gitops poc

code-server.yml

services:
  code-server:
    image: lscr.io/linuxserver/code-server:4.97.2@sha256:3d1f7bd7399b4b54622e580a7f14afd6886ff698fc11dd1978afd04cc6e7b529
    container_name: code-server
    environment:
      PUID: "1000"
      PGID: "1000"
      TZ: Etc/UTC
      HASHED_PASSWORD: "${CODE_HASHED_PASSWORD}"
      SUDO_PASSWORD_HASH: "${CODE_SUDO_PASSWORD_HASH}"
      DEFAULT_WORKSPACE: /home/roxedus/compose
    networks: 
      - ingress
    volumes:
      - /mnt/pool/appdata/modcache:/modcache
      - /mnt/pool/appdata/code-server:/config
      - /home/roxedus/compose:/home/roxedus/compose
    ports:
      - 8443:8443
    restart: unless-stopped

compose.yml

include:
- https://gist.github.com/3ab6b9443c3df586395cc8e5b606abaf.git#main:network.yml
- https://gist.github.com/3ab6b9443c3df586395cc8e5b606abaf.git#main:modmanager.yml
- https://gist.github.com/3ab6b9443c3df586395cc8e5b606abaf.git#main:code-server.yml
- https://gist.github.com/3ab6b9443c3df586395cc8e5b606abaf.git#main:health.yml

health.yml

services:
  dozzle:
    container_name: dozzle
    image: amir20/dozzle:v8.11.7@sha256:ac4b71eaad9f65c7dabaeb55b39b586f6d7b15c7846f91dd09ba006d2ae26e52
    hostname: rostvik.site
    networks: 
      - ingress
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    ports:
      - 8080:8080

  beszel:
    image: ghcr.io/henrygd/beszel/beszel:0.10.1@sha256:9d63e111410c2d9d0039829d94924b0ca209b2447a60aa44ad399f0a165655e8
    container_name: beszel
    restart: unless-stopped
    ports:
      - 8090:8090
    networks: 
      - ingress
    volumes:
      - /mnt/pool/appdata/beszel:/beszel_data
      - beszel_socket:/beszel_socket

  beszel-agent:
    image: ghcr.io/henrygd/beszel/beszel-agent:0.10.1@sha256:cffa14c3af7740a41aa33d54d5dd8c4c91afe5a8134bbce336408d5f3183710c
    container_name: beszel-agent
    restart: unless-stopped
    network_mode: host
    volumes:
      - beszel_socket:/beszel_socket
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      LISTEN: /beszel_socket/beszel.sock
      KEY: "${BESZEL_KEY}"

volumes:
  beszel_socket:

modmanager.yml

services:
  modmanager-dockerproxy:
    image: lscr.io/linuxserver/socket-proxy:latest
    container_name: modmanager-dockerproxy
    networks: 
      - modmanager
    environment:
      - CONTAINERS=1
      - POST=0
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    tmpfs:
      - /run
    ports:
      - 2375:2375
    restart: unless-stopped
    read_only: true

  modmanager:
    image: lscr.io/linuxserver/modmanager:latest
    container_name: modmanager
    networks: 
      - modmanager
      - egress
    environment:
      - DOCKER_MODS=linuxserver/mods:universal-package-install
      - DOCKER_HOST=tcp://modmanager-dockerproxy:2375
    volumes:
      - /mnt/pool/appdata/modcache:/modcache
    restart: unless-stopped

networks:
  modmanager:
    name: modmanager-net
    internal: true

network.yml

networks:
  default:
    internal: true
  ingress:
    name: ingress
    driver_opts:
      com.docker.network.bridge.enable_icc: "false"
  egress:
    name: egress
    driver_opts:
      com.docker.network.bridge.name: egress
      com.docker.network.bridge.enable_icc: "false"
      com.docker.network.bridge.host_binding_ipv4: "127.0.0.1"