@simplehomelab/deployrr 6.0.0-rc3

package/apps/official/vikunja/manifest.json

@@ -0,0 +1,123 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "vikunja",
+    "pname": "Vikunja",
+    "description": "Vikunja is an open-source, self-hosted to-do app and task manager. Organize your tasks with lists, kanban boards, gantt charts, and more. Features team collaboration, reminders, and CalDAV support.",
+    "descriptionShort": "To-do app and task manager",
+    "icon": "sh-vikunja",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["productivity", "tasks", "todo", "kanban", "project-management"]
+  },
+
+  "deployment": {
+    "type": "multicontainer",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 3456,
+    "protocol": "http"
+  },
+
+  "dependencies": [
+    {
+      "sname": "vikunja-mariadb",
+      "pname": "Vikunja MariaDB",
+      "compose": "vikunja-mariadb.yml",
+      "installOrder": 1,
+      "waitForHealthy": true,
+      "required": true,
+      "description": "Dedicated MariaDB database for Vikunja"
+    }
+  ],
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "database": {
+    "type": "mariadb",
+    "containerSname": "vikunja-mariadb",
+    "name": "vikunja",
+    "user": "vikunja_db_user",
+    "passwordVariable": "VIKUNJA_MARIADB_PASSWORD",
+    "host": "vikunja-mariadb",
+    "port": 3306
+  },
+
+  "folders": {
+    "permissions": {
+      "appdata": "$PUID:$PGID"
+    }
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "VIKUNJA_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "VIKUNJA_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 3456,
+        "prompt": true,
+        "required": true,
+        "validation": { "type": "port", "min": 1, "max": 65535 }
+      },
+      {
+        "name": "VIKUNJA_JWT_SECRET",
+        "description": "JWT secret for authentication (auto-generated)",
+        "type": "string",
+        "generate": "openssl_rand_base64_64",
+        "prompt": false,
+        "required": true
+      },
+      {
+        "name": "VIKUNJA_SUBDOMAIN",
+        "description": "Subdomain for Vikunja (used for public URL)",
+        "type": "string",
+        "default": "vikunja",
+        "prompt": true,
+        "required": true
+      },
+      {
+        "name": "VIKUNJA_MARIADB_PASSWORD",
+        "description": "MariaDB database password (auto-generated)",
+        "type": "password",
+        "generate": "random",
+        "length": 32,
+        "prompt": false,
+        "required": true
+      }
+    ]
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "note",
+        "text": "Vikunja uses a dedicated MariaDB database (\\Z5vikunja-mariadb\\Zn). Database credentials are stored in \\Z4$DOCKER_FOLDER/.env\\Zn."
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_vikunja_status",
+    "successMessage": "Vikunja Setup Completed",
+    "telemetryAction": "vikunja"
+  }
+}

package/apps/official/vikunja/vikunja-mariadb.yml

@@ -0,0 +1,26 @@
+services:
+  # Vikunja MariaDB - Dedicated Database for Vikunja
+  vikunja-mariadb:
+    container_name: vikunja-mariadb
+    image: mariadb:latest
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
+      start_period: 1m
+      start_interval: 10s
+      interval: 1m
+      timeout: 5s
+      retries: 3
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/vikunja-mariadb:/var/lib/mysql
+    environment:
+      - MARIADB_DATABASE=vikunja
+      - MARIADB_USER=vikunja_db_user
+      - MARIADB_PASSWORD=$VIKUNJA_MARIADB_PASSWORD
+      - MARIADB_ROOT_PASSWORD=$VIKUNJA_MARIADB_PASSWORD
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/viniplay/compose.yml

@@ -0,0 +1,18 @@
+services:
+  # Viniplay - Self-hosted IPTV Player
+  viniplay:
+    image: ardovini/viniplay:latest
+    container_name: viniplay
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    ports:
+      - $VINIPLAY_PORT:8998
+    volumes:
+      - $DOCKERDIR/appdata/viniplay/data:/data
+    env_file:
+      - $DOCKERDIR/appdata/viniplay/.env
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/viniplay/files/pre-install.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+# Pre-install script for Viniplay
+# Generates a random SESSION_SECRET and writes it to appdata/.env
+
+VINIPLAY_SECRET_KEY=$(tr -cd '[:alnum:]' </dev/urandom | fold -w "32" | head -n 1 | tr -d '\n')
+sudo mkdir -p "$DOCKER_FOLDER/appdata/viniplay"
+sudo chown -R "$USERNAME":"$USERNAME" "$DOCKER_FOLDER/appdata/viniplay"
+echo "SESSION_SECRET=$VINIPLAY_SECRET_KEY" | sudo tee "$DOCKER_FOLDER/appdata/viniplay/.env" >/dev/null
+sudo chmod 644 "$DOCKER_FOLDER/appdata/viniplay/.env"

package/apps/official/viniplay/manifest.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "viniplay",
+    "pname": "Viniplay",
+    "description": "Viniplay is a self-hosted IPTV player for streaming live TV channels.",
+    "descriptionShort": "Self-hosted IPTV Player",
+    "icon": "mdi-play-box",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["media", "iptv", "streaming"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 8998,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "hooks": {
+    "preInstall": "files/pre-install.sh"
+  },
+
+  "traefik": { "supported": true },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "VINIPLAY_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "VINIPLAY_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 8998,
+        "prompt": true,
+        "required": true,
+        "validation": { "type": "port", "min": 1, "max": 65535 }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_viniplay_status",
+    "successMessage": "Viniplay Setup Completed",
+    "telemetryAction": "viniplay"
+  }
+}

package/apps/official/vscode/compose.yml

@@ -0,0 +1,28 @@
+services:
+  # VSCode - VSCode Editing
+  vscode:
+    image: lscr.io/linuxserver/code-server:latest
+    container_name: vscode
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "all"]
+    networks:
+      - default
+    ports:
+      - "$VSCODE_PORT:8443"
+    volumes:
+      - $DOCKERDIR/appdata/vscode:/config
+      - $USERDIR:/data/$PRIMARY_USERNAME
+    environment:
+      - TZ=$TZ
+      - PUID=$PUID
+      - PGID=$PGID
+      # - DOCKER_HOST
+      # - PASSWORD=$VSCODE_PASSWORD
+      # - HASHED_PASSWORD= #optional
+      # - SUDO_PASSWORD= password #optional
+      # - SUDO_PASSWORD_HASH= #optional
+      # - PROXY_DOMAIN= code-server.my.domain #optional
+      # - DEFAULT_WORKSPACE=/config/data/User/Workspaces/Default.code-workspace #optional
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/vscode/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "vscode",
+    "pname": "VS Code",
+    "description": "VS Code Server is a Visual Studio Code-based IDE that runs in a browser. It provides a full-featured code editor with extensions, IntelliSense, and debugging capabilities.",
+    "descriptionShort": "Visual Studio code server",
+    "icon": "sh-visual-studio-code",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["development", "editor", "ide"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["core", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 8443,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "VSCODE_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "VSCODE_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 8443,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_vscode_status",
+    "successMessage": "VS Code Setup Completed",
+    "telemetryAction": "vscode"
+  }
+}

package/apps/official/wallos/compose.yml

@@ -0,0 +1,19 @@
+services:
+  # Wallos - Open-source Subscription Tracker
+  wallos:
+    container_name: wallos
+    image: bellamy/wallos:latest
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks: 
+      - default
+    ports:
+      - "$WALLOS_PORT:80"
+    volumes:
+      - '$DOCKERDIR/appdata/wallos/db:/var/www/html/db'
+      - '$DOCKERDIR/appdata/wallos/logos:/var/www/html/images/uploads/logos'
+    environment:
+      TZ: $TZ
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/wallos/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "wallos",
+    "pname": "Wallos",
+    "description": "Wallos is an open-source, self-hosted web application designed to help you manage your subscriptions and track recurring expenses. It features a clean UI and notification support.",
+    "descriptionShort": "Open-source Subscription Tracker",
+    "icon": "sh-wallos",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["finance", "subscriptions", "tracking"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 82,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "WALLOS_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "WALLOS_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 82,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_wallos_status",
+    "successMessage": "Wallos Setup Completed",
+    "telemetryAction": "wallos"
+  }
+}

package/apps/official/weaviate/compose.yml

@@ -0,0 +1,28 @@
+services:
+  # Weaviate - Vector Database
+  weaviate:
+    image: cr.weaviate.io/semitechnologies/weaviate:latest
+    container_name: weaviate
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    ports:
+     - "$WEAVIATE_PORT:8080"  # REST calls
+     - "50051:50051"  # gRPC calls
+    command:
+    - --host
+    - 0.0.0.0
+    - --port
+    - '8080'
+    - --scheme
+    - http
+    volumes:
+    - $DOCKERDIR/appdata/weaviate:/var/lib/weaviate
+    environment:
+      QUERY_DEFAULTS_LIMIT: 25
+      AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: 'true' # Not secure but OK for local use
+      PERSISTENCE_DATA_PATH: '/var/lib/weaviate'
+      ENABLE_API_BASED_MODULES: 'true'
+      CLUSTER_HOSTNAME: 'node1'
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/weaviate/manifest.json

@@ -0,0 +1,82 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "weaviate",
+    "pname": "Weaviate",
+    "description": "Weaviate is an open-source vector database that stores both objects and vectors, allowing for combining vector search with structured filtering.",
+    "descriptionShort": "Vector Database",
+    "icon": "sh-weaviate",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["database", "vector", "ai", "search"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": false,
+    "port": 8083,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "preInstall": {
+    "dialog": {
+      "type": "info",
+      "title": "Weaviate Security",
+      "message": "\\n\\Z1NOTE!\\Zn\\n\\nFor simplicity Weaviate will be setup with AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED set to false (default). This is safe as long as you do not manually expose Weaviate port to the internet."
+    }
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "note",
+        "text": "$APP_PNAME does not have a WebUI. Use $WEAVIATE_PORT for REST calls and 50051 for gRPC calls."
+      }
+    ]
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "WEAVIATE_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "WEAVIATE_PORT",
+        "description": "REST API port",
+        "type": "port",
+        "default": 8083,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_weaviate_status",
+    "successMessage": "Weaviate Setup Completed",
+    "telemetryAction": "weaviate"
+  }
+}

package/apps/official/wg-easy/compose.yml

@@ -0,0 +1,31 @@
+services:
+  # WG-EASY - WireGuard Easy VPN Server
+  wg-easy:
+    image: ghcr.io/wg-easy/wg-easy
+    container_name: wg-easy
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    sysctls:
+      - net.ipv4.ip_forward=1
+      - net.ipv4.conf.all.src_valid_mark=1
+    ports:
+      - "51820:51820/udp"
+      - "$WGEASY_PORT:51821/tcp"
+    volumes:
+      - $DOCKERDIR/appdata/wireguard:/etc/wireguard
+    environment:
+      - WG_HOST=$HOSTNAME.$DOMAINNAME_1
+      - PASSWORD_HASH=WG-EASY-PASSWORD-HASH-PLACEHOLDER
+      - WG_DEFAULT_ADDRESS=$WGEASY_DEFAULT_ADDRESS
+      - WG_DEFAULT_DNS=$WGEASY_DEFAULT_DNS
+      - WG_ALLOWED_IPS=$WGEASY_ALLOWED_IPS
+      - UI_TRAFFIC_STATS=true
+      - UI_CHART_TYPE=3
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/wg-easy/files/post-install.sh

@@ -0,0 +1,32 @@
+#!/bin/bash
+# WG-Easy post-install hook
+# Hashes password with bcrypt and updates compose file
+
+APP_SNAME="wg-easy"
+APP_PNAME="WG-Easy"
+APP_COMPOSE_FILE="$DOCKER_FOLDER/compose/$HOSTNAME/$APP_SNAME.yml"
+
+f_print_step "1/3" "Reading $APP_PNAME password from secrets..."
+WGEASY_PASSWORD=$(sudo cat "$DOCKER_FOLDER/secrets/wgeasy_password")
+echo
+
+f_print_step "2/3" "Hashing password with bcrypt..."
+# Hash password using htpasswd (bcrypt with cost 10)
+WGEASY_PASSWORD_HASH=$(htpasswd -bnBC 10 "" "$WGEASY_PASSWORD" | tr -d ':\n')
+f_print_substep "Password hashed successfully"
+echo
+
+f_print_step "3/3" "Updating compose file with password hash..."
+# Replace placeholder with hashed password
+sudo sed -i "s|WG-EASY-PASSWORD-HASH-PLACEHOLDER|$WGEASY_PASSWORD_HASH|g" "$APP_COMPOSE_FILE"
+# Escape $ signs for Docker Compose (bcrypt hashes contain $ characters)
+if ! grep -q 'PASSWORD_HASH=\$\$' "$APP_COMPOSE_FILE"; then
+    f_print_substep "Escaping special characters in password hash"
+    sudo sed -i '/.*PASSWORD_HASH.*/s/\$/\$\$/g' "$APP_COMPOSE_FILE"
+fi
+echo
+
+f_print_step "4/4" "Recreating $APP_PNAME container with hashed password..."
+f_docker_compose_recreate "$APP_SNAME" "06"
+
+f_print_success "$APP_PNAME password configuration complete"