@simplehomelab/deployrr 6.0.0-rc3

package/apps/official/traefik-access-log/manifest.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "traefik-access-log",
+    "pname": "Traefik Access Log for Dozzle",
+    "description": "A lightweight container that streams Traefik access logs, making them viewable in Dozzle for easy monitoring and debugging.",
+    "descriptionShort": "Traefik access log for Dozzle",
+    "icon": "sh-traefik",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["traefik", "logs", "monitoring", "dozzle"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": [],
+    "webui": false,
+    "port": null,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "traefik_production"],
+    "apps": []
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "note",
+        "text": "Traefik Access Logs should now be available on Dozzle."
+      }
+    ]
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": false,
+    "location": "local",
+    "showStats": false
+  },
+
+  "env": {
+    "variables": []
+  },
+
+  "status": {
+    "file": "06_traefikaccesslog_status",
+    "successMessage": "Traefik Access Log Setup Completed",
+    "telemetryAction": "traefikaccesslog"
+  }
+}

package/apps/official/traefik-certs-dumper/compose.yml

@@ -0,0 +1,18 @@
+services:
+  # Traefik Certs Dumper - Extract LetsEncrypt Certificates - Traefik2 Compatible
+  traefik-certs-dumper:
+    container_name: traefik-certs-dumper
+    image: ghcr.io/kereis/traefik-certs-dumper:latest
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    network_mode: none
+    # command: --restart-containers container1,container2,container3
+    volumes:
+      - $DOCKERDIR/appdata/traefik3/acme:/traefik:ro
+      - $DOCKERDIR/appdata/traefik-certs/$DOMAINNAME_1:/output:rw
+      # - /var/run/docker.sock:/var/run/docker.sock:ro # Only needed if restarting containers (use Docker Socket Proxy instead)
+    environment:
+      DOMAIN: $DOMAINNAME_1
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/traefik-certs-dumper/manifest.json

@@ -0,0 +1,56 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "traefik-certs-dumper",
+    "pname": "Traefik Certs Dumper",
+    "description": "Traefik Certs Dumper extracts LetsEncrypt certificates from Traefik's ACME storage and saves them as separate cert.pem and key.pem files for use with other applications.",
+    "descriptionShort": "Download SSL Certs from Traefik",
+    "icon": "sh-traefik",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["traefik", "ssl", "certificates", "letsencrypt"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": [],
+    "webui": false,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "note",
+        "text": "SSL Certificate files (cert.pem and key.pem) can be found here: $DOCKER_FOLDER/appdata/traefik-certs"
+      }
+    ]
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": false
+  },
+
+  "env": {
+    "variables": []
+  },
+
+  "status": {
+    "file": "06_traefikcertsdumper_status",
+    "successMessage": "Traefik Certs Dumper Setup Completed",
+    "telemetryAction": "traefik-certs-dumper"
+  }
+}

package/apps/official/traefik-error-log/compose.yml

@@ -0,0 +1,14 @@
+services:
+  # Traefik Error Log (traefik.log) for Dozzle
+  traefik-error-log:
+    container_name: traefik-error-log
+    image: alpine
+    volumes:
+      - $DOCKERDIR/logs/$HOSTNAME/traefik/traefik.log:/var/log/stream.log
+    command:
+      - tail
+      - -f
+      - /var/log/stream.log
+    network_mode: none
+    restart: unless-stopped
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/traefik-error-log/manifest.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "traefik-error-log",
+    "pname": "Traefik Error Log for Dozzle",
+    "description": "A lightweight container that streams Traefik error logs (traefik.log), making them viewable in Dozzle for easy monitoring and debugging.",
+    "descriptionShort": "Traefik error log for Dozzle",
+    "icon": "sh-traefik",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["traefik", "logs", "monitoring", "dozzle"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": [],
+    "webui": false,
+    "port": null,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "traefik_production"],
+    "apps": []
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "note",
+        "text": "Traefik Error Logs should now be available on Dozzle."
+      }
+    ]
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": false,
+    "location": "local",
+    "showStats": false
+  },
+
+  "env": {
+    "variables": []
+  },
+
+  "status": {
+    "file": "06_traefikerrorlog_status",
+    "successMessage": "Traefik Error Log Setup Completed",
+    "telemetryAction": "traefikerrorlog"
+  }
+}

package/apps/official/transmission/compose.yml

@@ -0,0 +1,33 @@
+services:
+  # Transmission - Torrent downloader
+  transmission:
+    image: lscr.io/linuxserver/transmission:latest
+    container_name: transmission
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "downloads", "all"]
+    networks:
+      - default
+    ports:
+      - "$TRANSMISSION_PORT:9091"
+      - "51413:51413"
+      - "51413:51413/udp"
+    volumes:
+      - $DOCKERDIR/appdata/transmission:/config
+      - $DOWNLOADSDIR/torrents:/data/downloads
+      - $DOWNLOADSDIR:/data/watch
+    environment:
+      - PUID=$PUID
+      - PGID=$PGID
+      - TZ=$TZ
+      - FILE__USER=/run/secrets/transmission_user
+      - FILE__PASS=/run/secrets/transmission_pass
+      # - TRANSMISSION_WEB_HOME= #optional
+      # - WHITELIST= #optional
+      # - PEERPORT= #optional
+      # - HOST_WHITELIST= #optional
+    secrets:
+      - transmission_user
+      - transmission_pass  
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/transmission/manifest.json

@@ -0,0 +1,90 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "transmission",
+    "pname": "Transmission",
+    "description": "Transmission is a fast, easy, and free BitTorrent client. It comes in several flavors: a native GUI client for Mac, GTK+, and Qt, as well as a daemon for headless use and a web UI.",
+    "descriptionShort": "Bittorrent client",
+    "icon": "sh-transmission",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["downloads", "torrent", "bittorrent"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "downloads", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 9091,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "downloads_folder", "appfolder_permission"],
+    "apps": []
+  },
+
+  "folders": {
+    "custom": [
+      {
+        "path": "$DOWNLOADSDIR/torrents",
+        "children": ["movies", "tv", "others", "indexes"],
+        "owner": "$USERNAME:$USERNAME",
+        "permissions": "755"
+      }
+    ]
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "TRANSMISSION_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "TRANSMISSION_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 9091,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ],
+    "secrets": [
+      {
+        "name": "transmission_user",
+        "description": "Transmission WebUI Username:",
+        "type": "prompt",
+        "addToCompose": true
+      },
+      {
+        "name": "transmission_pass",
+        "description": "Transmission WebUI Password:",
+        "type": "prompt_password",
+        "addToCompose": true
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_transmission_status",
+    "successMessage": "Transmission Setup Completed",
+    "telemetryAction": "transmission"
+  }
+}

package/apps/official/trilium/compose.yml

@@ -0,0 +1,19 @@
+services:
+  # Trilium - Personal Heirarchical Notes
+  trilium:
+    image: triliumnext/trilium:latest
+    container_name: trilium
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    ports:
+      - "$TRILIUM_PORT:8080"
+    volumes:
+      - $DOCKERDIR/appdata/trilium:/home/node/trilium-data
+    environment:
+      - TRILIUM_DATA_DIR=/home/node/trilium-data
+      - TZ=$TZ
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/trilium/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "trilium",
+    "pname": "Trilium",
+    "description": "Trilium is a hierarchical note-taking application with focus on building large personal knowledge bases. It supports rich text notes, images, files, code snippets, and more.",
+    "descriptionShort": "Personal Hierarchical Notes",
+    "icon": "sh-trilium-notes",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["notes", "wiki", "knowledge-base"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 8082,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "TRILIUM_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "TRILIUM_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 8082,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_trilium_status",
+    "successMessage": "Trilium Setup Completed",
+    "telemetryAction": "trilium"
+  }
+}

package/apps/official/uptime-kuma/compose.yml

@@ -0,0 +1,17 @@
+services:
+  # Uptime Kuma - Status Page & Monitoring Server
+  uptime-kuma:
+    image: louislam/uptime-kuma
+    container_name: uptime-kuma
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "monitoring", "all"]
+    networks:
+      - default
+      - socket_proxy
+    ports:
+      - "$UPTIMEKUMA_PORT:3001" 
+    volumes:
+      - $DOCKERDIR/appdata/uptime-kuma:/app/data
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/uptime-kuma/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "uptime-kuma",
+    "pname": "Uptime-Kuma",
+    "description": "Uptime Kuma is a fancy, self-hosted monitoring tool. It supports monitoring uptime for HTTP(s), TCP, HTTP(s) Keyword, Ping, DNS, and more with a beautiful status page.",
+    "descriptionShort": "Self-hosted monitoring tool",
+    "icon": "sh-uptime-kuma",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["monitoring", "uptime", "status"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["core", "monitoring", "all"],
+    "networks": ["default", "socket_proxy"],
+    "webui": true,
+    "port": 3001,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "UPTIMEKUMA_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "UPTIMEKUMA_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 3001,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_uptimekuma_status",
+    "successMessage": "Uptime-Kuma Setup Completed",
+    "telemetryAction": "uptimekuma"
+  }
+}

package/apps/official/vaultwarden/compose.yml

@@ -0,0 +1,20 @@
+services:
+  # Vaultwarden Password Manager
+  vaultwarden:
+    image: vaultwarden/server:latest
+    container_name: vaultwarden
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    ports:
+      - "$VAULTWARDEN_PORT:80"
+    environment:
+      # This is required to allow vaultwarden to verify the TLS certificate!
+      - DOMAIN=https://SUBDOMAIN-PLACEHOLDER.$DOMAINNAME_1
+      # - ADMIN_TOKEN=ADMIN-TOKEN-PLACEHOLDER
+    volumes:
+      - $DOCKERDIR/appdata/vaultwarden/data:/data
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/vaultwarden/files/pre-install.sh

@@ -0,0 +1,27 @@
+#!/bin/bash
+# Vaultwarden pre-install hook
+# Enables Admin WebUI by hashing the admin token with argon2 and updating compose.yml
+
+APP_COMPOSE_FILE="$DOCKER_FOLDER/compose/$HOSTNAME/vaultwarden.yml"
+
+f_print_substep "Hashing Vaultwarden admin token with argon2..."
+
+# Read the admin token secret
+ADMIN_TOKEN_RAW=$(sudo cat "$DOCKER_FOLDER/secrets/vaultwarden_admin_token")
+
+# Hash the token with argon2
+VAULTWARDEN_ADMIN_TOKEN=$(echo -n "$ADMIN_TOKEN_RAW" | argon2 "$(openssl rand -base64 32)" -e -id -k 65540 -t 3 -p 4)
+f_print_substep "Admin token created"
+
+# Uncomment ADMIN_TOKEN line in compose
+f_print_substep "Updating compose file: $APP_COMPOSE_FILE"
+sed -i 's|# - ADMIN_TOKEN=|- ADMIN_TOKEN=|' "$APP_COMPOSE_FILE"
+sleep 1
+
+# Replace placeholder with hashed token
+sed -i "s|ADMIN-TOKEN-PLACEHOLDER|$VAULTWARDEN_ADMIN_TOKEN|" "$APP_COMPOSE_FILE"
+sleep 1
+
+# Escape $ signs for Docker Compose (argon2 hash contains $ characters)
+sed -i '/.*ADMIN_TOKEN.*/s/\$/\$\$/g' "$APP_COMPOSE_FILE"
+f_print_substep "Admin token added to compose file"

package/apps/official/vaultwarden/manifest.json

@@ -0,0 +1,86 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "vaultwarden",
+    "pname": "Vaultwarden",
+    "description": "Vaultwarden is an unofficial Bitwarden-compatible server written in Rust, providing a lightweight self-hosted password manager.",
+    "descriptionShort": "Open-source password manager",
+    "icon": "sh-vaultwarden",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["security", "passwords", "web"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 8081,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "VAULTWARDEN_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 8081,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ],
+    "secrets": [
+      {
+        "name": "vaultwarden_admin_token",
+        "description": "Enter a password for Vaultwarden Admin (aka Admin Token):",
+        "type": "prompt_password",
+        "addToCompose": false
+      }
+    ]
+  },
+
+  "hooks": {
+    "preInstall": "files/pre-install.sh"
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "info",
+        "text": "For more information and tips, check out: https://www.simplehomelab.com/vaultwarden-docker-compose-guide/"
+      }
+    ]
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "VAULTWARDEN_PORT"
+  },
+
+  "status": {
+    "file": "06_vaultwarden_status",
+    "successMessage": "Vaultwarden Setup Completed",
+    "telemetryAction": "vaultwarden"
+  }
+}

package/apps/official/vikunja/compose.yml

@@ -0,0 +1,30 @@
+services:
+  # Vikunja - Task Management
+  vikunja:
+    image: vikunja/vikunja
+    container_name: vikunja
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    depends_on:
+      vikunja-mariadb:
+        condition: service_healthy
+    user: $PUID
+    ports:
+      - "$VIKUNJA_PORT:3456"
+    volumes:
+      - $DOCKERDIR/appdata/vikunja:/app/vikunja/files
+    environment:
+      - TZ=$TZ
+      - VIKUNJA_SERVICE_PUBLICURL=https://$VIKUNJA_SUBDOMAIN.$DOMAINNAME_1
+      - VIKUNJA_DATABASE_HOST=vikunja-mariadb
+      - VIKUNJA_DATABASE_PORT=3306
+      - VIKUNJA_DATABASE_TYPE=mysql
+      - VIKUNJA_DATABASE_DATABASE=vikunja
+      - VIKUNJA_DATABASE_USER=vikunja_db_user
+      - VIKUNJA_DATABASE_PASSWORD=$VIKUNJA_MARIADB_PASSWORD
+      - VIKUNJA_SERVICE_JWTSECRET=$VIKUNJA_JWT_SECRET
+    # DOCKER-LABELS-PLACEHOLDER