This repository contains the configuration for my home lab services, managed with Docker Compose. Services are exposed to the internet via Traefik (public) or to my Tailscale network via tsdproxy.
actual
ActualBudget - personal accounting app
- Proxy: via tsdproxy
caddy
Static-site server/reverse proxy
- TODO: Configuration needed.
docker-socket-proxy
Docker socket proxy
This service allows Traefik to interact with the Docker socket without giving it direct access, enhancing security.
gitea
Simple git remote
- TODO: Configuration needed.
immich
Photo and video backup with searchable image/video recognition
- Proxy: via traefik
miniflux
RSS feed reader web app
- Proxy: via traefik
Stirling-PDF - PDF editor web app
- Proxy: via traefik with basic auth middleware
traefik
Docker container-aware reverse proxy
- Proxy: Dashboard via tsdproxy
tsdproxy
Tailscale Docker socket proxy
Exposes services to a Tailscale network.
- Use Docker in rootless mode with
userns-remapfor better security.