update examples

README.md

@@ -1,49 +1,7 @@
 # Emby server infrastructure
 
-## Included services
+## Configure pritunl Cloudflare CA
 
-- [Emby](https://hub.docker.com/r/emby/embyserver)
-- [Sonarr](https://hub.docker.com/r/linuxserver/sonarr)
-- [Radarr](https://hub.docker.com/r/linuxserver/radarr)
-- [Bazarr](https://hub.docker.com/r/linuxserver/bazarr)
-- [Jackett](https://hub.docker.com/r/linuxserver/jackett)
-- [Prowlarr](https://github.com/Prowlarr/Prowlarr)
-- [Transmission](https://hub.docker.com/r/linuxserver/transmission)
-- [FlareSolverr](https://github.com/FlareSolverr/FlareSolverr)
-- [watchtower](https://hub.docker.com/r/containrrr/watchtower)
-- [logrotate](https://hub.docker.com/r/blacklabelops/logrotate)
-- [traefik](https://hub.docker.com/_/traefik)
-- [traefik-forward-auth](https://github.com/thomseddon/traefik-forward-auth)
-
-## Local testing
-
-- create .env file with required envs
-
-```
-EMBY_HOST=emby.localhost
-JELLYFIN_HOST=jellyfin.localhost
-SONARR_HOST=sonarr.localhost
-RADARR_HOST=radarr.localhost
-BAZARR_HOST=bazarr.localhost
-JACKETT_HOST=jackett.localhost
-PROWLARR_HOST=prowlarr.localhost
-TRAEFIK_HOST=traefik.localhost
-TRANSMISSION_HOST=transmission.localhost
-WHOAMI_HOST=whoami.localhost
-AUTH_HOST=auth.localhost
-[email protected]
-WATCHTOWER_HOOK_URL=
-TRAEFIK_PILOT_TOKEN=
-CF_DNS_API_TOKEN=
-OAUTH2_CLIENT_ID=
-OAUTH2_CLIENT_SECRET=
-OAUTH2_COOKIE_SECRET=
-```
-
-- start project
-
-```
-docker-compose up -d
-```
-
-- services will be available at http://_service_.localhost
+`docker exec -it pritunl bash`
+`pritunl set app.server_cert "$(cat /certs/cert.pem)"`
+`pritunl set app.server_key "$(cat /certs/cert.key)"`

pritunl.yaml

@@ -0,0 +1,36 @@
+version: '3'
+
+services:
+  mongo:
+    image: mongo:latest
+    container_name: pritunldb
+    hostname: pritunldb
+    network_mode: bridge
+    restart: always
+    volumes:
+      - ./db:/data/db
+
+  pritunl:
+    image: goofball222/pritunl:latest
+    container_name: pritunl
+    hostname: pritunl
+    depends_on:
+        - mongo
+    network_mode: bridge
+    restart: always
+    privileged: true
+    sysctls:
+      - net.ipv6.conf.all.disable_ipv6=0
+    links:
+      - mongo
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - /lib/modules:/lib/modules:ro
+      - ./certs:/certs:ro
+    ports:
+      - 443:443
+      - 1194:1194
+      - 1194:1194/udp
+      - 1195:1195/udp
+    environment:
+      - TZ=UTC