update password manager and add pangolin blueprints

homepage/docker-compose.override.yml

@@ -2,7 +2,7 @@ services:
   dockerproxy:
     labels:
       net.unraid.docker.managed: 'composeman'
-      net.unraid.docker.icon: ''
+      net.unraid.docker.icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/homepage.png'
       net.unraid.docker.webui: ''
       net.unraid.docker.shell: ''
   homepage:

homepage/docker-compose.yml

@@ -9,6 +9,9 @@ services:
       - POST=0 # Disallow any POST operations (effectively read-only)
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro # Mounted as read-only
+    labels:
+      net.unraid.docker.icon: "https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/homepage.png"
+      folder.view2: "Infrastructure"
 
   homepage:
     image: ghcr.io/gethomepage/homepage:latest

media-streaming/docker-compose.override.yml

@@ -11,3 +11,9 @@ services:
       net.unraid.docker.icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/lyrion-music-server.png'
       net.unraid.docker.webui: 'https://music.homecube.org'
       net.unraid.docker.shell: ''
+  lms2:
+    labels:
+      net.unraid.docker.managed: 'composeman'
+      net.unraid.docker.icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/lyrion-music-server.png'
+      net.unraid.docker.webui: 'https://${LMS_FULL_DOMAIN_2}'
+      net.unraid.docker.shell: ''

media-streaming/docker-compose.yml

@@ -91,6 +91,44 @@ services:
       homepage.href: "https://${LMS_FULL_DOMAIN}"
       homepage.description: Lightweight Music Server
       
+  lms2:
+    image: epoupon/lms
+    container_name: lms2
+    user: "99:100"
+    ports:
+      - "8028:5082"
+    volumes:
+      - /mnt/user/appdata/lms2:/var/lms:rw
+      - /mnt/user/volume1/music:/music:ro
+    networks:
+      - pangolin
+    labels:
+      net.unraid.docker.icon: "https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/lyrion-music-server.png"
+      net.unraid.docker.webui: "https://${LMS_FULL_DOMAIN_2}"
+      folder.view2: "Services"
+
+      pangolin.public-resources.lightweight-music-server-2.name: "${LMS_RESOURCE_NAME_2}"
+      pangolin.public-resources.lightweight-music-server-2.full-domain: "${LMS_FULL_DOMAIN_2}"
+      pangolin.public-resources.lightweight-music-server-2.protocol: "http"
+
+      pangolin.public-resources.lightweight-music-server-2.auth.sso-enabled: true
+      pangolin.public-resources.lightweight-music-server-2.auth.sso-roles[0]: "Member"
+
+      pangolin.public-resources.lightweight-music-server-2.targets[0].method: "http"
+
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.enabled: true
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.hostname: "lms2"
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.port: 5082
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.path: "/"
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.method: "GET"
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.status: 200
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.interval: 30
+      pangolin.public-resources.lightweight-music-server-2.targets[0].healthcheck.timeout: 5
+
+      pangolin.public-resources.lightweight-music-server-2.rules[0].action: "allow"
+      pangolin.public-resources.lightweight-music-server-2.rules[0].match: "path"
+      pangolin.public-resources.lightweight-music-server-2.rules[0].value: "/rest/*" # OpenSubsonicAPI
+
 networks:
   pangolin:
     name: pangolin_net

password-manager/docker-compose.yml

@@ -5,20 +5,51 @@ services:
     networks:
       - pangolin
     environment:
-      DOMAIN: ${DOMAIN}
+      DOMAIN: "https://${DOMAIN}"
       ADMIN_TOKEN: ${VAULTWARDEN_ADMIN_TOKEN}
     volumes:
       - /mnt/user/appdata/vaultwarden/data:/data/
     labels:
       net.unraid.docker.icon: "https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/bitwarden.png"
-      net.unraid.docker.webui: "${DOMAIN}"
+      net.unraid.docker.webui: "https://${DOMAIN}"
       folder.view2: "Services"
 
+      pangolin.public-resources.vaultwarden-server.name: "${RESOURCE_NAME}"
+      pangolin.public-resources.vaultwarden-server.full-domain: "${DOMAIN}"
+      pangolin.public-resources.vaultwarden-server.protocol: "http"
+
+      pangolin.public-resources.vaultwarden-server.auth.sso-enabled: true
+      pangolin.public-resources.vaultwarden-server.auth.sso-roles[0]: "Member"
+
+      pangolin.public-resources.vaultwarden-server.targets[0].method: "http"
+
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.enabled: true
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.hostname: "vaultwarden"
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.port: 80
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.path: "/api/alive"
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.method: "GET"
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.status: 200
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.interval: 30
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.timeout: 5
+
+      pangolin.public-resources.vaultwarden-server.rules[0].action: "allow"
+      pangolin.public-resources.vaultwarden-server.rules[0].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[0].value: "/api/*"
+      pangolin.public-resources.vaultwarden-server.rules[1].action: "allow"
+      pangolin.public-resources.vaultwarden-server.rules[1].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[1].value: "/identity/*"
+      pangolin.public-resources.vaultwarden-server.rules[2].action: "allow"
+      pangolin.public-resources.vaultwarden-server.rules[2].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[2].value: "/wl/*"
+      pangolin.public-resources.vaultwarden-server.rules[3].action: "deny"
+      pangolin.public-resources.vaultwarden-server.rules[3].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[3].value: "/admin/*"
+
       # HOMEPAGE
       homepage.group: Security
-      homepage.name: Vaultwarden
+      homepage.name: "${RESOURCE_NAME}"
       homepage.icon: vaultwarden.png
-      homepage.href: "${DOMAIN}"
+      homepage.href: "https://${DOMAIN}"
       homepage.description: Password Manager
 
 networks: