add: initial services list, authelia initial configuration, up in date prompt ai, json schema for services list

services.yml

@@ -0,0 +1,560 @@
+name: homelab
+domain: crenam.space
+home_url: https://dashboard.crenam.space
+regions:
+  - id: rooster_palace
+    en: rooster_palace
+    vn: điện kê
+    kre: palè kòk
+    fr: palais coq
+    region_type: sovereign
+
+  - id: ambassadors_garden
+    en: ambassadors' garden
+    vn: vườn nam
+    kre: jadin anbasadè
+    fr: jardin des ambassadeurs
+    region_type: diplomatic
+
+  - id: family_village
+    en: family village
+    vn: xã làng
+    kre: vilaj fanmi
+    fr: village familial
+    region_type: family
+  
+  - id: central_terminal
+    en: central terminal
+    region_type: tech
+    vn: phòng kỹ thuật
+    kre: sal ekipman
+    fr: le centre technique
+
+  - id: playroom
+    en: playroom
+    kre: sal jé
+    fr: la salle de jeux
+    vn: phòng vui chơi
+    region_type: leisure
+
+  - id: library
+    region_type: knowledge
+    en: library
+    kre: biblyotèk pèp
+    fr: bibliothèque
+    vn: thư viện
+
+  - id: great-hall
+    region_type: lobby
+    kre: gwo sal
+    vn: sảnh lớn
+    fr: grand hall
+    en: great hall
+
+machines:
+  - id: cortex
+    name: cortex
+    ip: 192.168.27.69
+    public_ip: 51.210.13.240
+    provider: ovh
+    role: cerveau
+    domains:
+      - internal: cortex.home
+      - external: crenam.space
+
+  - id: galerie
+    name: galerie
+    ip: 192.168.27.67
+    public_ip: 37.187.32.116
+    role: vitrine
+    domains:
+      - internal: galerie.home
+
+  - id: salon
+    name: salon
+    ip: 192.168.1.15
+    role: foyer
+    domains:
+      - internal: salon.home
+    
+  - id: gaufre
+    name: gaufre
+    ip: 192.168.1.30
+    role: garde-manger
+    domains:
+      - internal: gaufre.home
+
+  - id: yakimo
+    name: yakimo
+    ip: 192.168.1.20
+    role: coffre-fort
+    domains:
+      - internal: yakimo.home
+
+services:
+  - id: affine
+    name: AFFiNE
+    machine_id: cortex
+    installation_mode: docker
+    auth: oidc
+    ports: 
+      - 3010
+    public_url: https://affine.crenam.space
+    internal_url: http://cortex.home:3010
+    status: active
+    categories: 
+      - productivity
+    dependencies:         
+      - postgresql-shared
+    allowed_groups:       
+      - nuji
+      - family
+      - friend
+      - admin
+
+  - id: authelia
+    name: Authelia
+    machine_id: cortex
+    installation_mode: docker
+    ports: 
+      - 9091
+    public_url: https://auth.crenam.space
+    internal_url: http://cortex.home:9091
+    status: inactive
+    categories: 
+      - auth
+    allowed_groups:       
+      - nuji
+      - family
+      - friend
+      - admin
+
+  - id: aliasvault
+    name: Alias Vault
+    machine_id: salon
+    installation_mode: docker
+    auth: internal
+    ports:
+      - 8008
+      - 8443
+      - 25
+      - 587
+    public_url: https://aliasvault.crenam.space
+    internal_url: http://salon.home:8008
+    status: active
+    categories: 
+      - auth
+    allowed_groups:       
+      - nuji
+      - family
+      - friend
+      - admin
+
+  - id: beszel
+    name: beszel
+    machine_id: gaufre
+    auth: vpn
+    ports:
+      - 8090
+    internal_url: http://gaufre.home:8090
+    installation_mode: docker
+    status: active
+    categories: 
+      - monitoring
+    allowed_groups: 
+      - admin
+
+  - id: borgbackup
+    name: Borg Backup
+    machine_id: yakimo
+    auth: none
+    installation_mode: native
+    status: active
+    categories: 
+      - backup
+    allowed_groups: 
+      - admin
+
+  - id: firefly
+    name: firefly iii
+    machine_id: gaufre
+    installation_mode: docker
+    auth: vpn
+    ports: 
+      - 8800
+      - 8801
+    internal_url: http://gaufre.home:8800
+    status: active
+    categories: 
+      - finance
+    allowed_groups:       
+      - nuji
+      - admin
+
+  - id: gitea
+    name: gitea
+    machine_id: salon
+    installation_mode: docker
+    auth: vpn
+    ports: 
+      - 3000
+    public_url: https://git.crenam.space
+    internal_url: http://salon.home:3000
+    status: active
+    categories: 
+      - dev
+    allowed_groups:       
+      - nuji
+      - admin
+  
+  - id: homarr
+    name: homarr
+    machine_id: salon
+    auth: oidc
+    installation_mode: docker
+    ports: 
+      - 7575
+    public_url: https://dashboard.crenam.space
+    internal_url: http://salon.home:7575
+    status: active
+    categories: 
+      - monitoring
+    allowed_groups:
+      - nuji
+      - family
+      - friend
+      - admin
+      - guest
+
+  - id: immich
+    name: immich
+    machine_id: gaufre
+    installation_mode: docker
+    auth: oidc
+    ports: 
+      - 2283
+    internal_url: http://gaufre.home:2283
+    status: active
+    categories: 
+      - media
+    allowed_groups:       
+      - nuji
+      - family
+      - friend
+      - admin
+
+  - id: jellyfin
+    name: jellyfin
+    machine_id: gaufre
+    installation_mode: docker
+    auth: oidc
+    ports:
+      - 8096
+      - 7359
+    internal_url: http://gaufre.home:8096
+    status: active
+    categories: 
+      - media
+    allowed_groups:
+      - nuji
+      - family
+      - friend
+      - admin
+
+  - id: maurane
+    name: maurane's website
+    machine_id: galerie
+    installation_mode: native
+    ports:
+      - 8000
+    internal_url: http://galerie.home:8000
+    public_url: https://maurane.crenam.space
+    status: active
+    categories:
+      - media
+      - experimental
+    allowed_groups:
+      - guest
+      - nuji
+      - family
+      - friend
+
+  - id: matrix
+    name: element server suite
+    machine_id: cortex
+    installation_mode: docker
+    auth: internal
+    ports:
+      - 80
+      - 443
+      - 30001
+      - 30002
+    internal_url: http://cortex.home:30001
+    public_url: https://matrix.element.crenam.space
+    status: active
+    categories: 
+      - communication
+    allowed_groups:
+      - nuji
+      - family
+      - friend
+      - admin
+
+  - id: mealie
+    name: mealie
+    machine_id: gaufre
+    installation_mode: docker
+    auth: oidc
+    ports:
+      - 9925
+    internal_url: http://gaufre.home:9925
+    public_url: https://mealie.crenam.space
+    status: active
+    categories: 
+      - storage
+      - productivity
+    allowed_groups:
+      - nuji
+      - family
+      - friend
+      - admin
+
+  - id: n8n
+    name: n8n
+    machine_id: gaufre
+    installation_mode: docker
+    auth: vpn
+    ports:
+      - 5678
+    internal_url: http://gaufre.home:5678
+    status: active
+    categories: 
+      - productivity
+      - automation
+    allowed_groups:
+      - nuji
+      - admin
+
+  - id: ntfy
+    name: ntfy
+    machine_id: salon
+    installation_mode: docker
+    auth: vpn
+    ports:
+      - 810
+    internal_url: http://salon.home:810
+    status: active
+    categories:
+      - automation
+    allowed_groups:
+      - admin
+
+  - id: openwebui
+    name: open web ui
+    auth: vpn # (oidc ?)
+    machine_id: cortex
+    installation_mode: docker
+    ports:
+      - 3000
+    internal_url: http://cortex.home:3000
+    public_url: https://llm.crenam.space
+    status: active
+    categories: 
+      - ai
+      - productivity
+    allowed_groups:
+      - nuji
+      - admin
+
+  - id: paperless
+    name: paperless-ngx
+    machine_id: salon
+    installation_mode: docker
+    auth: trusted headers
+    ports:
+      - 8101
+    internal_url: http://salon.home:8101
+    public_url: https://paperless.crenam.space
+    status: active
+    categories: 
+      - storage
+      - productivity
+    allowed_groups:
+      - nuji
+      - admin
+
+  - id: patience
+    name: patience
+    machine_id: galerie
+    installation_mode: native
+    ports:
+      - 8001
+    internal_url: http://galerie.home:8001
+    public_url: https://patience.crenam.space
+    status: active
+    categories:
+      - media
+      - experimental
+      - productivity
+    allowed_groups:
+      - guest
+      - nuji
+      - family
+      - friend
+
+  - id: postgres-shared
+    name: PostgreSQL
+    machine_id: cortex
+    installation_mode: docker
+    auth: internal
+    ports: 
+      - 5432
+    internal_url: postgres://cortex.home:5432
+    status: active
+    categories: 
+      - database
+    allowed_groups:
+      - admin
+
+  - id: pihole_main
+    name: pi-hole main
+    machine_id: salon
+    installation_mode: docker
+    auth: vpn
+    ports:
+      - 80
+    internal_url: http://salon.home
+    status: active
+    categories: 
+      - network
+      - monitoring
+    allowed_groups:
+      - admin
+
+  - id: pihole_secondary
+    name: pi-hole secondary
+    machine_id: yakimo
+    installation_mode: native
+    auth: vpn
+    ports:
+      - 80
+    internal_url: http://yakimo.home
+    status: planned
+    categories: 
+      - network
+      - monitoring
+    allowed_groups:
+      - admin   
+
+  - id: radicale
+    name: radicale
+    machine_id: yakimo
+    installation_mode: native
+    auth: internal # how to sso + sharing collections ?
+    ports:
+      - 5232
+    internal_url: http://yakimo.home:5232
+    public_url: https://radicale.crenam.space
+    status: active
+    categories: 
+      - caldav
+      - productivity
+    allowed_groups:
+      - admin
+      - nuji
+      - family
+      - friend
+  
+  - id: seafile
+    name: seafile
+    machine_id: gaufre
+    installation_mode: docker
+    auth: trusted headers
+    ports:
+      - 80
+      - 8000
+      - 8082
+    internal_url: http://gaufre.home:80
+    status: active
+    categories:
+      - storage
+      - media
+    allowed_groups:
+      - admin
+      - nuji
+      - friend
+      - family
+
+  - id: uptime_kuma
+    name: uptime kuma
+    machine_id: salon
+    installation_mode: docker
+    auth: vpn
+    ports:
+      - 5232
+    internal_url: http://salon.home:5232
+    status: active
+    categories: 
+      - monitoring
+    allowed_groups:
+      - admin
+
+  - id: vikunja
+    name: vikunja
+    machine_id: gaufre
+    installation_mode: docker
+    auth: oidc
+    ports:
+      - 3456
+    internal_url: http://gaufre.home:3456
+    public_url: https://task.crenam.space
+    status: active
+    categories: 
+      - productivity
+    allowed_groups:
+      - admin
+      - nuji
+      - family
+      - friend
+
+groups:
+  - id: admin
+    name: renn
+    group_description: Moi
+    region: central_terminal
+
+  - id: nuji
+    name: nuji
+    group_description: couple fondateur
+    region: rooster_palace
+
+  - id: family
+    name: làng fanmi
+    group_description: famille proche
+    region: family_village
+
+  - id: friend
+    name: zanmi
+    group_description: amis de nuji
+    region: ambassadors_garden
+
+  - id: guest
+    name: vakansyé
+    group_description: invités (accès limité)
+    region: great-hall
+
+
+users:
+  - id: maurane
+    name: maurane
+    nickname: nuna
+    email: maurane.glaude@crenam.space
+    groups:
+      - admin
+
+  - id: adrien
+    name: adrien
+    nickname: adri
+    email: adrien.ton@crenam.space
+    groups: 
+      - nuji