mirror of
https://github.com/m1ngsama/automa.git
synced 2026-02-07 22:14:04 +00:00
m1ngsama
7bb3e05942
Add infrastructure layer with following components: **Reverse Proxy & SSL:** - Caddy: Auto HTTPS with Let's Encrypt, simple configuration - Caddyfile with reverse proxy rules for Nextcloud and Grafana **Monitoring Stack (Observability):** - Prometheus: Metrics collection and time-series database - Grafana: Visualization dashboards with datasource provisioning - Loki: Lightweight log aggregation - Promtail: Log collection agent for Docker containers - cAdvisor: Container resource monitoring **Automation:** - Watchtower: Automatic Docker image updates (label-based) - Duplicati: Remote backup with web UI and encryption support **Security:** - Fail2ban: Intrusion prevention and IP banning **Key Features:** - All services use official Alpine-based images (lightweight) - Network isolation (automa-proxy, automa-monitoring) - Resource limits and health checks configured - Read-only configs where applicable - Comprehensive README with setup instructions **Resource Usage:** - Total additional overhead: ~1.5GB RAM, ~16GB disk - Follows KISS principles and Unix philosophy - All services replaceable and independently scalable Refs: #3
26 lines
451 B
YAML
26 lines
451 B
YAML
services:
|
|
fail2ban:
|
|
image: crazymax/fail2ban:latest
|
|
container_name: automa-fail2ban
|
|
restart: unless-stopped
|
|
|
|
network_mode: host
|
|
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- NET_RAW
|
|
|
|
environment:
|
|
- TZ=${TZ:-Asia/Shanghai}
|
|
- F2B_LOG_LEVEL=INFO
|
|
|
|
volumes:
|
|
- fail2ban_data:/data
|
|
- /var/log:/var/log:ro
|
|
|
|
labels:
|
|
- "com.automa.service=fail2ban"
|
|
|
|
volumes:
|
|
fail2ban_data:
|
|
name: automa_fail2ban_data
|