Docker Images

Adguard

docker run --name adguardhome --restart unless-stopped \
-v Adguard_Data:/opt/adguardhome/work -v Adguard_Conf:/opt/adguardhome/conf \
-p 53:53/tcp -p 53:53/udp -p 67:67/udp -p 68:68/udp -p 88:80/tcp -p 450:443/tcp \
-p 450:443/udp -p 3000:3000/tcp -p 853:853/tcp -p 784:784/udp -p 853:853/udp \
-p 8853:8853/udp -p 5443:5443/tcp -p 5443:5443/udp -d adguard/adguardhome

Unifi-Controller

docker run -d \
  --name=unifi-controller \
  -e PUID=1000 \
  -e PGID=1000 \
  -e MEM_LIMIT=1024 `#optional` \
  -e MEM_STARTUP=1024 `#optional` \
  -p 8443:8443 \
  -p 3478:3478/udp \
  -p 10001:10001/udp \
  -p 8080:8080 \
  -p 1900:1900/udp `#optional` \
  -p 8843:8843 `#optional` \
  -p 8880:8880 `#optional` \
  -p 6789:6789 `#optional` \
  -p 5514:5514/udp `#optional` \
  -v Unifi_Data:/config \
  --restart unless-stopped \
  lscr.io/linuxserver/unifi-controller:latest

Homarr

docker run  \
  --name homarr \
  --restart unless-stopped \
  -p 7575:7575 \
  -v Homarr_Data:/app/data/configs \
  -d ghcr.io/ajnart/homarr:latest

Nextcloud

docker run -d \
  --name=nextcloud \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=Europe/London \
  -p 444:443 \
  -v Nextcloud_Conf:/config \
  -v /srv/dev-disk-by-uuid-0432c0f3-964c-4cca-8380-10f4e4851715/Nextcloud:/data \
  --restart unless-stopped \
  lscr.io/linuxserver/nextcloud:latest

NginxProxyManager

docker run -d \
    --name=nginx-proxy-manager \
    -p 8181:8181 \
    -p 8080:8080 \
    -p 4443:4443 \
    -v NPM_Data:/config:rw \
    jlesage/nginx-proxy-manager

Wireguard + UI

version: "3.7"
services:
  wireguard:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
      - PEERS=1 #optional
      - PEERDNS=auto #optional
      - ALLOWEDIPS=0.0.0.0/0 #optional
      - LOG_CONFS=true #optional
    volumes:
      - WG_Conf:/config
      - WG_Data:/lib/modules
    ports:
      - 51820:51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped

    networks:
      - proxy

  wg-ui:
    image: ngoduykhanh/wireguard-ui:latest
    container_name: wg-ui
    cap_add:
      - NET_ADMIN
    network_mode: service:wireguard
    environment:
      - SESSION_SECRET
      - WGUI_USERNAME=admin
      - WGUI_PASSWORD=password
    logging:
      driver: json-file
      options:
        max-size: 50m
    volumes:
      - WG_UI_Conf:/app/db
      - WG_UI_Conf:/etc/wireguard

networks:
  proxy:
    external: true

Traefik Compose:

version: '3'
services:
  traefik:
    image: traefik:latest
    container_name: traefik
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - proxy
    ports:
      - 87:80
      - 445:443
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /var/lib/docker/volumes/Traefik_Data/_data/traefik.yml:/traefik.yml:ro
      - /var/lib/docker/volumes/Traefik_Data/_data/acme.json:/acme.json
      - /var/lib/docker/volumes/Traefik_Data/_data/dynamic_conf.yml:/dynamic_conf.yml
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=http"
      - "traefik.http.routers.traefik.rule=Host(`traefik.example.com`)"
      - "traefik.http.middlewares.traefik-auth.basicauth.users=USER:PASSWORD"
      - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
      - "traefik.http.routers.traefik-secure.entrypoints=https"
      - "traefik.http.routers.traefik-secure.rule=Host(`traefik.example.com`)"
      - "traefik.http.routers.traefik-secure.tls=true"
      - "traefik.http.routers.traefik-secure.tls.certresolver=http"
      - "traefik.http.routers.traefik-secure.service=api@internal"
      - "providers.file.filename=/dynamic_conf.yml"
      - "traefik.http.routers.traefik-secure.middlewares=secHeaders@file,traefik-auth"
networks:
  proxy:
    external: true