Initial commit: all TrueNAS docker compose stacks

databases/.env.example

@@ -0,0 +1,15 @@
+TZ=America/Chicago
+
+# PostgreSQL
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=changeme
+POSTGRES_DB=postgres
+
+# MariaDB
+MARIADB_ROOT_PASSWORD=changeme
+UPTIMEKUMA_DB_NAME=uptime_kuma
+UPTIMEKUMA_DB_USER=uptime_kuma
+UPTIMEKUMA_DB_PASS=changeme
+
+# Redis
+REDIS_PASSWORD=changeme

databases/docker-compose.yaml

@@ -0,0 +1,70 @@
+networks:
+  shared-databases:
+    driver: bridge
+
+services:
+
+  postgres:
+    container_name: shared-postgres
+    image: ghcr.io/immich-app/postgres:17-vectorchord0.5.3-pgvector0.8.1
+    restart: unless-stopped
+    networks:
+      - shared-databases
+    ports:
+      - "5432:5432"
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+      PGDATA: /var/lib/postgresql/data/pgdata
+    volumes:
+      - /mnt/docker-ssd/docker/databases/postgres:/var/lib/postgresql/data
+      - /mnt/docker-ssd/docker/compose/databases/initdb:/docker-entrypoint-initdb.d:ro
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 30s
+      timeout: 10s
+      retries: 5
+      start_period: 30s
+
+  mariadb:
+    container_name: shared-mariadb
+    image: mariadb:11.4
+    restart: unless-stopped
+    networks:
+      - shared-databases
+    ports:
+      - "3306:3306"
+    environment:
+      MARIADB_ROOT_PASSWORD: ${MARIADB_ROOT_PASSWORD}
+      UPTIMEKUMA_DB_NAME: ${UPTIMEKUMA_DB_NAME}
+      UPTIMEKUMA_DB_USER: ${UPTIMEKUMA_DB_USER}
+      UPTIMEKUMA_DB_PASS: ${UPTIMEKUMA_DB_PASS}
+    volumes:
+      - /mnt/docker-ssd/docker/databases/mariadb:/var/lib/mysql
+      - /mnt/docker-ssd/docker/compose/databases/initdb-mariadb:/docker-entrypoint-initdb.d:ro
+    healthcheck:
+      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
+      interval: 30s
+      timeout: 10s
+      retries: 5
+      start_period: 30s
+
+  redis:
+    container_name: shared-redis
+    image: redis:7-alpine
+    restart: unless-stopped
+    networks:
+      - shared-databases
+    ports:
+      - "6379:6379"
+    command: >
+      sh -c "redis-server --appendonly yes --requirepass '${REDIS_PASSWORD}'"
+    volumes:
+      - /mnt/docker-ssd/docker/databases/redis:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
+      interval: 30s
+      timeout: 10s
+      retries: 5
+      start_period: 10s

databases/initdb-mariadb/01-create-uptime-kuma-db.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+set -eu
+
+mariadb -uroot -p"${MARIADB_ROOT_PASSWORD}" <<EOSQL
+CREATE DATABASE IF NOT EXISTS \`${UPTIMEKUMA_DB_NAME}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
+CREATE USER IF NOT EXISTS '${UPTIMEKUMA_DB_USER}'@'%' IDENTIFIED BY '${UPTIMEKUMA_DB_PASS}';
+GRANT ALL PRIVILEGES ON \`${UPTIMEKUMA_DB_NAME}\`.* TO '${UPTIMEKUMA_DB_USER}'@'%';
+FLUSH PRIVILEGES;
+EOSQL

databases/initdb/01-create-databases.sql.example

@@ -0,0 +1,26 @@
+-- Copy to 01-create-databases.sql and fill in real passwords.
+-- 01-create-databases.sql is gitignored — this example is safe to commit.
+
+CREATE ROLE gitea LOGIN PASSWORD 'changeme';
+CREATE DATABASE gitea OWNER gitea;
+
+CREATE ROLE immich LOGIN PASSWORD 'changeme';
+CREATE DATABASE immich OWNER immich;
+
+CREATE ROLE flare LOGIN PASSWORD 'changeme';
+CREATE DATABASE flare OWNER flare;
+
+CREATE ROLE seerr LOGIN PASSWORD 'changeme';
+CREATE DATABASE seerr OWNER seerr;
+
+CREATE ROLE openwebui LOGIN PASSWORD 'changeme';
+CREATE DATABASE openwebui OWNER openwebui;
+
+CREATE ROLE uptime_kuma LOGIN PASSWORD 'changeme';
+CREATE DATABASE uptime_kuma OWNER uptime_kuma;
+
+CREATE ROLE kima_hub LOGIN PASSWORD 'changeme';
+CREATE DATABASE kima_hub OWNER kima_hub;
+
+CREATE ROLE shlink LOGIN PASSWORD 'changeme';
+CREATE DATABASE shlink OWNER shlink;

databases/truenas-app.yaml

@@ -0,0 +1,2 @@
+include:
+  - /mnt/docker-ssd/docker/compose/databases/docker-compose.yaml