From 3561b6d86c329272b1825adaf3ca49c9aff76119 Mon Sep 17 00:00:00 2001 From: Thomas Vanbesien Date: Thu, 12 Feb 2026 21:24:22 +0100 Subject: Refactor - Remove cgit files; pull cgit image from Docker Hub instead of building locally - Tidy up file hierarchy - Minor fixes and edits --- readme.md | 37 ++++++++++++------------------------- 1 file changed, 12 insertions(+), 25 deletions(-) (limited to 'readme.md') diff --git a/readme.md b/readme.md index 0e199b6..345e719 100644 --- a/readme.md +++ b/readme.md @@ -1,39 +1,26 @@ # net_services -This is personal project about services on the network I provide for myself. +A stack of services exposed over the network. -I want to handle as much of my data myself. For privacy and for the challenge. I also want to serve apps for my friends. +The services run in Docker containers and are routed through Nginx. -I set this up on a VPS with a static IP. I also bought a domain name `tvcloud.fr` to point to the VPS. Some services run on the VPS itself. Some others are run with Docker. Nginx is used as endpoint. +Sensitive data is not stored on the disk when containers start. It is copied into a tmpfs within the container. ## How-to -1. Create a `.env`. See `example.env`. +1. Create a `.env`; see `example.env` + +1. Build and run the services -1. Build and run the services. - ``` - ./build.command + ./tools/build docker compose up ``` -## Handling data - -Data of various types has to be handled in different ways. - -* **Passwords**: A KeePassXC database shared with Syncthing. - -* **Git repositories**: A remote server accesible over SSH for push. And also a web front-end (cgit). - -* **Calendars, to-dos, journals, and contacts**: A Radicale server. - I could just synchronize the `.ics`/`.vcf` files, but a CalDAV/CarDAV server is compatible with mobile applications. +1. Add Radicale user -* **Remote storage**: SFTP for large files. Syncthing for moderately large data that is better synchronized than downloaded manually. + You can add as many as you want. -## Security - -TODO (sensitive data in tmpfs) - -### Firewalls - -TODO (OVH, iptables, docker+iptables+reboot bug) + ``` + htpasswd ${HOST__RADICALE_USERS_DIR}/.htpasswd username + ``` -- cgit v1.2.3