updated docker stack, less nzbget, more sab and prowlarr

network/docker-compose.yml

@@ -11,6 +11,8 @@ volumes:
   lidarr_config:
   radarr_config:
   sonarr_config:
+  prowlarr_config:
+  sabnzbd_config:
   nzbget_config:
   home_assistant_config:
 
@@ -19,12 +21,22 @@ volumes:
       type: nfs
       o: addr=10.10.20.200,rw,hard
       device: :/mnt/media/
+  downloads_share:
+    driver_opts:
+      type: nfs
+      o: addr=10.10.20.200,rw,hard
+      device: :/mnt/media/Downloads/
+  downloads_incomplete_share:
+    driver_opts:
+      type: nfs
+      o: addr=10.10.20.200,rw,hard
+      device: :/mnt/media/Downloads/incomplete/
 
 
 services:
   traefik:
     image: traefik:v2.9
-    command: --api.insecure=true
+#    command: --log.level=debug
     ports:
       - "10.10.20.251:80:80/tcp"
       - "10.10.20.251:443:443/tcp"
@@ -187,6 +199,27 @@ services:
       - traefik.http.routers.lidarr.entrypoints=websecure
       - traefik.http.routers.lidarr.middlewares=forward-auth
 
+  sabnzbd:
+    image: lscr.io/linuxserver/sabnzbd:latest
+    environment:
+      - PGID=65533
+      - PUID=65534
+    volumes:
+      - sabnzbd_config:/config
+      - media_share:/data
+      - downloads_share:/downloads
+      - downloads_incomplete_share:/incomplete-downloads
+#    ports:
+#      - 8080:8080
+    restart: unless-stopped
+    labels:
+      - traefik.http.routers.sabnzbd.rule=Host(`sabnzbd.playne.au`)
+      - traefik.http.routers.sabnzbd.tls=true
+      - traefik.http.routers.sabnzbd.tls.certresolver=le
+      - traefik.http.routers.sabnzbd.entrypoints=websecure
+      - traefik.http.routers.sabnzbd.middlewares=forward-auth
+
+
   nzbget:
     environment:
       - PGID=65534
@@ -288,6 +321,28 @@ services:
       - traefik.http.routers.sonarr.entrypoints=websecure
       - traefik.http.routers.sonarr.middlewares=forward-auth
 
+
+  prowlarr:
+    image: lscr.io/linuxserver/prowlarr:latest
+    environment:
+      - PGID=65534
+      - PUID=65534
+    volumes:
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+      - prowlarr_config:/config:rw
+      - media_share:/data
+    ports:
+      - 9696:9696
+    restart: unless-stopped
+    labels:
+      - traefik.http.routers.prowlarr.rule=Host(`prowlarr.playne.au`)
+      - traefik.http.routers.prowlarr.tls=true
+      - traefik.http.routers.prowlarr.tls.certresolver=le
+      - traefik.http.routers.prowlarr.entrypoints=websecure
+      - traefik.http.routers.prowlarr.middlewares=forward-auth
+
+
   #todo: once ipv6 is enabled, enable it here too
   ddns_cloudflare:
     image: oznu/cloudflare-ddns:latest
@@ -299,14 +354,17 @@ services:
       - SUBDOMAIN=apps
       - PROXIED=false
 #      - RRTYPE=AAAA
+    labels:
+      - traefik.enable=false
 
-  home_assistant:
+  # because this service is `network_mode: host` we configure it in traefik.yml
+  home-assistant:
     image: ghcr.io/home-assistant/home-assistant:stable
-    network: host
     network_mode: host
     privileged: true
     environment:
       - TZ=Australia/Perth
     volumes:
       - home_assistant_config:/config
-    
+    labels:
+      - traefik.enable=false

network/traefik/static.yaml

@@ -40,6 +40,16 @@ http:
       middlewares:
         - forward-auth@docker
 
+    home-assistant:
+      rule: Host(`home-assistant.playne.au`)
+      service: home-assistant
+      entrypoints:
+        - websecure
+      tls:
+        certresolver: le
+      middlewares:
+        - forward-auth@docker
+
 #  middlewares:
 
   services:
@@ -58,3 +68,12 @@ http:
         serversTransport: http1
         servers:
           - url: "http://10.10.20.1/"
+    home-assistant:
+      loadBalancer:
+        serversTransport: http1
+        servers:
+          - url: "http://10.10.20.254:8123/"
+        healthCheck:
+          path: /static/icons/favicon.ico
+
+    

network/traefik/traefik.yml

@@ -7,6 +7,7 @@ providers:
     endpoint: unix:///var/run/docker.sock
   file:
     filename: /etc/traefik/static.yaml
+    watch: true
 
 entryPoints:
   gitssh:
@@ -34,8 +35,8 @@ certificatesResolvers:
 
 #accessLog: {}
 
-#log:
-#  level: DEBUG
+log:
+  level: DEBUG
 
 metrics:
   prometheus: {}