thesabear
55a8410474
Several of these had drifted so far they were unrecognizable (Nextcloud was a bare minio stub, Ollama was missing the ollama service entirely, Immich was missing 2 of 4 services). Also removed a real, exposed Authentik OAuth client_id/secret that was sitting in Paperless-NGX's entry (confirmed stale/rotated already, but shouldn't have been public regardless) and stripped internal Caddy CA trust details from every file per the same rule applied to nocodb/dashy etc.
57 lines
1.4 KiB
YAML
57 lines
1.4 KiB
YAML
services:
|
|
homeassistant:
|
|
container_name: home-assistant
|
|
image: ghcr.io/home-assistant/home-assistant:stable
|
|
volumes:
|
|
- /path/to/home-assistant/config:/config
|
|
- /etc/localtime:/etc/localtime:ro
|
|
environment:
|
|
- PUID=${PUID}
|
|
- PGID=${PGID}
|
|
- TZ=${TZ}
|
|
restart: unless-stopped
|
|
ports:
|
|
- "${HTTP_PORT}:8123"
|
|
depends_on:
|
|
homeassistant-db:
|
|
condition: service_healthy
|
|
privileged: true
|
|
healthcheck:
|
|
test: [
|
|
"CMD-SHELL",
|
|
"curl -fsS -o /dev/null -w '%{http_code}' http://127.0.0.1:8123/api/
|
|
| grep -q 401",
|
|
]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 10
|
|
start_period: 90s
|
|
networks:
|
|
- home-assistant-net
|
|
|
|
homeassistant-db:
|
|
container_name: homeassistant-db
|
|
image: postgres:latest
|
|
restart: unless-stopped
|
|
environment:
|
|
- POSTGRES_USER=${POSTGRES_USER}
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
- POSTGRES_DB=${POSTGRES_DB}
|
|
- POSTGRES_INITDB_ARGS=--encoding=UTF-8 --locale=en_US.UTF-8
|
|
volumes:
|
|
- /path/to/home-assistant/schemas:/var/lib/postgresql
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 10s
|
|
networks:
|
|
- home-assistant-net
|
|
|
|
networks:
|
|
home-assistant-net:
|
|
external: true
|