docker on 대충어쩌고저쩌고샬라샬라

azvj6fml

Mon, 15 Dec 2025 00:00:00 +0000

작성 중

GitHub repository

container 구성

Dockerfile

vi /opt/azvj6fml/Dockerfile

FROM ibm-semeru-runtimes:open-17-jre
#RUN adduser --no-create-home -u 1000 dev
RUN mkdir -p /usr/share/java && \
 chown -R dev /usr/share/java
USER 1000
COPY --chown=1000:1000 build/libs/*.jar /usr/share/java/app.jar
WORKDIR /usr/share/java
EXPOSE 61314/tcp
ENTRYPOINT ["java", "-Dspring.profiles.active=prod", "-Xms2G", "-Xmx2G", "-jar", "/usr/share/java/app.jar"]

docker-compose.yml

vi /opt/azvj6fml/docker-compose.yml

services:
 azvj6fml:
 image: e7hnr8ov/azvj6fml:open-17-jre
 container_name: azvj6fml
 networks:
 - dev
 ports:
 - 61314/tcp
 user: 1000:1000
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/azvj6fml/log:/usr/share/java/log:rw
 restart: unless-stopped
networks:
 dev:
 external: true

host 구성

post_build.sh ¹

vi /opt/bdkqpr0x/config/post_build.sh

#!/bin/bash
# 자동 build 후 처리

source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log
msg_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').tmp

jenkins_bot_key="$3"
tel_chat_id="$4"
{ echo "$1 #$2"
 show_file_stat "/opt/$1/build/libs/$1-0.0.1-SNAPSHOT.jar"
 cd "/opt/$1" || exit 1
 docker build -t "e7hnr8ov/$1:open-17-jre" "/opt/$1"
 if [ -f "docker-compose.yml" ]; then
 docker compose rm -f -s
 docker compose up -d
 docker exec -i "$1" date +"%Z %F %T"
 fi
} > "$log_file"

read -ra args < <(docker images -q -f dangling=true)
docker rmi "${args[@]}"
rm -rf "/opt/$1/build"

cp "$log_file" "$msg_file"
send_tel_msg "$jenkins_bot_key" "$tel_chat_id" "$msg_file"
rm "$msg_file"

logrotate

sudo vi /etc/logrotate.d/azvj6fml

/opt/azvj6fml/log/*.log {
 daily
 rotate 7
 missingok
 notifempty
 dateext
 dateyesterday
 dateformat -%Y%m%d
 create 0664 dev dev
 sharedscripts
 postrotate
 docker restart azvj6fml >/dev/null 2>&1 || true
 endscript
}

~~## 데모 페이지~~

esportshelper (deprecated)

Mon, 15 Dec 2025 00:00:00 +0000

Deprecated

lolesports.com 로그인 페이지 변경에 대응하지 못함

지원 종료. 2024-02 이후 업데이트 없음 ¹

 graph LR
 subgraph gvp6nx1a
 A[https://lolesports.com/] <-- https --> B
 B[esportshelper] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/esportshelper/docker-compose.yml

services:
 esportshelper:
 image: e7hnr8ov/esportshelper:alpine
 container_name: esportshelper
 networks:
 - dev
 ports:
 - 3000/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 - PUID=1000
 - PGID=1000
 volumes:
 - /opt/esportshelper/config:/config:rw
 - /opt/esportshelper/config.yaml:/esportshelper/config.yaml:rw
 - /opt/esportshelper/data:/esportshelper/dropsHistory:rw
 shm_size: 2gb
 restart: unless-stopped
networks:
 dev:
 external: true

sudo docker cp esportshelper:/esportshelper/config.yaml /opt/esportshelper/ && \
sudo chown dev:dev -R /opt/esportshelper

config.yaml

vi /opt/esportshelper/config.yaml

### 필수 입력 사항
username: "f*******" # 필수, 계정 번호
password: "o***********************" # 필수, 비밀번호
### 선택사항
delay: 600 # 각 검사의 시간 간격(초)(기본값은 600초)(각 감지 시간은 설정한 지연의 0.8-1.5배 사이에서 무작위로 변동됩니다)
headless: False # True로 설정하면 프로그램이 백그라운드에서 실행되고, 그렇지 않으면 브라우저 창이 열립니다(기본값은 False).
language: "en_US" # 이제 "zh_CN", "zh_TW", "en_US" 언어를 지원합니다. 중국어 간체, 중국어 번체 및 영어.
nickName: "" # 닉네임, 비어 있으면 기본값은 사용자 이름입니다(개인 정보 보호 강화).
onlyWatchMatches: ["lcs","lla","lpl","lck","ljl-japan","lco","lec","cblol-brazil","pcs","tft_esports","worlds" ,"wqs"] # 감시 전용 경쟁 영역 이름, 소문자.
disWatchMatches: ["prime","lfl","liga","hitpoint","series","nlc","nationals","academy","qualifiers","legends","challengers","league" ] # 대회지역 이름을 보고 싶지 않다면 여기에 추가하면 됩니다. (참고로 소문자입니다.)
maxRunHours: -1 # 음수 값은 항상 실행됨을 의미하고 양수 값은 실행 시간을 의미하며 기본값은 -1입니다.
maxStream: 4 # 기본값은 동시에 시청할 수 있는 최대 게임 수인 4이며, 그 수를 초과하면 시청하지 않습니다.
mode: "safe" # 모드 선택, safe는 안전 모드, Normal은 일반 모드, 기본값은 safe를 참조하세요.
exportDrops: True # 기본값은 False입니다. 경력 드롭 세부 정보 파일을 내보내야 하는지 여부는 스크립트가 열릴 때만 생성됩니다.
briefLogLength: 10 #간단한 로그 정보 개수 기본값은 10입니다.
proxy: "" # 프록시 주소, 선택사항, 일반 사용자는 자신이 무엇을 하고 있는지 알지 못하는 한 입력할 필요가 없습니다. 예: "양말://127.0.0.1:20173"
connectorDropsUrl: "https://discord.com/api/webhooks/1******************/t***************-*****************-*********************************" # (DingTalk, Discord, Job Warning, Enterprise WeChat, Feishu 지원) 구체적인 구성 방법은 여기에 있습니다 https://github.com/Yudaotor/EsportsHelper/wiki/%E6%80% 8E%E4 %B9%88%E9%85%8D%E7%BD%AE%E6%8E%89%E8%90%BD%E6%8F%90%E9%86%92%3F
platForm: "linux" #플랫폼을 사용하세요. 기본값은 Windows입니다. Linux를 사용해야 하는 경우 여기에서 구성하세요.
closeStream: False # 스트림 저장 모드, 기본값은 False, 라이브 방송실의 비디오 스트림을 닫습니다(위험이 존재하며 Riot에서 감지할 수 있음).
desktopNotify: False # 시스템 오른쪽 하단에 팝업 메시지가 표시됩니다. 기본값은 False입니다.
sleepPeriod: ["0-0"] # 수면 기간, (기본값은 비어 있음) 형식은 "시작 시간 - 종료 시간"입니다. 수면 기간 동안에는 보기 웹페이지가 닫히고 이후에는 잠이 다시 열렸습니다. 간격은 왼쪽이 닫혀 있고 오른쪽이 열려 있습니다.
ignoreBroadCast: True # 생방송 방에 미리 입장하려면 False로 설정하고, 항상 방송되는 특정 경쟁 지역(예: TFT)에서 생방송을 지원합니다.
userDataDir: "" # xxxxx가 자신의 컴퓨터 이름으로 변경되는 예는 https를 참조하세요. //github.com/Yudaotor/EsportsHelper/wiki/%E6%80%8E%E4%B9%88%E4%BD%BF%E7%94%A8%E6%9C%AC%E5%9C%B0%E6 %B5%8F %E8%A7%88%E5%99%A8%E7%BC%93%E5%AD%98-%E5%85%8D%E8%B4%A6%E5%AF%86%E7% 99%BB% E5%BD%95
chromePath: "" # Google Chrome 사용자 정의 경로
countDrops: True # 드롭 수를 확인할지 여부
notifyType: "all" # 푸시 정보 유형을 필터링합니다. "all"은 모든 정보를 푸시하고, "error"는 오류 정보만 푸시하고, "drops"는 드롭 정보만 푸시합니다.
autoSleep: True # (권장) 자동으로 잠자기 여부, 기본값은 True
debug: False # 디버그 모드를 활성화할지 여부. 활성화된 후 예외가 발생하면 스크린샷이 사진 폴더로 이동됩니다. 기본값은 False입니다.
arm64: True # Linux ARM64에서 Chromium 사용을 지원하려면 platformForm: "linux"를 구성하고 "/home/USERNAME/.local/share/unDetected_chromedriver/chromedriver" 경로에 chromedriver가 있어야 합니다. 자세한 내용은 다음을 참조하세요. https:/ /github.com/Yudaotor/EsportsHelper/wiki/The-Way-Using-Chromium-on-ARM64
isDockerized: True # Docker에서 실행할 때만 True로 구성되며 기본값은 False입니다.

webhook 구성

디스코드 webhook

freshrss

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 A1[websites] -- rss --> B[freshrss]
 B -- google-api --> C[rss-client]

container 구성

docker-compose.yml

vi /opt/freshrss/docker-compose.yml

services:
 freshrss:
 image: linuxserver/freshrss:latest
 container_name: freshrss
 networks:
 - dev
 ports:
 - 80/tcp
 user: 0:0
 environment:
 - PUID=911
 - PGID=911
 - TZ=Asia/Seoul
 volumes:
 - /opt/freshrss/data:/config:rw
 - /opt/freshrss/config/logrotate_nginx.conf:/etc/logrotate.d/nginx:ro
 - /opt/freshrss/config/logrotate_php-fpm.conf:/etc/logrotate.d/php-fpm:ro
 restart: unless-stopped
networks:
 dev:
 external: true

구성

proxy url 구성

g4f

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 A[api] <-- https --> B
 subgraph gvp6nx1a
 B[g4f] <-- proxy --> C[authelia]
 C <-- proxy --> C1[nginx]
 end
 C1 <-- https --> D[client]
 B <---> E1[ai_tel_bot.py]
 E1 <---> F[telegram-bot]

container 구성

docker-compose.yml (arm)

vi /opt/g4f/docker-compose.yml

services:
 g4f:
 image: hlohaus789/g4f:latest-armv7
 container_name: g4f
 networks:
 - dev
 ports:
 - 8080/tcp
 - 1337:1337/tcp
 - 7900/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/g4f/har_and_cookies:/app/har_and_cookies:rw
 - /opt/g4f/generated_images:/app/generated_images:rw
 shm_size: 2gb
 restart: unless-stopped
networks:
 dev:
 external: true

proxy 구성

authelia 구성

gitea

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A <-- proxy --> C1[nginx]
 B1[ssh-key] -- ssh-keygen --> A[gitea]
 B2[gpg-key] -- gpg --> A
 end
 C[client] <-- ssh --> A
 C1 <-- https --> C

container 구성

docker-compose.yml

vi /opt/gitea/docker-compose.yml

services:
 gitea:
 image: gitea/gitea:latest
 container_name: gitea
 networks:
 - dev
 ports:
 - 61257:22/tcp
 - 3000/tcp
 user: 0:0
 environment:
 - USER_UID=1000
 - USER_GID=1000
 volumes:
 - /opt/gitea/data:/data:rw
 - /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 restart: unless-stopped
networks:
 dev:
 external: true

key

gitea 전용의 ssh와 gpg키를 github 구성과 동일하게 생성

guacamole

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A[guacamole] <-- proxy --> C1[nginx]
 B2[ssh-servers] <-- tcp --> A
 end
 C1 <-- https --> C[client]

container 구성

docker-compose.yml

vi /opt/guacamole/docker-compose.yml

services:
 guacamole:
 image: flcontainers/guacamole:latest
 container_name: guacamole
 networks:
 - dev
 ports:
 - 8080/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 - EXTENSIONS=auth-totp
 volumes:
 - /opt/guacamole/config:/config:rw
 - /etc/localtime:/etc/localtime:ro
 restart: unless-stopped
networks:
 dev:
 external: true

proxy 구성

vi /opt/nginx/config/sites-available/guacamole.conf

...
 location / {
 if ($allowed_country = no) {
 return 403;
 }
 include /etc/nginx/conf.d/include/proxy.conf;
 proxy_pass http://guacamole:8080;
 proxy_buffering off;
 proxy_request_buffering off;
 }
...

Troubleshooting

초기 계정

hugo

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B[dev-server] <-- proxy --> C[nginx]
 end
 C1[prod-server] <-- https --> D[client]
 C2[github-action] --- C3[contents/<br/>security-properties]
 C <-- https --> D
 B -- git --> C2
 B -- ssh --> C3
 C3 -- ssh --> C1

container 구성

docker-compose.yml

배포 폴더 /opt/hugo/data/public/
개발 서버이며 여기서 편집 후 운영 적용
서버 시작 시 배포 폴더 초기화
실시간 새로고침
baseURL 옵션은 운영 서버 URL 적용 (sitemap.xml 생성에 관여)
environment 옵션 production만 googleanalytics 적용

vi /opt/hugo/docker-compose.yml

services:
 hugo:
 image: hugomods/hugo:exts
 container_name: hugo
 networks:
 - dev
 ports:
 - 1313/tcp
 user: 1000:1000
 volumes:
 - /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 - /opt/hugo/data:/src:rw
 command: hugo server --cleanDestinationDir --poll 700ms --disableFastRender --noHTTPCache --environment production --minify --baseURL https://dntco43u.github.io --appendPort=false
 restart: unless-stopped
networks:
 dev:
 external: true

docsy 테마 ¹

템플릿은 exts 모듈이 적용된 docsy-example 테마
폴더 구조 변경. 기존 구조가 2-depth(/content/blog/)인데 1-depth(/content/)로 바꾸고 blog로만 사용
/content/search.md는 삭제. 1-depth 구조에서 노출을 막으려면 이것저것 수정해야 하므로
이미지 중앙 정렬 스타일 추가 ²

sudo rm -rf /opt/hugo/data && \
docker run --rm -it \
-p1313/tcp \
-v /opt/hugo/data:/src:rw \
hugomods/hugo:exts \
/bin/sh

hugo mod graph && \
cd / && git clone --depth 1 https://github.com/google/docsy-example.git src && \
cd /src && npm install && \
hugo --minify && \
exit

sudo chown dev:dev -R /opt/hugo/data/ && \
sed -i 's/enableGitInfo: true/enableGitInfo: false/' /opt/hugo/data/hugo.yaml && \
grep "enableGitInfo" /opt/hugo/data/hugo.yaml && \
rm /opt/hugo/data/LICENSE && \
rm /opt/hugo/data/*.md && \
rm /opt/hugo/data/{Dockerfile,docker-compose.yaml} && \
find /opt/hugo/data/ -name ".git*" -exec rm -rf {} \;

vi /opt/hugo/data/hugo.yaml

...
module:
 hugoVersion:
 extended: true
 min: 0.146.0
 imports:
 - path: github.com/google/docsy
 disable: false
...

vi /opt/hugo/data/assets/scss/_styles_project.scss

...
img[src$='#center'] {
 display: block;
 margin: 1.0rem auto;
 max-width: 100%;
 height: auto;
}

giscus 댓글 ³

테마 템플릿의 구성이 구 버전이라면 새 버전에 맞게 폴더 구조 변경 /layouts/partials/ -> /layouts/_partials/ ⁴
댓글을 비활성화하고 싶다면 markdown 파라미터에 no_comment: true 추가

mv /opt/hugo/data/layouts/partials /opt/hugo/data/layouts/_partials && \
vi /opt/hugo/data/layouts/_partials/disqus-comment.html

{{ if not .Params.no_comment }}
<style type="text/css">
 .giscus, .giscus-frame { width: 90%; }
 .container-fluid { height: auto; }
</style>
<div class="page-blank">
 <div class="giscus"></div>
 <script src="https://giscus.app/client.js"
 data-repo="{{site.Params.comments.giscus.repo}}"
 data-repo-id="{{site.Params.comments.giscus.repo_id}}"
 data-category="{{site.Params.comments.giscus.category}}"
 data-category-id="{{site.Params.comments.giscus.category_id}}"
 data-mapping="{{site.Params.comments.giscus.mapping}}"
 data-strict="{{site.Params.comments.giscus.reactions_enabled}}"
 data-reactions-enabled="{{site.Params.comments.giscus.reactions_enabled}}"
 data-emit-metadata="0"
 data-input-position="{{site.Params.comments.giscus.data_input_position}}"
 data-theme="{{site.Params.comments.giscus.theme}}"
 data-lang="{{site.Params.comments.giscus.data_lang}}"
 crossorigin="anonymous"
 async>
</script>
<noscript>Please enable JavaScript to view the <a href="https://giscus.app/">comments powered by Giscus.</a></noscript>
</div>
{{ end }}

vi /opt/hugo/data/hugo.yaml

...
params:
 comments:
 provider: giscus
 giscus:
 repo: dntco43u/dntco43u.github.io
 repo_id: R***********
 category: General
 category_id: D*******************
 mapping: pathname
 reactions_enabled: 0
 data_input_position: bottom
 # theme: light
 theme: catppuccin_frappe
 data_lang: en
services:
 disqus:
 shortname: giscus

기타

vi /opt/hugo/data/hugo.yaml

...
imaging:
 quality: 100
...
outputs:
 section: [HTML, RSS]
...
services:
 googleAnalytics:
 ID: G-G********* #https://dntco43u.github.io
...
# 제목 파스칼 케이스 변환 금지
titleCaseStyle: none

# prod-server 캐시
caches:
 images:
 dir: :cacheDir/images
...

favicon

/opt/hugo/data/static/favicons/favicon.ico

host 구성

deploy_hugo.sh ⁵

vi /home/dev/.local/bin/deploy_hugo.sh

#!/bin/bash
# hugo clean -> build -> publsh

source /home/dev/.bashrc
source /home/dev/.local/bin/utils.sh

container_name=hugo
hugo_env=$(docker exec -it $container_name hugo version)
hugo_version=$(echo "$hugo_env" | grep -o "hugo v[0-9.]*" | grep -o "[0-9.]*")
if echo "$hugo_env" | grep -q "+extended"; then
 hugo_extended=true
else
 hugo_extended=false
fi

rm -rf /opt/$container_name/data/public/*
cd /opt/$container_name && docker compose rm -f -s && docker compose up -d && docker exec -it $container_name date +"%Z"
sudo tail -fn0 /var/lib/docker/containers/"$(docker inspect --format="{{.Id}}" $container_name)/local-logs/container.log" | \
# 정적 파일 생성까지 대기
while read -r line; do
 echo "$line"
 if [[ "$line" == *"Web Server is available"* ]]; then
 break
 fi
done

# prod-server에서 참조하도록 dev-server 기준의 .env를 생성
echo "HUGO_VERSION=$hugo_version" > /opt/$container_name/data/.env
echo "HUGO_EXTENDED=$hugo_extended" >> /opt/$container_name/data/.env
cat /opt/$container_name/data/.env

# github pages는 속도를 위해 history 항상 삭제
cd /opt/$container_name/data/public || exit
#git rm -r --cached .
rm -rf .git && git init
git remote add origin git@github.com:dntco43u/dntco43u.github.io.git
git add . && git commit -m "update #$HOSTNAME" && git push -u -f origin main

github 구성

deploy-hugo.yml

Repository secrets	Remarks
secrets.GVP6NX1A_KEY	개발 서버 ssh 키
secrets.GVP6NX1A_ADDR	개발 서버 ssh 주소
secrets.GVP6NX1A_PORT	개발 서버 ssh 포트

vi /opt/hugo/data/public/.github/workflows/deploy-hugo.yml

name: deploy-hugo
on:
 push:
 branches:
 - main
 pull_request:
jobs:
 build:
 runs-on: ubuntu-latest
 concurrency:
 group: ${{ github.workflow }}-${{ github.ref }}
 steps:
 - name: Debug host
 run: dig +short txt ch whoami.cloudflare @1.1.1.1 | sed 's/"//g'
 - name: Set SSH key
 uses: shimataro/ssh-key-action@v2
 with:
 key: ${{ secrets.GVP6NX1A_KEY }}
 name: id_ed25519
 known_hosts: 'placeholder'
 - name: Adding known hosts
 run: ssh-keyscan -H -t ed25519 -p ${{ secrets.GVP6NX1A_PORT }} ${{ secrets.GVP6NX1A_ADDR }} >> ~/.ssh/known_hosts
 - name: Debug SSH
 run: |
 ssh -Q key
 ls -alh ~/.ssh
 ssh -T -p ${{ secrets.GVP6NX1A_PORT }} dev@${{ secrets.GVP6NX1A_ADDR }} -i ~/.ssh/id_ed25519
 - name: Get artifacts from dev-server
 run: |
 rsync \
 -avz \
 --delete \
 --exclude=".git/" \
 -e "ssh -p ${{ secrets.GVP6NX1A_PORT }} -i ~/.ssh/id_ed25519" \
 dev@${{ secrets.GVP6NX1A_ADDR }}:/opt/hugo/data/ \
 ./
 - name: Debug rsync
 run: |
 rsync -V
 sudo apt-get update -y && sudo apt-get install -y tree && sudo tree -L 2 -f
 - name: Set .env
 run: |
 . ./.env
 echo "HUGO_VERSION=${HUGO_VERSION}" >> $GITHUB_ENV
 echo "HUGO_EXTENDED=${HUGO_EXTENDED}" >> $GITHUB_ENV
 - name: Setup hugo
 uses: peaceiris/actions-hugo@v3
 with:
 hugo-version: '${{ env.HUGO_VERSION }}'
 extended: '${{ env.HUGO_EXTENDED }}'
 - name: Install Node.js dependencies
 run: |
 hugo mod graph
 [[ -f package-lock.json || -f npm-shrinkwrap.json ]] && npm ci || true
 - name: Restore cache
 id: cache-restore
 uses: actions/cache/restore@v4
 with:
 path: ${{ runner.temp }}/hugo_cache
 key: hugo-${{ github.run_id }}
 restore-keys:
 hugo-
 - name: Build hugo
 env:
 TZ: 'Asia/Seoul'
 run: |
 hugo \
 --gc \
 --minify \
 --environment production \
 --baseURL "https://dntco43u.github.io" \
 --cacheDir "${{ runner.temp }}/hugo_cache"
 - name: Save cache
 id: cache-save
 uses: actions/cache/save@v4
 with:
 path: ${{ runner.temp }}/hugo_cache
 key: ${{ steps.cache-restore.outputs.cache-primary-key }}
 - name: Upload pages
 uses: actions/upload-pages-artifact@v3
 with:
 path: ./public
 deploy:
 needs: build
 runs-on: ubuntu-latest
 permissions:
 pages: write
 id-token: write
 environment:
 name: github-pages
 url: ${{ steps.deployment.outputs.page_url }}
 steps:
 - name: Deploy pages
 id: deployment
 uses: actions/deploy-pages@v4

SEO

Troubleshooting

posts.md 파일명에 /와 _의 대체로 -사용 ⁶

jackett

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B[jackett] <-- proxy --> C[nginx]
 B <-- https/api --> E[qbittorrent]
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/jackett/docker-compose.yml

services:
 jackett:
 image: lscr.io/linuxserver/jackett:latest
 container_name: jackett
 networks:
 - dev
 ports:
 - 9117/tcp
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - AUTO_UPDATE=true
 - TZ=Asia/Seoul
 volumes:
 - /opt/jackett:/config:rw
 - /opt/qbittorrent/watched:/downloads:rw
 restart: unless-stopped
networks:
 dev:
 external: true

host 구성

logrotate

sudo vi /etc/logrotate.d/jackett

/opt/jackett/Jackett/log.txt
/opt/jackett/Jackett/updater.txt {
 daily
 rotate 7
 missingok
 notifempty
 dateext
 dateyesterday
 dateformat -%Y%m%d
 nocompress
 create 0664 dev dev
 sharedscripts
 postrotate
 docker restart jackett >/dev/null 2>&1 || true
 endscript
}

jellyfin

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 A1[googledrive] <-- mount --> B[jellyfin]
 subgraph cloud
 B <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/jellyfin/docker-compose.yml

services:
 jellyfin:
 image: jellyfin/jellyfin:latest
 container_name: jellyfin
 networks:
 - dev
 ports:
 - 8096/tcp
 - 8920/tcp
 user: 0:0
 environment:
 - JELLYFIN_PublishedServerUrl=https://je.gvp6nx1a.duckdns.org
 - TZ=Asia/Seoul
 volumes:
 - /opt/jellyfin/config:/config:rw
 - /opt/jellyfin/cache:/cache:rw
 - /home/dev/videos:/mnt/gvp6nx1a:rw
 - /mnt/ce9dbqya-gdrive/videos:/mnt/ce9dbqya:rw
 devices:
 - /dev/dri:/dev/dri
 privileged: true
 restart: unless-stopped
networks:
 dev:
 external: true

Transcoding

vaapi 구성 확인

jenkins

Mon, 15 Dec 2025 00:00:00 +0000

 graph TB
 B <-- ssh --> A9
 A9[github] -- git --> A1
 B -- build --> A1[projects]
 subgraph gvp6nx1a
 A1 ---> F1[post_build.sh]
 B ---> F2[pre_build.sh]
 F2 --- G1[security-properties]
 G1 ---> A1
 F1 --> G2[app-reload]
 B[jenkins] <-- proxy --> C[nginx]
 end
 A9 -- https/api --> C
 C <-- https --> D[client]
 G2 -- https/api --> D1[telegram]
 F2 -- https/api --> D1

container 구성

docker-compose.yml

이미지 크기: latest-jdk17 279.13 MB, alpine-jdk17 193.04 MB
alpine-jdk17 x86 전용. arm 사용 불가

vi /opt/jenkins/docker-compose.yml

services:
 jenkins:
 image: jenkins/jenkins:jdk17
 container_name: jenkins
 networks:
 - dev
 ports:
 - 8080/tcp
 user: 1000:1000
 environment:
 - JAVA_OPTS=-Xmx1g
 - TZ=Asia/Seoul
 volumes:
 - /home/dev/.local/bin/utils.sh:/var/jenkins_home/config/utils.sh:ro
 - /opt/jenkins/data:/var/jenkins_home:rw
 restart: unless-stopped
networks:
 dev:
 external: true

초기 암호

docker exec -it jenkins cat /var/jenkins_home/secrets/initialAdminPassword

3*******************************

github ssh

docker cp /home/dev/.ssh/dntco43u@github.pub jenkins:/var/jenkins_home/.ssh/id_ed25519.pub && \
docker cp /home/dev/.ssh/dntco43u@github.pem jenkins:/var/jenkins_home/.ssh/id_ed25519 && \
docker exec -it jenkins ssh -T git@github.com

Hi dntco43u! You've successfully authenticated, but GitHub does not provide shell access.

github webooks

kavita

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 A1[webdrives] <---> B[kavita]
 subgraph cloud
 B <---> C[nginx]
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/kavita/docker-compose.yml

services:
 kavita:
 image: lscr.io/linuxserver/kavita:latest
 container_name: kavita
 networks:
 - dev
 ports:
 - 5000/tcp
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - TZ=Asia/Seoul
 volumes:
 - /opt/kavita/config:/config:rw
 - /mnt/ce9dbqya-gdrive/documents:/ce9dbqya:rw
 - /mnt/mgujomtd-gdrive/documents:/mgujomtd:rw
 - /mnt/wagimgxc-gdrive/documents:/wagimgxc:rw
 - /mnt/tsdfsvkx-gdrive/documents:/tsdfsvkx:rw
 - /mnt/aqn8dtkh-gdrive/documents:/aqn8dtkh:rw
 - /mnt/gvp6nx1a-alist/ndgzbj1c@teambition/documents:/ndgzbj1c:rw
 restart: unless-stopped
networks:
 dev:
 external: true

라이브러리 구조 ¹

폴더 구조

loki

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 A13[promtail] -- https --> A7[loki]
 subgraph gvp6nx1a
 A33[promtail] -- http --> A7[loki]
 A7 <-- http --> B1[grafana]
 end
 A7 <-- https --> B2[grafana]

container 구성

docker-compose.yml

vi /opt/loki/docker-compose.yml

services:
 loki:
 image: grafana/loki:latest
 container_name: loki
 networks:
 - dev
 ports:
 - 3100/tcp
 user: 0:0
 volumes:
 - /opt/loki/config:/etc/loki:ro
 - /opt/loki/data:/loki:rw
 command:
 - --config.file=/etc/loki/local-config.yaml
 restart: unless-stopped
networks:
 dev:
 external: true

local-config.yaml

s3에 적재하는 구성

navidrome

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 A1[webdrives] <---> B[navidrome]
 subgraph cloud
 B <---> C[nginx]
 end
 C <-- https --> D[client]

.env

vi /opt/navidrome/.env

ND_SPOTIFY_ID=e*******************************
ND_SPOTIFY_SECRET=5*******************************

docker-compose.yml

vi /opt/navidrome/docker-compose.yml

services:
 navidrome:
 image: deluan/navidrome:latest
 container_name: navidrome
 networks:
 - dev
 ports:
 - 4533/tcp
 user: 1000:1000
 environment:
 - ND_MUSICFOLDER=/music
 - ND_SCANSCHEDULE=24h
 - ND_LOGLEVEL=info
 - ND_SCANNER_EXTRACTOR=ffmpeg
 - ND_SPOTIFY_ID=$ND_SPOTIFY_ID
 - ND_SPOTIFY_SECRET=$ND_SPOTIFY_SECRET
 - ND_SCANNER_PURGEMISSING=always
 volumes:
 - /opt/navidrome/data:/data:rw
 - /mnt/uodacgt6-gdrive/music:/music/uodacgt6:ro
 - /mnt/pc9xqpnh-gdrive/music:/music/pc9xqpnh:ro
 - /mnt/dwecl0ir-gdrive/music:/music/dwecl0ir:ro
 - /mnt/zckmxa4g-gdrive/music:/music/zckmxa4g:ro
 - /mnt/wly1zcl7-onedrive/music:/music/wly1zcl7:ro
 - /mnt/tamg9wel-teldrive/music:/music/tamg9wel:ro
 - /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 restart: unless-stopped
networks:
 dev:
 external: true

pgsql-exporter

Mon, 15 Dec 2025 00:00:00 +0000

 graph TB
 subgraph gvp6nx1a
 A2[postgres] -- tcp --> A4[postgres-exporter]
 A4 -- http --> A3[prometheus]
 end

container 구성

.env

vi /opt/pgsql-exporter/.env

DATA_SOURCE_NAME=postgresql://postgres:a***************************************************************@host.docker.internal:5432/postgres?sslmode=disable

docker-compose.yml

network bridge 구성이어도 host를 허용하도록 구성

vi /opt/pgsql-exporter/docker-compose.yml

services:
 pgsql-exporter:
 image: quay.io/prometheuscommunity/postgres-exporter:latest
 container_name: pgsql-exporter
 networks:
 - dev
 ports:
 - 9187/tcp
 extra_hosts:
 - "host.docker.internal:host-gateway"
 user: 1000:1000
 environment:
 - DATA_SOURCE_NAME=$DATA_SOURCE_NAME
 volumes:
 - /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 - /opt/pgsql-exporter/config/postgres_exporter.yml:/postgres_exporter.yml:rw
 restart: unless-stopped
networks:
 dev:
 external: true

privatebin

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B1[authelia] <-- proxy --> C[nginx]
 B[privatebin] <-- proxy --> B1
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/privatebin/docker-compose.yml

services:
 privatebin:
 image: privatebin/fs:latest
 container_name: privatebin
 networks:
 - dev
 ports:
 - 8080/tcp
 user: 65534:82
 environment:
 - TZ=Asia/Seoul
 - PHP_TZ=Asia/Seoul
 volumes:
 - /opt/privatebin/config:/srv/cfg:rw
 - /opt/privatebin/data:/srv/data:rw
 - /opt/privatebin/tmp:/tmp:rw
 - /opt/privatebin/run:/run:rw
 - /opt/privatebin/nginx_tmp:/var/lib/nginx/tmp:rw
 read_only: true
 restart: unless-stopped
networks:
 dev:
 external: true

proxy 구성

authelia 구성

prometheus

Mon, 15 Dec 2025 00:00:00 +0000

 graph TB
 subgraph gvp6nx1a
 A2[postgresql] -- tcp --> B[grafana]
 A3[prometheus] -- http --> B
 A4[postgres-exporter] -- http --> A3
 A2 -- tcp --> A4
 E2[node-exporter] -- http --> A3
 end
 E3[node-exporter] -- https --> A3

container 구성

docker-compose.yml

vi /opt/prometheus/docker-compose.yml

services:
 prometheus:
 image: prom/prometheus:latest
 container_name: prometheus
 networks:
 - dev
 ports:
 - 9090/tcp
 user: 0:0
 volumes:
 - /opt/prometheus/config:/etc/prometheus:rw
 - /opt/prometheus/data:/prometheus:rw
 command:
 - --config.file=/etc/prometheus/prometheus.yml
 - --web.config.file=/etc/prometheus/web.yml
 - --storage.tsdb.path=/prometheus
 - --storage.tsdb.retention.time=7d
 restart: unless-stopped
networks:
 dev:
 external: true

일반 구성

file service discovery 구성

selenium

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A1[python] --- B
 B[selenium] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

.env

vi /opt/python/.env

WEBDRIVER_URL=http://selenium:4444/wd/hub

docker-compose.yml

vi /opt/selenium/docker-compose.yml

services:
 selenium:
 image: seleniarm/standalone-chromium:latest
 container_name: selenium
 networks:
 - dev
 ports:
 - 4444/tcp
 - 5900/tcp
 - 7900/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/selenium/config/passwd:/home/seluser/.vnc/passwd:ro
 - /home/dev/downloads/selenium:/home/seluser/files:rw
 privileged: true
 shm_size: 2gb
 restart: unless-stopped
networks:
 dev:
 external: true

passwd

docker exec -it selenium x11vnc -storepasswd P*************************************************************** /home/seluser/.vnc/passwd

proxy 구성

vi /opt/nginx/config/sites-available/selenium.conf

...
 location / {
 if ($allowed_country = no) {
 return 403;
 }
 include /etc/nginx/conf.d/include/proxy.conf;
 proxy_pass http://selenium:7900;
 proxy_buffering off;
 proxy_request_buffering off;
 }
...

uptime-kuma

Mon, 15 Dec 2025 00:00:00 +0000

 graph TB
 A0[duckdns] <-- dns --> B[uptime-kuma]
 subgraph cloud
 A1[ec4mrjp5] <-- https --> B
 A2[m7jrgve9] <-- https --> B
 A3[gvp6nx1a] <-- http --> B
 A1 <-- tcp --> B
 A2 <-- tcp --> B
 A3 <-- tcp --> B
 end
 A4[agq3mbw2] <-- https --> B
 A4 <-- tcp --> B
 subgraph home-lab
 A5[sj9n7air] <-- http --> A4
 A5[sj9n7air] <-- tcp --> A4
 end
 A10[eiyzti2t] <-- https --> B
 A10[eiyzti2t] <-- tcp --> B

container 구성

docker-compose.yml

vi /opt/uptime-kuma/docker-compose.yml

services:
 uptime-kuma:
 image: louislam/uptime-kuma:latest
 container_name: uptime-kuma
 networks:
 - dev
 ports:
 - 3001/tcp
 extra_hosts:
 - "host.docker.internal:host-gateway"
 user: 0:0
 volumes:
 - /opt/uptime-kuma/data:/app/data:rw
 - /var/run/docker.sock:/var/run/docker.sock:ro
 #- /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 restart: unless-stopped
networks:
 dev:
 external: true

데모 페이지

webtop

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B[webtop] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/webtop/docker-compose.yml

services:
 webtop:
 image: raindev11/webtop:latest
 container_name: webtop
 networks:
 - dev
 ports:
 - 3000/tcp
 - 3001/tcp
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - TZ=Asia/Seoul
 - START_DOCKER=false
 - DRINODE=/dev/dri/renderD128
 volumes:
 - /opt/webtop/config:/config:rw
 - /var/run/docker.sock:/var/run/docker.sock:ro
 security_opt:
 - seccomp:unconfined
 shm_size: 2gb
 devices:
 - /dev/dri:/dev/dri
 privileged: true
 restart: unless-stopped
networks:
 dev:
 external: true

proxy 구성

authelia 구성

archivebox

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B[archivebox] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

.env

vi /opt/archivebox/.env

ADMIN_USERNAME=dev
ADMIN_PASSWORD=k***************************************************************

docker-compose.yml

vi /opt/archivebox/docker-compose.yml

services:
 archivebox:
 image: archivebox/archivebox:sha-5c1a14e
 container_name: archivebox
 networks:
 - dev
 ports:
 - 8000/tcp
 user: 0:0
 environment:
 - ALLOWED_HOSTS=*
 - MEDIA_MAX_SIZE=750m
 - ADMIN_USERNAME=$ADMIN_USERNAME
 - ADMIN_PASSWORD=$ADMIN_PASSWORD
 - TZ=Asia/Seoul
 volumes:
 - /opt/archivebox/data:/data:rw
 restart: unless-stopped
networks:
 dev:
 external: true

설치

cd /opt/archivebox/ && docker compose run archivebox init

host 구성

logrotate

sudo vi /etc/logrotate.d/archivebox

/opt/archivebox/data/logs/*.log {
 daily
 rotate 7
 missingok
 notifempty
 dateext
 dateyesterday
 dateformat -%Y%m%d
 create 0664 999 999
 sharedscripts
 postrotate
 docker restart archivebox >/dev/null 2>&1 || true
 endscript
}

Troubleshooting

PermissionError: [Errno 13] Permission denied: ‘/data/logs/errors.log’

authelia

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B1[apps] <-- proxy --> B
 C[nginx] -- login --> B[authelia]
 C -- login --> D1[apps]
 end
 F[client] -- https --> C

container 구성

docker-compose.yml

vi /opt/authelia/docker-compose.yml

services:
 authelia:
 image: authelia/authelia:latest
 container_name: authelia
 networks:
 - dev
 ports:
 - 9091/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/authelia/config:/config:rw
 restart: unless-stopped
networks:
 dev:
 external: true

configuration.yml

app	url	admiin 접근	guest 접근	login 페이지
privatebin	pb.gvp6nx1a.duckdns.org	O	X	X
webtop	wb.gvp6nx1a.duckdns.org	O	O	X
esportshlper	es.gvp6nx1a.duckdns.org	O	O	X
g4f	g4.gvp6nx1a.duckdns.org	O	O	X
authelia	au.gvp6nx1a.duckdns.org	O	O	O

vi /opt/authelia/config/configuration.yml

server:
 address: 'tcp://:9091/authelia'
log:
 level: 'info'
identity_validation:
 reset_password:
 jwt_secret: 'p***************************************************************'
default_redirection_url: 'https://au.gvp6nx1a.duckdns.org/'
duo_api:
 hostname: 'gvp6nx1a.duckdns.org'
 integration_key: 'c***************************************************************'
 secret_key: 'b***************************************************************'
authentication_backend:
 password_reset:
 disable: false
 file:
 path: '/config/users_database.yml'
 password:
 algorithm: 'argon2id'
 iterations: 3
 memory: 65536
 parallelism: 4
 key_length: 32
 salt_length: 16
access_control:
 default_policy: 'deny'
 rules:
 - domain_regex: '^(pb).gvp6nx1a.duckdns.org'
 subject: 'group:guests'
 policy: 'one_factor'
 - domain_regex: '^(wb|es|g4).gvp6nx1a.duckdns.org'
 subject: 'group:admins'
 policy: 'one_factor'
 - domain: 'au.gvp6nx1a.duckdns.org'
 policy: 'bypass'
session:
 name: 'authelia_session'
 secret: 'K***************************************************************'
 expiration: '1h'
 inactivity: '5m'
 remember_me: '1M'
 domain: 'gvp6nx1a.duckdns.org'
regulation:
 max_retries: 3
 find_time: '2m'
 ban_time: '5m'
storage:
 encryption_key: 'E***************************************************************'
 local:
 path: '/config/db.sqlite3'
notifier:
 disable_startup_check: false
 smtp:
 host: 'smtp.mail.yahoo.com'
 port: 465
 timeout: '5 seconds'
 username: 'x*******@yahoo.com'
 password: '****************'
 sender: 'Authelia <x*******-********@yahoo.com>'
 identifier: 'localhost'
 subject: '[Authelia] {title}'
 startup_check_address: 'x*******-********@yahoo.com'
 disable_require_tls: false
 disable_html_emails: false
 tls:
 skip_verify: false
 minimum_version: 'TLS1.2'

users_database.yml

암호 hash 생성

code-server

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A7[code-server] <-- http --> A13[nginx]
 end
 A13 <-- https --> B[client]

container 구성

.env

vi /opt/code-server/.env

PASSWORD=1***************************************************************

docker-compose.yml ¹

vi /opt/code-server/docker-compose.yml

services:
 code-server:
 image: lscr.io/linuxserver/code-server:4.16.1
 container_name: code-server
 networks:
 - dev
 ports:
 - 8443/tcp
 user: 0:0
 environment:
 - PUID=0
 - PGID=0
 - TZ=Asia/Seoul
 - PASSWORD=$PASSWORD
 - PROXY_DOMAIN=co.gvp6nx1a.duckdns.org
 - DEFAULT_WORKSPACE=/
 volumes:
 - /:/rootfs:rw
 - /opt/code-server/config:/config:rw
 - /opt/code-server/workbench/workbench.html:/usr/lib/code-server/lib/vscode/out/vs/code/browser/workbench/workbench.html:rw
 - /opt/code-server/font:/usr/lib/code-server/src/browser/pages/font:rw
 restart: unless-stopped
networks:
 dev:
 external: true

공통 구성

font D2Coding 구성

dashy

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph cloud
 A1[ec4mrjp5] <-- https --> B[dashy]
 A2[m7jrgve9] <-- https --> B
 A3[gvp6nx1a] <-- http --> B
 end
 A4[agq3mbw2] <-- https --> B
 subgraph home-lab
 A5[sj9n7air] <-- http --> A4
 end
 B <-- https --> A6[client]

container 구성

docker-compose.yml

vi /opt/dashy/docker-compose.yml

services:
 dashy:
 image: lissy93/dashy:latest
 container_name: dashy
 networks:
 - dev
 ports:
 - 8080/tcp
 user: 0:0
 environment:
 - UID=1000
 - GID=1000
 - MODE_ENV=production
 - TZ=Asia/Seoul
 volumes:
 - /opt/dashy/config/conf.yml:/app/user-data/conf.yml:rw
 - /opt/dashy/item-icons:/app/user-data/item-icons:rw
 restart: unless-stopped
networks:
 dev:
 external: true

암호 구성

로그인 암호 sha256 hash 생성 후 구성에 저장

dozzle

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A[docker.sock] --> B
 B[dozzle] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/dozzle/docker-compose.yml

services:
 dozzle:
 image: amir20/dozzle:latest
 container_name: dozzle
 networks:
 - dev
 ports:
 - 8080/tcp
 user: 0:0
 environment:
 - DOZZLE_AUTH_PROVIDER=simple
 - TZ=Asia/Seoul
 volumes:
 - /var/run/docker.sock:/var/run/docker.sock:ro
 - /opt/dozzle/config:/data:rw
 command:
 - --filter=
 - --level=INFO
 - --no-analytics
 restart: unless-stopped
networks:
 dev:
 external: true

users.yml

암호 구성 yml 생성

node-exporter

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A1[host] --> E2
 E2[node-exporter] -- http --> A3[prometheus]
 end
 A2[host] --> E3
 E3[node-exporter] -- https --> A3

container 구성

docker-compose.yml

수집 데이터에 접근하기 위해 host 모드로 구성

vi /opt/node-exporter/docker-compose.yml

services:
 node-exporter:
 image: prom/node-exporter:latest
 container_name: node-exporter
 network_mode: host
 pid: host
 user: 1000:1000
 volumes:
 - /:/rootfs:ro
 - /proc:/rootfs/proc:ro
 - /sys:/rootfs/sys:ro
 - /run/udev/data:/run/udev/data:ro
 - /var/run/dbus/system_bus_socket:/var/run/dbus/system_bus_socket:ro
 - /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 - /opt/node-exporter/config/web.yml:/etc/web.yml:rw
 command:
 - --web.config.file=/etc/web.yml
 - --path.rootfs=/rootfs
 - --path.procfs=/rootfs/proc
 - --path.sysfs=/rootfs/sys
 - --collector.filesystem.mount-points-exclude=^/(rootfs/)?(dev|etc|proc|run|sys)($$|/)
 - --collector.processes
 - --collector.systemd
 - --collector.interrupts
 restart: unless-stopped

web.yml

http basic auth 구성

portainer

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A1[docker.sock] ---> B
 B[portainer] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

docker-compose.yml

vi /opt/portainer/docker-compose.yml

services:
 portainer:
 image: portainer/portainer-ce:alpine
 container_name: portainer
 networks:
 - dev
 ports:
 - 8000/tcp
 - 9443/tcp
 user: 0:0
 volumes:
 - /var/run/docker.sock:/var/run/docker.sock:ro
 - /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 - /opt/portainer/data:/data:rw
 restart: unless-stopped
networks:
 dev:
 external: true

promtail

Sun, 14 Dec 2025 00:00:00 +0000

 graph TB
 subgraph ec4mrjp5
 B13[sshd] -- log --> A13[promtail]
 B12[selinux] -- log --> A13
 B11[nginx] -- log --> A13
 end
 A13 <-- https --> A7[loki]
 subgraph m7jrgve9
 B23[sshd] -- log --> A23[promtail]
 B22[selinux] -- log --> A23
 B21[nginx] -- log --> A23
 end
 A23 <-- https --> A7[loki]
 subgraph gvp6nx1a
 B33[sshd] -- log --> A33[promtail]
 B32[selinux] -- log --> A33
 B31[nginx] -- log --> A33
 A33 <-- http --> A7[loki]
 end

container 구성

.env

vi /opt/promtail/.env

LOKI_URL=http://loki:3100/loki/api/v1/push
LOKI_USERNAME=dev
LOKI_PASSWORD=a***************************************************************

docker-compose.yml

vi /opt/promtail/docker-compose.yml

services:
 promtail:
 image: grafana/promtail:latest
 container_name: promtail
 networks:
 - dev
 ports:
 - 9080/tcp
 user: 0:0
 environment:
 - LOKI_URL=$LOKI_URL
 - LOKI_USERNAME=$LOKI_USERNAME
 - LOKI_PASSWORD=$LOKI_PASSWORD
 - TZ=Asia/Seoul
 volumes:
 - /var/log/secure:/var/log/secure:ro
 - /var/log/audit/audit.log:/var/log/audit/audit.log:ro
 - /opt/promtail/config:/etc/promtail:ro
 - /opt/nginx/log:/var/log/nginx:ro
 command:
 - --config.file=/etc/promtail/config.yml
 - --config.expand-env=true
 restart: unless-stopped
networks:
 dev:
 external: true

config.yml

수집할 로그 구성

xray

Sun, 14 Dec 2025 00:00:00 +0000

 graph LR
 subgraph 443/tcp
 A[client] -- https 차단 --- B[firewall]
 A1[client] <-- vless+ws 우회 --> B
 end
 B <-- vless+ws 우회 --> G[nginx-proxy]
 G <--> I[xray]
 I <-- https 요청/응답 --> L[internet]

container 구성

docker-compose.yml

vi /opt/xray/docker-compose.yml

services:
 xray:
 image: teddysun/xray:1.7.5
 container_name: xray
 networks:
 - dev
 ports:
 - 9000/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/xray/config:/etc/xray:rw
 - /opt/.acme/*.$HOSTNAME.duckdns.org_ecc/fullchain.cer:/etc/ssl/*.$HOSTNAME.duckdns.org/fullchain.pem:ro
 - /opt/.acme/*.$HOSTNAME.duckdns.org_ecc/*.$HOSTNAME.duckdns.org.key:/etc/ssl/*.$HOSTNAME.duckdns.org/privkey.pem:ro
 restart: unless-stopped
networks:
 dev:
 external: true

vless-websocket-tls (서버)

vi /opt/xray/config/config.json

{
 "log":{
 "loglevel":"warning"
 },
 "inbounds":[
 {
 "port":9000,
 "protocol":"vless",
 "settings":{
 "clients":[
 {
 "id":"5*******-****-****-****-************",
 "flow":"xtls-rprx-direct"
 }
 ],
 "decryption":"none",
 "fallbacks":[]
 },
 "streamSettings":{
 "network":"ws",
 "security":"tls",
 "tlsSettings":{
 "serverName":"xr.gvp6nx1a.duckdns.org",
 "certificates":[
 {
 "certificateFile":"/etc/ssl/*.gvp6nx1a.duckdns.org/fullchain.pem",
 "keyFile":"/etc/ssl/*.gvp6nx1a.duckdns.org/privkey.pem"
 }
 ]
 },
 "wsSettings":{
 "path":"/w*******",
 "headers":{}
 }
 },
 "tag":"inbound",
 "sniffing":{
 "enabled":true,
 "destOverride":[
 "http",
 "tls"
 ]
 }
 }
 ],
 "outbounds":[
 {
 "protocol":"freedom"
 }
 ]
}

vless-websocket-tls (클라이언트)

vi $USERPROFILE/AppData/Local/qv2ray/connections/maellhfkxqke.qv2ray.json

{
 "outbounds": [
 {
 "protocol": "vless",
 "settings": {
 "vnext": [
 {
 "address": "xr.gvp6nx1a.duckdns.org",
 "port": 443,
 "users": [
 {
 "encryption": "none",
 "id": "5*******-****-****-****-************"
 }
 ]
 }
 ]
 },
 "streamSettings": {
 "network": "ws",
 "security": "tls",
 "tlsSettings": {
 "disableSystemRoot": false,
 "serverName": "xr.gvp6nx1a.duckdns.org"
 },
 "wsSettings": {
 "path": "/w*******"
 },
 "xtlsSettings": {
 "disableSystemRoot": false
 }
 }
 }
 ]
}

proxy 구성

vi /opt/nginx/config/sites-available/xray.conf

...
 location /w******* {
 if ($allowed_country = no) {
 return 403;
 }
 include /etc/nginx/conf.d/include/proxy.conf;
 proxy_pass https://xray:9000;

 keepalive_timeout 65;
 client_max_body_size 0;
 }
...

테스트

dns 누출 확인

bdkqpr0x

Wed, 10 Dec 2025 00:00:00 +0000

GitHub repository

바로 가기

container 구성

Dockerfile

vi /opt/bdkqpr0x/Dockerfile

FROM ibm-semeru-runtimes:open-17-jre
#RUN adduser --no-create-home -u 1000 dev
RUN mkdir -p /usr/share/java && \
 chown -R 1000 /usr/share/java
USER 1000
COPY --chown=1000:1000 build/libs/*.jar /usr/share/java/app.jar
WORKDIR /usr/share/java

host 구성

bdkqpr0x.sh ¹

vi /home/dev/.local/bin/bdkqpr0x.sh

#!/bin/bash
# bdkqpr0x

source /home/dev/.bashrc
source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log
msg_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').tmp

docker run \
 -i --rm --name=bdkqpr0x --network=dev \
 --add-host=host.docker.internal:host-gateway --user=1000:1000 \
 -e TZ=Asia/Seoul \
 -v /opt/bdkqpr0x/log:/usr/share/java/log:rw \
 -v /opt/bdkqpr0x/data:/usr/share/java/data:rw \
 e7hnr8ov/bdkqpr0x:open-17-jre \
 java -Dspring.profiles.active=prod -Xms2G -Xmx2G \
 -jar /usr/share/java/app.jar \
 --job.name="$1" chunkSize="$2" requestDate="$3" > "$log_file"

echo "--job.name=$1 chunkSize=$2 requestDate=$3" > "$msg_file"
tail -n3 "$log_file" | head -n1 >> "$msg_file" #show count
send_tel_msg "$TEL_BOT_KEY" "$TEL_CHAT_ID" "$msg_file"
rm "$msg_file"

post_build.sh ²

vi /opt/bdkqpr0x/config/post_build.sh

#!/bin/bash
# 자동 build 후 처리

source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log
msg_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').tmp

jenkins_bot_key="$3"
tel_chat_id="$4"
{ echo "$1 #$2"
 show_file_stat "/opt/$1/build/libs/$1-0.0.1-SNAPSHOT.jar"
 cd "/opt/$1" || exit 1
 docker build -t "e7hnr8ov/$1:open-17-jre" "/opt/$1"
 if [ -f "docker-compose.yml" ]; then
 docker compose rm -f -s
 docker compose up -d
 docker exec -i "$1" date +"%Z %F %T"
 fi
} > "$log_file"

read -ra args < <(docker images -q -f dangling=true)
docker rmi "${args[@]}"
rm -rf "/opt/$1/build"

cp "$log_file" "$msg_file"
send_tel_msg "$jenkins_bot_key" "$tel_chat_id" "$msg_file"
rm "$msg_file"

logrotate

sudo vi /etc/logrotate.d/bdkqpr0x

/opt/bdkqpr0x/log/*.log {
 daily
 rotate 7
 missingok
 notifempty
 dateext
 dateyesterday
 dateformat -%Y%m%d
 create 0664 dev dev
 sharedscripts
 postrotate
 docker restart promtail >/dev/null 2>&1 || true
 endscript
}

Jobs

Jobs	Command	File	Remarks
bd01	bdkqpr0x.sh bd01 10000 $(date +%Y%m%d)	us-500.csv	pgsql -> Oracle, pgsql -> File -> Oracle
bd02	bdkqpr0x.sh bd02 10000 $(date +%Y%m%d)	us-500.csv	Oracle -> pgsql, Oracle -> File -> pgsql
bd03	bdkqpr0x.sh bd03 10000 $(date +%Y%m%d)	music_tag.csv	Oracle -> Oracle, Oracle -> File -> Oracle
bd04	bdkqpr0x.sh bd04 10000 $(date +%Y%m%d)	system_events.csv	pgsql -> Oracle, pgsql -> File -> Oracle

Troubleshooting

=> ERROR [2/5] RUN adduser –no-create-home -u 1000 dev

tag-edit (작성 중)

Wed, 10 Dec 2025 00:00:00 +0000

작성 중

jdownloader

Tue, 09 Dec 2025 00:00:00 +0000

 graph LR
 A1[my.jdownloader.org] <-- tcp/api --> B[jdownloader]
 A1 <-- https --> D[client]

host 구성

포트 개방

sudo firewall-cmd --permanent --add-forward-port=port=6****:proto=tcp:toport=3129 && \
sudo firewall-cmd --reload && \
sudo firewall-cmd --list-all

container 구성

.env

vi /opt/jdownloader/.env

JD_EMAIL=x*******-********@yahoo.com
JD_PASSWORD=y***************************************************************

docker-compose.yml

vi /opt/jdownloader/docker-compose.yml

services:
 jdownloader:
 image: antlafarge/jdownloader:alpine
 container_name: jdownloader
 networks:
 - dev
 ports:
 - 3129:3129/tcp
 user: 1000:1000
 environment:
 - UID=1000
 - GID=1000
 - JD_DEVICENAME=$HOSTNAME
 - JD_EMAIL=$JD_EMAIL
 - JD_PASSWORD=$JD_PASSWORD
 volumes:
 - /etc/timezone:/etc/timezone:ro
 - /etc/localtime:/etc/localtime:ro
 - /opt/jdownloader/config:/jdownloader/cfg:rw
 - /opt/jdownloader/config/org.jdownloader.extensions.eventscripter.EventScripterExtension.scripts.json:/jdownloader/cfg/org.jdownloader.extensions.eventscripter.EventScripterExtension.scripts.json:ro
 - /home/dev/downloads:/jdownloader/downloads:rw
 restart: unless-stopped
networks:
 dev:
 external: true

org.jdownloader.api.myjdownloader.MyJDownloaderSettings.json

포트 구성

qbittorrent

Tue, 09 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B1[jackett] <-- https/api --> B
 B[qbittorrent] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

.env

vi /opt/qbittorrent/.env

TEL_BOT_KEY=6*********************************************
TEL_CHAT_ID=1*********

docker-compose.yml

vi /opt/qbittorrent/docker-compose.yml

services:
 qbittorrent:
 image: lscr.io/linuxserver/qbittorrent:latest
 container_name: qbittorrent
 networks:
 - dev
 ports:
 - 8080/tcp
 - 6881:6881
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - UMASK=022
 - TZ=Asia/Seoul
 - WEBUI_PORT=8080
 - TORRENTING_PORT=6881
 - TEL_BOT_KEY=$TEL_BOT_KEY
 - TEL_CHAT_ID=$TEL_CHAT_ID
 volumes:
 - /opt/qbittorrent/config:/config:rw
 - /opt/qbittorrent/watched:/watched:rw
 - /home/dev/videos:/videos:rw
 - /home/dev/.local/bin/utils.sh:/config/utils.sh:ro
 - /home/dev/downloads:/downloads:rw
 - /home/dev/videos:/videos:rw
 restart: unless-stopped
networks:
 dev:
 external: true

jackett plugin

vi /opt/qbittorrent/config/qBittorrent/nova3/engines/jackett.json

{
 "api_key": "s*******************************",
 "thread_count": 20,
 "tracker_first": false,
 "url": "https://ja.gvp6nx1a.duckdns.org"
}

완료 시 ¹

vi /opt/qbittorrent/config/qbittorrent_complete.sh

#!/bin/bash
# qbittorrent 다운로드 알림

source /config/utils.sh
log_file=/tmp/$(basename "$0" | sed 's/.sh//').log
msg_file=/tmp/$(basename "$0" | sed 's/.sh//').tmp

gib=$(awk 'BEGIN {printf "%.2f", '"$2"' / (1024 * 1024 * 1024)}')

echo "$1, $gib GiB download completed" > "$log_file"
cp "$log_file" "$msg_file"
send_tel_msg "$TEL_BOT_KEY" "$TEL_CHAT_ID" "$msg_file"
rm "$msg_file"

#do not download 폴더, 파일 삭제
find "/downloads/watched" -type d -name ".unwanted" | sed 's/\/.unwanted/"/' | sed 's/^/"/g' | xargs rm -rf
find "/downloads/watched" -type f -name "*.\!qB"
find "/downloads/complete" -type d -name ".unwanted" | sed 's/\/.unwanted/"/' | sed 's/^/"/g' | xargs rm -rf
find "/downloads/complete" -type f -name "*.\!qB"

host 구성

포트 개방

sudo firewall-cmd --permanent --add-forward-port=port=6****:proto={tcp,udp}:toport=6881 && \
sudo firewall-cmd --reload && \
sudo firewall-cmd --list-all

crond ²

vi ~/.local/bin/update_ipfilter.sh

#!/bin/bash
# ipfilter.dat 데이터베이스 갱신

source /home/dev/.bashrc
source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log
msg_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').tmp

{ curl http://upd.emule-security.org/ipfilter.zip \
 -o /opt/qbittorrent/config/ipfilter.zip
 7z e /opt/qbittorrent/config/ipfilter.zip \
 -o/opt/qbittorrent/config
 mv /opt/qbittorrent/config/guarding.p2p \
 /opt/qbittorrent/config/ipfilter.dat
 rm /opt/qbittorrent/config/ipfilter.zip
} > "$log_file"
show_file_stat /opt/qbittorrent/config/ipfilter.dat > "$msg_file"
send_tel_msg "$TEL_BOT_KEY" "$TEL_CHAT_ID" "$msg_file"
rm "$msg_file"

docker restart qbittorrent && \
grep "IP filter" /opt/qbittorrent/config/qBittorrent/data/logs/qbittorrent.log

Troubleshooting

libtorrent v2.0 메모리 누수

slskd

Tue, 09 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B[slskd] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

host 구성

포트 개방

sudo firewall-cmd --permanent --add-forward-port=port=6****:proto=tcp:toport=2234 && \
sudo firewall-cmd --reload && \
sudo firewall-cmd --list-all

container 구성

docker-compose.yml

vi /opt/slskd/docker-compose.yml

services:
 slskd:
 image: slskd/slskd:latest
 container_name: slskd
 networks:
 - dev
 ports:
 - 5030/tcp
 - 2234:6****/tcp
 user: 1000:1000
 environment:
 - SLSKD_REMOTE_CONFIGURATION=true
 - TZ=Asia/Seoul
 volumes:
 - /opt/slskd/config:/app:rw
 - /home/dev/downloads:/downloads:rw
 - /mnt/pc9xqpnh-gdrive/music:/music:rw
 restart: unless-stopped
networks:
 dev:
 external: true

teldrive

Tue, 09 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B[teldrive] <-- proxy --> C[nginx]
 end
 C <-- https --> D[client]

container 구성

.env

vi /opt/teldrive/.env

POSTGRES_USER=teldrive
POSTGRES_PASSWORD=X***************************************************************

docker-compose.yml

vi /opt/teldrive/docker-compose.yml

services:
 teldrive:
 image: ghcr.io/tgdrive/teldrive:latest
 container_name: teldrive
 networks:
 - dev
 ports:
 - 59314:8080/tcp
 user: 1000:1000
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/teldrive/config/config.toml:/config.toml:rw
 - /opt/teldrive/config/storage.db:/storage.db:rw
 restart: unless-stopped
 depends_on:
 - teldrive_db
 teldrive_db:
 image: groonga/pgroonga:latest-alpine-17
 container_name: teldrive_db
 networks:
 - dev
 user: 1000:1000
 environment:
 - POSTGRES_DB=postgres
 - POSTGRES_USER=$POSTGRES_USER
 - POSTGRES_PASSWORD=$POSTGRES_PASSWORD
 - TZ=Asia/Seoul
 volumes:
 - /opt/teldrive/data:/var/lib/postgresql/data
 restart: unless-stopped
networks:
 dev:
 external: true

config.toml

vi /opt/teldrive/config/config.toml

[db]
data-source = "postgres://teldrive:X***************************************************************@teldrive_db/postgres"

[jwt]
secret = "7***************************************************************"

[tg]
app-id = 2*******
app-hash = "f*******************************"
rate = 50 #ban 되지 않기 위한 속도 제한
rate-burst = 20
rate-limit = true

[tg.stream]
multi-threads = 6
stream-buffers = 20

[tg.uploads]
encryption-key = "b***************************************************************"

db 초기화

sudo rm -rf /opt/teldrive/data/*

proxy 구성

vi /opt/nginx/config/conf.d/include/proxy.conf

proxy_http_version 1.1;

# Proxy SSL
proxy_ssl_server_name on;

# Proxy headers
proxy_set_header Host $host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Forwarded $proxy_add_forwarded;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Protocol $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port $server_port;
proxy_set_header Connection "";

# Proxy timeouts
proxy_connect_timeout 180s;
proxy_send_timeout 180s;
proxy_read_timeout 180s;
...

vi /opt/nginx/config/sites-available/teldrive.conf

...
 location / {
 if ($allowed_country = no) {
 return 403;
 }
 include /etc/nginx/conf.d/include/proxy.conf;
 # webdav 공통
 proxy_buffering off;
 proxy_request_buffering off;
 client_max_body_size 0;
 keepalive_timeout 180s;
 proxy_pass http://teldrive:8080;
 }
...

Troubleshooting

봇 추가 시 속도 하락 (2025-10)

acme.sh

Mon, 08 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A[acme.sh] ---> A2[ssl-cert]
 A2 <---> A3[apps]
 end
 F3[zerossl] -- dns-api --> A

container 구성

.env

vi /opt/.acme/.env

DuckDNS_Token=b*******-****-*********-************

zerossl 계정 등록

docker run -it --rm --name=acme --user=0:0 \
--env-file /opt/.acme/.env \
-e TZ=Asia/Seoul \
-v /opt/.acme:/acme.sh:rw \
neilpang/acme.sh:latest \
acme.sh --set-default-ca --register-account --server zerossl -m x*******-********@yahoo.com --eab-kid j********************* --eab-hmac-key D*************************************************************************************

SSL 인증서 최초 발급

docker run -it --rm --name=acme --user=0:0 \
-e TZ=Asia/Seoul \
-v /opt/.acme:/acme.sh:rw \
neilpang/acme.sh:latest \
acme.sh --issue --dns dns_duckdns -d "$HOSTNAME.duckdns.org" --keylength ec-384 --force && \
docker run -it --rm --name=acme --user=0:0 \
-e TZ=Asia/Seoul \
-v /opt/.acme:/acme.sh:rw \
neilpang/acme.sh:latest \
acme.sh --issue --dns dns_duckdns -d "*.$HOSTNAME.duckdns.org" --keylength ec-384 --force

host 구성

crond ¹

vi /home/dev/.local/bin/acme_cron.sh

#!/bin/bash
# acme.sh 인증서 갱신

source /home/dev/.bashrc
source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log
msg_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').tmp

old_file_date=$(stat --printf="%y" \
 /opt/.acme/"$HOSTNAME".duckdns.org_ecc/fullchain.cer)
old_file_date=$(echo "$old_file_date" | cut -d ' ' -f1 | sed -E 's/-//g')
docker run \
 -i --rm --name=acme --network=dev --user=0:0 \
 --env-file=/opt/.acme/.env \
 -e TZ=Asia/Seoul \
 -v /opt/.acme:/acme.sh:rw \
 neilpang/acme.sh:latest \
 acme.sh --cron --debug > "$log_file"

skip_renew_msg="Skip.*Next renewal time is:.*"
if grep -qoE "$skip_renew_msg" "$log_file"; then
 cert_exp_date="$(date "+%Y%m%d" -d "$old_file_date 90 day")"
fi
total_period=$(get_valid_dates "$old_file_date" "$cert_exp_date" | wc -l)
current_period=$(get_valid_dates "$(date "+%Y%m%d")" "$cert_exp_date" | wc -l)
echo "old_file_date=$old_file_date"
echo "cert_exp_date=$cert_exp_date"
echo "total_period=$total_period"
echo "current_period=$current_period"
{ grep -oE "Your cert key is in:.*|The intermediate CA cert is in:.*|\
And the full chain certs is there:.*|$skip_renew_msg|Error.*" "$log_file"
 if grep -qoE "$skip_renew_msg" "$log_file"; then
 show_progress_bar "$current_period" "$total_period" "d"
 fi
} > "$msg_file"
send_tel_msg "$TEL_BOT_KEY" "$TEL_CHAT_ID" "$msg_file"
rm "$msg_file"

License

상업적 이용 제한 없음

alist (deprecated)

Mon, 08 Dec 2025 00:00:00 +0000

Deprecated

teambition 트래픽 정책 변경과 보안 이슈가 잦음

teambition -> teldrive 마이그레이션 완료 후 삭제할 것

 graph LR
 A1[webdrives] -- mount --- B[alist]
 subgraph gvp6nx1a
 B <-- proxy --> C[nginx]
 end
 C <-- https --> D[rclone]

container 구성

docker-compose.yml

vi /opt/alist/docker-compose.yml

services:
 alist:
 image: xhofe/alist:v3.27.0 #보안 이슈로 롤백 https://singingdalong.blogspot.com/2025/06/Alist-project-issue-8649.html#gsc.tab=0
 container_name: alist
 networks:
 - dev
 ports:
 - 5244:5244/tcp
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - UMASK=022
 - TZ=Asia/Seoul
 volumes:
 - /opt/alist/config:/opt/alist/data:rw
 restart: unless-stopped
networks:
 dev:
 external: true

config.json

로그 생성 차단

docker

Mon, 08 Dec 2025 00:00:00 +0000

host 구성

패키지 설치

Note

docker-compose 패키지 저장소에 추가되었으므로 패키지로 설치해 사용
또한 바이너리명이 변경되었음. docker-compose -> docker compose

sudo dnf config-manager --add-repo=https://download.docker.com/linux/centos/docker-ce.repo && \
sudo dnf update -y && sudo dnf upgrade -y && \
sudo dnf install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin && \
sudo systemctl restart docker && \
sudo systemctl enable docker && \
sudo systemctl status docker.service && \
sudo docker run -it --rm busybox nslookup google.com

docker-compose 설치

sudo curl -L "https://github.com/docker/compose/releases/download/v2.6.0/docker compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker compose && \
sudo chmod +x /usr/local/bin/docker compose && \
sudo ln -s /usr/local/bin/docker compose /usr/bin/docker compose && \
sudo docker compose --version

권한 구성

sudo usermod -aG docker dev
cat /etc/group | grep docker
logout

bridge network

관리 편의를 위해 다수의 컨테이너를 bridge로 구성할 것이다

grafana

Mon, 08 Dec 2025 00:00:00 +0000

 graph TB
 subgraph gvp6nx1a
 A1[loki] -- http --> B[grafana]
 A2[postgresql] -- tcp --> B
 A3[prometheus] -- http --> B
 A4[postgres-exporter] -- http --> A3
 A2 -- tcp --> A4
 E1[promtail] -- http --> A1
 E2[node-exporter] -- http --> A3
 C[nginx] <-- http --> B
 end
 E3[node-exporter] -- https --> A3
 E4[promtail] -- https --> A1
 D[client] <-- https --> C

container 구성

docker-compose.yml

network bridge 구성이어도 host를 허용하도록 구성

immich

Mon, 08 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 B[immich] <-- proxy --> C[nginx]
 G[immich-go] <-- api --> B
 G1[vsftpd] --- G
 end
 C <-- https --> D[client]
 F1[rclone] -- tcp --> G1

container 구성

.env

vi /opt/immich/.env

TZ=Asia/Seoul
IMMICH_VERSION=release
DB_PASSWORD=postgres
DB_USERNAME=postgres
DB_DATABASE_NAME=immich

docker-compose.yml

vi /opt/immich/docker-compose.yml

services:
services:
 immich-server:
 image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
 container_name: immich
 networks:
 - dev
 ports:
 - 2283:2283/tcp
 environment:
 - TZ=Asia/Seoul
 - DB_HOSTNAME=immich-postgres
 - REDIS_HOSTNAME=immich-redis 
 volumes:
 - /opt/immich/data:/data:rw
 restart: unless-stopped
 depends_on:
 - immich-redis
 - immich-postgres
 immich-machine-learning:
 image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
 container_name: immich-machine-learning
 networks:
 - dev
 environment:
 - TZ=Asia/Seoul
 volumes:
 - /opt/immich/cache:/cache:rw
 restart: unless-stopped
 immich-redis:
 image: docker.io/valkey/valkey:8-bookworm@sha256:fea8b3e67b15729d4bb70589eb03367bab9ad1ee89c876f54327fc7c6e618571
 container_name: immich-redis
 networks:
 - dev
 environment:
 - TZ=Asia/Seoul
 restart: unless-stopped
 immich-postgres:
 image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:c44be5f2871c59362966d71eab4268170eb6f5653c0e6170184e72b38ffdf107
 container_name: immich-postgres
 networks:
 - dev
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 - POSTGRES_PASSWORD=${DB_PASSWORD}
 - POSTGRES_USER=${DB_USERNAME}
 - POSTGRES_DB=${DB_DATABASE_NAME}
 - POSTGRES_INITDB_ARGS='--data-checksums'
 volumes:
 - /opt/immich/db_data:/var/lib/postgresql/data
 shm_size: 128mb
 restart: unless-stopped
networks:
 dev:
 external: true

db 초기화

sudo rm -rf /opt/immich/db_data && sudo mkdir /opt/immich/db_data

host 구성

immich-go

로컬 폴더에서 immich 서버로 벌크 업로드

netbootxyz

Mon, 08 Dec 2025 00:00:00 +0000

 graph LR
 A1 -- tftp --> A2[client]
 subgraph agq3mbw2
 B[netbootxyz] -- tftp --> A1[dhcp]
 subgraph sj9n7air
 B <-- proxy --> C[nginx]
 end
 end
 C <-- https --> D[client]

host 구성

포트 개방

tftp: 69번 포트
dhcp: 67번 포트(server, relay agent), 68번 포트(client) ¹

cat /usr/lib/firewalld/services/dhcp.xml | grep port && \
cat /usr/lib/firewalld/services/tftp.xml | grep port
 <port protocol="udp" port="67"/>
 <port protocol="udp" port="69"/>

sudo firewall-cmd --permanent --add-port=69/udp && \
sudo firewall-cmd --permanent --add-port=8080/tcp && \
sudo firewall-cmd --permanent --remove-port=16000/tcp && \
sudo firewall-cmd --permanent --remove-port=10809/tcp && \
sudo firewall-cmd --permanent --remove-port=67/udp && \
sudo firewall-cmd --reload && \
sudo firewall-cmd --list-all

selinux

sudo setsebool -P tftp_anon_write 1 && \
sudo setsebool -P tftp_home_dir 1 && \
getsebool -a | grep tftp

container 구성

docker-compose.yml

vi /opt/netbootxyz/docker-compose.yml

services:
 netbootxyz:
 image: lscr.io/linuxserver/netbootxyz:latest
 container_name: netbootxyz
 networks:
 - dev
 ports:
 - 69:69/udp
 - 3000:3000/tcp
 - 8080:80/tcp
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - TZ=Asia/Seoul
 - PORT_RANGE=30000:30010
 - NGINX_PORT=80
 - WEB_APP_PORT=3000
 volumes:
 - /opt/netbootxyz/config:/config:rw
 - /opt/netbootxyz/assets:/assets:rw
 restart: unless-stopped
networks:
 dev:
 external: true

boot.cfg

vi /opt/netbootxyz/config/menus/local/boot.cfg

...
# set location of custom netboot.xyz live assets
#set live_endpoint https://github.com/netbootxyz
set live_endpoint http://sj9n7air:8080

######################################
# Media Locations for Licensed Distros
######################################
set rhel_base_url
set win_base_url ${live_endpoint}/custom/releases/download/windows11
set github_user dntco43u
...

menu.ipxe

멀티 부팅 ²

nginx

Mon, 08 Dec 2025 00:00:00 +0000

 graph LR
 A5[server] <-- https --> B[nginx]
 subgraph gvp6nx1a
 A1[apps] <-- http --> B[nginx]
 A2[geoip] -- country-code --> B
 B -- log --> A3[promtail]
 A3 -- http --> A7[loki]
 A4[acme.sh] -- ssl-cert --> B
 end
 A7 <-- https --> E[server]
 A6[zerossl] -- dns-api --> A4
 B <-- https --> C1[client]

container 구성

Dockerfile

vi /opt/nginx/Dockerfile

FROM nginx:alpine-slim AS builder
RUN apk update && \
 apk add --no-cache --virtual .build-deps \
 gcc \
 geoip-dev \
 git \
 libc-dev \
 libmaxminddb \
 libmaxminddb-dev \
 make \
 openssl-dev \
 pcre-dev \
 python3-dev \
 py3-pip \
 zlib-dev && \
 rm -rf /var/cache/apk/*
WORKDIR /usr/local
RUN git clone https://github.com/leev/ngx_http_geoip2_module.git --depth=1
RUN wget http://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz && \
 mkdir -p /usr/src && \
 tar -zxC /usr/src -f nginx-${NGINX_VERSION}.tar.gz
RUN CONFARGS=$(nginx -V 2>&1 | sed -n -e 's/^.*arguments: //p') \
 cd /usr/src/nginx-$NGINX_VERSION && \
 ./configure --with-compat $CONFARGS \
 --add-dynamic-module=/usr/local/ngx_http_geoip2_module/ && \
 make && \
 make modules && \
 make install && \
 mkdir -p /usr/local/nginx/modules/
FROM nginx:alpine-slim
COPY --from=builder /usr/local/nginx/modules/ngx_http_geoip2_module.so /usr/lib/nginx/modules/ngx_http_geoip2_module.so
RUN apk update && \
 apk add --no-cache \
 libmaxminddb \
 openssl && \
 rm -rf /var/cache/apk/*

docker build -t e7hnr8ov/nginx:alpine /opt/nginx

docker-compose.yml

network bridge 구성이어도 host를 허용하도록 구성

oci-arm-host-capacity

Mon, 08 Dec 2025 00:00:00 +0000

container 구성

.env ¹

E2.1 Micro (Always Free)에서 실행하고 생성되는 것을 확인
이미지는 AlmaLinux로 설치 후 rockylinux로 마이그레이션됨을 확인

vi /opt/oci-capacity/config/.env

OCI_REGION=ap-seoul-1
OCI_USER_ID=ocid1.user.oc1..a***********************************************************
OCI_TENANCY_ID=ocid1.tenancy.oc1..a***********************************************************
OCI_KEY_FINGERPRINT=7*:**:**:**:**:**:**:**:**:**:**:**:**:**:**:**

# absolute path (including directories) or direct public accessible URL
OCI_PRIVATE_KEY_FILENAME="/opt/oci-arm-host-capacity/dev@oci_api_key.pem"
OCI_SUBNET_ID=ocid1.subnet.oc1.ap-seoul-1.a***********************************************************
OCI_IMAGE_ID=ocid1.image.oc1..a***********************************************************

# Always free ARM: 1,2,3,4. Always free AMD x64: 1
OCI_OCPUS=1

# Always free ARM: 6,12,18,24. NB! Oracle Linux Cloud Developer Image requires minimum 8. Always free AMD x64: 1
OCI_MEMORY_IN_GBS=6

# Or "VM.Standard.E2.1.Micro" for Always free AMD x64
OCI_SHAPE=VM.Standard.A1.Flex
OCI_MAX_INSTANCES=1

# Your public key ~/.ssh/id_rsa.pub contents
# NB! No new lines / line endings allowed! Put inside double quotes
OCI_SSH_PUBLIC_KEY="ssh-ed25519 A******************************************************************* gvp6nx1a-eddsa-key-20230927"

# Is now optional for ARM since Always Free ARMs can be created in any AD.
# ListAvailabilityDomains API call will be used for retrieval https://docs.oracle.com/en-us/iaas/api/#/en/identity/20160918/AvailabilityDomain/ListAvailabilityDomains
#
# NB! Always free AMD x64 instances should be created only in "main" (Always Free Eligible) AD,
# you must set it manually in this case!
#
# If you wanna specify more than one, set as a PHP array in OciConfig constructor (inside index.php file)
OCI_AVAILABILITY_DOMAIN=

# Optional. If not set, default value depends on OCI_IMAGE_ID will be used.
# Minimum is 47 for AMD x64 or 50 for ARM, maximum is 200 for Always Free accounts
OCI_BOOT_VOLUME_SIZE_IN_GBS=50

# Optional. If set, will be used instead OCI_IMAGE_ID. Cannot be used together with OCI_BOOT_VOLUME_SIZE_IN_GBS.
# Open https://cloud.oracle.com/block-storage/boot-volumes, click non-used and copy it's OCID
# NB! You must specify OCI_AVAILABILITY_DOMAIN also as they should be located in the same one
OCI_BOOT_VOLUME_ID=gvp6nx1a

OCI_IN_TRANSIT_ENCRYPTION=false

Dockerfile

vi /opt/oci-capacity/Dockerfile

FROM alpine:3.19
ENV TZ=Asia/Seoul
RUN apk update && \
 apk add --no-cache tzdata \
 php82 \
 php82-curl \
 php82-dom \
 php82-tokenizer \
 php82-xmlwriter \
 php82-xml \
 composer \
 git && \
 ln -sf /usr/share/zoneinfo/$TZ /etc/localtime && \
 echo $TZ > /etc/timezone && \
 cd /opt && \
 git clone https://github.com/hitrov/oci-arm-host-capacity.git && \
 cd /opt/oci-arm-host-capacity && \
 composer install && \
 apk del git && \
 rm /var/cache/apk/*
EXPOSE 80

docker build -t e7hnr8ov/oci-arm-host-capacity:alpine /opt/oci-capacity

host 구성

crond ²

vi ~/.local/bin/oci.sh

#!/bin/bash
# oci arm 인스턴스 생성

source /home/dev/.bashrc
source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log

for (( ; ; )); do
 docker run \
 -i --rm --name=oci-capacity --network=dev --user=0:0 \
 -e TZ=Asia/Seoul \
 -v /opt/oci-capacity/config/dev@oci_api_key.pem:/opt/oci-arm-host-capacity/dev@oci_api_key.pem:ro \
 -v /opt/oci-capacity/config/.env:/opt/oci-arm-host-capacity/.env:ro \
 e7hnr8ov/oci-capacity:alpine \
 php82 /opt/oci-arm-host-capacity/index.php > "$log_file"
 sleep 10
done

oci 콘솔

oracle/instantclient

Mon, 08 Dec 2025 00:00:00 +0000

container 구성

Dockerfile (x86)

sudo vi /opt/instantclient/Dockerfile

#FIXME: ubuntu 최신 버전 libaio1 없으므로 22.04로 build
FROM ubuntu:22.04
ARG DEBIAN_FRONTEND=noninteractive
ENV TZ=Asia/Seoul
ENV ORACLE_HOME=/opt/oracle/instantclient
ENV PATH=$PATH:$ORACLE_HOME
ENV LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$ORACLE_HOME
ENV SQLPATH=${INSTANT_CLIENT_PATH}:${SQLPATH}
ENV TNS_ADMIN=/opt/oracle/instantclient/network/admin
RUN apt-get update && \
 apt-get install -y tzdata \
 libaio1 \
 python3 \
 python3-pip \
 curl \
 unzip && \
 ln -sf /usr/share/zoneinfo/$TZ /etc/localtime && \
 echo $TZ > /etc/timezone && \
 echo /opt/oracle/instantclient > /etc/ld.so.conf.d/oic.conf && \
 ldconfig && \
 curl https://download.oracle.com/otn_software/linux/instantclient/1919000/instantclient-basiclite-linux.x64-19.19.0.0.0dbru.el9.zip -so /tmp/instantclient.zip && \
 unzip -o /tmp/instantclient.zip -d /opt/oracle && \
 rm /tmp/instantclient.zip && \
 curl https://download.oracle.com/otn_software/linux/instantclient/1919000/instantclient-sqlplus-linux.x64-19.19.0.0.0dbru.el9.zip -so /tmp/instantclient.zip && \
 unzip -o /tmp/instantclient.zip -d /opt/oracle && \
 rm /tmp/instantclient.zip && \
 curl https://download.oracle.com/otn_software/linux/instantclient/1919000/instantclient-tools-linux.x64-19.19.0.0.0dbru.el9.zip -so /tmp/instantclient.zip && \
 unzip -o /tmp/instantclient.zip -d /opt/oracle && \
 rm /tmp/instantclient.zip && \
 cd /opt/oracle && \
 mv instantclient_19_19 instantclient && \
 python3 -m pip install --no-cache-dir pip && \
 python3 -m pip install --no-cache-dir oracledb && \
 apt-get purge -y python3-pip \
 curl \
 unzip && \
 apt-get autoremove -y && \
 apt-get clean autoclean && \
 rm -rf /var/lib/apt/lists/*

docker build -t e7hnr8ov/oracle-instantclient:alpine /opt/instantclient

Dockerfile (arm)

sudo vi /opt/instantclient/Dockerfile

FROM python:alpine
ENV TZ Asia/Seoul
ENV LD_LIBRARY_PATH /opt/oracle/instantclient
RUN apk update && \
 apk add --no-cache g++ \
 libaio \
 libc6-compat \
 curl && \
 curl https://download.oracle.com/otn_software/linux/instantclient/191000/instantclient-basiclite-linux.arm64-19.10.0.0.0dbru.zip -so /tmp/instantclient.zip && \
 unzip -o /tmp/instantclient.zip -d /opt/oracle && \
 cd /opt/oracle && \
 mv instantclient_19_10 instantclient && \
 ln -s /opt/oracle/instantclient/libclntsh.so.19.1 /usr/lib/libclntsh.so && \
 ln -s /opt/oracle/instantclient/libocci.so.19.1 /usr/lib/libocci.so && \
 ln -s /opt/oracle/instantclient/libociicus.so /usr/lib/libociicus.so && \
 ln -s /opt/oracle/instantclient/libnnz19.so /usr/lib/libnnz19.so && \
 ln -s /lib/libc.so.6 /usr/lib/libresolv.so.2 && \
 rm /tmp/instantclient.zip && \
 python -m pip install --no-cache-dir cx_Oracle && \
 apk del curl && \
 rm /var/cache/apk/*

docker build -t e7hnr8ov/oracle-instantclient:alpine /opt/instantclient

host 구성

crond

일정 기간 db 유휴 시 데이터 삭제를 공지하고 있으므로 매일 테스트 스키마를 갱신하도록 구성 ¹ ²

#!/bin/bash
# oci oralcedb 유휴 방지

source /home/dev/.bashrc
source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log
msg_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').tmp

user=HR
pass=z*****************************
url="'(description= (retry_count=20)(retry_delay=3)(address=(protocol=tcps)(port=1521)(host=adb.ap-seoul-1.oraclecloud.com))(connect_data=(service_name=g**************_********_tpurgent.adb.oraclecloud.com))(security=(ssl_server_dn_match=yes)))'"
docker run \
 -i --rm --name=instantclient-cqa7wtjg --network=dev --user=0:0 \
 --env-file /opt/instantclient/.env \
 -e TZ=Asia/Seoul \
 -v /opt/instantclient/config/wallet_cqa7wtjg:/opt/oracle/instantclient/network/admin:ro \
 -v /opt/instantclient/data:/data:rw \
 e7hnr8ov/instantclient:ubuntu \
 /bin/bash -c "exit | sqlplus $user/$pass@$url @/data/hr_schema/drop.sql" > "$log_file"
tail -n4 "$log_file" | head -n1 > "$msg_file"

docker run \
 -i --rm --name=instantclient-cqa7wtjg --network=dev --user=0:0 \
 --env-file /opt/instantclient/.env \
 -e TZ=Asia/Seoul \
 -v /opt/instantclient/config/wallet_cqa7wtjg:/opt/oracle/instantclient/network/admin:ro \
 -v /opt/instantclient/data:/data:rw \
 e7hnr8ov/instantclient:ubuntu \
 /bin/bash -c "exit | sqlplus $user/$pass@$url @/data/hr_schema/make.sql" >> "$log_file"
tail -n4 "$log_file" | head -n1 >> "$msg_file"

send_tel_msg "$TEL_BOT_KEY" "$TEL_CHAT_ID" "$msg_file"
rm "$msg_file"

#!/bin/bash
# oci oralcedb 유휴 방지

source /home/dev/.bashrc
source /home/dev/.local/bin/utils.sh
log_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').log
msg_file=/home/dev/.local/log/$(basename "$0" | sed 's/.sh//').tmp

user=HR
pass=B*****************************
url="'(description= (retry_count=20)(retry_delay=3)(address=(protocol=tcps)(port=1521)(host=adb.ap-seoul-1.oraclecloud.com))(connect_data=(service_name=g**************_********_high.adb.oraclecloud.com))(security=(ssl_server_dn_match=yes)))'"
docker run \
 -i --rm --name=instantclient-dwc8khum --network=dev --user=0:0 \
 --env-file /opt/instantclient/.env \
 -e TZ=Asia/Seoul \
 -v /opt/instantclient/config/wallet_dwc8khum:/opt/oracle/instantclient/network/admin:ro \
 -v /opt/instantclient/data:/data:rw \
 e7hnr8ov/instantclient:ubuntu \
 /bin/bash -c "exit | sqlplus $user/$pass@$url @/data/hr_schema/drop.sql" > "$log_file"
tail -n4 "$log_file" | head -n1 > "$msg_file"

docker run \
 -i --rm --name=instantclient-dwc8khum --network=dev --user=0:0 \
 --env-file /opt/instantclient/.env \
 -e TZ=Asia/Seoul \
 -v /opt/instantclient/config/wallet_dwc8khum:/opt/oracle/instantclient/network/admin:ro \
 -v /opt/instantclient/data:/data:rw \
 e7hnr8ov/instantclient:ubuntu \
 /bin/bash -c "exit | sqlplus $user/$pass@$url @/data/hr_schema/make.sql" >> "$log_file"
tail -n4 "$log_file" | head -n1 >> "$msg_file"

send_tel_msg "$TEL_BOT_KEY" "$TEL_CHAT_ID" "$msg_file"
rm "$msg_file"

wireguard

Mon, 08 Dec 2025 00:00:00 +0000

 graph LR
 subgraph iptables
 subgraph bridge-network
 A1[docker/wireguard] <--> B[docker]
 A2[apps] <--> B
 end
 subgraph host-network
 C[host] <--> C1[package/wireguard]
 end
 end
 A1 <-- udp --> D[client]
 C1 <-- udp --> D
 B <-- wireguard 라우팅 방법을 찾지 못함 --> C

host 구성

포트 개방

sudo firewall-cmd --permanent --add-port=6****/udp && \
sudo firewall-cmd --reload && \
sudo firewall-cmd --list-all

container 구성

docker-compose.yml

vi /opt/wireguard/docker-compose.yml

services:
 wireguard:
 image: linuxserver/wireguard:1.0.20210914
 container_name: wireguard
 networks:
 - dev
 ports:
 - 6****:6****/udp
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - TZ=Asia/Seoul
 - PEERS=1
 - PEERDNS=auto
 - LOG_CONFS=false
 volumes:
 - /usr/src:/usr/src:ro
 - /lib/modules:/lib/modules:ro
 - /opt/wireguard/config/wg_confs/wg0.conf:/config/wg_confs/wg0.conf:ro
 - /opt/wireguard/config/coredns/Corefile:/config/coredns/Corefile:ro
 cap_add:
 - NET_ADMIN
 - SYS_MODULE
 sysctls:
 - net.ipv4.conf.all.src_valid_mark=1
 restart: unless-stopped
networks:
 dev:
 external: true

key 생성

docker exec -it wireguard /bin/sh && \
umask 077 && \
wg genkey | tee /etc/wireguard/server.key | wg pubkey > /etc/wireguard/server.pub && \
wg genkey | tee /etc/wireguard/client.key | wg pubkey > /etc/wireguard/client.pub && \
wg genpsk > /etc/wireguard/client.psk && \
cat /etc/wireguard/server.key && \
cat /etc/wireguard/server.pub && \
cat /etc/wireguard/client.key && \
cat /etc/wireguard/client.pub && \
cat /etc/wireguard/client.psk

wg0.conf

vi /opt/wireguard/config/wg_confs/wg0.conf

[Interface]
Address = 10.10.0.4/32
ListenPort = 6****
PrivateKey = +******************************************=
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth+ -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth+ -j MASQUERADE

[Peer]
PublicKey = t******************************************=
PresharedKey = h******************************************=
AllowedIPs = 10.10.0.0/24
PersistentKeepalive = 25

Corefile

coredns healthcheck 비활성화

docker on 대충어쩌고저쩌고샬라샬라

azvj6fml

GitHub repository

container 구성

Dockerfile

docker-compose.yml

host 구성

post_build.sh 1

logrotate

esportshelper (deprecated)

container 구성

docker-compose.yml

config.yaml

webhook 구성

freshrss

container 구성

docker-compose.yml

구성

g4f

container 구성

docker-compose.yml (arm)

proxy 구성

gitea

container 구성

docker-compose.yml

key

guacamole

container 구성

docker-compose.yml

proxy 구성

Troubleshooting

hugo

container 구성

docker-compose.yml

docsy 테마 1

giscus 댓글 3

기타

favicon

host 구성

deploy_hugo.sh 5

github 구성

deploy-hugo.yml

SEO

Troubleshooting

jackett

container 구성

docker-compose.yml

host 구성

logrotate

jellyfin

container 구성

docker-compose.yml

Transcoding

jenkins

container 구성

docker-compose.yml

초기 암호

github ssh

github webooks

kavita

container 구성

docker-compose.yml

라이브러리 구조 1

loki

container 구성

docker-compose.yml

local-config.yaml

navidrome

.env

docker-compose.yml

pgsql-exporter

container 구성

.env

docker-compose.yml

privatebin

container 구성

docker-compose.yml

proxy 구성

prometheus

container 구성

post_build.sh ¹

docsy 테마 ¹

giscus 댓글 ³

deploy_hugo.sh ⁵

라이브러리 구조 ¹

docker-compose.yml ¹

bdkqpr0x.sh ¹

post_build.sh ²