
|
||||||
|
def health_check():
|
||||||
|
return jsonify({"status": "healthy"}), 200
|
||||||
|
|
||||||
|
if __name__ == '__main__':
|
||||||
|
app.run(host='0.0.0.0', port=5000, debug=False)
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create Pi-hole custom DNS config
|
||||||
|
cat > pihole/etc-dnsmasq.d/02-custom.conf << 'EOF'
|
||||||
|
# Allow queries from local network
|
||||||
|
interface=eth0
|
||||||
|
listen-address=127.0.0.1,0.0.0.0
|
||||||
|
bind-interfaces
|
||||||
|
|
||||||
|
# Custom DNS entries for your homelab
|
||||||
|
# Format: address=/domain.name/IP
|
||||||
|
address=/traefik.zea.lt/192.168.1.100
|
||||||
|
address=/git.zea.lt/192.168.1.100
|
||||||
|
address=/registry.zea.lt/192.168.1.100
|
||||||
|
address=/wol.zea.lt/192.168.1.100
|
||||||
|
address=/pihole.zea.lt/192.168.1.100
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create startup script
|
||||||
|
cat > start.sh << 'EOF'
|
||||||
|
#!/bin/bash
|
||||||
|
echo "🚀 Starting homelab services..."
|
||||||
|
docker-compose up -d
|
||||||
|
echo "✅ Services started!"
|
||||||
|
echo ""
|
||||||
|
echo "🔗 Access points:"
|
||||||
|
echo " - Traefik Dashboard: https://traefik.zea.lt"
|
||||||
|
echo " - Gitea: https://git.zea.lt"
|
||||||
|
echo " - Pi-hole: https://pihole.zea.lt"
|
||||||
|
echo " - Docker Registry: https://registry.zea.lt"
|
||||||
|
echo " - WOL API: https://wol.zea.lt"
|
||||||
|
echo ""
|
||||||
|
echo "📋 Next steps:"
|
||||||
|
echo " 1. Check WireGuard logs: docker logs wireguard"
|
||||||
|
echo " 2. Get VPN configs from: ./wireguard/config/peer1/"
|
||||||
|
echo " 3. Update .env with secure passwords"
|
||||||
|
echo " 4. Update MAC addresses in wol-api/app.py"
|
||||||
|
echo " 5. Update server IP in pihole/etc-dnsmasq.d/02-custom.conf"
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create stop script
|
||||||
|
cat > stop.sh << 'EOF'
|
||||||
|
#!/bin/bash
|
||||||
|
echo "🛑 Stopping homelab services..."
|
||||||
|
docker-compose down
|
||||||
|
echo "✅ Services stopped!"
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create update script
|
||||||
|
cat > update.sh << 'EOF'
|
||||||
|
#!/bin/bash
|
||||||
|
echo "🔄 Updating homelab services..."
|
||||||
|
docker-compose pull
|
||||||
|
docker-compose up -d
|
||||||
|
echo "✅ Services updated!"
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Make scripts executable
|
||||||
|
chmod +x start.sh stop.sh update.sh
|
||||||
|
|
||||||
|
# Create .gitignore
|
||||||
|
cat > .gitignore << 'EOF'
|
||||||
|
# Sensitive data
|
||||||
|
.env
|
||||||
|
traefik/letsencrypt/
|
||||||
|
gitea/
|
||||||
|
registry/
|
||||||
|
pihole/etc-pihole/
|
||||||
|
wireguard/config/
|
||||||
|
|
||||||
|
# Logs
|
||||||
|
*.log
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo "✅ Homelab setup complete!"
|
||||||
|
echo ""
|
||||||
|
echo "📝 TODO before starting:"
|
||||||
|
echo " 1. Update .env with secure passwords"
|
||||||
|
echo " 2. Update MAC addresses in wol-api/app.py"
|
||||||
|
echo " 3. Update server IP in pihole/etc-dnsmasq.d/02-custom.conf"
|
||||||
|
echo " 4. Make sure your domains (*.zea.lt) point to your server"
|
||||||
|
echo ""
|
||||||
|
echo "🚀 To start: ./start.sh"
|
||||||
|
echo "🛑 To stop: ./stop.sh"
|
||||||
|
echo "🔄 To update: ./update.sh"
|
||||||
@@ -0,0 +1,21 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
echo "🚀 Starting homelab services..."
|
||||||
|
docker compose up -d
|
||||||
|
echo "✅ Services started!"
|
||||||
|
echo ""
|
||||||
|
echo "🔗 Access points:"
|
||||||
|
echo " - Traefik Dashboard: https://traefik.zea.lt"
|
||||||
|
echo " - Gitea: https://git.zea.lt"
|
||||||
|
echo " - Pi-hole: https://pihole.zea.lt"
|
||||||
|
echo " - Docker Registry: https://registry.zea.lt"
|
||||||
|
echo " - WOL API: https://wol.zea.lt"
|
||||||
|
echo " - Uptime Kuma: https://kuma.zea.lt"
|
||||||
|
echo " - Drone CI: https://drone.zea.lt"
|
||||||
|
echo " - CUPS Printer: https://print.zea.lt (IPP: port 6363)"
|
||||||
|
echo ""
|
||||||
|
echo "📋 Next steps:"
|
||||||
|
echo " 1. Check WireGuard logs: docker logs wireguard"
|
||||||
|
echo " 2. Get VPN configs from: ./wireguard/config/peer1/"
|
||||||
|
echo " 3. Update .env with secure passwords"
|
||||||
|
echo " 4. Update MAC addresses in wol-api/app.py"
|
||||||
|
echo " 5. Update server IP in pihole/etc-dnsmasq.d/02-custom.conf"
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
echo "🛑 Stopping homelab services..."
|
||||||
|
docker compose down
|
||||||
|
echo "✅ Services stopped!"
|
||||||
@@ -0,0 +1,42 @@
|
|||||||
|
services:
|
||||||
|
traefik:
|
||||||
|
image: traefik:v2.11
|
||||||
|
container_name: traefik
|
||||||
|
restart: always
|
||||||
|
command:
|
||||||
|
- "--api.dashboard=true"
|
||||||
|
- "--api.insecure=false"
|
||||||
|
- "--providers.docker=true"
|
||||||
|
- "--providers.docker.exposedbydefault=false"
|
||||||
|
- "--providers.docker.network=homelab"
|
||||||
|
- "--providers.file.filename=/etc/traefik/dynamic.yml"
|
||||||
|
- "--providers.file.watch=true"
|
||||||
|
- "--entrypoints.web.address=:80"
|
||||||
|
- "--entrypoints.websecure.address=:443"
|
||||||
|
- "--certificatesresolvers.leresolver.acme.httpchallenge=true"
|
||||||
|
- "--certificatesresolvers.leresolver.acme.httpchallenge.entrypoint=web"
|
||||||
|
- "--certificatesresolvers.leresolver.acme.email=${ACME_EMAIL}"
|
||||||
|
- "--certificatesresolvers.leresolver.acme.storage=/letsencrypt/acme.json"
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
volumes:
|
||||||
|
- "/var/run/docker.sock:/var/run/docker.sock:ro"
|
||||||
|
- "./letsencrypt:/letsencrypt"
|
||||||
|
- "./traefik.yml:/traefik.yml:ro"
|
||||||
|
- "./dynamic.yml:/etc/traefik/dynamic.yml:ro"
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.traefik.rule=Host(`traefik.zea.lt`)"
|
||||||
|
- "traefik.http.routers.traefik.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.traefik.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.traefik.service=api@internal"
|
||||||
|
- "traefik.http.routers.traefik.middlewares=auth@file"
|
||||||
|
- "com.centurylinklabs.watchtower.enable=false"
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
|
||||||
|
networks:
|
||||||
|
homelab:
|
||||||
|
name: homelab
|
||||||
|
driver: bridge
|
||||||
@@ -0,0 +1,20 @@
|
|||||||
|
# Copy to dynamic.yml and add your htpasswd line.
|
||||||
|
# Generate: htpasswd -nb username password
|
||||||
|
|
||||||
|
http:
|
||||||
|
routers:
|
||||||
|
traefik-dashboard:
|
||||||
|
rule: "Host(`traefik.zea.lt`)"
|
||||||
|
entryPoints:
|
||||||
|
- websecure
|
||||||
|
service: api@internal
|
||||||
|
tls:
|
||||||
|
certResolver: leresolver
|
||||||
|
middlewares:
|
||||||
|
- auth
|
||||||
|
|
||||||
|
middlewares:
|
||||||
|
auth:
|
||||||
|
basicAuth:
|
||||||
|
users:
|
||||||
|
- "USERNAME:$apr1$HASH$YOUR_HASH_HERE"
|
||||||
@@ -0,0 +1,29 @@
|
|||||||
|
# traefik/traefik.yml
|
||||||
|
api:
|
||||||
|
dashboard: true
|
||||||
|
insecure: false
|
||||||
|
|
||||||
|
entryPoints:
|
||||||
|
web:
|
||||||
|
address: ":80"
|
||||||
|
websecure:
|
||||||
|
address: ":443"
|
||||||
|
|
||||||
|
providers:
|
||||||
|
docker:
|
||||||
|
endpoint: "unix:///var/run/docker.sock"
|
||||||
|
exposedByDefault: false
|
||||||
|
|
||||||
|
file:
|
||||||
|
filename: /etc/traefik/dynamic.yml
|
||||||
|
watch: true
|
||||||
|
|
||||||
|
certificatesResolvers:
|
||||||
|
leresolver:
|
||||||
|
acme:
|
||||||
|
# Email set via traefik/docker-compose command (ACME_EMAIL env)
|
||||||
|
email: placeholder@example.com
|
||||||
|
storage: /letsencrypt/acme.json
|
||||||
|
httpChallenge:
|
||||||
|
entryPoint: web
|
||||||
|
|
||||||
@@ -0,0 +1,5 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
echo "🔄 Updating homelab services..."
|
||||||
|
docker-compose pull
|
||||||
|
docker-compose up -d
|
||||||
|
echo "✅ Services updated!"
|
||||||
@@ -0,0 +1,57 @@
|
|||||||
|
# Uptime Kuma Setup Guide
|
||||||
|
|
||||||
|
Access Uptime Kuma at **https://kuma.zea.lt** (use Traefik auth: your-username / your-password).
|
||||||
|
|
||||||
|
## Why Internal URLs?
|
||||||
|
|
||||||
|
Public URLs (https://zea.lt, etc.) are behind Traefik basic auth. Uptime Kuma's health checks get **401 Unauthorized** when using those. Use **internal container URLs** instead—no auth, same reliability.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## First-Time Setup
|
||||||
|
|
||||||
|
1. Open https://kuma.zea.lt
|
||||||
|
2. Create your Uptime Kuma admin account (username + password)
|
||||||
|
3. Click **Add New Monitor** for each service below
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Recommended Monitors (Internal URLs – No Auth)
|
||||||
|
|
||||||
|
| # | Monitor Name | Type | URL/Target | Heartbeat |
|
||||||
|
|---|--------------|----------|---------------------------------|-----------|
|
||||||
|
| 1 | Dashboard | HTTP(s) | http://dashboard:8080 | 60 |
|
||||||
|
| 2 | Gitea | HTTP(s) | http://gitea:3000 | 60 |
|
||||||
|
| 3 | Docker Registry | HTTP(s) | http://registry:5000 | 60 |
|
||||||
|
| 4 | Drone CI | HTTP(s) | http://drone:80 | 60 |
|
||||||
|
| 5 | CUPS Printer | HTTP(s) | http://cups:631 | 300 |
|
||||||
|
| 6 | WOL API | HTTP(s) | http://host.docker.internal:5000/health | 60 |
|
||||||
|
| 7 | Pi-hole DNS | TCP Port | host.docker.internal / 53 | 60 |
|
||||||
|
| 8 | Traefik HTTP | TCP Port | traefik / 80 | 60 |
|
||||||
|
| 9 | Traefik HTTPS| TCP Port | traefik / 443 | 60 |
|
||||||
|
|10 | HomeLab Server | Ping | 192.168.1.100 | 60 |
|
||||||
|
|11 | Desktop PC | Ping | 192.168.1.10 | 60 |
|
||||||
|
|
||||||
|
**Note:** For TCP Port monitors (#8, #9), use **Monitor Type: TCP Port**, Host: `traefik`, Port: `80` or `443`.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Step-by-Step (Add Monitor)
|
||||||
|
|
||||||
|
1. Click **+ Add New Monitor**
|
||||||
|
2. **Monitor Type:** HTTP(s) (or TCP Port / Ping)
|
||||||
|
3. **Friendly Name:** e.g. "Gitea"
|
||||||
|
4. **URL:** e.g. `http://gitea:3000`
|
||||||
|
5. **Heartbeat Interval:** 60 (or 300 for CUPS)
|
||||||
|
6. **Retries:** 2
|
||||||
|
7. For HTTP(s): **Accepted Status Codes** 200–299 (default)
|
||||||
|
8. Click **Save**
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Optional: Notifications
|
||||||
|
|
||||||
|
Settings → Notifications → Add:
|
||||||
|
- **Email** – for downtime alerts
|
||||||
|
- **Telegram** – if you use Telegram
|
||||||
|
- **Webhook** – for custom integrations
|
||||||
@@ -0,0 +1,19 @@
|
|||||||
|
services:
|
||||||
|
uptime-kuma:
|
||||||
|
image: louislam/uptime-kuma:1
|
||||||
|
container_name: uptime-kuma
|
||||||
|
restart: always
|
||||||
|
extra_hosts:
|
||||||
|
- "host.docker.internal:host-gateway"
|
||||||
|
volumes:
|
||||||
|
- .:/app/data
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.kuma.rule=Host(`kuma.zea.lt`)"
|
||||||
|
- "traefik.http.routers.kuma.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.kuma.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.kuma.middlewares=auth@file"
|
||||||
|
- "traefik.http.services.kuma.loadbalancer.server.port=3001"
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
services:
|
||||||
|
watchtower:
|
||||||
|
image: containrrr/watchtower:latest
|
||||||
|
container_name: watchtower
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
environment:
|
||||||
|
- WATCHTOWER_SCHEDULE=0 0 4 * * *
|
||||||
|
- WATCHTOWER_CLEANUP=true
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
@@ -0,0 +1,28 @@
|
|||||||
|
services:
|
||||||
|
wireguard:
|
||||||
|
image: linuxserver/wireguard
|
||||||
|
container_name: wireguard
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
- SYS_MODULE
|
||||||
|
environment:
|
||||||
|
- PUID=1000
|
||||||
|
- PGID=1000
|
||||||
|
- TZ=Europe/London
|
||||||
|
- SERVERURL=auto
|
||||||
|
- SERVERPORT=51820
|
||||||
|
- PEERS=5
|
||||||
|
- PEERDNS=auto
|
||||||
|
- INTERNAL_SUBNET=10.13.13.0
|
||||||
|
volumes:
|
||||||
|
- ./config:/config
|
||||||
|
- /lib/modules:/lib/modules
|
||||||
|
ports:
|
||||||
|
- "51820:51820/udp"
|
||||||
|
networks:
|
||||||
|
- homelab
|
||||||
|
sysctls:
|
||||||
|
- net.ipv4.conf.all.src_valid_mark=1
|
||||||
|
restart: always
|
||||||
|
labels:
|
||||||
|
- "com.centurylinklabs.watchtower.enable=false"
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
FROM python:3.9-slim
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
RUN apt-get update && apt-get install -y --no-install-recommends iputils-ping \
|
||||||
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
|
RUN pip install --no-cache-dir flask wakeonlan
|
||||||
|
|
||||||
|
COPY app.py .
|
||||||
|
|
||||||
|
EXPOSE 5000
|
||||||
|
|
||||||
|
CMD ["python", "app.py"]
|
||||||
+113
@@ -0,0 +1,113 @@
|
|||||||
|
from flask import Flask, request, jsonify
|
||||||
|
from wakeonlan import send_magic_packet
|
||||||
|
import logging
|
||||||
|
import os
|
||||||
|
import subprocess
|
||||||
|
|
||||||
|
app = Flask(__name__)
|
||||||
|
logging.basicConfig(level=logging.INFO)
|
||||||
|
|
||||||
|
# Format: name:mac:ip,name2:mac2:ip2
|
||||||
|
# Example: desktop:AA:BB:CC:DD:EE:FF:192.168.1.10
|
||||||
|
# Set WOL_DEVICES in .env – never commit real MACs/IPs
|
||||||
|
_WOL_DEVICES_RAW = os.getenv("WOL_DEVICES", "")
|
||||||
|
BROADCAST_IP = os.getenv("WOL_BROADCAST_IP", "255.255.255.255")
|
||||||
|
WOL_PACKET_COUNT = int(os.getenv("WOL_PACKET_COUNT", "3"))
|
||||||
|
|
||||||
|
|
||||||
|
def _parse_devices() -> tuple[dict[str, str], dict[str, str]]:
|
||||||
|
"""Parse WOL_DEVICES env into devices (name->mac) and device_ips (name->ip).
|
||||||
|
Format: name:mac:ip (mac has colons, so use name:XX:XX:XX:XX:XX:XX:ip)
|
||||||
|
Example: desktop:AA:BB:CC:DD:EE:FF:192.168.1.10
|
||||||
|
"""
|
||||||
|
devices: dict[str, str] = {}
|
||||||
|
device_ips: dict[str, str] = {}
|
||||||
|
for entry in _WOL_DEVICES_RAW.split(","):
|
||||||
|
entry = entry.strip()
|
||||||
|
if not entry:
|
||||||
|
continue
|
||||||
|
parts = entry.split(":")
|
||||||
|
if len(parts) >= 8:
|
||||||
|
name = parts[0]
|
||||||
|
mac = ":".join(parts[1:7])
|
||||||
|
ip = parts[7]
|
||||||
|
devices[name] = mac
|
||||||
|
device_ips[name] = ip
|
||||||
|
elif len(parts) == 3:
|
||||||
|
name, mac, ip = parts
|
||||||
|
devices[name] = mac
|
||||||
|
device_ips[name] = ip
|
||||||
|
return devices, device_ips
|
||||||
|
|
||||||
|
|
||||||
|
DEVICES, DEVICE_IPS = _parse_devices()
|
||||||
|
|
||||||
|
|
||||||
|
def _ping_host(ip: str) -> bool:
|
||||||
|
try:
|
||||||
|
subprocess.check_output(
|
||||||
|
["ping", "-c", "1", "-W", "1", ip],
|
||||||
|
stderr=subprocess.DEVNULL,
|
||||||
|
)
|
||||||
|
return True
|
||||||
|
except (subprocess.CalledProcessError, FileNotFoundError):
|
||||||
|
return False
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/wake/<device>", methods=["POST"])
|
||||||
|
def wake_device(device):
|
||||||
|
if device not in DEVICES:
|
||||||
|
return jsonify({"error": "Device not found"}), 404
|
||||||
|
|
||||||
|
mac_address = DEVICES[device]
|
||||||
|
try:
|
||||||
|
for _ in range(max(1, WOL_PACKET_COUNT)):
|
||||||
|
send_magic_packet(mac_address, ip_address=BROADCAST_IP)
|
||||||
|
app.logger.info(
|
||||||
|
f"Magic packet(s) sent to {device} ({mac_address}) via {BROADCAST_IP}"
|
||||||
|
)
|
||||||
|
return jsonify({"message": f"Wake-on-LAN packet sent to {device}"}), 200
|
||||||
|
except Exception as e:
|
||||||
|
app.logger.exception(f"Error sending magic packet to {device}")
|
||||||
|
return jsonify({"error": f"Failed to send wake packet: {str(e)}"}), 500
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/devices", methods=["GET"])
|
||||||
|
def list_devices():
|
||||||
|
return jsonify({"devices": list(DEVICES.keys())})
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/status", methods=["GET"])
|
||||||
|
def device_status():
|
||||||
|
"""Return devices with MAC, IP, and online status."""
|
||||||
|
status = {
|
||||||
|
name: {
|
||||||
|
"mac": mac,
|
||||||
|
"ip": DEVICE_IPS.get(name, ""),
|
||||||
|
"online": _ping_host(DEVICE_IPS.get(name, "")),
|
||||||
|
}
|
||||||
|
for name, mac in DEVICES.items()
|
||||||
|
}
|
||||||
|
return jsonify({"devices": status})
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/debug/<device>", methods=["GET"])
|
||||||
|
def debug_device(device):
|
||||||
|
if device not in DEVICES:
|
||||||
|
return jsonify({"error": "Device not found"}), 404
|
||||||
|
return jsonify({
|
||||||
|
"device": device,
|
||||||
|
"mac_address": DEVICES[device],
|
||||||
|
"ip": DEVICE_IPS.get(device, ""),
|
||||||
|
"broadcast_ip": BROADCAST_IP,
|
||||||
|
"online": _ping_host(DEVICE_IPS.get(device, "")),
|
||||||
|
})
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/health", methods=["GET"])
|
||||||
|
def health_check():
|
||||||
|
return jsonify({"status": "healthy"}), 200
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
app.run(host="0.0.0.0", port=5000, debug=False)
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
services:
|
||||||
|
wol:
|
||||||
|
build: .
|
||||||
|
container_name: wol
|
||||||
|
restart: always
|
||||||
|
network_mode: host
|
||||||
|
environment:
|
||||||
|
- WOL_DEVICES=${WOL_DEVICES}
|
||||||
|
- WOL_BROADCAST_IP=${WOL_BROADCAST_IP:-192.168.0.255}
|
||||||
|
- WOL_PACKET_COUNT=${WOL_PACKET_COUNT:-3}
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.wol.rule=Host(`wol.zea.lt`)"
|
||||||
|
- "traefik.http.routers.wol.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.wol.tls.certresolver=leresolver"
|
||||||
|
- "traefik.http.routers.wol.middlewares=auth@file"
|
||||||
|
- "traefik.http.services.wol.loadbalancer.server.port=5000"
|
||||||
Reference in New Issue
Block a user