149 lines
5.0 KiB
Markdown
149 lines
5.0 KiB
Markdown
# Vue ensemble des services
|
|
|
|
## Architecture
|
|
|
|
```
|
|
Client (Mac/iPhone)
|
|
|
|
|
| HTTPS (certificat Caddy CA)
|
|
v
|
|
[Caddy] :443
|
|
|
|
|
+-- forward_auth --> [Authelia] :9091
|
|
| |
|
|
| (si authentifié)
|
|
| |
|
|
+-------------------------+
|
|
|
|
|
v
|
|
Services Docker
|
|
```
|
|
|
|
## Services actifs (24 containers)
|
|
|
|
### 🎬 Média
|
|
| Service | Container | Port | Description |
|
|
|---------|-----------|------|-------------|
|
|
| Jellyfin | jellyfin | 8096 | Streaming vidéo avec transcodage hardware (VideoCore) |
|
|
| Transmission | transmission | 9091, 51413 | Client BitTorrent avec web UI |
|
|
|
|
### ✅ Productivité
|
|
| Service | Container | Port | Description |
|
|
|---------|-----------|------|-------------|
|
|
| Vikunja | vikunja | 3456 | Gestion de tâches style Todoist/Trello avec CalDAV |
|
|
| Outline | outline + outline-db + outline-redis | 3000 | Wiki collaboratif avec OIDC (PostgreSQL + Redis) |
|
|
| Linkwarden | linkwarden + linkwarden-db | 3000 | Gestionnaire de bookmarks avancé avec archivage |
|
|
| LanguageTool | languagetool | 8010 | Serveur de correction grammaticale (FR/EN/DE) |
|
|
|
|
### 🔧 Infrastructure
|
|
| Service | Container | Port | Description |
|
|
|---------|-----------|------|-------------|
|
|
| Portainer | portainer | 9000 | Interface de gestion Docker |
|
|
| Dockge | dockge | 5001 | Interface Docker Compose |
|
|
| Gitea | gitea | 3000, 22 | Serveur Git avec SSO Authelia |
|
|
| MkDocs | mkdocs | 8000 | Cette documentation |
|
|
|
|
### 📊 Monitoring
|
|
| Service | Container | Port | Description |
|
|
|---------|-----------|------|-------------|
|
|
| Grafana | grafana | 3000 | Dashboards et visualisation (header auth via Authelia) |
|
|
| Netdata | netdata | 19999 | Monitoring système temps réel |
|
|
| Uptime Kuma | uptime-kuma | 3001 | Surveillance uptime des services |
|
|
| Loki | loki | 3100 | Agrégation de logs |
|
|
| Promtail | promtail | - | Collecte de logs pour Loki |
|
|
| Syslog-ng | syslog-ng | 1514 | Collecte syslog centralisée |
|
|
|
|
### 🏠 Domotique
|
|
| Service | Container | Port | Description |
|
|
|---------|-----------|------|-------------|
|
|
| Home Assistant | homeassistant | 8123 | Automatisation domotique (mode host network) |
|
|
|
|
### 🔐 Sécurité
|
|
| Service | Container | Port | Description |
|
|
|---------|-----------|------|-------------|
|
|
| Authelia | authelia | 9091 | SSO, 2FA, OIDC provider |
|
|
| CrowdSec | crowdsec | - | IDS/IPS collaboratif |
|
|
| Caddy | caddy | 80, 443 | Reverse proxy avec TLS automatique |
|
|
|
|
### 🔄 Maintenance
|
|
| Service | Container | Port | Description |
|
|
|---------|-----------|------|-------------|
|
|
| Watchtower | watchtower | 8080 | Mise à jour auto des containers (4h00) |
|
|
|
|
## Répertoires Docker
|
|
|
|
```
|
|
~/docker/
|
|
├── authelia/ # Config SSO
|
|
├── caddy/ # Caddyfile + certificats
|
|
├── crowdsec/ # Config IDS
|
|
├── dockge/ # Stacks Dockge
|
|
├── docs/ # MkDocs (cette doc)
|
|
├── gitea/ # Config + data Gitea
|
|
├── grafana/ # Dashboards
|
|
├── homeassistant/ # Config HA
|
|
├── languagetool/ # Config LT
|
|
├── linkwarden/ # Config Linkwarden
|
|
├── outline/ # Config Outline
|
|
├── syslog-ng/ # Config syslog
|
|
├── talloires/ # Stack principal (docker-compose.yml)
|
|
├── uptime-kuma/ # Data Uptime Kuma
|
|
├── vikunja/ # Config Vikunja
|
|
└── zeronsd/ # DNS ZeroTier
|
|
```
|
|
|
|
## Réseau
|
|
|
|
| Réseau | Plage | Usage |
|
|
|--------|-------|-------|
|
|
| ZeroTier | 10.144.0.0/16 | Accès distant |
|
|
| Docker talloires_net | 172.20.0.0/16 | Inter-containers |
|
|
| LAN physique | 10.171.171.0/24 | Réseau local |
|
|
|
|
### Adresses ZeroTier clés
|
|
| Serveur | IP |
|
|
|---------|-----|
|
|
| Talloires (Pi5) | 10.144.221.22 |
|
|
| Annecy (Synology) | 10.144.78.193 |
|
|
| Olympou (Mac) | 10.144.46.46 |
|
|
|
|
## Stockage
|
|
|
|
| Mount | Source | Usage |
|
|
|-------|--------|-------|
|
|
| /mnt/mediaserver | USB SSD 4TB | Films, Séries, Downloads, Databases |
|
|
| ~/docker | SD Card | Configs Docker légères |
|
|
|
|
### Structure USB (/mnt/mediaserver)
|
|
```
|
|
/mnt/mediaserver/
|
|
├── databases/
|
|
│ ├── languagetool/ngrams/ # N-grams FR/EN/DE (~8GB)
|
|
│ └── outline/
|
|
│ ├── data/ # Fichiers Outline
|
|
│ ├── postgres/ # PostgreSQL Outline
|
|
│ └── redis/ # Redis Outline
|
|
├── downloads/ # Transmission
|
|
├── movies/ # Films (Jellyfin)
|
|
└── series/ # Séries (Jellyfin)
|
|
```
|
|
|
|
## Backup
|
|
|
|
| Paramètre | Valeur |
|
|
|-----------|--------|
|
|
| Destination | Annecy (Synology) |
|
|
| Schedule | 3h00 quotidien |
|
|
| Rétention | 7 jours |
|
|
| Méthode | tar over SSH |
|
|
|
|
Voir [Scripts de maintenance](../reference/scripts.md) pour les détails.
|
|
|
|
## Maintenance automatique
|
|
|
|
| Tâche | Schedule | Outil |
|
|
|-------|----------|-------|
|
|
| Mise à jour containers | 4h00 | Watchtower |
|
|
| Backup vers Annecy | 3h00 | backup-to-annecy.sh (cron) |
|
|
| Nettoyage images | Après update | docker image prune |
|