Synapse PG DB fixes.

Merged by Trez.One

.gitea/workflows/deployment.yml

@@ -17,15 +17,15 @@ jobs:
       - name: PR list
         id: list-prs
         run: |
-          curl -sSL https://dl.gitea.com/tea/main/tea-main-linux-amd64 -o /usr/local/bin/tea
-          chmod +x /usr/local/bin/tea
-          echo "Listing PRs..."
-          tea login add --name gitea-rinoa --url ${{ vars.RINOA_GITEA_URL }} --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
-          pr_state=$(tea pr ls --repo ${{ github.repository }} --state open --output csv | egrep 'open|closed|merged' | awk -F, '{print $3}' | sed -e 's|"||g')
-          echo "pr_state=$(echo ${pr_state})" >> "$GITHUB_OUTPUT"
+          pr_check=$(curl ${{ vars.RINOA_GITEA_URL }}/api/v1/repos/${{ github.repository }}/pulls/main/${{ github.ref_name }} \
+            -X 'GET' \
+            -H 'Accept: application/json' \
+            -H 'Authorization: token ${{ secrets.BOT_GITEA_TOKEN }}' \
+            -s | jq '{index: .number, state: .state}')
+          pr_state=$(echo ${pr_check} | jq -r '.state')
 
       - name: Create PR
-        if: steps.list-prs.outputs.pr_state == 'closed'
+        if: steps.list-prs.outputs.pr_state != 'open'
         uses: arifer612/Gitea-PR-action@v1.2.0
         with:
           url: ${{ gitea.server_url }}

docker-compose.yml

@@ -1735,49 +1735,6 @@ services:
         target: /var/www/html/app/migrations
         type: volume
         volume: {}
-  huginn:
-    container_name: huginn
-    environment:
-      HUGINN_DATABASE_HOST: mariadb
-      HUGINN_DATABASE_NAME: huginn
-      HUGINN_DATABASE_PASSWORD: MLbKPT3j9TYcguYevFRcfEcrXtL4kcxujtrNdrq9eCig4WhUbxkyLoAiCPpm4zob
-      HUGINN_DATABASE_PORT: "3306"
-      HUGINN_DATABASE_USERNAME: huginn
-      PGID: "1000"
-      PUID: "1000"
-      TZ: America/New_York
-    hostname: Rinoa
-    image: ghcr.io/huginn/huginn
-    labels:
-      - homepage.group=Automation
-      - homepage.name=Huginn
-      - homepage.href=https://huginn.${MY_TLD}
-      - homepage.icon=huginn
-      - homepage.description=Agent/Web Automation
-      - swag=enable
-      - swag_port=3000
-      - swag_proto=http
-      - swag.uptime-kuma.enabled=true
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "3005"
-        target: 3000
-    restart: unless-stopped
-    volumes:
-      - bind:
-          create_host_path: true
-        read_only: true
-        source: /etc/localtime
-        target: /etc/localtime
-        type: bind
-      - bind:
-          create_host_path: true
-        source: /rinoa-storage
-        target: /storage
-        type: bind
   hugo:
     command: hugo server --baseURL "it-services.trez.wtf" --bind 0.0.0.0 --appendPort=false --source=/src/it-services --configDir=/src/it-services/config/ -e production --logLevel debug
     container_name: hugo
@@ -2039,6 +1996,42 @@ services:
         published: "8104"
         target: 80
     restart: unless-stopped
+  jellyfin:
+    container_name: jellyfin
+    environment:
+      JELLYFIN_PublishedServerUrl: https://jf.trez.wtf
+    image: jellyfin/jellyfin
+    labels:
+      homepage.group: Media Library
+      homepage.name: Jellyfin
+      homepage.icon: jellyfin.svg
+      homepage.href: http://jf.${MY_TLD}
+      homepage.description: Movie/TV Streaming
+      homepage.widget.type: jellyfin
+      homepage.widget.url: http://jellyfin:8096
+      homepage.widget.key: ${JELLYFIN_API_KEY}
+      homepage.widget.enableBlocks: true
+      homepage.widget.enableNowPlaying: true
+      homepage.widget.enableUser: true
+      homepage.widget.showEpisodeNumber: true
+      homepage.widget.expandOneStreamToTwoRows: false
+      swag: enable
+      swag_url: jf.${MY_TLD}
+      swag_port: 8096
+      swag_proto: http
+      swag.uptime-kuma.enabled: true
+    ports:
+      - 8487:8096
+      - 7359:7359
+      - 1900:1900
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/jellyfin:/config
+      - ${DOCKER_VOLUME_CONFIG}/jellyfin/cache:/cache
+      - ${DOCKER_VOLUME_STORAGE}/TV_Shows:/storage/tv
+      - ${DOCKER_VOLUME_STORAGE}/Movies:/storage/movies
+      - /etc/localtime:/etc/localtime
+      - /usr/share/fonts:/usr/local/share/fonts/custom
   jitsi-etherpad:
     container_name: jitsi-etherpad
     environment:
@@ -3044,119 +3037,6 @@ services:
         type: bind
         bind:
           create_host_path: true
-  mattermost:
-    container_name: mattermost
-    depends_on:
-      mattermost-db:
-        condition: service_started
-        required: true
-    environment:
-      MM_EMAILSETTINGS_ENABLESMTPAUTH: true
-      MM_EMAILSETTINGS_SMTPPASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
-      MM_EMAILSETTINGS_SMTPPORT: 25
-      MM_EMAILSETTINGS_SMTPSERVER: postal-smtp
-      MM_EMAILSETTINGS_SMTPUSERNAME: ${POSTAL_SMTP_AUTH_USER}
-      MM_FILESETTINGS_AMAZONS3ACCESSKEYID: ${MATTERMOST_AWS_S3_ACCESSKEY}
-      MM_FILESETTINGS_AMAZONS3BUCKET: mattermost
-      MM_FILESETTINGS_AMAZONS3ENDPOINT: minio:9000
-      MM_FILESETTINGS_AMAZONS3REGION: us-east-fh-pln
-      MM_FILESETTINGS_AMAZONS3SECRETACCESSKEY: ${MATTERMOST_AWS_S3_SECRETKEY}
-      MM_FILESETTINGS_AMAZONS3SSL: false
-      MM_FILESETTINGS_ARCHIVERECURSION: true
-      MM_FILESETTINGS_DRIVERNAME: amazons3
-      MM_FILESETTINGS_MAXFILESIZE: 104857600
-      MM_LOGSETTINGS_CONSOLELEVEL: info
-      MM_LOGSETTINGS_ENABLECOLOR: true
-      MM_METRICSSETTINGS_ENABLE: true
-      MM_PLUGINSETTINGS_ENABLEUPLOADS: true
-      MM_SERVICESETTINGS_FORWARD80TO443: false
-      MM_SERVICESETTINGS_LISTENADDRESS: :8065
-      MM_SERVICESETTINGS_SITEURL: https://mm.${MY_TLD}
-      MM_SQLSETTINGS_DATASOURCE: ${MATTERMOST_POSTGRES_CONNECTION_URI}
-      MM_SQLSETTINGS_DRIVERNAME: postgres
-      TZ: ${TZ}
-    expose:
-      - 8067
-    image: mattermost/mattermost-team-edition:latest
-    labels:
-      - homepage.group=Social
-      - homepage.name=Mattermost
-      - homepage.href=https://mm.${MY_TLD}
-      - homepage.icon=mattermost.svg
-      - homepage.description=Team collaboration and technical workflows (Slack alternative)
-      - swag=enable
-      - swag_proto=http
-      - swag_port=8065
-      - swag_url=mm.${MY_TLD}
-      - swag.uptime-kuma.enabled=true
-      - swag.uptime-kuma.monitor.url=https://mm.${MY_TLD}
-    networks:
-      default: null
-    pids_limit: 200
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "8065"
-        target: 8065
-    restart: unless-stopped
-    security_opt:
-      - no-new-privileges:true
-    tmpfs:
-      - /tmp
-    volumes:
-      - source: ${DOCKER_VOLUME_CONFIG}/mattermost/config
-        target: /mattermost/config
-        type: bind
-        bind:
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_CONFIG}/mattermost/data
-        target: /mattermost/data
-        type: bind
-        bind:
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_CONFIG}/mattermost/logs
-        target: /mattermost/logs
-        type: bind
-        bind:
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_CONFIG}/mattermost/plugins
-        target: /mattermost/plugins
-        type: bind
-        bind:
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_CONFIG}/mattermost/client/plugins
-        target: /mattermost/client/plugins
-        type: bind
-        bind:
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_CONFIG}/mattermost/bleve-indexes
-        target: /mattermost/bleve-indexes
-        type: bind
-        bind:
-          create_host_path: true
-  mattermost-db:
-    container_name: mattermost-db
-    environment:
-      - TZ=${TZ}
-      - POSTGRES_DB=mattermost
-      - POSTGRES_USER=mattermost
-      - POSTGRES_PASSWORD=${MATTERMOST_POSTGRES_PASSWORD}
-    expose:
-      - 5432
-    image: postgres:16-alpine
-    networks:
-      default: null
-    restart: unless-stopped
-    security_opt:
-      - no-new-privileges=true
-    tmpfs:
-      - /tmp
-      - /var/run/postgresql
-    volumes:
-      - source: mattermost-postgres
-        target: /var/lib/postgresql/data
-        type: volume
-        volume: {}
   meshcentral:
     container_name: meshcentral
     image: ghcr.io/ylianst/meshcentral:master
@@ -3168,7 +3048,7 @@ services:
       - homepage.description=
       - swag=enable
       - swag_proto=http
-      - swag_port=46717
+      - swag_port=80
       - swag_url=mesh.${MY_TLD}
     ports:
       - 46717:80 # HTTP
@@ -3269,6 +3149,33 @@ services:
         type: bind
         bind:
           create_host_path: true
+  n8n:
+    container_name: n8n
+    environment:
+      N8N_HOST: n8n.${MY_TLD}
+      N8N_PORT: 5678
+      N8N_PROTOCOL: https
+      NODE_ENV: production
+      WEBHOOK_URL: https://n8n.${MY_TLD}/
+      GENERIC_TIMEZONE: ${TZ}
+    image: docker.n8n.io/n8nio/n8n
+    labels:
+      swag: enable
+      swag_proto: http
+      swag_port: 5678
+      swag_url: n8n.${MY_TLD}
+      swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.url: https://n8n.${MY_TLD}
+      homepage.group: Automation
+      homepage.name: n8n
+      homepage.href: https://n8n.${MY_TLD}
+      homepage.icon: n8n.svg
+      homepage.description: Extendable workflow automation tool to easily automate tasks
+    ports:
+      - 5678:5678
+    restart: unless-stopped
+    volumes:
+      - n8n-data:/home/node/.n8n
   navidrome:
     container_name: navidrome
     environment:
@@ -3630,58 +3537,6 @@ services:
       - plausible-event-logs:/var/log/clickhouse-server
       - ${DOCKER_VOLUME_CONFIG}/plausible/clickhouse/clickhouse-config.xml:/etc/clickhouse-server/config.d/logging.xml:ro
       - ${DOCKER_VOLUME_CONFIG}/plausible/clickhouse/clickhouse-user-config.xml:/etc/clickhouse-server/users.d/logging.xml:ro
-  portainer:
-    command:
-      - -H
-      - unix:///var/run/docker.sock
-    container_name: portainer
-    environment:
-      - TZ=America/New_York
-      - DOCKER_MODS=ghcr.io/themepark-dev/theme.park:portainer
-    hostname: Rinoa
-    image: portainer/portainer-ce:latest
-    labels:
-      - homepage.group=System Administration
-      - homepage.name=Portainer
-      - homepage.href=https://portainer.${MY_TLD}
-      - homepage.icon=portainer.png
-      - homepage.description=Docker container management
-      - homepage.widget.type=portainer
-      - homepage.widget.url=http://portainer:9000
-      - homepage.widget.env=1
-      - homepage.widget.key=${PORTAINER_API_KEY}
-      - swag=enable
-      - swag.uptime-kuma.enabled=true
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "9000"
-        target: 9000
-    restart: unless-stopped
-    volumes:
-      - bind:
-          create_host_path: true
-        read_only: true
-        source: /etc/localtime
-        target: /etc/localtime
-        type: bind
-      - bind:
-          create_host_path: true
-        source: ${DOCKER_VOLUME_CONFIG}/portainer
-        target: /data
-        type: bind
-      - bind:
-          create_host_path: true
-        source: /rinoa-storage
-        target: /storage
-        type: bind
-      - bind:
-          create_host_path: true
-        source: /var/run/docker.sock
-        target: /var/run/docker.sock
-        type: bind
   postal-smtp:
     cap_add:
       - NET_BIND_SERVICE
@@ -4599,6 +4454,27 @@ services:
         type: bind
         bind:
           create_host_path: true
+  spotisub:
+    container_name: spotisub
+    environment:
+      SPOTIPY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
+      SPOTIPY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
+      SPOTIPY_REDIRECT_URI: http://127.0.0.1:8080/
+      SUBSONIC_API_HOST: http://navidrome
+      SUBSONIC_API_PORT: 4533
+      SUBSONIC_API_USER: ${NAVIDROME_USERNAME}
+      SUBSONIC_API_PASS: ${NAVIDROME_PASSWORD}
+    healthcheck:
+      test: curl -s http://127.0.0.1:5183/api/v1/utils/healthcheck | grep -q 'Ok!' || exit 1
+      interval: 30s
+      retries: 20
+      start_period: 30s
+    image: blastbeng/spotisub:latest
+    ports:
+      - 5183:5183
+    restart: always
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/spotisub:/home/user/spotisub/cache
   swag:
     cap_add:
       - NET_ADMIN
@@ -4678,6 +4554,41 @@ services:
         source: /var/run/docker.sock
         target: /var/run/docker.sock
         type: bind
+  synapse:
+    container_name: synapse
+    depends_on:
+      - synapse-db
+    environment:
+      SYNAPSE_CONFIG_PATH: /data/homeserver.yaml
+    image: docker.io/matrixdotorg/synapse:latest
+    labels:
+      homepage.group: Social
+      homepage.name: Matrix-Synapse
+      homepage.href: https://matrix.${MY_TLD}
+      homepage.icon: matrix-synapse.svg
+      homepage.description: Synapse/Matrix server
+      swag: enable
+      swag_proto: http
+      swag_url: matrix.${MY_TLD}
+      swag_port: 8448
+      swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.url: https://matrix.${MY_TLD}  
+    ports:
+      - 8448:8448/tcp
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/synapse/:/data
+  synapse-db:
+    image: postgres:16-alpine
+    environment:
+      POSTGRES_USER: synapse
+      POSTGRES_PASSWORD: ${SYNAPSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: synapse
+    expose:
+      - 5432
+    restart: unless-stopped
+    volumes:
+      - synapse-db:/var/lib/postgresql/data
   tandoor:
     container_name: tandoor-recipes
     depends_on:
@@ -6092,6 +6003,35 @@ services:
         source: /etc/localtime
         target: /etc/localtime
         type: bind
+  vault:
+    cap_add:
+      - IPC_LOCK
+    command:
+      - server
+    container_name: hc-vault
+    environment:
+      - AWS_ACCESS_KEY_ID=${VAULT_HASHICORP_AWS_ACCESS_KEY_ID}
+      - AWS_SECRET_ACCESS_KEY=${VAULT_HASHICORP_AWS_SECRET_ACCESS_KEY}
+    image: hashicorp/vault:latest
+    labels:
+      - homepage.group=Code/DevOps
+      - homepage.name=Vault
+      - homepage.icon=vault.png
+      - homepage.href=https://vault.${MY_TLD}
+      - homepage.description=Hashicorp Vault for secrets, key/value stores, etc.
+      - swag=enable
+      - swag_proto=http
+      - swag_port=8200
+      - swag_url=vault.${MY_TLD}
+      - swag.uptime-kuma.enabled=true
+      - swag.uptime-kuma.monitor.url=https://vault.${MY_TLD}
+    ports:
+      - 8200:8200
+      - 8250:8250
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/config/:/vault/config
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/logs/:/vault/logs
   wallabag:
     container_name: wallabag
     depends_on:
@@ -7076,8 +7016,6 @@ volumes:
     name: compose_lldap_data
   localai_data:
     name: compose_localai_data
-  mattermost-postgres:
-    name: compose_mattermost-postgres
   meshcentral-data:
   meshcentral-user_files:
   meshcentral-backup:
@@ -7086,6 +7024,8 @@ volumes:
     name: compose_mongo1_config
   mongodb_data:
     name: compose_mongo1_data
+  n8n-data:
+    name: n8n-data
   netbox-pg-db:
     name: netbox-pg-db
   ollama:
@@ -7122,6 +7062,8 @@ volumes:
     name: sonarqube-logs
   sonarqube-temp:
     name: sonarqube-temp
+  synapse-db:
+    name: synapse-db
   tandoor-pg:
     name: compose_tandoor-pg
   traccar-pg:

sonar-project.properties

@@ -1,2 +0,0 @@
-sonar.projectKey=rinoa-docker
-sonar.analysis.sqbot=