我的 Self-hosting 记录

1
# The Caddyfile is an easy way to configure your Caddy web server.
2
#
3
# Unless the file starts with a global options block, the first
4
# uncommented line is always the address of your site.
5
#
6
# To use your own domain name (with automatic HTTPS), first make
7
# sure your domain's A/AAAA DNS records are properly pointed to
8
# this machine's public IP, then replace ":80" below with your
9
# domain name.
10
{
11
  servers {
12
    metrics
13
  }
14
}
15

16
:2019 {
17
  metrics /metrics
18
}
19

20
:80 {
21
  # Set this path to your site's directory.
22
  root * /usr/share/caddy
23

24
  # Enable the static file server.
25
  file_server
26

27
  # Another common task is to set up a reverse proxy:
28
  # reverse_proxy localhost:8080
29

30
  # Or serve a PHP site through php-fpm:
31
  # php_fastcgi localhost:9000
32
}
33

34
alist.lkwplus.com {
35
  reverse_proxy 127.0.0.1:5244
36
}
37
# Refer to the Caddy docs for more information:
38
# https://caddyserver.com/docs/caddyfile

1
services:
2
  sabnzbd:
3
    image: lscr.io/linuxserver/sabnzbd:latest
4
    container_name: sabnzbd
5
    environment:
6
      - PUID=1000
7
      - PGID=1000
8
      - TZ=Asia/Shanghai
9
    volumes:
10
      - /opt/sabnzbd/config:/config
11
      - /opt/sabnzbd/downloads:/downloads
12
      - /opt/sabnzbd/tmp:/incomplete-downloads
13
    ports:
14
      - 127.0.0.1:12467:8080
15
    restart: unless-stopped

1
{
2
  "site_url": "https://alist.lkwplus.com",
3
  "token_expires_in": 48,
4
  "scheme": {
5
    "address": "127.0.0.1", // 限制本机访问，外网访问通过 Caddy 反向代理
6
    "http_port": 5244
7
  }
8
}

1
users:
2
  lkw123:
3
    email: test@example.com
4
    name: lkw123
5
    password: $2a$11$jZEMe2xxxxx

1
services:
2
  dozzle:
3
    image: amir20/dozzle:latest
4
    container_name: dozzle
5
    volumes:
6
      - /var/run/docker.sock:/var/run/docker.sock
7
      - /opt/dozzle/data:/data
8
    environment:
9
      - DOZZLE_AUTH_PROVIDER=simple # 开启 auth 功能
10
      - DOZZLE_NO_ANALYTICS=true # 关闭向 Dozzle 发送匿名统计数据
11
    ports:
12
      - 127.0.0.1:18083:8080
13
    restart: unless-stopped

1
services:
2
  open-webui:
3
    image: ghcr.io/open-webui/open-webui:main
4
    container_name: open-webui
5
    ports:
6
      - 127.0.0.1:18081:8080
7
    environment:
8
      - ENABLE_OLLAMA_API=false
9
      - OPENAI_API_KEY={your_secret_key}
10
      - OPENAI_API_BASE_URL={your_openai_api_base_url}
11
      - DEFAULT_MODELS=gpt-4o
12
      - ENABLE_MESSAGE_RATING=false
13
    volumes:
14
      - /opt/open-webui/data:/app/backend/data
15
    restart: unless-stopped

1
module.exports = {
2
  apps: [
3
    {
4
      name: 'open-webui',
5
      script: '.venv/bin/open-webui',
6
      args: 'serve',
7
      cwd: '/opt/open-webui',
8
      interpreter: '/bin/bash',
9
      interpreter_args: '-c "source .venv/bin/activate && exec $0 $@"',
10
      error_file: './logs/open-webui-error.log',
11
      out_file: './logs/open-webui-out.log',
12
      env: {
13
        NODE_ENV: 'development',
14
      },
15
      env_production: {
16
        NODE_ENV: 'production',
17
      },
18
    },
19
  ],
20
}

1
services:
2
  glance:
3
    image: glanceapp/glance:latest
4
    container_name: glance
5
    volumes:
6
      - /opt/glance/glance.yml:/app/glance.yml
7
      - /etc/timezone:/etc/timezone:ro
8
      - /etc/localtime:/etc/localtime:ro
9
    ports:
10
      - 127.0.0.1:13242:8080
11
    restart: unless-stopped

1
services:
2
  n8n:
3
    image: docker.n8n.io/n8nio/n8n:latest
4
    container_name: n8n
5
    restart: unless-stopped
6
    environment:
7
      - DB_TYPE=postgresdb
8
      - DB_POSTGRESDB_HOST=host.docker.internal
9
      - DB_POSTGRESDB_PORT=5444
10
      - DB_POSTGRESDB_DATABASE=n8n
11
      - DB_POSTGRESDB_USER=n8n
12
      - DB_POSTGRESDB_PASSWORD=<PASSWORD>
13
    ports:
14
      - 127.0.0.1:15678:5678
15
    volumes:
16
      - /opt/n8n/n8n-storage:/home/node/.n8n
17
    extra_hosts:
18
      - host.docker.internal:host-gateway

1
services:
2
  node_exporter:
3
    image: quay.io/prometheus/node-exporter:latest
4
    container_name: node_exporter
5
    command:
6
      - '--path.rootfs=/host'
7
    network_mode: host
8
    pid: host
9
    restart: unless-stopped
10
    volumes:
11
      - '/:/host:ro,rslave'

1
services:
2
  postgres-exporter:
3
    image: quay.io/prometheuscommunity/postgres-exporter:latest
4
    container_name: postgres_exporter
5
    environment:
6
      DATA_SOURCE_URI: 'localhost:5444/postgres?sslmode=disable'
7
      DATA_SOURCE_USER: '{your_username}'
8
      DATA_SOURCE_PASS: '{your_password}'
9
    network_mode: host
10
    restart: unless-stopped

1
services:
2
  cadvisor:
3
    image: gcr.io/cadvisor/cadvisor:latest
4
    container_name: cadvisor
5
    privileged: true
6
    volumes:
7
      - /:/rootfs:ro
8
      - /var/run:/var/run:ro
9
      - /sys:/sys:ro
10
      - /var/lib/docker/:/var/lib/docker:ro
11
      - /dev/disk/:/dev/disk:ro
12
    devices:
13
      - /dev/kmsg
14
    command:
15
      - '--docker_only=true'
16
      - '--housekeeping_interval=10s'
17
      - '--disable_metrics=disk,udp,referenced_memory,cpu_topology,resctrl,tcp,advtcp,sched,process,hugetlb,percpu'
18
    restart: unless-stopped
19
    networks:
20
      - monitoring
21

22
networks:
23
  monitoring:
24
    external: true

1
services:
2
  beszel:
3
    image: henrygd/beszel:latest
4
    container_name: beszel
5
    restart: unless-stopped
6
    ports:
7
      - 127.0.0.1:18096:8090
8
    volumes:
9
      - /opt/beszel/beszel_data:/beszel_data
10
    extra_hosts:
11
      - host.docker.internal:host-gateway

1
services:
2
  prometheus:
3
    image: prom/prometheus:latest
4
    container_name: prometheus
5
    hostname: prometheus
6
    restart: unless-stopped
7
    volumes:
8
      - /opt/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
9
      - /opt/prometheus/data:/prometheus
10
    command:
11
      - '--config.file=/etc/prometheus/prometheus.yml'
12
      - '--web.enable-lifecycle'
13
    ports:
14
      - 127.0.0.1:19090:9090
15
    networks:
16
      - monitoring
17
    extra_hosts:
18
      - host.docker.internal:host-gateway
19

20
networks:
21
  monitoring:
22
    external: true

1
global:
2
  scrape_interval: 15s
3
  evaluation_interval: 15s
4

5
scrape_configs:
6
  - job_name: prometheus
7
    static_configs:
8
      - targets: ['localhost:9090']
9
        labels:
10
          instance: prometheus
11
  - job_name: node
12
    static_configs:
13
      - targets: ['host.docker.internal:9100']
14
  - job_name: postgres
15
    static_configs:
16
      - targets: ['host.docker.internal:9187']
17
  - job_name: caddy
18
    static_configs:
19
      - targets: ['host.docker.internal:2019']
20
  - job_name: cadvisor
21
    scrape_interval: 30s
22
    static_configs:
23
      - targets: ['cadvisor:8080']

1
services:
2
  victoriametrics:
3
    image: victoriametrics/victoria-metrics:latest
4
    container_name: victoriametrics
5
    hostname: victoriametrics
6
    restart: unless-stopped
7
    volumes:
8
      - /opt/victoriametrics/data:/victoria-metrics-data
9
    command:
10
      - '--storageDataPath=/victoria-metrics-data'
11
      - '--httpListenAddr=:8428'
12
      - '--retentionPeriod=1'
13
    ports:
14
      - 127.0.0.1:18428:8428
15
    networks:
16
      - monitoring
17
    extra_hosts:
18
      - host.docker.internal:host-gateway
19

20
  vmagent:
21
    image: victoriametrics/vmagent:latest
22
    container_name: vmagent
23
    hostname: vmagent
24
    restart: unless-stopped
25
    volumes:
26
      - /opt/victoriametrics/vmagent.yml:/etc/vmagent/vmagent.yml
27
    command:
28
      - '--promscrape.config=/etc/vmagent/vmagent.yml'
29
      - '--remoteWrite.url=http://victoriametrics:8428/api/v1/write'
30
    networks:
31
      - monitoring
32
    depends_on:
33
      - victoriametrics
34
    extra_hosts:
35
      - host.docker.internal:host-gateway
36

37
networks:
38
  monitoring:
39
    external: true

1
- GF_DATABASE_TYPE=postgres
2
- GF_DATABASE_HOST=host.docker.internal:5444
3
- GF_DATABASE_NAME=grafana
4
- GF_DATABASE_USER=grafana
5
- GF_DATABASE_PASSWORD={your_password}
6
- GF_DATABASE_SSL_MODE=disable

1
services:
2
  grafana:
3
    image: grafana/grafana:latest
4
    container_name: grafana
5
    restart: unless-stopped
6
    environment:
7
      - GF_SERVER_ROOT_URL=https://grafana.lkwplus.com/
8
    extra_hosts:
9
      - host.docker.internal:host-gateway
10
    ports:
11
      - 127.0.0.1:19823:3000
12
    volumes:
13
      - /opt/grafana/data:/var/lib/grafana
14
    networks:
15
      - monitoring
16

17
networks:
18
  monitoring:
19
    external: true

1
services:
2
  server:
3
    image: gitea/gitea:latest
4
    container_name: gitea
5
    environment:
6
      - USER_UID=1000
7
      - USER_GID=1000
8
      - GITEA__database__DB_TYPE=postgres
9
      - GITEA__database__HOST=host.docker.internal:5444
10
      - GITEA__database__NAME=gitea
11
      - GITEA__database__USER=gitea
12
      - GITEA__database__PASSWD={your_password}
13
    restart: unless-stopped
14
    extra_hosts:
15
      - host.docker.internal:host-gateway
16
    volumes:
17
      - /opt/gitea/data:/data
18
      - /etc/timezone:/etc/timezone:ro
19
      - /etc/localtime:/etc/localtime:ro
20
    ports:
21
      - 127.0.0.1:13099:3000
22
      - 222:22

1
services:
2
  qbittorrent:
3
    image: linuxserver/qbittorrent:latest
4
    container_name: qbittorrent
5
    environment:
6
      - TZ=Asia/Shanghai
7
      - UMASK_SET=022
8
      - WEBUI_PORT=8081
9
    volumes:
10
      - /opt/qbittorrent/config:/config
11
      - /opt/qbittorrent/downloads:/downloads
12
    ports:
13
      - 65231:65231
14
      - 65231:65231/udp
15
      - 127.0.0.1:8081:8081
16
    restart: unless-stopped

1
services:
2
  server:
3
    image: yooooomi/your_spotify_server:latest
4
    container_name: your_spotify_server
5
    restart: unless-stopped
6
    ports:
7
      - 127.0.0.1:18777:8080
8
    environment:
9
      API_ENDPOINT: https://your-spotify.lkwplus.com
10
      CLIENT_ENDPOINT: https://spotify.lkwplus.com
11
      TIMEZONE: Asia/Shanghai
12
      SPOTIFY_PUBLIC: { your_spotify_client_id }
13
      SPOTIFY_SECRET: { your_spotify_secret }
14
      MONGO_ENDPOINT: mongodb+srv://lkw123:{password}@cluster0.kopgi.mongodb.net/your_spotify?retryWrites=true&w=majority&appName=Cluster0
15
      MONGO_NO_ADMIN_RIGHTS: true
16
      CORS: i-want-a-security-vulnerability-and-want-to-allow-all-origins
17

18
  web:
19
    image: yooooomi/your_spotify_client:latest
20
    container_name: your_spotify_client
21
    restart: unless-stopped
22
    ports:
23
      - 127.0.0.1:13241:3000
24
    environment:
25
      API_ENDPOINT: https://your-spotify.lkwplus.com

1
services:
2
  opengist:
3
    image: ghcr.io/thomiceli/opengist:1
4
    container_name: opengist
5
    restart: unless-stopped
6
    ports:
7
      - 127.0.0.1:16157:6157 # Web
8
      - 2222:2222 # SSH
9
    volumes:
10
      - /opt/opengist/data:/opengist

1
services:
2
  redis:
3
    image: redis:latest
4
    container_name: redis
5
    restart: unless-stopped
6
    ports:
7
      - 6479:6379
8
    volumes:
9
      - /opt/redis/data:/data
10
      - /opt/redis/redis.conf:/usr/local/etc/redis/redis.conf
11
      - /opt/redis/logs:/logs
12
    command: redis-server /usr/local/etc/redis/redis.conf --appendonly yes --requirepass '{your_password}'

1
services:
2
  vikunja:
3
    image: vikunja/vikunja:latest
4
    container_name: vikunja
5
    environment:
6
      VIKUNJA_SERVICE_PUBLICURL: https://todo.lkwplus.com
7
      VIKUNJA_DATABASE_HOST: vikunja_db
8
      VIKUNJA_DATABASE_PASSWORD: { db_password }
9
      VIKUNJA_DATABASE_TYPE: postgres
10
      VIKUNJA_DATABASE_USER: vikunja
11
      VIKUNJA_DATABASE_DATABASE: vikunja
12
      VIKUNJA_SERVICE_JWTSECRET: { jwt_secret }
13
      VIKUNJA_SERVICE_TIMEZONE: Asia/Shanghai
14
      VIKUNJA_DEFAULTSETTINGS_WEEK_START: 1 # 0 表示周日；1 表示周一
15
      VIKUNJA_SERVICE_ENABLEREGISTRATION: true
16
    ports:
17
      - 127.0.0.1:13456:3456
18
    volumes:
19
      - /opt/vikunja/files:/app/vikunja/files
20
    depends_on:
21
      vikunja_db:
22
        condition: service_healthy
23
    restart: unless-stopped
24

25
  vikunja_db:
26
    image: postgres:16
27
    container_name: vikunja_db
28
    environment:
29
      POSTGRES_PASSWORD: { db_password }
30
      POSTGRES_USER: vikunja
31
    volumes:
32
      - vikunja_db:/var/lib/postgresql/data
33
    restart: unless-stopped
34
    healthcheck:
35
      test: ['CMD-SHELL', 'pg_isready -h localhost -U $$POSTGRES_USER']
36
      interval: 10s
37

38
volumes:
39
  vikunja_db:

1
services:
2
  changedetection:
3
    image: dgtlmoon/changedetection.io:latest
4
    container_name: changedetection
5
    hostname: changedetection
6
    volumes:
7
      - changedetection_data:/datastore
8
    environment:
9
      - PUID=1000
10
      - PGID=1000
11
      - BASE_URL=https://changedetection.lkwplus.com
12
      - DISABLE_VERSION_CHECK=true
13
      - TZ=Asia/Shanghai
14
    ports:
15
      - 127.0.0.1:15000:5000
16
    restart: unless-stopped
17

18
volumes:
19
  changedetection_data:

1
services:
2
  sftpgo:
3
    image: drakkan/sftpgo:alpine
4
    container_name: sftpgo
5
    environment:
6
      - TZ=Asia/Shanghai
7
    ports:
8
      - 127.0.0.1:18080:8080 # WebUI
9
      - 8090:8090
10
      - 2022:2022
11
    volumes:
12
      - /opt/sftpgo/data:/srv/sftpgo
13
      - /opt/sftpgo/config:/var/lib/sftpgo
14
    restart: unless-stopped

1
services:
2
  app:
3
    image: cooderl/wewe-rss-sqlite:latest
4
    container_name: wewerss
5
    ports:
6
      - 127.0.0.1:4005:4000
7
    environment:
8
      # 数据库连接地址
9
      # - DATABASE_URL=file:../data/wewe-rss.db
10
      - DATABASE_TYPE=sqlite
11
      # 服务接口请求授权码
12
      # - AUTH_CODE=0211
13
      # 提取全文内容模式
14
      # - FEED_MODE=fulltext
15
      # 定时更新订阅源Cron表达式
16
      # - CRON_EXPRESSION=35 5,17 * * *
17
      # 服务接口请求限制，每分钟请求次数
18
      # - MAX_REQUEST_PER_MINUTE=60
19
      # 外网访问时，需设置为服务器的公网 IP 或者域名地址
20
      - SERVER_ORIGIN_URL=https://wewerss.lkwplus.com
21
    restart: unless-stopped
22
    volumes:
23
      # 映射数据库文件存储位置，容器重启后不丢失
24
      - /opt/wewerss/data:/app/data

1
services:
2
  moments:
3
    image: kingwrcy/moments:latest
4
    container_name: moments
5
    ports:
6
      - 127.0.0.1:16237:3000
7
    volumes:
8
      - /opt/moments/data:/app/data
9
      - /etc/localtime:/etc/localtime:ro
10
      - /etc/timezone:/etc/timezone:ro
11
    restart: unless-stopped

1
services:
2
  remark:
3
    image: umputun/remark42:latest
4
    container_name: remark42
5
    hostname: remark42
6
    restart: unless-stopped
7
    logging:
8
      driver: json-file
9
      options:
10
        max-size: '10m'
11
        max-file: '5'
12
    ports:
13
      - 127.0.0.1:18431:8080
14
    environment:
15
      - TIME_ZONE=Asia/Shanghai
16
      - REMARK_URL=https://remark42.lkwplus.com
17
      - SECRET={your_secret} # openssl rand -hex 16
18
      - SITE=blog
19
      - ADMIN_SHARED_ID={your_admin_shared_id}
20
      - AUTH_GITHUB_CID={your_github_client_id}
21
      - AUTH_GITHUB_CSEC={your_github_client_secret}
22
      - AUTH_GOOGLE_CID={your_google_client_id}
23
      - AUTH_GOOGLE_CSEC={your_google_client_secret}
24
      - AUTH_DISCORD_CID={your_discord_client_id}
25
      - AUTH_DISCORD_CSEC={your_discord_client_secret}
26
      - AUTH_TELEGRAM=true
27
      - TELEGRAM_TOKEN={your_telegram_bot_token}
28
      - NOTIFY_ADMINS=telegram
29
      - NOTIFY_TELEGRAM_CHAN={your_telegram_channel_id}
30
    volumes:
31
      - /opt/remark42/var:/srv/var

1
services:
2
  pocketbase:
3
    image: ghcr.io/muchobien/pocketbase:latest
4
    container_name: pocketbase
5
    restart: unless-stopped
6
    command:
7
      - --encryptionEnv # optional
8
      - ENCRYPTION # optional
9
    environment:
10
      ENCRYPTION: { your_encryption_key } # openssl rand -hex 16
11
    ports:
12
      - 127.0.0.1:16487:8090
13
    volumes:
14
      - /opt/pocketbase/data:/pb_data
15
      - /opt/pocketbase/public:/pb_public # optional
16
      - /opt/pocketbase/hooks:/pb_hooks # optional
17
    healthcheck:
18
      test: wget --no-verbose --tries=1 --spider http://localhost:8090/api/health || exit 1
19
      interval: 10s
20
      timeout: 5s
21
      retries: 5

1
services:
2
  wallos:
3
    container_name: wallos
4
    image: bellamy/wallos:latest
5
    ports:
6
      - 127.0.0.1:18289:80/tcp
7
    environment:
8
      - TZ=Asia/Shanghai
9
    volumes:
10
      - /opt/wallos/db:/var/www/html/db
11
      - /opt/wallos/logos:/var/www/html/images/uploads/logos
12
    restart: unless-stopped

1
services:
2
  code-server:
3
    image: lscr.io/linuxserver/code-server:latest
4
    container_name: code-server
5
    environment:
6
      - PUID=1000
7
      - PGID=1000
8
      - TZ=Asia/Shanghai
9
      - HASHED_PASSWORD={your_hashed_password} # 网页登录密码
10
      - SUDO_PASSWORD={your_sudo_password} # 终端提权密码
11
      - PROXY_DOMAIN={your_domain}
12
      - DEFAULT_WORKSPACE=/config/workspace
13
    volumes:
14
      - /opt/code-server/config:/config
15
    ports:
16
      - 127.0.0.1:18453:8443
17
    restart: unless-stopped

1
services:
2
  uptime-kuma:
3
    image: louislam/uptime-kuma:1
4
    container_name: uptime-kuma
5
    restart: unless-stopped
6
    ports:
7
      - 127.0.0.1:13059:3001
8
    volumes:
9
      - /opt/uptime-kuma/data:/app/data
10
      - /var/run/docker.sock:/var/run/docker.sock # 用于监控 Docker 容器状态

1
services:
2
  watchtower:
3
    image: containrrr/watchtower:latest
4
    container_name: watchtower
5
    restart: unless-stopped
6
    volumes:
7
      - /var/run/docker.sock:/var/run/docker.sock
8
    command: container1 container2 container3 # 可选，仅更新指定容器
9
    environment:
10
      - TZ=Asia/Shanghai
11
      - WATCHTOWER_SCHEDULE=0 0 17 * * *
12
      - WATCHTOWER_NOTIFICATIONS_HOSTNAME={your_hostname}
13
      - WATCHTOWER_NOTIFICATIONS=shoutrrr
14
      - WATCHTOWER_NOTIFICATION_URL=telegram://{HTTP_API_TOKEN}@telegram/?chats={CHAT_ID}&notification=no
15
      - WATCHTOWER_CLEANUP=true

1
services:
2
  diun:
3
    image: crazymax/diun:latest
4
    container_name: diun
5
    command: serve
6
    volumes:
7
      - /opt/diun/data:/data
8
      - /var/run/docker.sock:/var/run/docker.sock
9
    environment:
10
      - 'TZ=Asia/Shanghai'
11
      - 'DIUN_WATCH_WORKERS=20'
12
      - 'DIUN_WATCH_SCHEDULE=0 */6 * * *'
13
      - 'DIUN_WATCH_JITTER=30s'
14
      - 'DIUN_PROVIDERS_DOCKER=true'
15
      - 'DIUN_PROVIDERS_DOCKER_WATCHBYDEFAULT=true'
16
      - 'DIUN_NOTIF_TELEGRAM_TOKEN={your_bot_token}'
17
      - 'DIUN_NOTIF_TELEGRAM_CHATIDS={your_chat_id}'
18
    labels:
19
      - 'diun.enable=true'
20
    restart: unless-stopped