Homelab

This is a collection of scripts and configuration files that I use to manage my homelab. Some of them might also be used for my personal projects to setup staging and production servers. All variables should be placed in inventory.txt file.

Disclaimer

Some of the scripts might be unsafe. I'm aware one is not supposed to operate as root user under no circumstances. Use these at your own risk.

Playbooks

Homelab

To setup homelab production, run make setup_homelab_production

• make install_docker will install Docker on the server.
• make portainer will install Portainer on the server.
• make immich will install Immich on the server. It will also create an automated config for backups: a cron job that will run once a month. Cron job will create a backup of the immich db and uploaded photos and sync them with Backblaze B2 bucket.

Dokku

• make dokku will install Dokku on the server. It will also add 1GB swap file.
• make create_dokku_app will create a new Dokku app on the server. It will also create a postgres database for the app, redis and link them to the app.
• make setup_dokku_backups will set up backups for the app. It will create a cron job that will run every day at 3am and will create a backup of the database. The backups will be uploaded to AWS S3.
• make add_dokku_domain will add a domain to the app.
• make add_dokku_ssl will add SSL to the app.

Production Dokku from strach

ansible-galaxy install -p ./roles  geerlingguy.pip geerlingguy.docker_arm
ansible-playbook -k -K -v docker-arm.yml

Adding certificates for dokku deployed apps

To add certificates to the app, you need to follow some steps before running the make dokku_add_ssl command.

1. Add your domain to Cloudflare. You need to change the nameservers on your DNS provider (probably just where you have bought your domain). Create an account on Cloudflare and it will show you a step-by-step guide on how to do that (great onboarding by the way).
2. Create certificates for your domain. On Cloudflare, open SSL/TLS -> Origin Server menu and press Create Certificate.
3. Create two files in tmp folder: {{domain_name}}.crt and {{domain_name}}.key. Copy the content of the certificate and the private key in the files.
4. Run make dokku_add_ssl command.
5. Now set your domain SSL/TLS to Full on Cloudflare.
6. You're beautiful!

Todo:

• https://ubuntu.com/tutorials/install-and-configure-samba#2-installing-samba
• io.portainer.accesscontrol.public for Immich so we could manage it using Portainer