startpack

KO | EN

gitlite — search

#react #typescript #golang #deep-learning #linux #java #windows #cli #kubernetes #vue #pytorch #security #openai #open-source

(★ 1,251)

Selfhosted tech starter pack for development of new project or startup

파일 탐색기

최종 버전 다운로드 (.zip)

- FUNDING.yml
- - prometheus.yml
- gitlab-runner.toml
- influxdb.sh
- mariadb.sql
- postgres.sql
- telegraf-node.conf
- telegraf.conf
databases.yml
env.sh
env.sh.test
gitlab-runner.yml
gitlab.yml
LICENSE
minio.yml
monitoring.yml
nextcloud.yml
nfs.yml
nocodb.yml
openproject.yml
portainer.yml
README.md
registry.yml
rocketchat.yml
setup-compose.yml
setup-swarm.yml
setup.sh
strapi.yml
tuleap.yml
vaultwarden.yml

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# startpack

[![#StandWithBelarus](https://img.shields.io/badge/Belarus-red?label=%23%20Stand%20With&labelColor=white&color=red)
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/e/ea/Presidential_Standard_of_Belarus_%28fictional%29.svg/240px-Presidential_Standard_of_Belarus_%28fictional%29.svg.png" width="20" height="20" alt="Voices From Belarus" />](https://bysol.org/en/) [![Stand With Ukraine](https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/badges/StandWithUkraine.svg)](https://vshymanskyy.github.io/StandWithUkraine)

This is a basic setup of services for faster startup development. You can run it via [docker-compose](https://docs.docker.com/compose/) or [docker swarm](https://docs.docker.com/engine/reference/commandline/stack/).

Warning: This setup doesn't provide high level of security or any [high availability](https://www.digitalocean.com/community/tutorials/what-is-high-availability). You have to hire some skilled devops engineer (like me)) for close this gap after getting first round or sales.

Also you can check [Awesome Selfhosted](https://github.com/awesome-selfhosted/awesome-selfhosted), [Awesome Sysadmin](https://github.com/kahun/awesome-sysadmin) and [Free for Dev](https://free-for.dev/) for more options ;)

And [Coolify](https://github.com/coollabsio/coolify) or [Dokku](https://dokku.com) - an open-source & self-hostable Heroku / Netlify alternative

[Discuss on hacker news](https://news.ycombinator.com/item?id=30871211#30871600)

Time track:
- [Filipp Frizzy](https://github.com/Friz-zy/): 63h 30m for 15 days

## Available and planned open source components

### Platform
* [DONE] [Docker Compose](https://docs.docker.com/compose/)
* [DONE] [Docker Swarm](https://docs.docker.com/engine/reference/commandline/stack/)
* [DONE] [Traefik](https://traefik.io) as web server with autodiscovery and [letsencrypt](https://letsencrypt.org) certs
* [DONE] [NFS](https://hub.docker.com/r/itsthenetwork/nfs-server-alpine/) for docker swarm volumes
* [DONE] [Portainer](https://www.portainer.io/) as admin panel for docker services
* [DONE] [Docker registry](https://docs.docker.com/registry/) for store your docker images
* [DONE] [Influxdb 2](https://www.influxdata.com/blog/influxdb-2-0-open-source-is-generally-available/) and [Telegraf](https://www.influxdata.com/time-series-platform/telegraf/) for monitoring services
* [DONE] [Grafana](https://grafana.com/) and [Victoriametrics](https://victoriametrics.com) for monitoring services

### Databases and Storage
* [DONE] [Mariadb](https://mariadb.org/) as SQL database
* [DONE] [Postgresql](https://www.postgresql.org/) as another popular SQL database
* [DONE] [SQL Adminer](https://www.adminer.org/) as admin panel for SQL databases
* [DONE] [Minio](https://minio.io/) as s3 storage

### Management
* [DONE] [Gitlab](https://about.gitlab.com/) as git hosting and devops platform
* [DONE] [Nextcloud](https://nextcloud.com/) as cloud storage with plugins for email, task management, password storage, etc
* [DONE] [Tuleap](https://www.tuleap.org/) as management software
* [DONE] [Openproject](https://www.openproject.org/) as management software
* [DONE] [Vaultwarden](https://github.com/dani-garcia/vaultwarden/wiki) as password manager for business
* [Backlog] [Zentao](https://www.zentao.pm) as scrum management software
* [Backlog] [Taiga](https://www.taiga.io/) as kanban board based management software
* [Backlog] [Owncloud](https://owncloud.com/) as cloud storage

### Chat
* [DONE] [Rocket](https://rocket.chat/)
* [Backlog] [Mattermost](https://mattermost.com/)
* [Backlog] [Twake](https://twake.app/) as alternative to Microsoft Teams
* [Backlog] [Wire](https://wire.com) as alternative to Microsoft Teams

### Backend as a service
* [DONE] [Nocodb](https://www.nocodb.com/) as airtable alternative
* [DONE] [Strapi](https://strapi.io/) as headless CMS
* [Backlog] [Appwrite](https://appwrite.io/) as firebase alternative

### CMS
* [Backlog] [Wordpress](https://wordpress.org) one of the most popular CMS
* [Backlog] [Ghost](https://github.com/TryGhost/Ghost) as alternative to medium
* [Backlog] [Webiny](https://www.webiny.com/) landing page builder with drag and drop features
* [Backlog] [Grapedrop](https://grapedrop.com/) open source page builder

### Low Code Platform
* [Backlog] [Anvil](https://github.com/anvil-works/anvil-runtime) is a framework for building full-stack web apps with nothing but Python
* [Backlog] [Budibase](https://budibase.com/) build modern business apps in under 5 minutes
* [Backlog] [Appsmith](https://www.appsmith.com/) a powerful open source framework to build internal tools
* [Backlog] [Tooljet](https://tooljet.com/) everything you need to build internal tools

### CI & CD
* [DONE] [Gitlab Runner](https://about.gitlab.com/) should be placed on separate host

### Miss something? [Could you tell me more about how can I help you, please?](https://forms.gle/wSHs4C6pHXaxVm1a8)

## About the Author

Hello, everyone! My name is Filipp, and I have been working with high load distribution systems and services, security, monitoring, continuous deployment and release management (DevOps domain) since 2012.

One of my passions is developing DevOps solutions and contributing to the open-source community. By sharing my knowledge and experiences, I strive to save time for both myself and others while fostering a culture of collaboration and learning.

I had to leave my home country, Belarus, due to my participation in [protests against the oppressive regime of dictator Lukashenko](https://en.wikipedia.org/wiki/2020%E2%80%932021_Belarusian_protests), who maintains a close affiliation with Putin. Since then, I'm trying to build my life from zero in other countries.

If you are seeking a skilled DevOps lead or architect to enhance your project, I invite you to connect with me on [LinkedIn](https://www.linkedin.com/in/filipp-frizzy-289a0360/) or explore my valuable contributions on [GitHub](https://github.com/Friz-zy/). Let's collaborate and create some cool solutions together :)

## Support

You can support this or any other of my projects
  - [![ko-fi](https://ko-fi.com/img/githubbutton_sm.svg)](https://ko-fi.com/filipp_frizzy)
  - [donationalerts.com/r/filipp_frizzy](https://www.donationalerts.com/r/filipp_frizzy)
  - ETH 0xCD9fC1719b9E174E911f343CA2B391060F931ff7
  - BTC bc1q8fhsj24f5ncv3995zk9v3jhwwmscecc6w0tdw3

## Setup

All operations should be executed from root on target machine. You can use your laptop or some server. For running all services you need at least 2 cpu cores, 8gb memory and 20gb of free disk space. You can find cheap servers on [hetzner.com](https://www.hetzner.com/cloud) or compare small hosters on [vps.today](https://vps.today/).

You also need a valid domain name pointed to this server for automatically setting up https with [traefik](https://traefik.io) and [letsencrypt](https://letsencrypt.org). However, you can [hack your hosts file](https://docs.rackspace.com/support/how-to/modify-your-hosts-file/) for working without https.

For bying domain and configuring DNS I recommend you [Cloudflare](https://dash.cloudflare.com). You should create at least two DNS record type `A`:
1) `your domain name` pointed to `your server IP`
2) `*.your domain name` pointed to `your server IP`

If you run services with `docker-compose`, all service will be located on your single server. With `docker stack` (swarm) mode, you can [add addition servers](https://docs.docker.com/engine/swarm/swarm-tutorial/add-nodes/) in the same local network (the same network important for nfs volumes mounting unfortunately).

#### 1) Install docker if it doesn't installed
(run scripts from the internet is a bad practice, but if you don't know how to install docker with package managers - it's acceptable)
```
curl -fsSL https://get.docker.com -o get-docker.sh
DRY_RUN=1 sh ./get-docker.sh
sh ./get-docker.sh
```

Install docker-compose
```
curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
```

#### 2) [Setup docker swarm](https://docs.docker.com/engine/reference/commandline/swarm_init/) if you choose using it.
```
docker swarm init --advertise-addr $(hostname -I | awk '{print $1}')
```

#### 3) Get this repo
```
git clone https://github.com/tldr-devops/startpack.git --depth=1
cd startpack
```

#### 4) Fill necessary variables like domain name of your server, your email, passwords for basic auth and sql services.

You should change this lines with your email and dns name
```
echo -e "export EMAIL='Type your email here'\n$(cat env.sh)" > env.sh
echo -e "export DOMAIN='Type your domain here'\n$(cat env.sh)" > env.sh
```

This is your credentials, store it in your password manager ;)
```
cat env.sh
```

#### 5) Prepare environment
```
source env.sh
bash setup.sh
```

If you have docker swarm setup with more than one machine, you should start NFS server on main manager and [connect other nodes to it](https://linuxize.com/post/how-to-mount-an-nfs-share-in-linux/):

A) On main machine
```
# Setup NFS server with compose as docker-swarm still doesn't support `privileged` mode
docker-compose -f nfs.yml up -d
```

B) On all other machines
```
export MASTER_IP="your $MASTER_IP from step 4"
export DATAPATH="your $DATAPATH from step 4"
echo -e "$MASTER_IP:$DATAPATH $DATAPATH nfs nfsvers=4,rw 0 0" >> /etc/fstab
mount $DATAPATH
```

#### 6) Run your new services

After entering all commands below you'll able to login into your new services by addresses:
* https://traefik.your_domain user `your $USERNAME` password `your $PASSWORD`
* https://portainer.your_domain
* https://registry.your_domain user `your $REGISTRY_USERNAME` password `your $REGISTRY_PASSWORD`
* https://influxdb.your_domain user `your $USERNAME` password `your $PASSWORD`
* https://grafana.your_domain user `your $USERNAME` password `your $PASSWORD`
* https://victoriametrics.your_domain user `your $USERNAME` password `your $PASSWORD`
* https://adminer.your_domain user `your $USERNAME` password `your $PASSWORD`
* https://minio-console.your_domain user `your $USERNAME` password `your $PASSWORD`
* https://gitlab.your_domain user `root` password `your $PASSWORD`
* https://nextcloud.your_domain user `your $USERNAME` password `your $PASSWORD`
* https://tuleap.your_domain user `admin` password `your $PASSWORD`
* https://openproject.your_domain user `admin` password `admin`
* https://rocketchat.your_domain
* https://vaultwarden.your_domain/admin password `your $PASSWORD`
* https://nocodb.your_domain
* https://strapi.your_domain

##### Docker Compose

Mandatory steps
```
docker-compose -f setup-compose.yml up -d
docker-compose -f databases.yml up -d
```

from now on you can choose which services you need
```
docker-compose -f monitoring.yml up -d
docker-compose -f registry.yml up -d
docker-compose -f minio.yml up -d
docker-compose -f vaultwarden.yml up -d
docker-compose -f tuleap.yml up -d
docker-compose -f nextcloud.yml up -d
docker-compose -f gitlab.yml up -d
```

After enabling portainer you should immediately go to portainer.your_domain and set admin password
```
docker-compose -f portainer.yml up -d
```

After enabling rocketchat you should immediately go to rocketchat.your_domain/admin and set admin password
```
docker-compose -f rocketchat.yml up -d
```

After enabling openproject you should immediately go to openproject.your_domain,
login with `admin` user and `admin` password, change it and update settings on
openproject.your_domain/admin/settings/general
```
docker-compose -f openproject.yml up -d
```

After enabling nocodb you should immediately go to nocodb.your_domain and set admin password
```
docker-compose -f nocodb.yml up -d
```

After enabling strapi you should wait a minute and then go to strapi.your_domain/admin and set admin password
```
docker-compose -f strapi.yml up -d
```

##### Docker Swarm

Mandatory steps
```
docker stack deploy --compose-file setup-swarm.yml startpack
docker stack deploy --compose-file databases.yml startpack
```

From now on you can choose which services you need
```
docker stack deploy --compose-file monitoring.yml startpack
docker stack deploy --compose-file registry.yml startpack
docker stack deploy --compose-file minio.yml startpack
docker stack deploy --compose-file vaultwarden.yml startpack
docker stack deploy --compose-file tuleap.yml startpack
docker stack deploy --compose-file nextcloud.yml startpack
docker stack deploy --compose-file gitlab.yml startpack
```

After enabling portainer you should immediately go to portainer.your_domain and set admin password
```
docker stack deploy --compose-file portainer.yml startpack
```

After enabling rocketchat you should immediately go to rocketchat.your_domain/admin and set admin password
```
docker stack deploy --compose-file rocketchat.yml startpack
```

After enabling openproject you should immediately go to openproject.your_domain,
login with `admin` user and `admin` password, change it and update settings on
openproject.your_domain/admin/settings/general
```
docker stack deploy --compose-file openproject.yml startpack
```

After enabling nocodb you should immediately go to nocodb.your_domain and set admin password
```
docker stack deploy --compose-file nocodb.yml startpack
```

After enabling strapi you should immediately go to strapi.your_domain/admin and set admin password
```
docker stack deploy --compose-file strapi.yml startpack
```

#### 7) Run gitlab-runner on separate machine with docker-compose
```
# Install docker
curl -fsSL https://get.docker.com -o get-docker.sh
DRY_RUN=1 sh ./get-docker.sh
sh ./get-docker.sh

# Install docker-compose
curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

# Get files
git checkout https://github.com/tldr-devops/startpack.git --depth=1
cd startpack

# Prepare environment
mkdir -p {builds,cache}
export DOMAIN="Your domain"
export HASHED_PASSWORD="HASHED_PASSWORD from step 4"
envsubst < configs/gitlab-runner.toml > ./config.toml

# Run runner in docker with docker-compose
docker-compose -f gitlab-runner.yml up -d

# Check runners logs
docker-compose -f gitlab-runner.yml logs -f
```

#### 8) Login into your docker registry on all docker hosts
```
docker login -u "Your REGISTRY_USERNAME from step 4" -p "Your REGISTRY_PASSWORD from step 4" registry."YOUR DOMAIN"
```

#### 9) You should configure backups of your server, at least $DATAPATH directory

startpack

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

startpack

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README