update scripts and work on server setup

scripts/disk-array

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Variables (edit these as needed)
+ARRAY_NAME="md0"
+MOUNT_POINT="/mnt/md0"
+MDADM_CONF="/etc/mdadm/mdadm.conf"
+
+# Colors
+RED="\e[31m"
+GREEN="\e[32m"
+YELLOW="\e[33m"
+MAGENTA="\e[35m"
+CYAN="\e[36m"
+BOLD="\e[1m"
+NC="\e[0m"
+
+echo "${CYAN}${BOLD}=== RAID Array Setup Script ===${NC}"
+
+if ! sudo mdadm --help >/dev/null 2>&1; then
+    echo "${YELLOW}[+]${NC} Installing mdadm package..."
+    sudo apt install mdadm -y
+    echo "${GREEN}[✓]${NC} mdadm installed successfully"
+else
+    echo "${GREEN}[✓]${NC} mdadm is already installed"
+fi
+
+# Check if array is already assembled
+if [  "/dev/${ARRAY_NAME}" ]; then
+    echo  "${GREEN}[✓]${NC} Array /dev/${ARRAY_NAME} exists."
+    sudo mdadm --detail "/dev/${ARRAY_NAME}"
+    cat /proc/mdstat
+    
+    # Check if array is degraded
+    if sudo mdadm --detail "/dev/${ARRAY_NAME}" | grep -q "degraded"; then
+        echo  "${RED}[!] WARNING:${NC} Array is degraded! Check which drives need to be re-added."
+        echo  "${YELLOW}[i]${NC} You may need to run: ${CYAN}sudo mdadm --manage /dev/${ARRAY_NAME} --re-add <missing_drive>${NC}"
+    fi
+else
+    echo  "${YELLOW}[+]${NC} Assembling RAID array..."
+    sudo mdadm --assemble --scan
+fi
+
+# Optionally update mdadm.conf
+if ! grep -q "/dev/${ARRAY_NAME}" "$MDADM_CONF"; then
+    echo  "${YELLOW}[+]${NC} Updating $MDADM_CONF..."
+    sudo mdadm --detail --scan | sudo tee -a "$MDADM_CONF"
+fi
+
+# Mount the array
+if [ ! -d "$MOUNT_POINT" ]; then
+    sudo mkdir -p "$MOUNT_POINT"
+    echo  "${GREEN}[✓]${NC} Mount point created"
+fi
+
+if ! mountpoint -q "$MOUNT_POINT"; then
+    echo  "${YELLOW}[+]${NC} Mounting /dev/${ARRAY_NAME} to $MOUNT_POINT..."
+    sudo mount "/dev/${ARRAY_NAME}" "$MOUNT_POINT"
+    echo  "${GREEN}[✓]${NC} Array mounted successfully at $MOUNT_POINT"
+else
+    echo  "${GREEN}[✓]${NC} Array is already mounted at $MOUNT_POINT"
+fi
+
+echo  "${CYAN}${BOLD}=== Setup Complete ===${NC}"
+echo  "${CYAN}[i]${NC} Array device: ${CYAN}/dev/${ARRAY_NAME}${NC}"
+echo  "${CYAN}[i]${NC} Mount point: ${CYAN}$MOUNT_POINT${NC}"
+

scripts/install-docker

@@ -0,0 +1,61 @@
+#!/bin/sh
+
+# Colors
+RED="\e[31m"
+GREEN="\e[32m"
+YELLOW="\e[33m"
+MAGENTA="\e[35m"
+CYAN="\e[36m"
+GRAY="\e[90m"
+BOLD="\e[1m"
+NC="\e[0m"
+
+echo  "${CYAN}${BOLD}=== Docker Installation Script ===${NC}"
+
+echo  "${YELLOW}[+]${NC} Updating APT..."
+echo  "${GRAY}"
+sudo apt-get update
+echo  "${NC}"
+
+echo  "${YELLOW}[+]${NC} Installing required packages..."
+echo  "${GRAY}"
+sudo apt-get install -y ca-certificates curl gnupg lsb-release
+echo  "${NC}"
+
+echo  "${YELLOW}[+]${NC} Adding Docker's official GPG key..."
+echo  "${GRAY}"
+sudo mkdir -p /etc/apt/keyrings
+curl -fsSL "https://download.docker.com/linux/$(
+  . /etc/os-release
+  echo "$ID"
+)/gpg" | sudo gpg --dearmor >/tmp/docker.gpg
+sudo mv /tmp/docker.gpg /etc/apt/keyrings/docker.gpg
+sudo chmod 644 /etc/apt/keyrings/docker.gpg
+
+echo  "${YELLOW}[+]${NC} Setting up the Docker repository..."
+echo  "${GRAY}"
+ARCH=$(dpkg --print-architecture)
+OS_ID=$(awk -F= '/^ID=/{gsub(/\"/, "", $2); print $2}' /etc/os-release)
+RELEASE=$(lsb_release -cs)
+echo "deb [arch=$ARCH signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/$OS_ID $RELEASE stable" |
+  sudo tee /etc/apt/sources.list.d/docker.list >/dev/null
+
+echo  "${YELLOW}[+]${NC} Updating APT..."
+echo  "${GRAY}"
+sudo apt-get update
+echo  "${NC}"
+
+echo  "${YELLOW}[+]${NC} Installing Docker Engine..."
+echo  "${GRAY}"
+sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+
+echo  "${GREEN}[✓]${NC} Docker installation complete!"
+echo  "${GRAY}"
+docker --version
+echo  "${NC}"
+
+echo  "${YELLOW}[+]${NC} Allowing Docker use without sudo..."
+echo  "${GRAY}"
+sudo usermod -aG docker ${USER}
+exec sg docker newgrp
+echo  "${NC}${GREEN}[✓]${NC} User added to docker group"

scripts/steam-setup

@@ -1,14 +0,0 @@
-#! /bin/sh
-
-# This script is a temporary solution to a GNOME bug where the cursor leaves the game window instead of being locked to the screen.
-
-sudo apt install gamescope
-flatpak install com.valvesoftware.Steam
-flatpak install org.freedesktop.Platform.VulkanLayer.gamescope
-echo
-echo
-echo 'If the cursor escapes the screen in a game, enable gamescope with the launch arguments: `gamescope -- %command%`.'
-echo 'Add the `--force-grab-cursor` flag if the issue persists.'
-echo 'Add the `-f` flag to launch in fullscreen.'
-echo 'Add the `-h 720 -H 1440 -F fsr` flags to upscale the game (change the values accordingly).'
-echo 'You can use gamescope outside of Steam as well. Replace `%command%` with the launch command for your game.'

scripts/update

@@ -1,17 +1,33 @@
 #! /bin/sh
 
 YELLOW="\e[33m"
+GRAY="\e[90m"
 NC="\e[0m"
 
-printf "%b\n" "${YELLOW}Updating apt...${NC}"
+printf "%b\n" "${YELLOW}[+]${NC} Updating repos..."
-sudo apt update
+printf "%b" "${GRAY}"
-sudo apt upgrade
+sudo apt-get update
-sudo apt full-upgrade
+printf "%b" "${NC}"
-sudo apt autoremove
+
-sudo apt autoclean
+printf "%b\n" "${YELLOW}[+]${NC} Upgrading packages..."
+printf "%b" "${GRAY}"
+sudo apt-get full-upgrade
+printf "%b" "${NC}"
+
+printf "%b\n" "${YELLOW}[+]${NC} Removing orphaned dependencies..."
+printf "%b" "${GRAY}"
+sudo apt-get autoremove
+printf "%b" "${NC}"
+
+printf "%b\n" "${YELLOW}[+]${NC} Cleaning up..."
+printf "%b" "${GRAY}"
+sudo apt-get autoclean
+printf "%b" "${NC}"
 
 if command -v flatpak >/dev/null 2>&1; then
-  printf "%b\n" "${YELLOW}Updating flatpak...${NC}"
+  printf "%b\n" "${YELLOW}[+]${NC} Updating flatpak packages..."
+  printf "%b" "${GRAY}"
   flatpak update
   flatpak uninstall --unused --delete-data
+  printf "%b" "${NC}"
 fi

scripts/upnpc-close

@@ -2,6 +2,8 @@
 
 # Close all upnpc ports
 
+sudo apt install miniupnpc -y
+
 upnpc -l | sed -n 's/^[[:space:]]*[0-9]\+\s\+\(TCP\|UDP\)\s\+\([0-9]\+\).*/\1 \2/p' | while read proto port; do
   upnpc -d "$port" "$proto"
 done

server/docker-compose.yml

@@ -11,265 +11,293 @@ services:
     container_name: nginx-proxy-manager
     ports:
       - "80:80"
-      - "81:81"
+      - "81:81" # Admin interface
       - "443:443"
-    environment: # Uncomment this if IPv6 is not enabled on your host
+    environment:
-      - DISABLE_IPV6=true # Uncomment this if IPv6 is not enabled on your host
+      - DISABLE_IPV6=true
     volumes:
       - ${NGINX_DATA}:/data
       - ${NGINX_LETSENCRYPT}:/etc/letsencrypt
     networks:
       - server-network
 
-  # --- Immich Server ---
+  # --- Nextcloud ---
-  immich-server: # immich-server:2283
+  nextcloud: # :80
-    container_name: immich-server
+    image: nextcloud:latest
-    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
+    restart: unless-stopped
-    # extends:
+    container_name: nextcloud
-    #   file: hwaccel.transcoding.yml
-    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
-    volumes:
-      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
-      - ${IMMICH_UPLOAD_LOCATION}:/usr/src/app/upload
-      - /etc/localtime:/etc/localtime:ro
-    env_file:
-      - .env
     depends_on:
-      - redis
+      - nextcloud-db
-      - database
+      - nextcloud-redis
-    restart: unless-stopped
-    healthcheck:
-      disable: false
-    networks:
-      - server-network
-
-  immich-machine-learning:
-    container_name: immich-machine-learning
-    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
-    # Example tag: ${IMMICH_VERSION:-release}-cuda
-    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
-    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
-    #   file: hwaccel.ml.yml
-    #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
-    volumes:
-      - model-cache:/cache
-    env_file:
-      - .env
-    restart: unless-stopped
-    healthcheck:
-      disable: false
-    networks:
-      - server-network
-
-  redis:
-    container_name: immich-redis
-    image: docker.io/valkey/valkey:8-bookworm@sha256:fec42f399876eb6faf9e008570597741c87ff7662a54185593e74b09ce83d177
-    healthcheck:
-      test: redis-cli ping || exit 1
-    restart: unless-stopped
-    networks:
-      - server-network
-
-  database:
-    container_name: immich-postgres
-    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0
     environment:
-      POSTGRES_PASSWORD: ${IMMICH_DB_PASSWORD}
+      - POSTGRES_HOST=nextcloud-db
-      POSTGRES_USER: ${IMMICH_DB_USERNAME}
+      - POSTGRES_DB=nextcloud
-      POSTGRES_DB: ${IMMICH_DB_DATABASE_NAME}
+      - POSTGRES_USER=nextcloud
-      POSTGRES_INITDB_ARGS: "--data-checksums"
+      - POSTGRES_PASSWORD=${NEXTCLOUD_DB_PASSWORD}
-      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
+      - NEXTCLOUD_TRUSTED_DOMAINS=localhost
-      B_STORAGE_TYPE: "HDD"
     volumes:
-      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
+      - ${NEXTCLOUD_DATA}:/var/www/html
-      - ${IMMICH_DB_DATA_LOCATION}:/var/lib/postgresql/data
-    restart: unless-stopped
     networks:
       - server-network
+      - nextcloud-network
 
-  # --- Home Assistant ---
+  nextcloud-db:
-  homeassistant:
+    image: postgres:latest
-    container_name: homeassistant
-    image: "ghcr.io/home-assistant/home-assistant:stable"
-    env_file:
-      - .env
-    volumes:
-      - ${HA_CONFIG}:/config
-      - /etc/localtime:/etc/localtime:ro
-      - /run/dbus:/run/dbus:ro
     restart: unless-stopped
-    # devices:
+    container_name: nextcloud-db
-    #   - /dev/ttyUSB0:/dev/ttyUSB0
-    privileged: true
-    network_mode: host
-    # ports:
-    #   - "8123:8123"
-
-  esphome:
-    container_name: esphome
-    image: ghcr.io/esphome/esphome:latest
-    volumes:
-      - ${ESPHOME_CONFIG}:/config
-      - /etc/localtime:/etc/localtime:ro
-    restart: unless-stopped
-    privileged: true
-    network_mode: host
-    # ports:
-    #   - "6052:6052"
-    env_file:
-      - .env
-
-  # openwakeword:
-  #   image: homeassistant/amd64-addon-openwakeword:latest
-  #   container_name: openwakeword
-  #   entrypoint: python3
-  #   command: >
-  #     -m wyoming_openwakeword
-  #     --uri 'tcp://0.0.0.0:10400'
-  #     --preload-model 'ok_nabu'
-  #     --custom-model-dir /share/openwakeword
-  #   env_file:
-  #     - .env
-  #   ports:
-  #     - 10400:10400
-  #   volumes:
-  #     - ${OWW_DATA}:/data
-  #     - ${OWW_CUSTOM_MODEL_DIR}:/share/openwakeword
-  #   restart: unless-stopped
-
-  piper:
-    image: homeassistant/amd64-addon-piper:latest
-    container_name: piper
-
-    entrypoint: python3
-    command: >
-      -m wyoming_piper  
-      --piper '/usr/share/piper/piper'  
-      --uri 'tcp://0.0.0.0:10200'  
-      --length-scale "1"  
-      --noise-scale "0.667"  
-      --speaker "0"  
-      --voice "en_US-lessac-medium"  
-      --max-piper-procs "1"  
-      --data-dir /data  
-      --data-dir /share/piper  
-      --download-dir /data
-    network_mode: host
-    # ports:
-    #   - "10200:10200"
-    volumes:
-      - ${PIPER_DATA}:/data
-    restart: unless-stopped
-
-  whisper:
-    image: homeassistant/amd64-addon-whisper:latest
-    container_name: whisper
-
-    entrypoint: python3
-    command: >
-      -m wyoming_faster_whisper  
-      --uri tcp://0.0.0.0:10300  
-      --model small-int8  
-      --beam-size 1  
-      --language en  
-      --data-dir /data  
-      --download-dir /data
-    network_mode: host # Needed to use localhost in HA interface
-    # ports:
-    #   - "10300:10300"
-    env_file:
-      - .env
-    volumes:
-      - ${WHISPER_DATA}:/data
-    restart: unless-stopped
-
-  # --- Pi-hole ---
-  # pihole:
-  #   container_name: pihole
-  #   image: pihole/pihole:latest
-  #   ports:
-  #     # DNS Ports
-  #     - "53:53/tcp"
-  #     - "53:53/udp"
-  #     # Default HTTP Port
-  #     - "2100:80/tcp"
-  #     - "2101:443/tcp"
-  #   env_file:
-  #     - .env
-  #   volumes:
-  #     - "${PIHOLE}:/etc/pihole"
-  #   cap_add:
-  #     # Optional, if Pi-hole should get some more processing time
-  #     - SYS_NICE
-  #   restart: unless-stopped
-
-  # --- File Browser ---
-  filebrowser: # Replace with nextcloud
-    image: filebrowser/filebrowser:latest
-    container_name: filebrowser
-    restart: unless-stopped
-    ports:
-      - "8080:80"
-    volumes:
-      - ${FILEBROWSER_DATA}:/srv
-      - ${FILEBROWSER_CONFIG}:/config
-      - ${FILEBROWSER_DATABASE}:/database
     environment:
-      - FB_DATABASE=/database/filebrowser.db
+      - POSTGRES_DB=nextcloud
-      - FB_CONFIG=/config/filebrowser.json
+      - POSTGRES_USER=nextcloud
-    env_file:
+      - POSTGRES_PASSWORD=${NEXTCLOUD_DB_PASSWORD}
-      - .env
+    volumes:
+      - ${NEXTCLOUD_DB_DATA}:/var/lib/postgresql/data
+    networks:
+      - nextcloud-network
+
+  nextcloud-redis:
+    image: redis:alpine
+    restart: unless-stopped
+    container_name: nextcloud-redis
+    command: redis-server --requirepass ${REDIS_PASSWORD}
+    networks:
+      - nextcloud-network
 
   # --- Gitea ---
-  gitea:
+  gitea: # :3000
     image: gitea/gitea:latest
+    container_name: gitea
     restart: unless-stopped
     volumes:
       - ${GITEA}:/data
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
+    networks:
+      - server-network
     ports:
-      - "3001:3000"
       - "22:22"
 
-  # --- Prosody XMPP Server ---
+  # # --- Immich Server ---
-  prosody:
+  # immich-server: # immich-server:2283
-    image: prosody/prosody:latest
+  #   container_name: immich-server
-    container_name: prosody
+  #   image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
-    restart: unless-stopped
+  #   # extends:
-    ports:
+  #   #   file: hwaccel.transcoding.yml
-      - "5222:5222" # XMPP client connections
+  #   #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
-      - "5269:5269" # XMPP server-to-server connections
+  #   volumes:
-      - "5280:5280" # HTTP/WebSocket connections
+  #     # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
-      - "5281:5281" # HTTPS/WebSocket connections (if SSL configured)
+  #     - ${IMMICH_UPLOAD_LOCATION}:/usr/src/app/upload
-    volumes:
+  #     - /etc/localtime:/etc/localtime:ro
-      - ${PROSODY_CONFIG}:/etc/prosody
+  #   env_file:
-      - ${PROSODY_LOGS}:/var/log/prosody
+  #     - .env
-      - ${PROSODY_MODULES}:/usr/lib/prosody-modules
+  #   depends_on:
-    env_file:
+  #     - redis
-      - .env
+  #     - database
+  #   restart: unless-stopped
+  #   healthcheck:
+  #     disable: false
+  #   networks:
+  #     - server-network
 
-  # --- N8n Automation ---
+  # immich-machine-learning:
-  n8n:
+  #   container_name: immich-machine-learning
-    image: n8nio/n8n:latest
+  #   # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
-    restart: always
+  #   # Example tag: ${IMMICH_VERSION:-release}-cuda
-    # N8n will not be directly exposed to the host, Nginx Proxy Manager will proxy to it
+  #   image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
-    # Therefore, no 'ports' mapping is needed here for external access.
+  #   # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
-    # It will be accessible on the Docker network by Nginx Proxy Manager.
+  #   #   file: hwaccel.ml.yml
-    environment:
+  #   #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
-      - N8N_HOST=${N8N_HOST}
+  #   volumes:
-      - N8N_PORT=5678
+  #     - model-cache:/cache
-      - N8N_PROTOCOL=https # Nginx Proxy Manager will handle HTTPS
+  #   env_file:
-      - NODE_ENV=production
+  #     - .env
-      - WEBHOOK_URL=https://${N8N_HOST}/
+  #   restart: unless-stopped
-      - GENERIC_TIMEZONE=${TZ}
+  #   healthcheck:
-      - N8N_RUNNERS_ENABLED=true
+  #     disable: false
-      - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
+  #   networks:
-    volumes:
+  #     - server-network
-      - ${N8N_DATA}:/home/node/.n8n
+
-      - ${N8N_FILES}:/files
+  # redis:
-    env_file:
+  #   container_name: immich-redis
-      - .env
+  #   image: docker.io/valkey/valkey:8-bookworm@sha256:fec42f399876eb6faf9e008570597741c87ff7662a54185593e74b09ce83d177
+  #   healthcheck:
+  #     test: redis-cli ping || exit 1
+  #   restart: unless-stopped
+  #   networks:
+  #     - server-network
+
+  # database:
+  #   container_name: immich-postgres
+  #   image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0
+  #   environment:
+  #     POSTGRES_PASSWORD: ${IMMICH_DB_PASSWORD}
+  #     POSTGRES_USER: ${IMMICH_DB_USERNAME}
+  #     POSTGRES_DB: ${IMMICH_DB_DATABASE_NAME}
+  #     POSTGRES_INITDB_ARGS: "--data-checksums"
+  #     # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
+  #     B_STORAGE_TYPE: "HDD"
+  #   volumes:
+  #     # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
+  #     - ${IMMICH_DB_DATA_LOCATION}:/var/lib/postgresql/data
+  #   restart: unless-stopped
+  #   networks:
+  #     - server-network
+
+  # # --- Home Assistant ---
+  # homeassistant:
+  #   container_name: homeassistant
+  #   image: "ghcr.io/home-assistant/home-assistant:stable"
+  #   env_file:
+  #     - .env
+  #   volumes:
+  #     - ${HA_CONFIG}:/config
+  #     - /etc/localtime:/etc/localtime:ro
+  #     - /run/dbus:/run/dbus:ro
+  #   restart: unless-stopped
+  #   # devices:
+  #   #   - /dev/ttyUSB0:/dev/ttyUSB0
+  #   privileged: true
+  #   network_mode: host
+  #   # ports:
+  #   #   - "8123:8123"
+
+  # esphome:
+  #   container_name: esphome
+  #   image: ghcr.io/esphome/esphome:latest
+  #   volumes:
+  #     - ${ESPHOME_CONFIG}:/config
+  #     - /etc/localtime:/etc/localtime:ro
+  #   restart: unless-stopped
+  #   privileged: true
+  #   network_mode: host
+  #   # ports:
+  #   #   - "6052:6052"
+  #   env_file:
+  #     - .env
+
+  # # openwakeword:
+  # #   image: homeassistant/amd64-addon-openwakeword:latest
+  # #   container_name: openwakeword
+  # #   entrypoint: python3
+  # #   command: >
+  # #     -m wyoming_openwakeword
+  # #     --uri 'tcp://0.0.0.0:10400'
+  # #     --preload-model 'ok_nabu'
+  # #     --custom-model-dir /share/openwakeword
+  # #   env_file:
+  # #     - .env
+  # #   ports:
+  # #     - 10400:10400
+  # #   volumes:
+  # #     - ${OWW_DATA}:/data
+  # #     - ${OWW_CUSTOM_MODEL_DIR}:/share/openwakeword
+  # #   restart: unless-stopped
+
+  # piper:
+  #   image: homeassistant/amd64-addon-piper:latest
+  #   container_name: piper
+
+  #   entrypoint: python3
+  #   command: >
+  #     -m wyoming_piper  
+  #     --piper '/usr/share/piper/piper'  
+  #     --uri 'tcp://0.0.0.0:10200'  
+  #     --length-scale "1"  
+  #     --noise-scale "0.667"  
+  #     --speaker "0"  
+  #     --voice "en_US-lessac-medium"  
+  #     --max-piper-procs "1"  
+  #     --data-dir /data  
+  #     --data-dir /share/piper  
+  #     --download-dir /data
+  #   network_mode: host
+  #   # ports:
+  #   #   - "10200:10200"
+  #   volumes:
+  #     - ${PIPER_DATA}:/data
+  #   restart: unless-stopped
+
+  # whisper:
+  #   image: homeassistant/amd64-addon-whisper:latest
+  #   container_name: whisper
+
+  #   entrypoint: python3
+  #   command: >
+  #     -m wyoming_faster_whisper  
+  #     --uri tcp://0.0.0.0:10300  
+  #     --model small-int8  
+  #     --beam-size 1  
+  #     --language en  
+  #     --data-dir /data  
+  #     --download-dir /data
+  #   network_mode: host # Needed to use localhost in HA interface
+  #   # ports:
+  #   #   - "10300:10300"
+  #   env_file:
+  #     - .env
+  #   volumes:
+  #     - ${WHISPER_DATA}:/data
+  #   restart: unless-stopped
+
+  # # --- Pi-hole ---
+  # # pihole:
+  # #   container_name: pihole
+  # #   image: pihole/pihole:latest
+  # #   ports:
+  # #     # DNS Ports
+  # #     - "53:53/tcp"
+  # #     - "53:53/udp"
+  # #     # Default HTTP Port
+  # #     - "2100:80/tcp"
+  # #     - "2101:443/tcp"
+  # #   env_file:
+  # #     - .env
+  # #   volumes:
+  # #     - "${PIHOLE}:/etc/pihole"
+  # #   cap_add:
+  # #     # Optional, if Pi-hole should get some more processing time
+  # #     - SYS_NICE
+  # #   restart: unless-stopped
+
+
+
+  # # --- Prosody XMPP Server ---
+  # prosody:
+  #   image: prosody/prosody:latest
+  #   container_name: prosody
+  #   restart: unless-stopped
+  #   ports:
+  #     - "5222:5222" # XMPP client connections
+  #     - "5269:5269" # XMPP server-to-server connections
+  #     - "5280:5280" # HTTP/WebSocket connections
+  #     - "5281:5281" # HTTPS/WebSocket connections (if SSL configured)
+  #   volumes:
+  #     - ${PROSODY_CONFIG}:/etc/prosody
+  #     - ${PROSODY_LOGS}:/var/log/prosody
+  #     - ${PROSODY_MODULES}:/usr/lib/prosody-modules
+  #   env_file:
+  #     - .env
+
+  # # --- N8n Automation ---
+  # n8n:
+  #   image: n8nio/n8n:latest
+  #   restart: always
+  #   # N8n will not be directly exposed to the host, Nginx Proxy Manager will proxy to it
+  #   # Therefore, no 'ports' mapping is needed here for external access.
+  #   # It will be accessible on the Docker network by Nginx Proxy Manager.
+  #   environment:
+  #     - N8N_HOST=${N8N_HOST}
+  #     - N8N_PORT=5678
+  #     - N8N_PROTOCOL=https # Nginx Proxy Manager will handle HTTPS
+  #     - NODE_ENV=production
+  #     - WEBHOOK_URL=https://${N8N_HOST}/
+  #     - GENERIC_TIMEZONE=${TZ}
+  #     - N8N_RUNNERS_ENABLED=true
+  #     - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
+  #   volumes:
+  #     - ${N8N_DATA}:/home/node/.n8n
+  #     - ${N8N_FILES}:/files
+  #   env_file:
+  #     - .env
 
 volumes:
   model-cache:
@@ -277,5 +305,7 @@ volumes:
 networks:
   server-network:
     driver: bridge
+  nextcloud-network:
+    driver: bridge
   homeassistant-network:
     driver: bridge

server/install-docker.sh

@@ -1,43 +0,0 @@
-#!/bin/sh
-set -e
-
-if ! command -v curl >/dev/null 2>&1; then
-  echo "curl is required. Installing curl..."
-  sudo apt update
-  sudo apt install -y curl
-fi
-
-echo "Updating package index..."
-sudo apt update
-
-echo "Installing required packages..."
-sudo apt install -y ca-certificates curl gnupg lsb-release
-
-echo "Adding Docker's official GPG key..."
-sudo mkdir -p /etc/apt/keyrings
-curl -fsSL "https://download.docker.com/linux/$(
-  . /etc/os-release
-  echo "$ID"
-)/gpg" | sudo gpg --dearmor >/tmp/docker.gpg
-sudo mv /tmp/docker.gpg /etc/apt/keyrings/docker.gpg
-sudo chmod 644 /etc/apt/keyrings/docker.gpg
-
-echo "Setting up the Docker repository..."
-ARCH=$(dpkg --print-architecture)
-OS_ID=$(awk -F= '/^ID=/{gsub(/\"/, "", $2); print $2}' /etc/os-release)
-RELEASE=$(lsb_release -cs)
-echo "deb [arch=$ARCH signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/$OS_ID $RELEASE stable" |
-  sudo tee /etc/apt/sources.list.d/docker.list >/dev/null
-
-echo "Updating package index (with Docker repo)..."
-sudo apt update
-
-echo "Installing Docker Engine..."
-sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
-
-echo "Docker installation complete!"
-docker --version
-
-echo "Allowing Docker use without sudo..."
-sudo usermod -aG docker ${USER}
-exec sg docker newgrp