first commit

root/compose.sh

@@ -0,0 +1 @@
+docker compose -f ~/compose.yml up -d

root/compose.yml

@@ -0,0 +1,121 @@
+version: "3"
+
+secrets:
+  config_json_foundry:
+    file: foundry_secrets.json
+
+services:
+    nginx:
+        container_name: nginx
+        image: nginx
+        hostname: nginx
+        volumes:
+          - type: bind
+            source: /home/html
+            target: /var/www/html
+          - type: bind
+            source: /home/nginx/conf.d
+            target: /etc/nginx/conf.d
+            read_only: true
+          - type: bind
+            source: /home/nginx/nginx.conf
+            target: /etc/nginx/nginx.conf
+          - type: bind
+            source: /home/certbot/www
+            target: /var/www/certbot
+            read_only: true
+          - type: bind
+            source: /home/certbot/conf
+            target: /etc/nginx/ssl
+            read_only: true
+        environment:
+          TZ: "America/Chicago"
+          UID: 33
+          GID: 33
+        ports:
+          - "80:80"
+          - "443:443"
+        networks:
+          - internal
+    certbot:
+      container_name: certbot
+      image: certbot/certbot:latest
+      volumes:
+        - type: bind
+          source: /home/certbot/www
+          target: /var/www/certbot
+        - type: bind
+          source: /home/certbot/conf
+          target: /etc/letsencrypt
+    php:
+        container_name: php
+        image: php:7.0-fpm  
+        hostname: php
+        volumes:
+          - type: bind
+            source: /home/html
+            target: /var/www/html
+        environment:
+          TZ: "America/Chicago"
+          UID: 33
+          GID: 33
+        networks:
+          - internal       
+    filebrowser:
+        container_name: filebrowser
+        image: filebrowser/filebrowser
+        hostname: filebrowser
+        volumes:
+          - type: bind
+            source: /home/filebrowser/srv
+            target: /srv
+          - type: bind
+            source: /home/filebrowser/database.db
+            target: /database.db
+          - type: bind
+            source: /home/filebrowser/filebrowser.json
+            target: /.filebrowser.json
+          - type: bind
+            source: /home/foundry/Data
+            target: /home/foundry/Data
+        environment:
+          TZ: "America/Chicago"
+          UID: 33
+          GID: 33
+        networks:
+          - internal
+    foundry:
+        container_name: foundry
+        image: felddy/foundryvtt:release
+        hostname: foundry
+        init: true
+        volumes:
+          - type: bind
+            source: /home/foundry
+            target: /data
+        environment:
+          TZ: "America/Chicago"
+          FOUNDRY_ROUTE_PREFIX: "foundry"
+          FOUNDRY_UID: 33
+          FOUNDRY_GID: 33
+        secrets:
+          - source: config_json_foundry
+            target: config.json
+        networks:
+          - internal
+    yacht:
+      container_name: yacht
+      image: selfhostedpro/yacht
+      hostname: yacht
+      ports:
+        - "8000:8000"
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+        - /home/yacht:/config
+volumes:
+  yacht:
+    external: false
+    driver: local
+networks:
+  internal:
+    driver: bridge

root/install-docker.sh

@@ -0,0 +1,14 @@
+# https://docs.docker.com/engine/install/debian/
+sudo apt-get update
+sudo apt-get install \
+    ca-certificates \
+    curl \
+    gnupg \
+    lsb-release
+mkdir -m 0755 -p /etc/apt/keyrings
+curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+echo \
+  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
+  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+sudo apt-get update
+sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

root/nginx-reload.sh

@@ -0,0 +1 @@
+docker exec -it nginx service nginx reload

root/obtain-certs.sh

@@ -0,0 +1,2 @@
+# https://mindsers.blog/post/https-using-nginx-certbot-docker/
+docker compose -f ~/compose.yml run --rm certbot certonly --webroot --webroot-path /var/www/certbot -d rpg.ascorrea.com

root/renew.sh

@@ -0,0 +1,2 @@
+# https://mindsers.blog/post/https-using-nginx-certbot-docker/
+docker compose run --rm certbot renew