feat(docker): add convertx

Signed-off-by: Rodney Osodo <socials@rodneyosodo.com>

docker-compose/convertx/docker-compose.yaml

@@ -0,0 +1,20 @@
+services:
+  convertx:
+    container_name: convertx
+    image: ghcr.io/c4illin/convertx:v0.18.0
+    restart: unless-stopped
+    networks:
+      - homelab-network
+    security_opt:
+      - no-new-privileges:true
+    ports:
+      - "6010:3000"
+    environment:
+      - ACCOUNT_REGISTRATION=false
+      - JWT_SECRET=${CONVERTX_JWT_SECRET}
+      - HTTP_ALLOWED=true
+      - ALLOW_UNAUTHENTICATED=false
+      - AUTO_DELETE_EVERY_N_HOURS=24
+      - TZ=Africa/Nairobi
+    volumes:
+      - ~/docker-volumes/convertx/data:/app/data

docker-compose/default.env

@@ -140,3 +140,12 @@ PAPERLESS_POSTGRES_URL=""
 ### GRAFANA
 GRAFANA_ADMIN_USER="admin"
 GRAFANA_ADMIN_PASSWORD="admin"
+
+### TREK
+TREK_ENCRYPTION_KEY=""
+TREK_PUBLIC_URL=""
+TREK_ADMIN_EMAIL=""
+TREK_ADMIN_PASSWORD=""
+
+## ConvertX
+CONVERTX_JWT_SECRET=""

docker-compose/docker-compose.yaml

@@ -100,3 +100,9 @@ include:
   - path: ./obsidian/docker-compose.yaml
     project_directory: ..
     env_file: .env
+  - path: ./trek/docker-compose.yaml
+    project_directory: ..
+    env_file: .env
+  - path: ./convertx/docker-compose.yaml
+    project_directory: ..
+    env_file: .env

docker-compose/prometheus/prometheus.yml

@@ -10,19 +10,13 @@ scrape_configs:
     scheme: http
     static_configs:
       - targets:
-          - localhost:9090
+          - localhost:4082
 
   - job_name: cloudflared
     static_configs:
       - targets:
           - cloudflared:4090
 
-  - job_name: dawarich-app
-    static_configs:
-      - targets:
-          - dawarich-app:9394
-          - dawarich-sidekiq:9394
-
   - job_name: endlessh
     static_configs:
       - targets:

docker-compose/trek/docker-compose.yaml

@@ -0,0 +1,47 @@
+services:
+  trek:
+    container_name: trek
+    image: docker.io/mauriceboe/trek:3.2.1
+    restart: unless-stopped
+    networks:
+      - homelab-network
+    security_opt:
+      - no-new-privileges:true
+    read_only: true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETUID
+      - SETGID
+    tmpfs:
+      - /tmp:noexec,nosuid,size=128m
+    ports:
+      - "5090:5090"
+    environment:
+      - NODE_ENV=production
+      - PORT=5090
+      - ENCRYPTION_KEY=${TREK_ENCRYPTION_KEY}
+      - TZ=Africa/Nairobi
+      - LOG_LEVEL=info
+      - DEFAULT_LANGUAGE=en
+      - SESSION_DURATION=30d
+      - SESSION_DURATION_REMEMBER=30d
+      - ALLOWED_ORIGINS=${TREK_PUBLIC_URL}
+      - FORCE_HTTPS=true
+      - HSTS_INCLUDE_SUBDOMAINS=true
+      - COOKIE_SECURE=false
+      - TRUST_PROXY=1
+      - ALLOW_INTERNAL_NETWORK=true
+      - APP_URL=${TREK_PUBLIC_URL}
+      - ADMIN_EMAIL=${TREK_ADMIN_EMAIL}
+      - ADMIN_PASSWORD=${TREK_ADMIN_PASSWORD}
+    volumes:
+      - ~/docker-volumes/trek/data:/app/data
+      - ~/docker-volumes/trek/uploads:/app/uploads
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:3000/api/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s