60 lines
2.3 KiB
Markdown
60 lines
2.3 KiB
Markdown
# Cloud Server Docker Contianers
|
|
|
|
## Device -- 2012 Mac Mini
|
|
|
|
## Information
|
|
This Mac Mini acts as my network gateway and DNS, it additionally hosts my Gitea for right now
|
|
|
|
|
|
## Contents:
|
|
**`~/Docker`**
|
|
├── **`adguard/`**
|
|
├── **`cloudflared/`**
|
|
├── **`gitea/`**
|
|
├── **`glances/`**
|
|
├── **`nginx/`**
|
|
├── **`portainer/`**
|
|
└── **`README.md`**
|
|
|
|
## Current Ports:
|
|
- **`53`** --> adgaurd DNS
|
|
- **`81`** --> nginx proxy manager web ui
|
|
- **`2222`** --> gitea ssh
|
|
- **`3000`** --> adguard web UI
|
|
- **`3001`** --> gitea web ui
|
|
- **`8000`** --> portainer
|
|
- **`9443`** --> portainer web ui
|
|
- **`61208`** --> glances web ui
|
|
|
|
## Current Web Paths:
|
|
- **`szumko.net`** --> Home Assistant
|
|
- **`git.szumko.net`** --> Gitea
|
|
- **`cloud.szumko.net`** --> nextcloud
|
|
|
|
## Adding Subdomains:
|
|
1. Go to cloudflare account and add a dns record for the subdomain
|
|
2. Go to **`~/docker/cloudflared/config.yml`** and add the ingress pointing to NPM
|
|
3. Create a proxy host in NPM pointing to container_name:port (must be on **`homelab`** internal network)
|
|
|
|
## Adding Paths:
|
|
1. Add path in NPM (must be on **`homelab`**)
|
|
|
|
## UFW Settings
|
|
```
|
|
Logging: on (low)
|
|
Default: deny (incoming), allow (outgoing), deny (routed)
|
|
New profiles: skip
|
|
|
|
To Action From
|
|
-- ------ ----
|
|
22/tcp ALLOW IN 192.168.0.0/24 # LAN ssh
|
|
22/tcp on tailscale0 ALLOW IN Anywhere # Tailscle ssh
|
|
53,80,81,443,61208/tcp ALLOW IN 192.168.0.0/24 # LAN Access, 53 -> Adguard, 61208 -> glances
|
|
53,80,81,443,61208/udp ALLOW IN 192.168.0.0/24 # LAN Access, 53 -> Adguard, 61208 -> glances
|
|
53,80,81,443,61208/tcp on tailscale0 ALLOW IN Anywhere # Tailscale Access, 53 -> Adguard, 61208 -> glances
|
|
53,80,81,443,61208/udp on tailscale0 ALLOW IN Anywhere # Tailscale Access, 53 -> Adguard, 61208 -> glances
|
|
22/tcp (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale ssh (IPv6)
|
|
53,80,81,443,61208/tcp (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale Access (IPv6), 53 -> Adguard, 61208 -> glances
|
|
53,80,81,443,61208/udp (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale Access (IPv6), 53 -> Adguard, 61208 -> glances
|
|
```
|