authentik/.env

@@ -1,3 +0,0 @@
-PG_PASS=k6jvY2g0MMo7ObX7xMVNLL3fSkrVZNcqKzC6z1rNnhlb4slS
-AUTHENTIK_SECRET_KEY=JCM1VPqhJ+5PSpq9Zizs9UHrEpa1lz7d1URxOXBSXvBW6X9KcTivPcocq3N6QuwhYhAJlmKgLH4H3qrG
-AUTHENTIK_ERROR_REPORTING__ENABLED=false

authentik/compose.yml

@@ -1,85 +0,0 @@
-services:
-  
-  postgresql:
-    image: docker.io/library/postgres:16-alpine
-    container_name: authentik_db
-    restart: unless-stopped
-    env_file:
-      - .env
-    environment:
-      POSTGRES_DB: ${PG_DB:-authentik}
-      POSTGRES_PASSWORD: ${PG_PASS:?database password required}
-      POSTGRES_USER: ${PG_USER:-authentik}
-    healthcheck:
-      interval: 30s
-      retries: 5
-      start_period: 20s
-      test:
-      - CMD-SHELL
-      - pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}
-      timeout: 5s
-    volumes:
-      - /docker/data/authentik/db:/var/lib/postgresql/data
-    networks:
-      - net
-
-  server:
-    image: ghcr.io/goauthentik/server:2026.2
-    container_name: authentik_server
-    restart: always
-    user: root
-    depends_on:
-      postgresql:
-        condition: service_healthy
-    env_file:
-      - .env  
-    environment:
-      AUTHENTIK_POSTGRESQL__HOST: postgresql
-      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
-      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
-      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
-      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}      
-      AUTHENTIK_POSTGRESQL__SSLMODE: disable
-      AUTHENTIK_OUTPOSTS__DISCOVER: false
-    ports:
-      - 9000:9000
-    shm_size: 512mb
-    volumes:
-      - /docker/data/authentik/data:/data
-      - /docker/data/authentik/templates:/templates
-    command: server
-    networks:
-      - net
-      - caddy_default
-
-  worker:
-    image: ghcr.io/goauthentik/server:2026.2
-    container_name: authentik_worker
-    restart: always
-    user: root
-    depends_on:
-      postgresql:
-        condition: service_healthy
-    env_file:
-      - .env
-    environment:
-      AUTHENTIK_POSTGRESQL__HOST: postgresql
-      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
-      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
-      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
-      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    shm_size: 512mb
-    volumes:
-    # - /var/run/docker.sock:/var/run/docker.sock
-      - /docker/data/authentik/data:/data
-      - /docker/data/authentik/templates:/templates
-      - /docker/data/authentik/certs:/certsx
-    command: worker
-    networks:
-      - net
-
-networks:
-  net: 
-    internal: true
-  caddy_default:
-    external: true

caddy/config/Caddyfile

@@ -78,7 +78,7 @@ apps.aggtaa.com {
     copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
   }
   
-  reverse_proxy homarr:7575
+  reverse_proxy heimdall:80
   log {
     output file /var/log/caddy/apps.aggtaa.com.log
   }

dockge/compose.yaml

@@ -3,6 +3,8 @@ services:
     image: louislam/dockge:1
     container_name: dockge
     restart: always
+    ports:
+      - 5001:5001
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - /docker/data/dockge/data:/app/data

haproxy/compose.yaml

@@ -5,11 +5,11 @@ services:
     restart: always
     ports:
       # - 80:80 # 80 is for caddy
-      - 10.0.64.22:443:443
+      - 443:443
       # - 8404:8404
     volumes:
       # - /docker/data/haproxy/etc:/usr/local/etc/haproxy:ro
-      - ./config/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
+      - /docker/data/haproxy/etc/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
     networks:
       - default
 networks:

haproxy/config/haproxy.cfg

@@ -1,32 +0,0 @@
-global
-    log /dev/log local0
-    maxconn 10000
-    daemon
-
-defaults
-    log global
-    mode tcp
-    option tcplog
-    timeout connect 5s
-    timeout client  60s
-    timeout server  60s
-
-frontend https_in
-    bind 0.0.0.0:443
-    mode tcp
-
-    # Inspect TLS ClientHello
-    tcp-request inspect-delay 5s
-    tcp-request content accept if { req_ssl_hello_type 1 }
-
-    # Routing by SNI
-    use_backend reality_backend if { req.ssl_sni -i www.wikipedia.org }
-    default_backend caddy_backend
-
-backend caddy_backend
-    mode tcp
-    server caddy caddy:443
-
-backend reality_backend
-    mode tcp
-    server xray 10.0.64.6:443

homarr/compose.yaml

@@ -1,15 +0,0 @@
-services:
-  homarr:
-    image: ghcr.io/homarr-labs/homarr:latest
-    container_name: homarr
-    restart: always
-    volumes:
-      # - /var/run/docker.sock:/var/run/docker.sock
-      - /docker/data/homarr/appdata:/appdata
-    environment:
-      - SECRET_ENCRYPTION_KEY=E32AF9F61D8246249FA65D8F0DB91F6999CA09B0C9B21DC4284ABDBF44F5E9DD
-    networks:
-      - caddy_default
-networks:
-  caddy_default:
-    external: true

zigbee2mqtt/compose.yaml

@@ -3,8 +3,6 @@ services:
     image: ghcr.io/koenkk/zigbee2mqtt
     container_name: zigbee2mqtt
     restart: always
-    ports:
-      - 8888:8080
     volumes:
       - /docker/data/zigbee2mqtt/data:/app/data
       - /run/udev:/run/udev:ro