reorg of sertvice stacks - pre git move

lxc1/p0-infrastructure/mgdb.yml

@@ -0,0 +1,18 @@
+services:
+  mariadb:
+    image: mariadb:10.11
+    container_name: mariadb-node
+    restart: always
+    environment:
+      - MARIADB_ROOT_PASSWORD=your_root_pass
+      - MARIADB_GALERA_CLUSTER_NAME=pve_cluster
+      - MARIADB_GALERA_CLUSTER_ADDRESS=gcomm://172.16.201.208,172.16.201.x
+      - MARIADB_NODE_NAME=lxc8-node
+      - MARIADB_NODE_ADDRESS=172.16.201.209
+    volumes:
+      - /docker/backbone/mariadb:/var/lib/mysql
+    ports:
+      - "3306:3306"
+      - "4567:4567"
+      - "4568:4568"
+      - "4444:4444"

lxc1/p0-infrastructure/minio.yml

@@ -0,0 +1,11 @@
+services:
+  minio:
+    image: quay.io/minio/minio:latest
+    container_name: minio-node1
+    network_mode: host
+    volumes:
+      - /docker/minio/data:/data
+    environment:
+      - MINIO_ROOT_USER=${MINIO_ADMIN_USER}
+      - MINIO_ROOT_PASSWORD=${MINIO_ADMIN_PASS}
+    command: server http://172.16.201.208/data http://172.16.201.206/data --console-address ":9001"

lxc1/p1-ingress/rclone.yml

@@ -0,0 +1,20 @@
+services:
+  config-sync:
+    image: rclone/rclone:latest
+    container_name: config-sync
+    entrypoint: ["/bin/sh", "-c"]
+    command: >
+      "while true; do 
+         rclone sync /data/core minio:backups/configs --exclude '*.stat' --exclude '*.log' --verbose; 
+         echo 'Sync complete. Waiting 5 minutes...'; 
+         sleep 300; 
+       done"
+    environment:
+      - RCLONE_CONFIG_MINIO_TYPE=s3
+      - RCLONE_CONFIG_MINIO_PROVIDER=minio
+      - RCLONE_CONFIG_MINIO_ACCESS_KEY_ID=your_key
+      - RCLONE_CONFIG_MINIO_SECRET_ACCESS_KEY=your_secret
+      - RCLONE_CONFIG_MINIO_ENDPOINT=http://172.16.201.208:9000
+    volumes:
+      - /docker:/data:ro
+    restart: always

lxc1/p2-apps/forge.yml

@@ -0,0 +1,22 @@
+services:
+  forgejo:
+    image: codeberg.org/forgejo/forgejo:latest
+    container_name: forgejo
+    restart: always
+    environment:
+      - FORGEJO__database__DB_TYPE=mysql
+      - FORGEJO__database__HOST=172.16.201.208:3306
+      - FORGEJO__database__NAME=forgejo
+      - FORGEJO__database__USER=forgejo
+      - FORGEJO__database__PASSWD=your_password
+      - FORGEJO__storage__TYPE=minio
+      - FORGEJO__storage__MINIO_ENDPOINT=172.16.201.208:9000
+      - FORGEJO__storage__MINIO_ACCESS_KEY_ID=your_key
+      - FORGEJO__storage__MINIO_SECRET_ACCESS_KEY=your_secret
+      - FORGEJO__storage__MINIO_BUCKET=forgejo
+      - FORGEJO__storage__MINIO_USE_SSL=false
+    volumes:
+      - /docker/core/forgejo/data:/data
+    ports:
+      - "3000:3000"
+      - "222:22"

lxc1/p2-apps/guacamole.yml

@@ -0,0 +1,20 @@
+services:
+  guacd:
+    image: guacamole/guacd:latest
+    container_name: guacd
+    restart: always
+
+  guacamole:
+    image: guacamole/guacamole:latest
+    container_name: guacamole
+    restart: always
+    environment:
+      - GUACD_HOSTNAME=guacd
+      - MYSQL_HOSTNAME=172.16.201.208
+      - MYSQL_DATABASE=guacamole
+      - MYSQL_USER=guacamole
+      - MYSQL_PASSWORD=your_password
+    ports:
+      - "8080:8080"
+    depends_on:
+      - guacd

lxc1/p3-monitor/grafana.yml

@@ -0,0 +1,15 @@
+services:
+  grafana:
+    image: grafana/grafana-oss:latest
+    container_name: grafana
+    restart: always
+    environment:
+      - GF_DATABASE_TYPE=mysql
+      - GF_DATABASE_HOST=172.16.201.208:3306
+      - GF_DATABASE_NAME=grafana
+      - GF_DATABASE_USER=grafana
+      - GF_DATABASE_PASSWORD=your_password
+    volumes:
+      - /docker/monitoring/grafana/data:/var/lib/grafana
+    ports:
+      - "3001:3000"

lxc1/p3-monitor/prometheus.yml

@@ -0,0 +1,33 @@
+services:
+  prometheus:
+    image: prom/prometheus:latest
+    container_name: prometheus
+    user: "1000:1000"
+    command:
+      - '--config.file=/etc/prometheus/prometheus.yml'
+      - '--storage.tsdb.path=/prometheus'
+      - '--storage.tsdb.retention.time=2h'
+      - '--storage.tsdb.min-block-duration=2h'
+      - '--storage.tsdb.max-block-duration=2h'
+      - '--web.enable-lifecycle'
+    volumes:
+      - /docker/monitoring/prometheus/config:/etc/prometheus
+      - /docker/monitoring/prometheus/data:/prometheus
+    ports:
+      - "9090:9090"
+
+  thanos-sidecar:
+    image: thanosio/thanos:v0.34.0
+    container_name: thanos-sidecar
+    user: "1000:1000"
+    environment:
+      - OBJSTORE_CONFIG={"type":"S3","config":{"bucket":"prometheus","endpoint":"172.16.201.208:9000","access_key":"your_key","secret_key":"your_secret","insecure":true}}
+    command:
+      - 'sidecar'
+      - '--tsdb.path=/prometheus'
+      - '--prometheus.url=http://prometheus:9090'
+      - '--objstore.config=$$(OBJSTORE_CONFIG)'
+    volumes:
+      - /docker/monitoring/prometheus/data:/prometheus
+    ports:
+      - "10901:10901"