Initial apps

tvheadend/.gitignore

@@ -0,0 +1,2 @@
+recordings/
+

tvheadend/README.md

@@ -0,0 +1 @@
+tvheadend setup

tvheadend/docker-compose.yml

@@ -0,0 +1,19 @@
+---
+version: "2.1"
+services:
+  tvheadend:
+    image: lscr.io/linuxserver/tvheadend
+    container_name: tvheadend
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/London
+    volumes:
+      - ./config:/config
+      - ./recordings:/recordings
+    ports:
+      - 9981:9981
+      - 9982:9982
+    devices:
+      - /dev/dvb:/dev/dvb #optional
+    restart: unless-stopped

wireguard/.gitignore

@@ -0,0 +1 @@
+# ignore

wireguard/README.md

@@ -0,0 +1 @@
+wireguard setup

wireguard/config/.donoteditthisfile

@@ -0,0 +1,6 @@
+ORIG_SERVERURL="80.229.26.80"
+ORIG_SERVERPORT="51820"
+ORIG_PEERDNS="10.13.13.1"
+ORIG_PEERS="1"
+ORIG_INTERFACE="10.13.13"
+ORIG_ALLOWEDIPS="0.0.0.0/0, ::/0"

wireguard/config/coredns/Corefile

@@ -0,0 +1,4 @@
+. {
+    loop
+    forward . /etc/resolv.conf
+}

wireguard/config/peer1/peer1.conf

@@ -0,0 +1,10 @@
+[Interface]
+Address = 10.13.13.2
+PrivateKey = GO6r2NZq0UgkB/u3S6oV6k+CxYDQg+xYvlhjFC34Tnk=
+ListenPort = 51820
+DNS = 10.13.13.1
+
+[Peer]
+PublicKey = a7bifNDAdLCYuJCELsMCZzVntp1xujOzXYLSCQ1TF0o=
+Endpoint = 80.229.26.80:51820
+AllowedIPs = 0.0.0.0/0, ::/0

wireguard/config/peer1/privatekey-peer1

@@ -0,0 +1 @@
+GO6r2NZq0UgkB/u3S6oV6k+CxYDQg+xYvlhjFC34Tnk=

wireguard/config/peer1/publickey-peer1

@@ -0,0 +1 @@
+UmxCFo8f/TxObdyEbwuUgw/9yTJ4teMQZoSQiySwfG4=

wireguard/config/server/privatekey-server

@@ -0,0 +1 @@
+ICVV/aXsTdYg5Y44F6j8a7rO8rNZGtLxoOmsb0B+12c=

wireguard/config/server/publickey-server

@@ -0,0 +1 @@
+a7bifNDAdLCYuJCELsMCZzVntp1xujOzXYLSCQ1TF0o=

wireguard/config/templates/peer.conf

@@ -0,0 +1,10 @@
+[Interface]
+Address = ${CLIENT_IP}
+PrivateKey = $(cat /config/${PEER_ID}/privatekey-${PEER_ID})
+ListenPort = 51820
+DNS = ${PEERDNS}
+
+[Peer]
+PublicKey = $(cat /config/server/publickey-server)
+Endpoint = ${SERVERURL}:${SERVERPORT}
+AllowedIPs = ${ALLOWEDIPS}

wireguard/config/templates/server.conf

@@ -0,0 +1,6 @@
+[Interface]
+Address = ${INTERFACE}.1
+ListenPort = 51820
+PrivateKey = $(cat /config/server/privatekey-server)
+PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
+PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

wireguard/config/wg0.conf

@@ -0,0 +1,12 @@
+[Interface]
+Address = 10.13.13.1
+ListenPort = 51820
+PrivateKey = ICVV/aXsTdYg5Y44F6j8a7rO8rNZGtLxoOmsb0B+12c=
+PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
+PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
+
+[Peer]
+# peer1
+PublicKey = UmxCFo8f/TxObdyEbwuUgw/9yTJ4teMQZoSQiySwfG4=
+AllowedIPs = 10.13.13.2/32
+

wireguard/docker-compose.yml

@@ -0,0 +1,25 @@
+version: "2.1"
+services:
+  wireguard:
+    image: linuxserver/wireguard
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/London
+      - SERVERURL=80.229.26.80 #optional
+      - SERVERPORT=51820 #optional
+      - PEERS=1 #optional
+      - PEERDNS=auto #optional
+      - INTERNAL_SUBNET=10.13.13.0 #optional
+    volumes:
+      - ./config:/config
+      - /lib/modules:/lib/modules
+    ports:
+      - 51820:51820/udp
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+    restart: unless-stopped