@simplehomelab/deployrr 6.0.0-rc3

package/apps/core/crowdsec/files/custom-whitelists.yaml

@@ -0,0 +1,13 @@
+name: crowdsecurity/whitelists
+description: "Whitelist events from own/known IP addresses"
+whitelist:
+  reason: "Trusted IPs"
+  ip:
+    - "WAN-IP-PLACEHOLDER" # WAN IP
+    - "127.0.0.1" # Local Host
+  cidr:
+    - "192.168.0.0/16" # Local IPs
+    - "10.0.0.0/8" # Local IPs
+    - "172.16.0.0/12" # Local/Docker IPs
+    - "fe80::/10" # Local IPs
+    - "fc00::/7" # Local IPs

package/apps/core/crowdsec/manifest.json

@@ -0,0 +1,87 @@
+{
+  "$schema": "../../../manifest-schema.json",
+  "version": "1.1",
+
+  "app": {
+    "sname": "crowdsec",
+    "pname": "CrowdSec",
+    "descriptionShort": "Collaborative IPS",
+    "icon": "sh-crowdsec",
+    "category": "core"
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "webui": false,
+    "port": 8080,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "files": [
+    {
+      "source": "files/acquis.yaml",
+      "destination": "$DOCKER_FOLDER/appdata/crowdsec/config/acquis.yaml",
+      "backup": false
+    },
+    {
+      "source": "files/acquis-traefik.yaml",
+      "destination": "$DOCKER_FOLDER/appdata/crowdsec/config/acquis.d/acquis-traefik.yaml",
+      "backup": false,
+      "condition": "traefik_logs_exist"
+    },
+    {
+      "source": "files/custom-whitelists.yaml",
+      "destination": "$DOCKER_FOLDER/appdata/crowdsec/config/parsers/s02-enrich/custom-whitelists.yaml",
+      "backup": false
+    }
+  ],
+
+  "placeholders": {
+    "config": {
+      "HOSTNAME-PLACEHOLDER": "$HOSTNAME",
+      "WAN-IP-PLACEHOLDER": "$PUBLIC_WAN_IP"
+    }
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "other",
+    "showStats": true,
+    "portVariable": null
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "CROWDSEC_PORT",
+        "type": "port",
+        "default": "8080",
+        "prompt": true,
+        "required": true
+      }
+    ],
+    "secrets": [
+      {
+        "name": "crowdsec_console_enroll_context",
+        "type": "optional",
+        "description": "CrowdSec Console enrollment context key"
+      }
+    ]
+  },
+
+  "status": {
+    "file": "05_crowdsec_status",
+    "successMessage": "CrowdSec Setup Completed",
+    "telemetryAction": "crowdsec"
+  }
+}

package/apps/core/crowdsec-firewall-bouncer/manifest.json

@@ -0,0 +1,85 @@
+{
+  "$schema": "../../../manifest-schema.json",
+  "version": "1.1",
+
+  "app": {
+    "sname": "crowdsec-firewall-bouncer",
+    "pname": "CrowdSec Firewall Bouncer",
+    "description": "CrowdSec Firewall Bouncer is a systemd service that interfaces with your system's firewall (iptables/nftables) to block malicious IPs identified by CrowdSec. It provides host-level protection by blocking traffic at the firewall layer.",
+    "descriptionShort": "Firewall Bouncer for CrowdSec (non-Docker)",
+    "icon": "sh-crowdsec",
+    "category": "core",
+    "menuNumber": "05",
+    "tags": ["security", "firewall", "crowdsec", "system-app"]
+  },
+
+  "deployment": {
+    "type": "system",
+    "compose": null,
+    "profiles": [],
+    "networks": [],
+    "webui": false,
+    "port": null,
+    "protocol": null
+  },
+
+  "system": {
+    "package": "crowdsec-firewall-bouncer",
+    "service": "crowdsec-firewall-bouncer",
+    "configFile": "/etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml",
+    "installCommand": "apt install -y --no-install-recommends crowdsec-firewall-bouncer",
+    "removeCommand": "apt remove -y crowdsec-firewall-bouncer",
+    "enableCommand": "systemctl enable crowdsec-firewall-bouncer",
+    "disableCommand": "systemctl disable crowdsec-firewall-bouncer",
+    "startCommand": "systemctl start crowdsec-firewall-bouncer",
+    "stopCommand": "systemctl stop crowdsec-firewall-bouncer"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "crowdsec_running"],
+    "apps": ["crowdsec"],
+    "license": "pro"
+  },
+
+  "files": [
+    {
+      "source": "../crowdsec/files/crowdsec-firewall-bouncer.yaml",
+      "destination": "/etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml",
+      "backup": false
+    }
+  ],
+
+  "placeholders": {
+    "config": {
+      "CROWDSEC-PORT-PLACEHOLDER": "$CROWDSEC_PORT",
+      "CROWDSEC-API-KEY-PLACEHOLDER": "$CROWDSEC_FIREWALL_BOUNCER_API_KEY"
+    }
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "other",
+    "showStats": false,
+    "note": "No web UI - appears in Others column on dashboard"
+  },
+
+  "status": {
+    "file": "05_crowdsec-firewall-bouncer_status",
+    "successMessage": "Firewall Bouncer Setup Completed",
+    "telemetryAction": "firewall-bouncer"
+  },
+
+  "postInstall": {
+    "commands": [
+      "cscli bouncers add firewall-bouncer-$HOSTNAME"
+    ],
+    "tips": [
+      "Monitor Firewall Bouncer logs with: sudo tail -f /var/log/crowdsec-firewall-bouncer.log",
+      "When an IP is blocked, you will see [CSFB_BLOCK] in the logs"
+    ]
+  }
+}

package/apps/core/deployrr/jokes_and_tips.txt

@@ -0,0 +1,58 @@
+# Deployrr Waiting Messages - Jokes and Tips
+# One message per line. Empty lines and lines starting with # are ignored.
+# Feel free to contribute! Submit a PR with your additions.
+
+# Knock-knock jokes
+Knock Knock! Who's there? Compose. Compose who? Compose yourself, Deployrr is still working!
+Knock Knock! Who's there? Container. Container who? Container your excitement, Deployrr is almost done!
+Knock Knock! Who's there? Service. Service who? Service yourself a cup of coffee, Deployrr is still working!
+Knock knock! Who's there? Ping. Ping who? Ping me back - I think my network's down!
+Knock knock! Who's there? Backup. Backup who? Backup your data before you regret it!
+Knock knock! Who's there? Sudo. Sudo who? Sudo open this door right now, or I'll escalate privileges!
+Knock knock! Who's there? SSH. SSH who? SSH me when you get in - securely, of course!
+
+# Dad jokes
+Patience, young grasshopper. The digital cogs are turning in Deployrr
+Just a moment, while the internet hamsters power up Deployrr
+Hold your horses! The electrons are sprinting through Deployrr
+Deployrr is thinking... or maybe it's just daydreaming
+It's like watching paint dry, but with Deployrr pixels
+Hang tight, Deployrr is still cooking
+What do you call a lazy Homelab admin? A Deployee
+What do you call a Homelab admin who's always calm and collected? A Deployrr user
+Deployrr is having a moment, a very long moment
+Deployrr is taking a scenic route to the finish line
+The computer's pondering the universe, one Deployrr byte at a time
+What's a sysadmin's favorite drink? Root beer
+Deployrr is playing a game of cat and mouse with itself
+Deployrr is taking a coffee break, but it's a very long coffee break
+Deployrr is doing the digital equivalent of a crossword puzzle
+I tried to meditate, but my mind kept wandering to my Homelab. I guess you could say I'm serverly stressed
+Deployrr is taking a detour through the land of infinite loops
+
+# Docker jokes
+Why did the container break up with the VM? It wanted less overhead in the relationship
+My Docker container and I have a lot in common - we both need isolation to function properly
+Docker containers are like introverts - they work best in isolation
+Why don't containers ever get invited to parties? They prefer to stay isolated
+
+# Sysadmin humor
+There are only 10 types of people: those who understand binary and those who don't
+A SQL query walks into a bar, walks up to two tables and asks... may I join you?
+I'm not lazy, I'm just in power-saving mode
+My code doesn't have bugs, it has random features
+Why do programmers prefer dark mode? Because light attracts bugs
+
+# Homelab tips (useful info!)
+[TIP] Remember to backup your Docker volumes regularly
+[TIP] Consider using Dockwatch or WUD (What's Up Docker) for automatic container updates
+[TIP] Always check container logs when troubleshooting issues
+[TIP] Document your homelab setup - future you will thank you
+[TIP] Join the Deployrr Discord community for help and ideas
+
+# More waiting messages
+Still working on it... Rome wasn't built in a day, and neither is a perfect homelab
+Good things come to those who wait... especially valid SSL certificates
+Certificates are like fine wine - they take time to mature
+Meanwhile, somewhere in the cloud, electrons are dancing to make this happen
+Trust the process - your homelab is about to level up

package/apps/core/deployrr-dashboard/compose.yml

@@ -0,0 +1,23 @@
+services:
+  # Deployrr Dashboard - Homepage based Dashboard for Deployrr
+  deployrr-dashboard:
+    image: ghcr.io/gethomepage/homepage:${DEPLOYRRDASHBOARD_VERSION_PIN}
+    container_name: deployrr-dashboard
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "all"]
+    networks:
+      - default
+      - socket_proxy
+    ports:
+      - "$DEPLOYRRDASHBOARD_PORT:3000" 
+    volumes:
+      - $DOCKERDIR/appdata/deployrr-dashboard/config:/app/config
+      - $DOCKERDIR/appdata/deployrr-dashboard/images:/app/public/images
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+      HOMEPAGE_ALLOWED_HOSTS: "*"
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/core/deployrr-dashboard/files/bookmarks.yaml

@@ -0,0 +1,51 @@
+---
+# For configuration options and examples, please see:
+# https://gethomepage.dev/configs/bookmarks/
+
+- Links:
+    - Website:
+        - icon: mdi-web
+          href: https://www.simplehomelab.com/
+          description: "www.simplehomelab.com"
+    - Youtube Channel:
+        - icon: si-youtube
+          href: https://www.youtube.com/@Simple-Homelab
+          description: "@Simple-Homelab"
+    - Docker-Traefik Repo:
+        - icon: si-github
+          href: https://github.com/SimpleHomelab/Docker-Traefik
+          description: "https://github.com/SimpleHomelab/Docker-Traefik"
+    - Discord Server:
+        - icon: si-discord
+          href: https://discord.gg/wtmqgd4GpX
+          description: "https://www.simplehomelab.com/discord"
+- Deployrr:
+    - Website:
+        - icon: mdi-application-brackets
+          href: https://www.deployrr.app/
+          descripton: "www.deployrr.app"
+    - Documentation:
+        - icon: mdi-text-box-multiple-outline
+          href: https://docs.deployrr.app/
+          descripton: "docs.deployrr.app"
+    - Your Account:
+        - icon: mdi-account-box
+          href: https://www.simplehomelab.com/login/?redirect_to=https%3A%2F%2Fwww.simplehomelab.com%2Fgeek-army%2F
+          description: "https://www.simplehomelab.com/login"
+    - Deployrr GitHub:
+        - icon: si-github
+          href: https://github.com/SimpleHomelab/Deployrr
+          description: "https://github.com/SimpleHomelab/Deployrr"
+- Support My Work:
+    - Join the Geek Army:
+        - icon: mdi-wallet-membership
+          href: https://www.simplehomelab.com/geek-army/join/
+          description: "https://www.simplehomelab.com/geek-army/join"
+    - BuyMeACoffee:
+        - icon: si-buymeacoffee
+          href: https://www.buymeacoffee.com/SimpleHomelab
+          description: "https://www.buymeacoffee.com/SimpleHomelab"
+    - Ko-Fi:
+        - icon: si-kofi
+          href: https://ko-fi.com/SimpleHomelab
+          description: "https://ko-fi.com/SimpleHomelab"

package/apps/core/deployrr-dashboard/files/docker.yaml

@@ -0,0 +1,10 @@
+---
+# For configuration options and examples, please see:
+# https://gethomepage.dev/configs/docker/
+
+DOCKER-HOSTNAME-PLACEHOLDER:
+  host: socket-proxy
+  port: 2375
+
+# my-docker:
+#   socket: /var/run/docker.sock

package/apps/core/deployrr-dashboard/files/service-template-other.yaml

@@ -0,0 +1,10 @@
+    # SERVICE-NAME-START-PLACEHOLDER
+    - SERVICE-NAME-PLACEHOLDER:
+        href: SERVICE-URL-PLACEHOLDER
+        description: SERVICE-DESCRIPTION-PLACEHOLDER
+        icon: SERVICE-ICON-PLACEHOLDER
+        server: DOCKER-HOSTNAME-PLACEHOLDER
+        container: CONTAINER-NAME-PLACEHOLDER
+        showStats: false
+    # SERVICE-NAME-END-PLACEHOLDER
+# OTHER-APPS-PLACEHOLDER

package/apps/core/deployrr-dashboard/files/service-template-web-local.yaml

@@ -0,0 +1,10 @@
+    # SERVICE-NAME-START-PLACEHOLDER
+    - SERVICE-NAME-PLACEHOLDER:
+        href: SERVICE-URL-PLACEHOLDER
+        description: SERVICE-DESCRIPTION-PLACEHOLDER
+        icon: SERVICE-ICON-PLACEHOLDER
+        server: DOCKER-HOSTNAME-PLACEHOLDER
+        container: CONTAINER-NAME-PLACEHOLDER
+        showStats: false
+    # SERVICE-NAME-END-PLACEHOLDER
+# WEB-APPS-LOCAL-PLACEHOLDER

package/apps/core/deployrr-dashboard/files/service-template-web-remote.yaml

@@ -0,0 +1,10 @@
+    # SERVICE-NAME-START-PLACEHOLDER
+    - SERVICE-NAME-PLACEHOLDER:
+        href: SERVICE-URL-PLACEHOLDER
+        description: SERVICE-DESCRIPTION-PLACEHOLDER
+        icon: SERVICE-ICON-PLACEHOLDER
+        server: DOCKER-HOSTNAME-PLACEHOLDER
+        container: CONTAINER-NAME-PLACEHOLDER
+        showStats: false
+    # SERVICE-NAME-END-PLACEHOLDER
+# WEB-APPS-REMOTE-PLACEHOLDER

package/apps/core/deployrr-dashboard/files/services.yaml

@@ -0,0 +1,18 @@
+---
+# For configuration options and examples, please see:
+# https://gethomepage.dev/configs/services/
+
+- Apps (Local):
+    - Links to Local Apps:
+        description: ""
+# WEB-APPS-LOCAL-PLACEHOLDER
+
+- Apps (Remote):
+    - Links to Remote Apps:
+        description: ""
+# WEB-APPS-REMOTE-PLACEHOLDER
+
+- Apps (Others):
+    - Core / Non-Web Apps:
+        description: ""
+# OTHER-APPS-PLACEHOLDER

package/apps/core/deployrr-dashboard/files/settings.yaml

@@ -0,0 +1,13 @@
+---
+# For configuration options and examples, please see:
+# https://gethomepage.dev/configs/settings/
+
+title: Deployrr Dashboard
+theme: dark
+color: slate
+headerStyle: boxed
+hideErrors: true
+favicon: /images/deployrr_icon.ico
+providers:
+  openweathermap: openweathermapapikey
+  weatherapi: weatherapiapikey

package/apps/core/deployrr-dashboard/files/widgets.yaml

@@ -0,0 +1,20 @@
+---
+# For configuration options and examples, please see:
+# https://gethomepage.dev/widgets/
+
+- logo:
+    icon: /images/deployrr_icon.png
+
+- greeting:
+    text_size: xl
+    text: Deployrr Dashboard
+
+- resources:
+    cpu: true
+    memory: true
+    disk: /
+
+- search:
+    provider: duckduckgo
+    target: _blank
+

package/apps/core/deployrr-dashboard/manifest.json

@@ -0,0 +1,133 @@
+{
+  "$schema": "../../../manifest-schema.json",
+  "version": "1.1",
+  "app": {
+    "sname": "deployrr-dashboard",
+    "pname": "Deployrr Dashboard",
+    "description": "Auto-populating Dashboard for Deployrr Apps",
+    "descriptionShort": "Auto-populating Dashboard",
+    "icon": "sh-deployrr",
+    "category": "core",
+    "menuNumber": "03"
+  },
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": [
+      "apps",
+      "all"
+    ],
+    "networks": [
+      "default",
+      "socket_proxy"
+    ],
+    "webui": true,
+    "port": 3050,
+    "protocol": "http"
+  },
+  "requirements": {
+    "prerequisites": [
+      "prerequisites",
+      "folder_permission"
+    ],
+    "apps": [
+      "socket-proxy"
+    ],
+    "systemType": []
+  },
+  "folders": {
+    "permissions": {
+      "appdata": "$USERNAME:$USERNAME",
+      "fixAfterStart": true
+    }
+  },
+  "files": [
+    {
+      "source": "files/bookmarks.yaml",
+      "dest": "appdata/{sname}/config/bookmarks.yaml",
+      "placeholders": {}
+    },
+    {
+      "source": "files/docker.yaml",
+      "dest": "appdata/{sname}/config/docker.yaml",
+      "placeholders": {
+        "DOCKER-HOSTNAME-PLACEHOLDER": "{hostname}-Docker"
+      }
+    },
+    {
+      "source": "files/services.yaml",
+      "dest": "appdata/{sname}/config/services.yaml",
+      "placeholders": {}
+    },
+    {
+      "source": "files/settings.yaml",
+      "dest": "appdata/{sname}/config/settings.yaml",
+      "placeholders": {}
+    },
+    {
+      "source": "files/widgets.yaml",
+      "dest": "appdata/{sname}/config/widgets.yaml",
+      "placeholders": {}
+    },
+    {
+      "source": "files/deployrr_icon.ico",
+      "dest": "appdata/{sname}/images/deployrr_icon.ico",
+      "placeholders": {}
+    },
+    {
+      "source": "files/deployrr_icon.png",
+      "dest": "appdata/{sname}/images/deployrr_icon.png",
+      "placeholders": {}
+    }
+  ],
+  "traefik": {
+    "supported": true,
+    "subdomain": "deployrr"
+  },
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "DEPLOYRRDASHBOARD_PORT"
+  },
+  "hooks": {
+    "preInstall": null,
+    "postInstall": null,
+    "preUninstall": null,
+    "postUninstall": null
+  },
+  "env": {
+    "variables": [
+      {
+        "name": "DEPLOYRRDASHBOARD_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 3050,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1024,
+          "max": 65535
+        }
+      },
+      {
+        "name": "DEPLOYRRDASHBOARD_VERSION_PIN",
+        "description": "Docker image version",
+        "type": "string",
+        "default": "latest",
+        "prompt": false,
+        "required": false
+      }
+    ],
+    "secrets": []
+  },
+  "firewall": {
+    "rules": []
+  },
+  "status": {
+    "file": "03_deployrr-dashboard_status",
+    "successMessage": "Deployrr Dashboard Setup Completed",
+    "telemetryAction": "deployrr-dashboard"
+  }
+}

package/apps/core/npm/compose.yml

@@ -0,0 +1,40 @@
+services:
+  # Nginx Proxy Manager - Reverse Proxy with SSL Management
+  npm:
+    image: jc21/nginx-proxy-manager:latest
+    container_name: npm
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    ports:
+      - "80:80"
+      - "443:443"
+      - "$NPM_ADMIN_PORT:81"
+    volumes:
+      - $DOCKERDIR/appdata/npm/data:/data
+      - $DOCKERDIR/appdata/npm/letsencrypt:/etc/letsencrypt
+      # Custom Nginx Configuration (optional)
+      # - $DOCKERDIR/appdata/npm/custom:/data/nginx/custom
+      # Log Rotation Configuration (optional)
+      # - $DOCKERDIR/appdata/npm/logrotate:/etc/logrotate.d/nginx-proxy-manager
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+      # SQLite Database (default - no additional config needed)
+      # DB_SQLITE_FILE: "/data/database.sqlite"
+      # Network & Security
+      DISABLE_IPV6: "true"
+      X_FRAME_OPTIONS: "deny"
+      # CloudFront/Cloudflare IP Range Fetching (optional)
+      # IP_RANGES_FETCH_ENABLED: "true"
+    healthcheck:
+      test: ["CMD", "/usr/bin/check-health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/core/npm/manifest.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "../../../manifest-schema.json",
+  "version": "1.1",
+
+  "app": {
+    "sname": "npm",
+    "pname": "Nginx Proxy Manager",
+    "descriptionShort": "Reverse Proxy with SSL",
+    "icon": "sh-nginx-proxy-manager",
+    "category": "core"
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "webui": true,
+    "port": 81,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "hybrid_mode"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "other",
+    "showStats": true,
+    "portVariable": "NPM_ADMIN_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "NPM_ADMIN_PORT",
+        "description": "Admin web interface port",
+        "type": "port",
+        "default": 81,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "03_npm_status",
+    "successMessage": "Nginx Proxy Manager Setup Completed",
+    "telemetryAction": "npm"
+  }
+}