add hazel server

README.md

@@ -12,6 +12,7 @@ $ cd rtm-config
 $ abra server add laylotta.resisttechmonopolies.online
 $ abra server add mango.resisttechmonmopolies.online
 $ abra server add sootie.resisttechmonopolies.online
+$ abra server add hazel.resisttechmonopolies.online
 ```
 
 If you skipped the `--recurse-submodules` flag, you can still do `git submodule update --init` later to get the rtm-astro-recipe recipe.

abra/servers/hazel.resisttechmonopolies.online/traefik.hazel.resisttechmonopolies.online.env

@@ -1,13 +1,13 @@
 TYPE=traefik:5.1.1+v3.6.15
-#TIMEOUT=300
+TIMEOUT=300
 ENABLE_AUTO_UPDATE=true
 ENABLE_BACKUPS=true
 
-DOMAIN=t.sootie.resisttechmonopolies.online
+DOMAIN=traefik.hazel.resisttechmonopolies.online
 LETS_ENCRYPT_ENV=production
 
-LETS_ENCRYPT_EMAIL=linnealovespie@proton.me
+LETS_ENCRYPT_EMAIL=besties@resisttechmonopolies.online
-DASHBOARD_ENABLED=true
+DASHBOARD_ENABLED=false
 # WARN, INFO etc.
 LOG_LEVEL=WARN
 LOG_MAX_AGE=1
@@ -125,7 +125,7 @@ COMPOSE_FILE="compose.yml"
 ## BASIC_AUTH should also be enabled
 #COMPOSE_FILE="$COMPOSE_FILE:compose.metrics.yml"
 #METRICS_ENABLED=1
-#METRICS_FQDN=metrics.t.sootie.resisttechmonopolies.online
+#METRICS_FQDN=metrics.traefik.hazel.resisttechmonopolies.online
 
 #####################################################################
 # File provider directory configuration                             #

abra/servers/laylotta.resisttechmonopolies.online/blog.resisttechmonopolies.online.env

@@ -1,40 +0,0 @@
-#SECRET_DB_PASSWORD_VERSION=v1
-#SECRET_SMTP_PASSWORD_VERSION=v1
-
-TYPE=ghost:1.5.0+6.65.0-alpine
-
-DOMAIN=blog.resisttechmonopolies.online
-
-## Domain aliases
-#EXTRA_DOMAINS=', `www.blog.resisttechmonopolies.online`'
-LETS_ENCRYPT_ENV=production
-
-SECRET_DB_PASSWORD_VERSION=v1
-
-SECRET_SMTP_PASSWORD_VERSION=v1
-
-## Mail settings (mandatory)
-MAIL_TRANSPORT=smtp
-MAIL_FROM=besties@resisttechmonopolies.online
-MAIL_OPTIONS_HOST=mail.resisttechmonopolies.online
-MAIL_OPTIONS_PORT=465
-MAIL_OPTIONS_AUTH_USER=besties@resisttechmonopolies.online
-#MAIL_OPTIONS_SECURE=false
-
-## Advanced options
-# see here: https://docs.ghost.org/config#number-of-connections
-#DATABASE_POOL_MIN=2
-#DATABASE_POOL_MAX=15
-
-COMPOSE_FILE="compose.yml"
-
-# Anubis
-#COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"
-
-## Matrix-Synapse-Redirection
-# COMPOSE_FILE="$COMPOSE_FILE:compose.matrix.yml"
-# MATRIX_DOMAIN=matrix-synapse.example.com
-
-## Custom Image Version
-# COMPOSE_FILE="$COMPOSE_FILE:compose.customversion.yml"
-# IMAGE_VERSION=6.3.1

abra/servers/laylotta.resisttechmonopolies.online/listmonk.resisttechmonopolies.online.env

@@ -1,6 +0,0 @@
-TYPE=listmonk:5.1.0+v6.1.0
-
-DOMAIN=listmonk.resisttechmonopolies.online
-LETS_ENCRYPT_ENV=production
-
-SECRET_DB_PASSWORD_VERSION=v1

abra/servers/laylotta.resisttechmonopolies.online/resisttechmonopolies.online.env

@@ -4,7 +4,6 @@ DOMAIN=resisttechmonopolies.online
 
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.website.resisttechmonopolies.online`'
-EXTRA_DOMAINS=", `www.resisttechmonopolies.online`"
 
 LETS_ENCRYPT_ENV=production
-VERSION=0.0.26
+VERSION=0.0.21

abra/servers/mango.resisttechmonopolies.online/bbt.mango.resisttechmonopolies.online.env

@@ -1,4 +1,4 @@
-TYPE=backup-bot-two:2.4.0+2.4.0
+TYPE=backup-bot-two:2.3.0+2.3.0-beta
 
 SECRET_RESTIC_PASSWORD_VERSION=v1
 

abra/servers/mango.resisttechmonopolies.online/uk.mango.resisttechmonopolies.online.env

@@ -1,4 +1,4 @@
-TYPE=uptime-kuma:3.3.0+2.5.3
+TYPE=uptime-kuma:3.0.0+2.2.1
 COMPOSE_FILE="compose.yml"
 LETS_ENCRYPT_ENV=production
 

abra/servers/mango.resisttechmonopolies.online/vw.resisttechmonopolies.online.env

@@ -1,4 +1,4 @@
-TYPE=vaultwarden:2.3.3+1.37.2
+TYPE=vaultwarden:2.1.3+1.35.4
 
 DOMAIN=vw.resisttechmonopolies.online
 LETS_ENCRYPT_ENV=production

abra/servers/sootie.resisttechmonopolies.online/calibre.resisttechmonopolies.online.env

@@ -0,0 +1,13 @@
+TYPE=calibre-web
+
+DOMAIN=calibre.resisttechmonopolies.online
+LETS_ENCRYPT_ENV=production
+
+DOCKER_MODS="linuxserver/calibre-web:calibre"
+OAUTHLIB_RELAX_TOKEN_SCOPE=1
+TZ="America/Los_Angeles"
+
+DEBUG=False
+
+# oauth2 support
+COMPOSE_FILE="compose.yml:compose.oauth2.yml"

abra/servers/sootie.resisttechmonopolies.online/collabora.resisttechmonopolies.online.env

@@ -0,0 +1,7 @@
+TYPE=collabora
+DOMAIN=collabora.resisttechmonopolies.online
+LETS_ENCRYPT_ENV=production
+NEXTCLOUD_DOMAIN=nextcloud.resisttechmonopolies.online
+ADMIN_USERNAME=admin
+SECRET_ADMIN_PASSWORD_VERSION=v1
+FRAME_ANCESTORS=

abra/servers/sootie.resisttechmonopolies.online/focalboard.resisttechmonopolies.online.env

@@ -0,0 +1,7 @@
+TYPE=focalboard
+
+DOMAIN=focalboard.resisttechmonopolies.online
+
+## Domain aliases
+#EXTRA_DOMAINS=', `www.focalboard.resisttechmonopolies.online`'
+LETS_ENCRYPT_ENV=production

abra/servers/sootie.resisttechmonopolies.online/hedgedoc.resisttechmonopolies.online.env

@@ -1,59 +0,0 @@
-TYPE=hedgedoc:3.0.8+1.10.7
-TIMEOUT=300
-ENABLE_AUTO_UPDATE=true
-ENABLE_BACKUPS=true
-
-DOMAIN=hedgedoc.resisttechmonopolies.online
-## Domain aliases
-#EXTRA_DOMAINS=', `www.hedgedoc.resisttechmonopolies.online`'
-LETS_ENCRYPT_ENV=production
-
-SECRET_SESSION_SECRET_VERSION=v1
-
-COMPOSE_FILE="compose.yml"
-
-# Anubis
-#COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"
-
-# PostgreSQL
-
-#COMPOSE_FILE="$COMPOSE_FILE:compose.postgresql.yml"
-#SECRET_DB_PASSWORD_VERSION=v1
-
-# OAuth, see https://docs.hedgedoc.org/guides/auth/keycloak/
-
-#COMPOSE_FILE="$COMPOSE_FILE:compose.oauth.yml"
-#CMD_OAUTH2_PROVIDERNAME="Keycloak"
-#CMD_OAUTH2_CLIENT_ID="hedgedoc"
-#CMD_OAUTH2_AUTHORIZATION_URL="https://keycloak.example.com/auth/realms/realmname/protocol/openid-connect/auth"
-#CMD_OAUTH2_TOKEN_URL="https://keycloak.example.com/auth/realms/realmname/protocol/openid-connect/token"
-#CMD_OAUTH2_USER_PROFILE_URL="https://keycloak.example.com/auth/realms/realmname/protocol/openid-connect/userinfo"
-#CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR=ocs.data.id
-#CMD_OAUTH2_USER_PROFILE_ID_ATTR=
-#CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR=ocs.data.display-name
-#CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR=ocs.data.email
-#CMD_OAUTH2_PROVIDERNAME=Keycloak
-#CMD_OAUTH2_SCOPE="openid email profile"
-#
-#SECRET_OAUTH_KEY_VERSION=v1
-
-# Options, see https://docs.hedgedoc.org/configuration/
-
-# CMD_ALLOW_ANONYMOUS=true
-# CMD_ALLOW_ANONYMOUS_EDITS=false
-# CMD_ALLOW_EMAIL_REGISTER=true
-# CMD_ALLOW_FREEURL=false
-# CMD_REQUIRE_FREEURL_AUTHENTICATION=true
-# CMD_ALLOW_GRAVATAR=true
-# CMD_ALLOW_ORIGIN=localhost
-# CMD_COOKIE_POLICY=lax
-# CMD_CSP_ADD_DISQUS=false
-# CMD_CSP_ADD_GOOGLE_ANALYTICS=false
-# CMD_CSP_ENABLE=true
-# CMD_CSP_REPORTURI=undefined
-# CMD_DEFAULT_PERMISSION=editable
-# CMD_EMAIL=true
-# CMD_SESSION_LIFE=1209600000
-# Only present in config.json (no equivalent env var):
-# DOCUMENT_MAX_LENGTH=100000
-# CMD_ENABLE_UPLOADS=registered

abra/servers/sootie.resisttechmonopolies.online/mb.sootie.resisttechmonopolies.online.env

@@ -1,18 +0,0 @@
-TYPE=maubot:1.3.0+v0.6.0
-
-DOMAIN=mb.sootie.resisttechmonopolies.online
-
-## Domain aliases
-#EXTRA_DOMAINS=', `www.maubot.resisttechmonopolies.online`'
-
-LETS_ENCRYPT_ENV=production
-
-HOMESERVER_HOST=matrix.resisttechmonopolies.online
-# Client-server API URL
-HOMESERVER_URL=https://matrix.resisttechmonopolies.online
-
-ADMIN_USER_NAME=charlie
-
-## Secrets
-SECRET_ADMIN_PASSWORD_VERSION=v1
-SECRET_HOMESERVER_REGISTRATION_VERSION=v1

abra/servers/sootie.resisttechmonopolies.online/radicale.resisttechmonopolies.online.env

@@ -1,6 +1,6 @@
-TYPE=radicale:0.1.0+3.0.6.0
+TYPE=radicale
 
 DOMAIN=radicale.resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.radicale.resisttechmonopolies.online`'
-LETS_ENCRYPT_ENV=production
+LETS_ENCRYPT_ENV=production

abra/servers/sootie.resisttechmonopolies.online/traefik.resisttechmonopolies.online.env

@@ -0,0 +1,148 @@
+TYPE=traefik:3.7.0+v3.6.2
+TIMEOUT=300
+ENABLE_AUTO_UPDATE=true
+ENABLE_BACKUPS=true
+
+DOMAIN=traefik.resisttechmonopolies.online
+LETS_ENCRYPT_ENV=production
+LETS_ENCRYPT_EMAIL=linnealovespie@proton.me
+DASHBOARD_ENABLED=false
+# WARN, INFO etc.
+LOG_LEVEL=WARN
+
+# This is here so later lines can extend it; you likely don't wanna edit
+COMPOSE_FILE="compose.yml"
+
+#####################################################################
+# General settings                                                  #
+#####################################################################
+
+## Host-mode networking
+COMPOSE_FILE="$COMPOSE_FILE:compose.host.yml"
+
+## "Headless mode" (no domain configured)
+#COMPOSE_FILE="$COMPOSE_FILE:compose.headless.yml"
+
+#####################################################################
+# Automatic DNS set-up for Letsencrypt                              #
+#####################################################################
+
+## Enable dns challenge (for wildcard domains)
+##   https://doc.traefik.io/traefik/https/acme/#dnschallenge
+#LETS_ENCRYPT_DNS_CHALLENGE_ENABLED=1
+#LETS_ENCRYPT_DNS_CHALLENGE_PROVIDER=ovh
+
+## OVH, https://ovh.com
+#COMPOSE_FILE="$COMPOSE_FILE:compose.ovh.yml"
+#OVH_ENABLED=1
+#OVH_APPLICATION_KEY=
+#OVH_ENDPOINT=
+#SECRET_OVH_APP_SECRET_VERSION=v1
+#SECRET_OVH_CONSUMER_KEY=v1
+
+## Gandi, https://gandi.net
+## note(3wc): only "V5" (new) API is supported, so far
+#COMPOSE_FILE="$COMPOSE_FILE:compose.gandi-api-key.yml"
+#GANDI_API_KEY_ENABLED=1
+#SECRET_GANDIV5_API_KEY_VERSION=v1
+
+## Gandi, https://gandi.net
+## note: uses GandiV5 Personal Access Token
+#COMPOSE_FILE="$COMPOSE_FILE:compose.gandi-personal-access-token.yml"
+#GANDI_PERSONAL_ACCESS_TOKEN_ENABLED=1
+#SECRET_GANDIV5_PERSONAL_ACCESS_TOKEN_VERSION=v1
+
+## DigitalOcean, https://digitalocean.com
+#COMPOSE_FILE="$COMPOSE_FILE:compose.digitalocean.yml"
+#DIGITALOCEAN_ENABLED=1
+#SECRET_DIGITALOCEAN_AUTH_TOKEN_VERSION=v1
+
+#####################################################################
+# Manual wildcard certificate insertion                             #
+#####################################################################
+
+# Set wildcards = 1, and uncomment compose_file to enable.
+# Create your certs elsewhere and add them like:
+# abra app secret insert {myapp.example.coop} ssl_cert v1 "$(cat /path/to/fullchain.pem)"
+# abra app secret insert {myapp.example.coop} ssl_key v1 "$(cat /path/to/privkey.pem)"
+#WILDCARDS_ENABLED=1
+#SECRET_WILDCARD_CERT_VERSION=v1
+#SECRET_WILDCARD_KEY_VERSION=v1
+#COMPOSE_FILE="$COMPOSE_FILE:compose.wildcard.yml"
+
+#####################################################################
+# Authentication                                                    #
+#####################################################################
+
+## Enable Keycloak
+#COMPOSE_FILE="$COMPOSE_FILE:compose.keycloak.yml"
+#KEYCLOAK_MIDDLEWARE_ENABLED=1
+#KEYCLOAK_TFA_SERVICE=traefik-forward-auth_app
+#KEYCLOAK_MIDDLEWARE_2_ENABLED=1
+#KEYCLOAK_TFA_SERVICE_2=traefik-forward-auth_app
+
+## BASIC_AUTH
+## Use httpasswd to generate the secret
+#COMPOSE_FILE="$COMPOSE_FILE:compose.basicauth.yml"
+#BASIC_AUTH=1
+#SECRET_USERSFILE_VERSION=v1
+
+#####################################################################
+# Prometheus metrics                                                #
+#####################################################################
+
+## Enable prometheus metrics collection
+## used used by the coop-cloud monitoring stack
+#COMPOSE_FILE="$COMPOSE_FILE:compose.metrics.yml"
+#METRICS_ENABLED=1
+
+#####################################################################
+# File provider directory configuration                             #
+# (Route bare metal and non-docker services on the machine!)        #
+#####################################################################
+FILE_PROVIDER_DIRECTORY_ENABLED=1
+
+#####################################################################
+# Additional services                                               #
+#####################################################################
+
+## SMTP port 587
+#COMPOSE_FILE="$COMPOSE_FILE:compose.smtp.yml"
+#SMTP_ENABLED=1
+
+## Compy
+#COMPOSE_FILE="$COMPOSE_FILE:compose.compy.yml"
+#COMPY_ENABLED=1
+
+## Gitea SSH
+# COMPOSE_FILE="$COMPOSE_FILE:compose.gitea.yml"
+# GITEA_SSH_ENABLED=1
+
+## Foodsoft SMTP
+# COMPOSE_FILE="$COMPOSE_FILE:compose.foodsoft.yml"
+# FOODSOFT_SMTP_ENABLED=1
+
+## Peertube RTMP
+#COMPOSE_FILE="$COMPOSE_FILE:compose.peertube.yml"
+#PEERTUBE_RTMP_ENABLED=1
+
+## Secure Scuttlebutt MUXRPC
+#COMPOSE_FILE="$COMPOSE_FILE:compose.ssb.yml"
+#SSB_MUXRPC_ENABLED=1
+
+## MSSQL
+#COMPOSE_FILE="$COMPOSE_FILE:compose.mssql.yml"
+#MSSQL_ENABLED=1
+
+## Mumble
+#COMPOSE_FILE="$COMPOSE_FILE:compose.mumble.yml"
+#MUMBLE_ENABLED=1
+
+## Matrix
+#COMPOSE_FILE="$COMPOSE_FILE:compose.matrix.yml"
+#MATRIX_FEDERATION_ENABLED=1
+
+## "Web alt", an alternative web port
+# NOTE(3wc): as of 2024-04-01 only the `icecast` recipe uses this
+#COMPOSE_FILE="$COMPOSE_FILE:compose.web-alt.yml"
+#WEB_ALT_ENABLED=1