Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
GitHub - rutvik24/docker: Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling. · GitHub
Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Force GitHub README to respect dark mode (function() { var style = document.createElement('style'); style.textContent = ' .markdown-body { color-scheme: dark light; } .markdown-body pre { background: #161b22 !important; } .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; } .markdown-body table th, .markdown-body table td { border-color: #30363d !important; } .markdown-body img { background: #0d1117; } .markdown-body blockquote { border-left-color: #8b949e; } .markdown-body hr { border-color: #30363d; } '; document.head.appendChild(style); })(); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' GitHub - rutvik24/docker: Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling. · GitHub
Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Highlight search terms from Google/DuckDuckGo/Bing referrer (function() { var ref = document.referrer; var terms = []; if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) { var url = new URL(ref); var q = url.searchParams.get('q') || url.searchParams.get('p'); if (q) { terms = q.split(/\s+/).filter(function(t) { return t.length > 2; }); } } if (terms.length === 0) return; var style = document.createElement('style'); style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }'; document.head.appendChild(style); function highlight(node) { if (node.nodeType === 3) { // text node var text = node.textContent; var found = false; terms.forEach(function(term) { var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' GitHub - rutvik24/docker: Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling. · GitHub
Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ' GitHub - rutvik24/docker: Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling. · GitHub
Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' GitHub - rutvik24/docker: Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling. · GitHub
Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' GitHub - rutvik24/docker: Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling. · GitHub
Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Universal Dark Mode - works on any site (function() { var enabled = true; function applyDarkMode() { if (!enabled) return; // Create style element if it doesn't exist var style = document.getElementById('universal-dark-mode-style'); if (!style) { style = document.createElement('style'); style.id = 'universal-dark-mode-style'; document.head.appendChild(style); } // Dark mode CSS - inverts colors but preserves images/video style.textContent = ' /* Invert everything except media */ html { filter: invert(1) hue-rotate(180deg) !important; background: #1a1a2e !important; } /* Restore images, videos, iframes, canvas */ img, video, iframe, canvas, svg, picture, [style*="background-image"] { filter: invert(1) hue-rotate(180deg) !important; } /* Preserve specific elements that should not be inverted */ .no-dark-mode, .no-dark-mode *, [data-theme="light"], [data-theme="light"], .ace_editor, .ace_editor *, .CodeMirror, .CodeMirror *, .monaco-editor, .monaco-editor *, .markdown-body pre, .markdown-body pre *, .highlight, .highlight *, pre code, pre code * { filter: none !important; } /* Fix common UI elements */ .modal, .popup, .dropdown-menu, .tooltip, .popover { filter: invert(1) hue-rotate(180deg) !important; background: #2d2d44 !important; border-color: #444 !important; } /* Scrollbars */ ::-webkit-scrollbar { background: #1a1a2e !important; } ::-webkit-scrollbar-thumb { background: #444 !important; } ::-webkit-scrollbar-thumb:hover { background: #555 !important; } /* Selection */ ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; } ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; } '; } function removeDarkMode() { var style = document.getElementById('universal-dark-mode-style'); if (style) style.remove(); } // Toggle with Alt+Shift+D document.addEventListener('keydown', function(e) { if (e.altKey && e.shiftKey && e.key === 'D') { e.preventDefault(); enabled = !enabled; if (enabled) { applyDarkMode(); console.log('[Universal Dark Mode] Enabled'); } else { removeDarkMode(); console.log('[Universal Dark Mode] Disabled'); } } }); // Apply on load applyDarkMode(); // Re-apply on dynamic content var observer = new MutationObserver(function(mutations) { if (enabled && !document.getElementById('universal-dark-mode-style')) { applyDarkMode(); } }); observer.observe(document.head, { childList: true }); console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle'); })(); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })(); GitHub - rutvik24/docker: Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling. · GitHub
Skip to content

Repository files navigation

Docker stacks & Kubernetes snippets

Personal collection of Docker Compose definitions and a few Kubernetes manifests for reverse proxies, databases, dev environments, and self-hosted tools. Stacks are meant to be copied, trimmed, or adapted—most assume a shared Docker network for Traefik (or compatible) ingress.

Prerequisites

  • Docker and Docker Compose v2+
  • For TLS via Traefik: DNS/API tokens or HTTP challenge reachability, depending on resolver (see traefik/data/traefik.yml)
  • Many services attach to an external network named proxy (create once before starting dependent stacks):
docker network create proxy

How pieces fit together

flowchart LR
subgraph edge [Edge]
T[Traefik or Caddy / NPM]
end
subgraph stacks [Compose stacks]
A[Apps]
D[(Databases)]
U[Utilities]
end
T --> A
A --> D
stacks --> T
Loading
  • Traefik (traefik/) reads the Docker socket, applies labels on containers, and can load extra file configs from traefik/data/configs/. Static config lives in traefik/data/traefik.yml (entrypoints, ACME resolvers, logging, trusted IPs).
  • Alternative proxies: caddy/, proxy/ (nginx-proxy + ACME companion), db-traefik/, waf/.
  • Stacks that expose HTTP(S) typically join the proxy network and set Traefik labels (or virtual host env vars for nginx-proxy).

Repository layout

PathPurpose
traefik/Traefik reverse proxy, dashboard, Cloudflare DNS challenge env (CFAPI), basic auth for dashboard
caddy/Caddy reverse proxy
proxy/nginx-proxy + acme-companion (Let’s Encrypt)
db-traefik/Traefik-oriented DB / related compose
waf/WAF layer in front of services
cloudflare-tunnel/Cloudflare Tunnel (cloudflared) for exposing services without opening ports
laravel/Full Laravel dev stack: PHP-FPM, Nginx, MySQL, Redis, Mailpit, Composer service
node-app/Small Node/Bun app with its own compose.yml
nginx/Nginx with static html/
postgres/, mysql/Database-only stacks
adminer/, adminer-2/Database admin UI
cloudbeaver/Web SQL client / analytics
mailpit/SMTP capture and web UI for local mail
n8n/Workflow automation (Traefik labels, env for host/TZ)
vaultwarden/Bitwarden-compatible server
shlink/URL shortener
qdrant/Vector database
pi-hole/DNS ad-blocking
watchtower/Automatic container image updates
dockscope/Visual Docker dashboard (3D graph, metrics, logs, terminal)
pdf-editor/PDF tooling stack
authorizer/Auth-related service
kali/, kali-rdp/, ubuntu-rdp/Desktop / security lab containers (RDP)
kubernetes/Example server-manager deployment, service, ingress

Folder-level notes:

  • traefik/README.md — basic auth hash for Traefik dashboard, .env setup, Cloudflare token permissions.
  • laravel/Readme.md — Laravel-specific Docker usage.

Environment variables & secrets

  • Do not commit real .env files or certificate stores; this repo’s .gitignore excludes common paths (*.env in many trees, certs, data in some cases, etc.). Use each stack’s .env.example when present (e.g. traefik/.env.example, cloudflare-tunnel/.env.example, n8n/.env.example).
  • Replace hostnames, email addresses, and ACME resolver settings in traefik/data/traefik.yml and in compose labels to match your domain and infrastructure.
  • For Traefik dashboard protection, generate an htpasswd line and put the escaped value in your env file as documented in traefik/README.md.

Running a stack (typical)

From the directory that contains compose.yaml / compose.yml:

docker compose up -d

If the file uses networks: proxy: external: true, ensure the proxy network exists and that Traefik (or your chosen edge proxy) is on the same network.

Order of operations for a Traefik-based lab:

  1. Create proxy network (once).
  2. Start traefik/ (configure traefik/data/traefik.yml, certs/acme.json permissions, and .env).
  3. Start individual app stacks; enable routing with traefik.enable=true and router/service labels as in examples (e.g. n8n/compose.yml).

Kubernetes

Manifests under kubernetes/ are examples (deployment, service, ingress). They are independent of Compose; apply with kubectl only after adjusting namespaces, images, and ingress class to match your cluster.

Security & operations notes

  • Review published ports in each compose file before running on a public host; bind to 127.0.0.1 where appropriate (see n8n as an example).
  • Prefer read-only roots and no-new-privileges where already modeled (e.g. Traefik service).
  • Rotate API tokens (Cloudflare, etc.) if this repo was ever shared with real credentials in history—treat compose labels and static YAML as configuration, not secret storage.

License

This project is licensed under the MIT License.

About

Docker Compose stacks and Kubernetes snippets for self-hosted services, reverse proxies, databases, and dev tooling.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages