first commit

2026-08-20 10:33:59 +02:00
commit 75fba0229a
14 changed files with 3076 additions and 0 deletions
@@ -0,0 +1,65 @@
+# =====================================================================
+#  Checkmk + NGINX Proxy Manager
+#  Funktioniert identisch mit:  docker compose  |  podman-compose
+#
+#  - Beide Dienste laufen im Host-Netzwerk  -> keine "ports:"-Definition
+#  - Ausschliesslich Bind-Mounts nach ./data  -> keine named volumes
+# =====================================================================
+
+services:
+
+  # -------------------------------------------------------------------
+  # Checkmk (OMD) - im Host-Netzwerk
+  #   Port 5000 = Web-GUI (wird vom NGINX Proxy Manager als Backend genutzt)
+  #   Port 8000 = Agent-Receiver (cmk-agent-ctl / TLS-registrierte Agents)
+  #   Port 6557 = Livestatus (nur wenn CMK_LIVESTATUS_TCP=on)
+  # -------------------------------------------------------------------
+  checkmk:
+    image: ${CMK_IMAGE_REPO:-checkmk/check-mk-raw}:${CMK_IMAGE_TAG:-2.3.0-latest}
+    container_name: ${CMK_CONTAINER_NAME:-checkmk}
+    hostname: ${CMK_HOSTNAME:-checkmk}
+    network_mode: host
+    restart: unless-stopped
+    stop_grace_period: 120s
+    environment:
+      CMK_SITE_ID: ${CMK_SITE_ID:-cmk}
+      CMK_PASSWORD: ${CMK_PASSWORD:-}
+      CMK_LIVESTATUS_TCP: ${CMK_LIVESTATUS_TCP:-off}
+      MAIL_RELAY_HOST: ${MAIL_RELAY_HOST:-}
+      TZ: ${TZ:-Europe/Berlin}
+    volumes:
+      # Kompletter OMD-Datenbestand als Bind-Mount im Projektverzeichnis
+      - ${CMK_DATA_DIR:-./data/checkmk/sites}:/omd/sites:Z
+      - /etc/localtime:/etc/localtime:ro
+    ulimits:
+      nofile:
+        soft: 65536
+        hard: 65536
+    # ---------------------------------------------------------------
+    # Optional: tmpfs fuer das Site-tmp-Verzeichnis (Performance).
+    # Bewusst deaktiviert, weil uid/gid der Site nach einem Import
+    # abweichen koennen und das tmpfs dann falsch gemountet waere.
+    # Bei einer frisch angelegten Site ist uid/gid=1000 korrekt:
+    # ---------------------------------------------------------------
+    # tmpfs:
+    #   - /opt/omd/sites/${CMK_SITE_ID:-cmk}/tmp:uid=1000,gid=1000
+
+  # -------------------------------------------------------------------
+  # NGINX Proxy Manager - ebenfalls Host-Netzwerk
+  #   Port 80  = HTTP + Let's-Encrypt HTTP-01 Challenge
+  #   Port 443 = HTTPS
+  #   Port 81  = Admin-Oberflaeche (unbedingt per Firewall einschraenken!)
+  # -------------------------------------------------------------------
+  nginx-proxy-manager:
+    image: ${NPM_IMAGE:-jc21/nginx-proxy-manager:2}
+    container_name: ${NPM_CONTAINER_NAME:-nginx-proxy-manager}
+    network_mode: host
+    restart: unless-stopped
+    environment:
+      DISABLE_IPV6: ${NPM_DISABLE_IPV6:-true}
+      TZ: ${TZ:-Europe/Berlin}
+    volumes:
+      - ${NPM_DATA_DIR:-./data/npm/data}:/data:Z
+      - ${NPM_LE_DIR:-./data/npm/letsencrypt}:/etc/letsencrypt:Z
+    depends_on:
+      - checkmk