@simplehomelab/deployrr 6.0.0-rc3

package/apps/official/n8n/files/pre-install.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+# n8n Pre-Install Hook
+# Injects PostgreSQL password into n8n compose via sed placeholder
+# Pattern: same as Langfuse — secret file stays root:root 0600,
+# hook reads it with sudo and injects into compose before container start
+
+COMPOSE_DIR="$DOCKER_FOLDER/compose/$HOSTNAME"
+
+# Read the secret (generated by f_process_app_secrets)
+POSTGRESQL_PASSWORD=$(sudo cat "$DOCKER_FOLDER/secrets/n8n_postgresql_password" 2>/dev/null)
+
+if [[ -z "$POSTGRESQL_PASSWORD" ]]; then
+    f_print_error "n8n PostgreSQL password missing from $DOCKER_FOLDER/secrets/"
+    log_error "n8n" "Missing secret: n8n_postgresql_password - aborting pre-install"
+    return 1
+fi
+
+# Inject into main n8n compose
+local n8n_compose="$COMPOSE_DIR/n8n.yml"
+if [[ -f "$n8n_compose" ]]; then
+    f_print_substep "Injecting database password into n8n compose..."
+    sudo sed -i "s|N8N-POSTGRESQL-PASSWORD-PLACEHOLDER|$POSTGRESQL_PASSWORD|g" "$n8n_compose"
+    log_info "n8n" "Injected PostgreSQL password into n8n.yml"
+fi
+
+f_print_success "n8n secrets configured"

package/apps/official/n8n/manifest.json

@@ -0,0 +1,103 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "n8n",
+    "pname": "n8n",
+    "description": "n8n is a workflow automation tool that allows you to connect various services and automate tasks. It features a visual workflow editor and supports hundreds of integrations including AI/LLM providers, databases, APIs, and more.",
+    "descriptionShort": "Workflow automation",
+    "icon": "sh-n8n",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["automation", "workflow", "ai", "integration", "low-code"]
+  },
+
+  "deployment": {
+    "type": "multicontainer",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 5678,
+    "protocol": "http"
+  },
+
+  "dependencies": [
+    {
+      "sname": "n8n-postgresql",
+      "pname": "n8n PostgreSQL",
+      "compose": "n8n-postgresql.yml",
+      "installOrder": 1,
+      "waitForHealthy": true,
+      "required": true,
+      "description": "Dedicated PostgreSQL database for n8n"
+    }
+  ],
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "database": {
+    "type": "postgresql",
+    "containerSname": "n8n-postgresql",
+    "name": "n8n",
+    "user": "n8n_db_user",
+    "passwordVariable": "n8n_postgresql_password",
+    "host": "n8n-postgresql",
+    "port": 5432
+  },
+
+  "folders": {
+    "permissions": {
+      "appdata": "1000:1000"
+    }
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "N8N_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "N8N_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 5678,
+        "prompt": true,
+        "required": true,
+        "validation": { "type": "port", "min": 1, "max": 65535 }
+      }
+    ],
+    "secrets": [
+      {
+        "name": "n8n_postgresql_password",
+        "type": "random",
+        "length": 32,
+        "addToCompose": true
+      }
+    ]
+  },
+
+  "hooks": {
+    "preInstall": {
+      "script": "files/pre-install.sh"
+    }
+  },
+
+  "status": {
+    "file": "06_n8n_status",
+    "successMessage": "n8n Setup Completed",
+    "telemetryAction": "n8n"
+  }
+}

package/apps/official/n8n/n8n-postgresql.yml

@@ -0,0 +1,26 @@
+services:
+  # n8n PostgreSQL - Dedicated Database for n8n
+  n8n-postgresql:
+    container_name: n8n-postgresql
+    image: postgres:${N8NPOSTGRESQL_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d n8n -U n8n_db_user"]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 5s
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/n8n-postgresql:/var/lib/postgresql
+    environment:
+      - POSTGRES_DB=n8n
+      - POSTGRES_USER=n8n_db_user
+      - POSTGRES_PASSWORD_FILE=/run/secrets/n8n_postgresql_password
+    secrets:
+      - n8n_postgresql_password
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/navidrome/compose.yml

@@ -0,0 +1,26 @@
+services:
+  # Navidrome - Music Server
+  navidrome:
+    image: deluan/navidrome:latest
+    container_name: navidrome
+    security_opt:
+      - no-new-privileges:true
+    restart: "no"
+    profiles: ["media", "all"]
+    networks:
+      - default
+    ports:
+      - "$NAVIDROME_PORT:4533"
+    user: $PUID:$PGID
+    volumes:
+      - $DOCKERDIR/appdata/navidrome:/data
+      # - $MEDIADIR1:/data/media1
+      # - $MEDIADIR2:/data/media2
+      # - $MEDIADIR3:/data/media3
+    environment:
+      - TZ=$TZ
+      - ND_SCANSCHEDULE=1h
+      - ND_LOGLEVEL=info
+      - ND_SESSIONTIMEOUT=24h
+      - ND_REVERSEPROXYWHITELIST="0.0.0.0/0"
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/navidrome/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "navidrome",
+    "pname": "Navidrome",
+    "description": "Navidrome is an open source web-based music collection server and streamer. It is compatible with Subsonic/Airsonic APIs.",
+    "descriptionShort": "Subsonic compatible music server",
+    "icon": "sh-navidrome",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["music", "media", "streaming", "subsonic"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["media", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 4533,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "media_folder", "appfolder_permission"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "NAVIDROME_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "NAVIDROME_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 4533,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_navidrome_status",
+    "successMessage": "Navidrome Setup Completed",
+    "telemetryAction": "navidrome"
+  }
+}

package/apps/official/netdata/compose.yml

@@ -0,0 +1,28 @@
+services:
+  # Netdata - System Monitoring
+  netdata:
+    image: netdata/netdata
+    container_name: netdata
+    pid: host
+    network_mode: host
+    restart: unless-stopped
+    profiles: ["monitoring", "all"]
+    cap_add:
+      - SYS_PTRACE
+      - SYS_ADMIN
+    security_opt:
+      - apparmor:unconfined
+    volumes:
+      - $DOCKERDIR/appdata/netdata/config:/etc/netdata
+      - $DOCKERDIR/appdata/netdata/lib:/var/lib/netdata
+      - $DOCKERDIR/appdata/netdata/cache:/var/cache/netdata
+      - /:/host/root:ro,rslave
+      - /etc/passwd:/host/etc/passwd:ro
+      - /etc/group:/host/etc/group:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /proc:/host/proc:ro
+      - /sys:/host/sys:ro
+      - /etc/os-release:/host/etc/os-release:ro
+      - /var/log:/host/var/log:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    # DOCKER-LABELS-PLACEHOLDER  

package/apps/official/netdata/manifest.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "netdata",
+    "pname": "Netdata",
+    "description": "Netdata is an open-source, real-time monitoring tool that provides comprehensive insights into system performance, including CPU, memory, disk, network, and application metrics.",
+    "descriptionShort": "System monitoring",
+    "icon": "sh-netdata",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["monitoring", "metrics", "system"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["monitoring", "all"],
+    "networks": [],
+    "networkMode": "host",
+    "webui": true,
+    "port": 19999,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "NETDATA_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "NETDATA_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 19999,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_netdata_status",
+    "successMessage": "Netdata Setup Completed",
+    "telemetryAction": "netdata"
+  }
+}

package/apps/official/nextcloud/compose.yml

@@ -0,0 +1,38 @@
+services:
+  # Nextcloud - Content Collaboration Platform
+  nextcloud:
+    image: nextcloud:${NEXTCLOUD_VERSION_PIN}
+    container_name: nextcloud
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    depends_on:
+      nextcloud-mariadb:
+        condition: service_healthy
+      nextcloud-redis:
+        condition: service_healthy
+    ports:
+      - "$NEXTCLOUD_PORT:80"
+    volumes:
+      - $DOCKERDIR/appdata/nextcloud:/var/www/html
+      - $NEXTCLOUD_FOLDER:/var/www/html/data
+    environment:
+      - MYSQL_PASSWORD_FILE=/run/secrets/nextcloud_mariadb_password
+      - MYSQL_DATABASE=nextcloud
+      - MYSQL_USER=nextcloud_db_user
+      - MYSQL_HOST=nextcloud-mariadb
+      - REDIS_HOST=nextcloud-redis
+      - NEXTCLOUD_ADMIN_USER=$NEXTCLOUD_ADMIN_USER
+      - NEXTCLOUD_ADMIN_PASSWORD_FILE=/run/secrets/nextcloud_admin_password
+      # Uncomment after initial setup if using Traefik:
+      # - NEXTCLOUD_TRUSTED_DOMAINS=$NEXTCLOUD_SUBDOMAIN.$DOMAINNAME_1
+      - TRUSTED_PROXIES=192.168.90.0/24
+      # - OVERWRITEHOST=$NEXTCLOUD_SUBDOMAIN.$DOMAINNAME_1
+      - OVERWRITEPROTOCOL=https
+    secrets:
+      - nextcloud_admin_password
+      - nextcloud_mariadb_password
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/nextcloud/manifest.json

@@ -0,0 +1,159 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "nextcloud",
+    "pname": "Nextcloud",
+    "description": "Nextcloud is a self-hosted productivity platform that provides file sync and share, collaboration tools, calendar, contacts, mail, and more. It offers a secure and private alternative to cloud services like Google Drive, Dropbox, and Microsoft 365.",
+    "descriptionShort": "Open source content collaboration",
+    "icon": "sh-nextcloud",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["files", "sync", "collaboration", "cloud", "storage", "office"]
+  },
+
+  "deployment": {
+    "type": "multicontainer",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 8081,
+    "protocol": "http"
+  },
+
+  "dependencies": [
+    {
+      "sname": "nextcloud-mariadb",
+      "pname": "Nextcloud MariaDB",
+      "compose": "nextcloud-mariadb.yml",
+      "installOrder": 1,
+      "waitForHealthy": true,
+      "required": true,
+      "description": "Dedicated MariaDB database for Nextcloud"
+    },
+    {
+      "sname": "nextcloud-redis",
+      "pname": "Nextcloud Redis",
+      "compose": "nextcloud-redis.yml",
+      "installOrder": 2,
+      "waitForHealthy": true,
+      "required": true,
+      "description": "Dedicated Redis cache for Nextcloud"
+    }
+  ],
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "nextcloud_folder"],
+    "apps": []
+  },
+
+  "preInstall": {
+    "dialog": {
+      "type": "warning",
+      "title": "Nextcloud",
+      "message": "\\n\\Z1NOTE:\\Zn Deployrr does not install the Nextcloud AIO (All-in-One) image. You may manually install Nextcloud AIO image but compatibility with Deployrr has not been tested.\\n\\nThis installation uses dedicated MariaDB and Redis containers for better isolation and easier management.\\n\\nDo you wish to proceed?",
+      "cancelable": true
+    }
+  },
+
+  "database": {
+    "type": "mariadb",
+    "containerSname": "nextcloud-mariadb",
+    "name": "nextcloud",
+    "user": "nextcloud_db_user",
+    "passwordVariable": "nextcloud_mariadb_password",
+    "host": "nextcloud-mariadb",
+    "port": 3306
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "NEXTCLOUD_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "NEXTCLOUD_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 8081,
+        "prompt": true,
+        "required": true,
+        "validation": { "type": "port", "min": 1, "max": 65535 }
+      },
+      {
+        "name": "NEXTCLOUD_SUBDOMAIN",
+        "description": "Subdomain for Nextcloud (used for trusted domains)",
+        "type": "string",
+        "default": "nextcloud",
+        "prompt": true,
+        "required": true
+      },
+      {
+        "name": "NEXTCLOUD_ADMIN_USER",
+        "description": "Nextcloud admin username (pick something unique, not admin/root)",
+        "type": "string",
+        "default": "",
+        "prompt": true,
+        "required": true
+      }
+    ],
+    "secrets": [
+      {
+        "name": "nextcloud_admin_password",
+        "description": "Nextcloud admin password",
+        "type": "random_with_prompt",
+        "length": 16,
+        "addToCompose": true
+      },
+      {
+        "name": "nextcloud_mariadb_root_password",
+        "type": "random",
+        "length": 32,
+        "addToCompose": true
+      },
+      {
+        "name": "nextcloud_mariadb_password",
+        "type": "random",
+        "length": 32,
+        "addToCompose": true
+      }
+    ]
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "info",
+        "text": "Admin login: \\Z5$NEXTCLOUD_ADMIN_USER\\Zn / \\Z5$NEXTCLOUD_ADMIN_PASSWORD\\Zn"
+      },
+      {
+        "type": "note",
+        "text": "Nextcloud uses dedicated containers: \\Z5nextcloud-mariadb\\Zn and \\Z5nextcloud-redis\\Zn. Credentials are stored in \\Z4$DOCKER_FOLDER/secrets/\\Zn."
+      },
+      {
+        "type": "note",
+        "text": "Data folder: \\Z4$NEXTCLOUD_FOLDER\\Zn - Files uploaded to Nextcloud are stored here."
+      },
+      {
+        "type": "note",
+        "text": "For Traefik users: Edit \\Z4$DOCKER_FOLDER/compose/$HOSTNAME/nextcloud.yml\\Zn to uncomment NEXTCLOUD_TRUSTED_DOMAINS and OVERWRITEHOST after setup."
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_nextcloud_status",
+    "successMessage": "Nextcloud Setup Completed",
+    "telemetryAction": "nextcloud"
+  }
+}

package/apps/official/nextcloud/nextcloud-mariadb.yml

@@ -0,0 +1,29 @@
+services:
+  # Nextcloud MariaDB - Dedicated Database for Nextcloud
+  nextcloud-mariadb:
+    container_name: nextcloud-mariadb
+    image: mariadb:${NEXTCLOUDMARIADB_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
+      start_period: 1m
+      start_interval: 10s
+      interval: 1m
+      timeout: 5s
+      retries: 3
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/nextcloud-mariadb:/var/lib/mysql
+    environment:
+      - MARIADB_ROOT_PASSWORD_FILE=/run/secrets/nextcloud_mariadb_root_password
+      - MARIADB_DATABASE=nextcloud
+      - MARIADB_USER=nextcloud_db_user
+      - MARIADB_PASSWORD_FILE=/run/secrets/nextcloud_mariadb_password
+    secrets:
+      - nextcloud_mariadb_root_password
+      - nextcloud_mariadb_password
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/nextcloud/nextcloud-redis.yml

@@ -0,0 +1,20 @@
+services:
+  # Nextcloud Redis - Dedicated Cache for Nextcloud
+  nextcloud-redis:
+    container_name: nextcloud-redis
+    image: redis:${NEXTCLOUDREDIS_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 3s
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/nextcloud-redis:/data
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/node-exporter/compose.yml

@@ -0,0 +1,23 @@
+services:
+  # Node Exporter - System Metrics to Prometheus
+  node-exporter:
+    container_name: node-exporter
+    image: prom/node-exporter:latest
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["monitoring", "all"]
+    networks:
+      - default
+    ports:
+      - "$NODEEXPORTER_PORT:9100"
+    volumes:
+      - /proc:/host/proc:ro
+      - /sys:/host/sys:ro
+      - /:/rootfs:ro
+    command: 
+      - '--path.procfs=/host/proc' 
+      - '--path.sysfs=/host/sys'
+      - --collector.filesystem.ignored-mount-points
+      - "^/(sys|proc|dev|host|etc|rootfs/var/lib/docker/containers|rootfs/var/lib/docker/overlay2|rootfs/run/docker/netns|rootfs/var/lib/docker/aufs)($$|/)"
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/node-exporter/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "node-exporter",
+    "pname": "Node Exporter",
+    "description": "Node Exporter is a Prometheus exporter for hardware and OS metrics exposed by *NIX kernels. It provides system-level metrics for monitoring with Prometheus.",
+    "descriptionShort": "System metrics to Prometheus",
+    "icon": "sh-prometheus",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["monitoring", "prometheus", "metrics"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["monitoring", "all"],
+    "networks": ["default"],
+    "webui": false,
+    "port": 9100,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": false,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "NODEEXPORTER_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "NODEEXPORTER_PORT",
+        "description": "Metrics port",
+        "type": "port",
+        "default": 9100,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_nodeexporter_status",
+    "successMessage": "Node Exporter Setup Completed",
+    "telemetryAction": "nodeexporter"
+  }
+}