Add initial home server service scripts

asterisk.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/bash
+podman run -d \
+	--name asterisk \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 5060:5060 \
+	-p 5061:5061 \
+	--restart=unless-stopped \
+	-v /etc/asterisk:/etc/asterisk \
+	andrius/asterisk:alpine_glibc-18.x

authentik.sh

@@ -0,0 +1,32 @@
+#!/bin/bash
+podman pod create \
+	--name authentik \
+	--network slirp4netns:port_handler=slirp4netns
+podman run \
+	--add-host postgresql:192.168.1.1 \
+	--add-host redis:192.168.1.1 \
+	--conmon-pidfile /opt/run/authentik-server.pid \
+	-d \
+	--env-file /opt/podman/env-authentik \
+	--name authentik-server \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10030:9000 \
+	--pod authentik \
+	--restart unless-stopped \
+	-v authentik-media:/media \
+	-v authentik-templates:/templates \
+	ghcr.io/goauthentik/server:2022.4.1 \
+	server
+podman run \
+	--add-host postgresql:192.168.1.1 \
+	--conmon-pidfile /opt/run/authentik-worker.pid \
+	-d \
+	--env-file /opt/podman/env-authentik \
+	--name authentik-worker \
+	--pod authentik \
+	--restart unless-stopped \
+	-v authentik-certs:/certs \
+	-v authentik-media:/media \
+	-v authentik-templates:/templates \
+	ghcr.io/goauthentik/server:2022.4.1 \
+	worker

booksonic-air.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+podman run -d \
+	-e CONTEXT_PATH=https://audiobooks.theribbles.org \
+	--name booksonic-air \
+        --net slirp4netns:port_handler=slirp4netns \
+	-p 10110:4040 \
+	--restart=unless-stopped \
+	-v /etc/booksonic-air:/config \
+	-v /var/lib/audiobooks:/audiobooks \
+	-v /var/lib/podcasts:/podcasts \
+	linuxserver/booksonic-air

collabora.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+podman run \
+	--conmon-pidfile /opt/run/collabora.pid \
+	-d \
+	--env-file /opt/podman/env-collabora \
+	--name collabora \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10170:9980 \
+	collabora/code

docker-mailserver.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/bash
+podman run -d \
+	--add-host ldap:192.168.1.1 \
+	--env-file=/opt/podman/env-mailserver \
+	--conmon-pidfile=/opt/run/mailserver.pid \
+	--hostname mail.theribbles.org \
+	--name mailserver \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 25:25 \
+	-p 143:143 \
+	-p 587:587 \
+	-p 993:993 \
+	-p 4190:4190 \
+	--restart=unless-stopped \
+	-v /var/opt/mail/data:/var/mail/ \
+	-v /var/opt/mail/state:/var/mail-state \
+	-v /var/log/mail:/var/log/mail \
+	-v /etc/mail:/tmp/docker-mailserver \
+	-v /etc/letsencrypt:/certs:ro \
+	mailserver/docker-mailserver:10.4.0

firefly-csv-importer-dev.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+podman run \
+	-it \
+	--rm \
+	-e FIREFLY_III_URL=http://192.168.1.1:10060 \
+	-e FIREFLY_III_ACCESS_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiIyMSIsImp0aSI6IjRhMGFmNmIwMDFmMzAyN2Q4Mzk1OTNhYmZjOTE2NDU3OWI4ZWUxOGFhODdkYWY1OWZmMGI5MjUyYWZjMzkwOTY5Y2ViMjNhYjYxYWE1Y2QzIiwiaWF0IjoxNjE5MDE5NjU2LjY5NDE0OCwibmJmIjoxNjE5MDE5NjU2LjY5NDE1NiwiZXhwIjoxNjUwNTU1NjU2LjY0MzYxNSwic3ViIjoiMSIsInNjb3BlcyI6W119.MRpHIGEUzJeVZblgqc1-X50JhMa2tiGTHbCAAe0kGR2xBDvF__BdDhHRUJuync8zzof69EY6GvjrdRh3GlEL6YGY1fDm-JXTGcQLIW3yS0pt_UvpRiQyMhsy6f9kbhv0J8mufqiRlEDKpZMOkJd3FEg2jkXiu2ae3wsYPiwZ6SGd1X3_tSVE3capfgoFSHLUWCj1WRb3-J6fQ-uYyRLX5mquVxfXFrlEee4WraUczOkIXt9JP4bJiLKgLUuuv1zoc6jdtLpbS7tg4TkFjzyvTgVJ-QgS5FnFGkdeaAtaGLMPYMGMW5sfwFJ6jcU27-6GaQyjLeA73-iqOTheiEBu3qFykSL2iWOkFpXzn12FubnmtmwN90JCJvn9hNSHokllBHqalzO-GBNDwrI-x3JO6y-q3xXwSMweqOvZYwOBOtIMYVO4SLyf9vC8PH_Sr2P5xJDc4XJVdM4YGoCt9-DwlZr__WW2o5KbAbcZy5_L1zR15kJoLVCQYZKM_NQQsepOaoRZQSKEudodgzkc_JhvCZiBxOgFFR3BaJw6rQV9TQ4ZyDSBN02H5aR1YXasqg8-YccQpXmU6tjqBldNjruJpmVyI_yyBe7vpApHjdkFd3YjZLLeI6Y1v_bQQLa3jYBsJM0h4NZqD7lAy1S8kRtReybM_jiOkHg8-KcrSIsVWEE \
+	-e TRUSTED_PROXIES="**" \
+	-e VANITY_URL=https://money-import.theribbles.org \
+	--name firefly-csv-importer \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10061:8080 \
+	--entrypoint /bin/bash fireflyiii/csv-importer:latest
+	# default entrypoint is /usr/local/bin/entrypoint.sh

firefly-csv-importer.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+podman run \
+	-d \
+	-e FIREFLY_III_URL=http://192.168.1.1:10060 \
+	-e FIREFLY_III_ACCESS_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiIyMSIsImp0aSI6IjRhMGFmNmIwMDFmMzAyN2Q4Mzk1OTNhYmZjOTE2NDU3OWI4ZWUxOGFhODdkYWY1OWZmMGI5MjUyYWZjMzkwOTY5Y2ViMjNhYjYxYWE1Y2QzIiwiaWF0IjoxNjE5MDE5NjU2LjY5NDE0OCwibmJmIjoxNjE5MDE5NjU2LjY5NDE1NiwiZXhwIjoxNjUwNTU1NjU2LjY0MzYxNSwic3ViIjoiMSIsInNjb3BlcyI6W119.MRpHIGEUzJeVZblgqc1-X50JhMa2tiGTHbCAAe0kGR2xBDvF__BdDhHRUJuync8zzof69EY6GvjrdRh3GlEL6YGY1fDm-JXTGcQLIW3yS0pt_UvpRiQyMhsy6f9kbhv0J8mufqiRlEDKpZMOkJd3FEg2jkXiu2ae3wsYPiwZ6SGd1X3_tSVE3capfgoFSHLUWCj1WRb3-J6fQ-uYyRLX5mquVxfXFrlEee4WraUczOkIXt9JP4bJiLKgLUuuv1zoc6jdtLpbS7tg4TkFjzyvTgVJ-QgS5FnFGkdeaAtaGLMPYMGMW5sfwFJ6jcU27-6GaQyjLeA73-iqOTheiEBu3qFykSL2iWOkFpXzn12FubnmtmwN90JCJvn9hNSHokllBHqalzO-GBNDwrI-x3JO6y-q3xXwSMweqOvZYwOBOtIMYVO4SLyf9vC8PH_Sr2P5xJDc4XJVdM4YGoCt9-DwlZr__WW2o5KbAbcZy5_L1zR15kJoLVCQYZKM_NQQsepOaoRZQSKEudodgzkc_JhvCZiBxOgFFR3BaJw6rQV9TQ4ZyDSBN02H5aR1YXasqg8-YccQpXmU6tjqBldNjruJpmVyI_yyBe7vpApHjdkFd3YjZLLeI6Y1v_bQQLa3jYBsJM0h4NZqD7lAy1S8kRtReybM_jiOkHg8-KcrSIsVWEE \
+	-e TRUSTED_PROXIES="**" \
+	-e VANITY_URL=https://money-import.theribbles.org \
+	--name firefly-csv-importer \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10061:8080 \
+	fireflyiii/csv-importer:latest

firefly-iii-dev.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+podman run \
+	--rm \
+	-it \
+	--add-host postgresql:192.168.1.1 \
+	--env-file /opt/podman/env-firefly-iii \
+	--name firefly \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10060:8080 \
+	-v /var/lib/firefly:/var/www/html/storage/upload \
+	jc5x/firefly-iii:version-5.5.8
+

firefly-iii.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+podman run \
+	-d \
+	--add-host postgresql:192.168.1.1 \
+	--env-file /opt/podman/env-firefly-iii \
+	--name firefly \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10060:8080 \
+	--restart=unless-stopped \
+	-v /var/lib/firefly:/var/www/html/storage/upload \
+	jc5x/firefly-iii:version-5.5.8
+

freeipa.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/bash
+PASSWORD=let_freeipa_in
+	# --entrypoint /bin/bash \
+	# freeipa/freeipa-server:fedora-33 no-exit
+podman run \
+	--add-host ipa.theribbles.org:10.0.2.100 \
+	--cap-add=SYS_TIME \
+	--conmon-pidfile=/opt/run/freeipa.pid \
+	-d \
+	--env-file /opt/podman/env-freeipa \
+	-h ipa.theribbles.org \
+	--ip 10.0.2.100 \
+	--name freeipa-server \
+	--net slirp4netns:port_handler=slirp4netns \
+	-v /var/lib/ipa-data:/data:Z \
+	-p 88:88 \
+	-p 464:464 \
+	-p 389:389 \
+	-p 636:636 \
+	-p 10020:80 \
+	-p 10021:443 \
+	freeipa/freeipa-server:centos-8 no-exit ipa-server-install --unattended --realm theribbles.org --admin-password $PASSWORD --ds-password $PASSWORD --no-ssh --no-sshd --ip-address=10.0.2.100 --no-ntp

gitea.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+podman run \
+	--add-host postgresql:192.168.1.1 \
+	--conmon-pidfile /opt/run/gitea.pid \
+	-d \
+	--env-file /opt/podman/env-gitea \
+	--name gitea \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 127.0.0.1:10110:3000 \
+	-p 127.0.0.1:2222:22 \
+	--restart unless-stopped \
+	-v gitea-data:/data \
+	-v /etc/timezone:/etc/timezone:ro \
+	-v /etc/localtime:/etc/localtime:ro \
+	docker.io/gitea/gitea:latest

habitica-client.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+podman run \
+  -d \
+  --name habitica-client \
+  --net slirp4netns:port_handler=slirp4netns \
+  --publish=10091:8080/tcp \
+  -e BASE_URL=http://192.168.1.1:10090 \
+  -e TZ=America/Denver \
+  -h habitica-client.theribbles.org \
+  -v /home/eliribble/src/habitica:/usr/src/habitica \
+  -v /usr/src/habitica/node_modules \
+  -v /usr/src/habitica/website/client/node_modules \
+  eliribble/habitica:develop npm run client:dev

habitica-server.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+podman run \
+  -d \
+  --add-host mongodb:192.168.1.1 \
+  --name habitica-server \
+  --net slirp4netns:port_handler=slirp4netns \
+  -p 10090:3000 \
+  -e NODE_DB_URI=mongodb://habitica_user:let_habitica_in@mongodb/habitica_db?authSource=admin \
+  -e TZ=America/Denver \
+  -h habitica-client.theribbles.org \
+  -v /home/eliribble/src/habitica:/usr/src/habitica \
+  eliribble/habitica:develop node website/server/index.js
+  # eliribble/habitica:v4.190.0-dev npm start

jellyfin.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+podman run \
+	--conmon-pidfile /opt/run/jellyfin-server.pid \
+	-d \
+	--name jellyfin \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10170:8096 \
+	-p 1900 \
+	-p 7359 \
+	--restart unless-stopped \
+	-v jellyfin-config:/config \
+	-v jellyfin-cache:/cache \
+	-v /var/opt/plex/data:/media \
+	docker.io/jellyfin/jellyfin:latest

maddy.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/bash
+podman run -d \
+	-e MADDY_HOSTNAME=mx.theribbles.org \
+	-e MADDY_DOMAIN=theribbles.org \
+	--name maddy \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 25:25 \
+	-p 143:143 \
+	-p 465:465 \
+	-p 587:587 \
+	-p 993:993 \
+	--restart=unless-stopped \
+	-v /var/lib/maddy:/data \
+	-v /etc/letsencrypt:/certs \
+	foxcpp/maddy:0.4.4

mailpile.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/bash
+podman run \
+	-d \
+	-e MAILPILE_TOR=/usr/sbin/tor \
+	-e MAILPILE_OPENSSL=/usr/bin/openssl \
+	-e MAILPILE_GPG_AGENT=/usr/bin/gpg-agent \
+	--name mailpile \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10120:33411 \
+	-v /var/lib/mailpile:/mailpile-data \
+	-v /opt/src/mailpile:/
+	eliribble/mailpile:2

monica.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/bash
+podman run -d \
+	--add-host mariadbhost:192.168.1.1 \
+	--conmon-pidfile /opt/run/monica.pid \
+	--env-file=/opt/podman/env-monica \
+	--name monica \
+        --net slirp4netns:port_handler=slirp4netns \
+	-p 10200:80 \
+	--restart=unless-stopped \
+	-v storage:/var/www/html/storage \
+	-v /opt/podman/env-monica:/var/www/html/.env \
+	monica:4.0.0-apache

murmur.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+podman run \
+	-d \
+	--name murmur \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 64738:64738 \
+	--restart=unless-stopped \
+	--user 0 \
+	-v /etc/letsencrypt:/certs \
+	-v /var/lib/murmur:/data \
+	derenderkeks/murmur

nextcloud.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+podman run \
+	-d \
+	--add-host postgresql:192.168.1.1 \
+	--conmon-pidfile /opt/run/nextcloud.pid \
+	--env-file /opt/podman/env-nextcloud \
+	--name nextcloud \
+	--network slirp4netns:port_handler=slirp4netns \
+	-p 10070:80 \
+	--restart=unless-stopped \
+	-v nextcloud:/var/www/html \
+	localhost/eliribble/nextcloud-27-apache:latest

oauth2-proxy-dev.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+podman run \
+	--rm \
+	-it \
+	--hostname oauth.theribbles.org \
+	--name oauth \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10031:4180 \
+	-v /etc/oauth2-proxy.cfg:/etc/oauth2-proxy.cfg \
+	quay.io/oauth2-proxy/oauth2-proxy:v7.1.2 --config=/etc/oauth2-proxy.cfg --set-xauthrequest

oauth2-proxy.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+podman run \
+	--conmon-pidfile /opt/run/oauth2-proxy.pid \
+	-d \
+	--hostname oauth.theribbles.org \
+	--name oauth2-proxy \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10031:4180 \
+	-v /etc/oauth2-proxy.cfg:/etc/oauth2-proxy.cfg \
+	quay.io/oauth2-proxy/oauth2-proxy:v7.1.2 --config=/etc/oauth2-proxy.cfg --set-xauthrequest

openeats.sh

@@ -0,0 +1,28 @@
+#!/bin/bash
+podman pod create \
+	--name openeats \
+	--network slirp4netns:port_handler=slirp4netns
+podman run \
+	--add-host mysql:192.168.1.1 \
+	--conmon-pidfile /opt/run/openeats-web.pid \
+	-d \
+	--entrypoint='["yarn", "dev"]' \
+	--env-file /opt/podman/env-openeats \
+	--name openeats-web \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10050:8080 \
+	--pod openeats \
+	-v /opt/src/openeats/web:/code \
+	localhost/eliribble/openeats-web:latest
+podman run \
+	--add-host mysql:192.168.1.1 \
+	--conmon-pidfile /opt/run/openeats-api.pid \
+	-d \
+	--env-file /opt/podman/env-openeats \
+	--name openeats-api \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10051:8000 \
+	--pod openeats \
+	--restart unless-stopped \
+	-v /opt/src/openeats/api:/code \
+	localhost/eliribble/openeats-api:latest

paperless-ngx.sh

@@ -0,0 +1,35 @@
+#!/bin/bash
+podman pod create \
+	--name paperless \
+	--network slirp4netne:port_handler=slirp4netns
+podman run \
+	--add-host postgresql:192.168.1.1 \
+	--add-host redis:192.168.1.1 \
+	--conmon-pidfile /opt/run/paperless-ngx.pid \
+	-d \
+	--env-file /opt/podman/env-paperless-ngx \
+	--name paperless-ngx \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10190:8000 \
+	--pod paperless \
+	--restart unless-stopped \
+	-v paperless-data:/usr/src/paperless/data \
+	-v paperless-media:/usr/src/paperless/media \
+	-v /var/opt/paperless/consume:/usr/src/paperless/consume \
+	-v /var/opt/paperless/export:/usr/src/paperless/export \
+	paperlessngx/paperless-ngx:1.13
+podman run \
+	--conmon-pidfile /opt/run/paperless-gotenberg.pid \
+	-d \
+	--name paperless-gotenberg \
+	--pod paperless \
+	--restart unless-stopped \
+	docker.io/gotenberg/gotenberg:7.8 \
+	gotenberg --chromium-disable-javascript=true --chromium-allow-list=file:///tmp/.*
+podman run \
+	--conmon-pidfile /opt/run/paperless-tika.pid \
+	-d \
+	--name paperless-tika \
+	--pod paperless \
+	--restart unless-stopped \
+	ghcr.io/paperless-ngx/tika:latest

photoprism.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/bash
+podman run -d \
+	--add-host mariadbhost:192.168.1.1 \
+	--conmon-pidfile /opt/run/photoprism.pid \
+	--env-file=/opt/podman/env-photoprism \
+	--name photoprism \
+        --net slirp4netns:port_handler=slirp4netns \
+	-p 10080:2342 \
+	--restart=unless-stopped \
+	-v /photoprism/storage \
+	-v /var/lib/pictures:/photoprism/originals \
+	-v /var/lib/picture-import:/photoprism/import \
+	photoprism/photoprism

piped.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/bash
+podman run \
+	--add-host postresql:192.168.1.1 \
+	--conmon-pidfile /opt/run/piped-backend.pid \
+	--env-file=/opt/podman/env-piped \
+	--name piped-backend \
+        --net slirp4netns:port_handler=slirp4netns \
+	-p 10220:3000 \
+	-it --rm \
+	-v /etc/piped/config.properties:/app/config.properties:ro \
+	docker.io/1337kavin/piped:latest
+#podman run -d \
+	#--add-host postresql:192.168.1.1 \
+	#--conmon-pidfile /opt/run/piped-frontend.pid \
+	#--entrypoint "ash -c 'sed -i s/pipedapi.kavin.rocks/piped-api.theribbles.org/g /usr/share/nginx/html/assets/* && /docker-entrypoint.sh && nginx -g \"daemon off;\"'"
+	#--env-file=/opt/podman/env-piped \
+	#--name piped-frontend \
+        #--net slirp4netns:port_handler=slirp4netns \
+	#-p 10220:3000 \
+	#--restart=unless-stopped \
+	#-v /photoprism/storage \
+	#-v /var/lib/pictures:/photoprism/originals \
+	#-v /var/lib/picture-import:/photoprism/import \
+	#quay.io/invidious/invidious:latest

plex.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+podman run \
+  --conmon-pidfile /opt/run/plex.pid \
+  -d \
+  -e TZ=America/Denver \
+  -e PLEX_CLAIM=claim-W_q7K9mcDMkYUr-x6wFm \
+  -e ADVERTISE_IP=192.168.1.1:32400,plex.theribbles.org:32400 \
+  -h plex.theribbles.org \
+  --healthcheck-command "curl --connect-timeout 15 --max-time 100 --silent --show-error --fail http://localhost:32400/identity" \
+  --name plex \
+  --net slirp4netns:port_handler=slirp4netns \
+  --publish=32400:32400/tcp \
+  --publish=1900:1900/udp \
+  --publish=3005:3005/tcp \
+  --publish=8324:8324/tcp \
+  --publish=32410:32410/udp \
+  --publish=32412:32412/udp \
+  --publish=32413:32413/udp \
+  --publish=32414:32414/udp \
+  --publish=32469:32469/tcp \
+  -v /var/opt/plex/config:/config \
+  -v /var/tmp/plex/transcode:/transcode \
+  -v /var/opt/plex/data:/data \
+  plexinc/pms-docker:1.24.3.5033-757abe6b4

roundcube.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/bash
+podman run \
+	-d \
+	--add-host email:192.168.1.1 \
+	--conmon-pidfile /opt/run/roundcube.pid \
+	--env-file=/opt/podman/env-roundcube \
+	--hostname email.theribbles.org \
+	--name roundcube \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10120:9000 \
+	--restart=unless-stopped \
+	-v /var/opt/roundcube/db:/var/roundcube/db \
+	-v roundcube-web:/var/www/html \
+	eliribble/roundcube:1.4.13-fpm-alpine

stalwart.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/bash
+podman run -it --rm \
+	--add-host postgresql:192.168.1.1 \
+	--env-file=/opt/podman/env-stalwart \
+	--conmon-pidfile=/opt/run/stalwart.pid \
+	--hostname mail.theribbles.org \
+	--name stalwart \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 25:25 \
+	-p 143:143 \
+	-p 465:465 \
+	-p 587:587 \
+	-p 993:993 \
+	-p 4190:4190 \
+	-p 10230:8080 \
+	-v /var/opt/mail/stalwart:/opt/stalwart-mail \
+	-v /etc/letsencrypt:/certs:ro \
+	stalwartlabs/mail-server:latest

stop-authentik.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+podman stop authentik-worker
+podman stop authentik-server
+podman rm authentik-worker
+podman rm authentik-server
+podman pod rm authentik

stop-openeats.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+podman stop openeats-web
+podman stop openeats-api
+podman rm openeats-web
+podman rm openeats-api
+podman pod rm openeats

synapse.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+podman run \
+	-it \
+	--rm \
+	--add-host postgresql:192.168.1.1 \
+	--conmon-pidfile /opt/run/synapse.pid \
+	--env-file /opt/podman/env-synapse \
+	--name synapse \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10180:8008 \
+	-v /var/lib/synapse:/data \
+	matrixdotorg/synapse:latest 
+# --restart unless-stopped \
+# -d \

tandoor-recipes.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+podman run \
+	--add-host postgres:192.168.1.1 \
+	--conmon-pidfile /opt/run/tandoor-recipes.pid \
+	-d \
+	--env-file /opt/podman/env-tandoor-recipes \
+	--name tandoor-recipes \
+	--net slirp4netns:port_handler=slirp4netns \
+	--rm \
+	-p 10050:8080 \
+	-v /home/eliribble/src/tandoor-recipes:/opt/recipes \
+	-v /home/eliribble/src/django-allauth/allauth:/opt/venv/lib/python3.10/site-packages/allauth \
+	localhost/eliribble/tandoor-recipes:develop

unifi.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/bash
+podman run -d \
+	--name unifi-controller \
+	-e PUID=1000 \
+	-e PGID=1000 \
+	-e MEM_LIMIT=1024M \
+	-e MEM_STARTUP=1024M \
+	-p 3478:3478 \
+	-p 10001:10001 \
+	-p 8080:8080 \
+	-p 8443:8443 \
+	-p 1900:1900 \
+	-p 8843:8843 \
+	-p 8880:8880 \
+	-p 6789:6789 \
+	-p 5514:5514 \
+	-v /etc/unifi-controller:/config \
+	--net slirp4netns:port_handler=slirp4netns \
+	--restart=unless-stopped \
+	ghcr.io/linuxserver/unifi-controller

vaultwarden.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/bash
+podman run \
+	-it \
+	--conmon-pidfile /opt/run/vaultwarden.pid \
+	--name vaultwarden \
+	--net slirp4netns:port_handler=slirp4netns \
+	-p 10040:80 \
+	-v /var/lib/vaultwarden:/data/ \
+	vaultwarden/server:1.29.1

wiki-ribbles.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+podman run -d \
+	--add-host postgresql:192.168.1.1 \
+	--conmon-pidfile /opt/run/wiki-ribbles.pid \
+        --env-file=/opt/podman/env-wiki-ribbles \
+	--name wiki-ribbles \
+	--net slirp4netns:port_handler=slirp4netns \
+	--restart=unless-stopped \
+	-p 10130:3000 \
+	-v /var/opt/wiki-ribbles:/var/opt/wiki \
+	ghcr.io/requarks/wiki:2.5.277

wiki-suvereno.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+podman run -d \
+	--add-host postgresql:192.168.1.1 \
+	--conmon-pidfile /opt/run/wiki-suvereno.pid \
+        --env-file=/opt/podman/env-wiki-suvereno \
+	--name wiki-suvereno \
+	--net slirp4netns:port_handler=slirp4netns \
+	--restart=unless-stopped \
+	-p 11100:3000 \
+	-v /var/opt/wiki-suvereno:/var/opt/wiki \
+	ghcr.io/requarks/wiki:2.5.277