Added .env files to stacks

dockhand/.env

@@ -0,0 +1,3 @@
+PUID=1000
+PGID=1000
+PORT=3002

dockhand/compose.yml

@@ -9,10 +9,10 @@ services:
     #container_name: dockhand
     #restart: unless-stopped
     environment:
-      - PUID=1000
-      - PGID=1000
+      - PUID=${PUID}
+      - PGID=${PGID}
     ports:
-      - 3002:3000
+      - ${PORT}:3000
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - /home/rcadmin/docker/dockhand/data:/app/data

dozzle/.env

@@ -0,0 +1,2 @@
+DOZZLE_MODE=swarm
+PORT=8280

dozzle/compose.yml

@@ -10,14 +10,11 @@ services:
   dozzle:
     image: amir20/dozzle:latest
     environment:
-      - DOZZLE_MODE=swarm
-#      - DOZZLE_HOSTNAME=dozzle.home.ramberg.net
-#      - DOZZLE_REMOTE_AGENT=agent:7007
+      - DOZZLE_MODE=${DOZZLE_MODE:-swarm}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
     ports:
-      - 8280:8080
-#    network_mode: "host"
+      - ${PORT}:8080
     networks:
       - dozzle
     deploy:

freshrss/.env

@@ -0,0 +1,4 @@
+PUID=1000
+PGID=1000
+TZ=Europe/Oslo
+PORT=8083

freshrss/compose.yml

@@ -8,13 +8,13 @@ services:
     image: lscr.io/linuxserver/freshrss:latest
     #container_name: freshrss
     environment:
-      - PUID=1000
-      - PGID=1000
-      - TZ=Europe/Oslo
+      - PUID=${PUID}
+      - PGID=${PGID}
+      - TZ=${TZ}
     volumes:
       - /home/rcadmin/docker/freshrss:/config
     ports:
-      - 8083:80
+      - ${PORT}:80
     #restart: unless-stopped
     networks:
       - freshrss

freshrss/log/logrotate.status

@@ -1,6 +1,6 @@
 logrotate state -- version 2
 "/var/log/acpid.log" 2026-1-19-2:0:0
-"/config/log/nginx/access.log" 2026-2-8-2:0:0
+"/config/log/nginx/access.log" 2026-2-15-2:0:0
 "/var/log/php84/*.log" 2026-1-19-2:0:0
 "/config/log/nginx/error.log" 2026-1-19-2:0:0
-"/config/log/php/error.log" 2026-2-8-2:0:0
+"/config/log/php/error.log" 2026-2-15-2:0:0

gitea/compose.yml

@@ -5,13 +5,13 @@ services:
     image: gitea/gitea:latest
     #container_name: gitea
     environment:
-      - USER_UID=1000
-      - USER_GID=1000
-      - GITEA__database__DB_TYPE=mysql
-      - GITEA__database__HOST=database.home.ramberg.net:3306
-      - GITEA__database__NAME=gitea
-      - GITEA__database__USER=gitea
-      - GITEA__database__PASSWD=giteapass123
+      - USER_UID=${USER_UID}
+      - USER_GID=${USER_GID}
+      - GITEA__database__DB_TYPE=${GITEA__database__DB_TYPE}
+      - GITEA__database__HOST=${GITEA__database__HOST}
+      - GITEA__database__NAME=${GITEA__database__NAME}
+      - GITEA__database__USER=${GITEA__database__USER}
+      - GITEA__database__PASSWD=${GITEA__database__PASSWD}
     #restart: unless-stopped
     volumes:
       - /home/rcadmin/docker/gitea/data:/data
@@ -19,8 +19,8 @@ services:
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
     ports:
-      - 3000:3000
-      - 2222:22
+      - ${PORT_1}:3000
+      - ${PORT_2}:22
     networks:
       - gitea
 

homebox/.env

@@ -0,0 +1,10 @@
+# Homebox environment variables
+
+HBOX_LOG_LEVEL=info
+HBOX_LOG_FORMAT=text
+HBOX_WEB_MAX_FILE_UPLOAD=10
+
+# Please consider allowing analytics to help us improve Homebox (basic computer information, no personal data)
+HBOX_OPTIONS_ALLOW_ANALYTICS=false
+
+PORT=3100

homebox/compose.yml

@@ -9,15 +9,15 @@ services:
     #container_name: homebox
     #restart: unless-stopped
     environment:
-    - HBOX_LOG_LEVEL=info
-    - HBOX_LOG_FORMAT=text
-    - HBOX_WEB_MAX_FILE_UPLOAD=10
+    - HBOX_LOG_LEVEL=${HBOX_LOG_LEVEL:-info}
+    - HBOX_LOG_FORMAT=${HBOX_LOG_FORMAT:-text}
+    - HBOX_WEB_MAX_FILE_UPLOAD=${HBOX_WEB_MAX_FILE_UPLOAD:-10}
     # Please consider allowing analytics to help us improve Homebox (basic computer information, no personal data)
-    - HBOX_OPTIONS_ALLOW_ANALYTICS=false
+    - HBOX_OPTIONS_ALLOW_ANALYTICS=${HBOX_OPTIONS_ALLOW_ANALYTICS:-false}
     volumes:
       - /home/rcadmin/docker/homebox/data:/data/
     ports:
-      - 3100:7745
+      - ${PORT}:7745
 
     deploy:
       labels:

homepage/.env

@@ -0,0 +1,5 @@
+# Homepage .env file
+
+PORT=3010
+
+HOMEPAGE_ALLOWED_HOSTS=www.home.ramberg.net,homepage.home.ramberg.net,docker-01.home.ramberg.net:3010,192.168.50.201:3010 # required, may need port. See gethomepage.dev/installation/#homepage_allowed_hosts

homepage/compose.yml

@@ -7,13 +7,13 @@ services:
   homepage:
     image: ghcr.io/gethomepage/homepage:latest
     ports:
-      - 3010:3000
+      - ${PORT}:3000
     restart: unless-stopped
     volumes:
       - /home/rcadmin/docker/homepage/config:/app/config # Make sure your local config directory exists
       - /var/run/docker.sock:/var/run/docker.sock:ro # (optional) For docker integrations
     environment:
-      HOMEPAGE_ALLOWED_HOSTS: www.home.ramberg.net,homepage.home.ramberg.net,docker-01.home.ramberg.net:3010,192.168.50.201:3010 # required, may need port. See gethomepage.dev/installation/#homepage_allowed_hosts
+      HOMEPAGE_ALLOWED_HOSTS: ${HOMEPAGE_ALLOWED_HOSTS}
     deploy:
       placement:
         constraints:

iperf3/.env

@@ -0,0 +1,3 @@
+# iperf3 .env file
+
+PORT=5201

iperf3/compose.yml

@@ -8,7 +8,7 @@ services:
         command: '-s'
         image: networkstatic/iperf3
         ports:
-            - '5201:5201'
+            - '${PORT}:5201'
         #container_name: iperf3-server
         tty: true
         stdin_open: true

it-tools/.env

@@ -0,0 +1,3 @@
+# Environment variables for the IT Tools application
+
+PORT=9080

it-tools/compose.yml

@@ -5,7 +5,7 @@ services:
         #container_name: it-tools
         #restart: unless-stopped
         ports:
-            - 9080:80
+            - ${PORT}:80
 
         deploy:
             labels:

mealie/.env

@@ -0,0 +1,6 @@
+# This file is used to set environment variables for the Mealie application.
+
+PORT=9091
+
+ALLOW_SIGNUP=false
+LOG_LEVEL=DEBUG

mealie/compose.yml

@@ -16,10 +16,10 @@ services:
     volumes:
       - /home/rcadmin/docker/mealie/data:/app/data/
     ports:
-      - 9091:9000
+      - ${PORT}:9000
     environment:
-      ALLOW_SIGNUP: "false"
-      LOG_LEVEL: "DEBUG"
+      ALLOW_SIGNUP: ${ALLOW_SIGNUP:-false}
+      LOG_LEVEL: ${LOG_LEVEL:-INFO}
 
       DB_ENGINE: sqlite # Optional: 'sqlite', 'postgres'
       # =====================================

n8n/.env

@@ -1,6 +1,7 @@
 # Admin: kim@ramberg.net
 # Pass : Homekbr1998!
 
+PORT=5678
 
 N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
 N8N_SUBDOMAIN='n8n'

n8n/compose.yml

@@ -7,19 +7,18 @@ services:
     image: docker.n8n.io/n8nio/n8n
     restart: always
     ports:
-      - "5678:5678"
-#      - "127.0.0.1:5678:5678"
+      - "${PORT}:5678"
     environment:
-      - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
-      - N8N_HOST=n8n.home.ramberg.net
-      - N8N_PORT=5678
-      - N8N_PROTOCOL=https
-      - N8N_RUNNERS_ENABLED=true
-      - NODE_ENV=production
-      - WEBHOOK_URL=https://n8n.home.ramberg.net/
-      - GENERIC_TIMEZONE=Europe/Oslo
-      - TZ=Europe/Oslo
-      - DB_SQLITE_POOL_SIZE=0
+      - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=${N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS}
+      - N8N_HOST=${N8N_SUBDOMAIN}.${N8N_DOMAIN_NAME}
+      - N8N_PORT=${N8N_PORT}
+      - N8N_PROTOCOL=${N8N_PROTOCOL}
+      - N8N_RUNNERS_ENABLED=${N8N_RUNNERS_ENABLED}
+      - NODE_ENV=${NODE_ENV}
+      - WEBHOOK_URL=${N8N_PROTOCOL}://${N8N_SUBDOMAIN}.${N8N_DOMAIN_NAME}/
+      - GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
+      - TZ=${GENERIC_TIMEZONE}
+      - DB_SQLITE_POOL_SIZE=${DB_SQLITE_POOL_SIZE}
     volumes:
       - /home/rcadmin/docker/n8n/data:/home/node/.n8n
       - /home/rcadmin/docker/n8n/files:/files

nginx-proxy-manager/.env

@@ -0,0 +1,5 @@
+# 
+
+PORT_1=80
+PORT_2=81
+PORT_3=443

nginx-proxy-manager/compose.yml

@@ -4,9 +4,9 @@ services:
     image: 'docker.io/jc21/nginx-proxy-manager:latest'
     restart: unless-stopped
     ports:
-      - '80:80'
-      - '81:81'
-      - '443:443'
+      - '${PORT_1}:80'
+      - '${PORT_2}:81'
+      - '${PORT_3}:443'
     volumes:
       - ./data:/data
       - ./letsencrypt:/etc/letsencrypt

notes.md

@@ -58,3 +58,13 @@ volumes:
       device: /data/db_data
       o: bind
 ```
+
+
+```
+env $(grep -v '^#' .env | xargs) docker stack deploy -c docker-compose.yml stack-name-here
+
+
+env $(grep -v '^#' ${PWD}/.env | xargs) docker stack deploy -c docker-compose.yml stack-name-here
+
+```
+

ntfy/.env

@@ -0,0 +1,5 @@
+# ntfy - a simple HTTP-based pub-sub notification service
+# Environment variables for ntfy
+
+TZ=Europe/Oslo
+PORT=9010

ntfy/compose.yml

@@ -7,7 +7,7 @@ services:
     command:
       - serve
     environment:
-      - TZ=Europe/Oslo    # optional: set desired timezone
+      - TZ=${TZ}    # optional: set desired timezone
     #user: UID:GID # optional: replace with your own user/group or uid/gid
     volumes:
       - /home/rcadmin/docker/ntfy/data/cache_ntfy:/var/cache/ntfy
@@ -15,7 +15,7 @@ services:
     networks:
       - ntfy
     ports:
-      - 9010:80
+      - ${PORT}:80
     healthcheck: # optional: remember to adapt the host:port to your environment
         test: ["CMD-SHELL", "wget -q --tries=1 http://localhost:80/v1/health -O - | grep -Eo '\"healthy\"\\s*:\\s*true' || exit 1"]
         interval: 60s

openspeedtest/.env

@@ -0,0 +1,4 @@
+# This file is used to set environment variables for the OpenSpeedTest application.
+
+PORT_1=3004
+PORT_2=3005

openspeedtest/compose.yml

@@ -11,8 +11,8 @@ services:
       networks:
         - openspeedtest
       ports:
-        - '3004:3000'
-        - '3005:3001'
+        - '${PORT_1}:3000'
+        - '${PORT_2}:3001'
       image: openspeedtest/latest
       deploy:
         labels:

pihole/.env

@@ -0,0 +1,18 @@
+# Pi-hole Docker Environment Variables
+
+# Ports
+# DNS Ports
+PORT_DNS_TCP=53
+PORT_DNS_UDP=53
+# Default HTTP Port
+PORT_HTTP=8080
+# Default HTTPs Port. FTL will generate a self-signed certificate
+PORT_HTTPS=8443
+# Uncomment the below if using Pi-hole as your DHCP Server
+#PORT_DHCP_SERVER=67
+
+# Environment variables
+TZ=Europe/Oslo'
+
+# Set a password to access the web interface. Not setting one will result in a random password being assigned
+FTLCONF_webserver_api_password='homekbr1998'

pihole/compose.yml

@@ -8,19 +8,19 @@ services:
       - pihole
     ports:
       # DNS Ports
-      - "53:53/tcp"
-      - "53:53/udp"
+      - "${PORT_DNS_TCP}:53/tcp"
+      - "${PORT_DNS_UDP}:53/udp"
       # Default HTTP Port
-      - "8080:80/tcp"
+      - "${PORT_HTTP}:80/tcp"
       # Default HTTPs Port. FTL will generate a self-signed certificate
-      - "8443:443/tcp"
+      - "${PORT_HTTPS}:443/tcp"
       # Uncomment the below if using Pi-hole as your DHCP Server
-      #- "67:67/udp"
+      #- "${PORT_DHCP_SERVER}:67/udp"
     environment:
       # Set the appropriate timezone for your location (https://en.wikipedia.org/wiki/List_of_tz_database_time_zones), e.g:
-      TZ: 'Europe/Oslo'
+      TZ: ${TZ}
       # Set a password to access the web interface. Not setting one will result in a random password being assigned
-      FTLCONF_webserver_api_password: 'homekbr1998'
+      ${FTLCONF_webserver_api_password}: 'homekbr1998'
     # Volumes store your data between container upgrades
     volumes:
       # For persisting Pi-hole's databases and common configuration file

portainer/.env

@@ -0,0 +1,9 @@
+# Environment variables for Portainer
+
+# Ports
+PORT_1=8000
+PORT_2=9443
+
+# Environment variables
+VIRTUAL_HOST=portainer.home.ramberg.net
+#VIRTUAL_PORT=9443

portainer/compose.yml

@@ -5,14 +5,14 @@ services:
         networks:
           - portainer
         ports:
-            - 8000:8000
-            - 9443:9443
+            - ${PORT_1}:8000
+            - ${PORT_2}:9443
         #container_name: portainer
         command: --no-analytics
         #restart: always
         environment:
-          - VIRTUAL_HOST=portainer.home.ramberg.net
-          #- VIRTUAL_PORT=9443
+          - VIRTUAL_HOST=${VIRTUAL_HOST}
+          #- VIRTUAL_PORT=${VIRTUAL_PORT}
         volumes:
           - /var/run/docker.sock:/var/run/docker.sock
           - /home/rcadmin/docker/portainer/data:/data

shepherd/compose.yml

@@ -17,9 +17,8 @@ services:
       homepage.name: Shepherd
       #homepage.href: https://portainer.home.ramberg.net/
     environment:
-      TZ: Europe/Oslo
-      SLEEP_TIME: 360m
-      WITH_REGISTRY_AUTH: 'true'
-      REGISTRY_USER: kbramberg
-      REGISTRY_PASSWORD: askjfhKJ34Bsdjrt4387
-
+      TZ: ${TZ}
+      SLEEP_TIME: ${SLEEP_TIME}
+      WITH_REGISTRY_AUTH: ${WITH_REGISTRY_AUTH}
+      REGISTRY_USER: ${REGISTRY_USER}
+      REGISTRY_PASSWORD: ${REGISTRY_PASSWORD}

start.sh

@@ -3,4 +3,6 @@
 # Copy this file to /usr/sbin/start to enable easy startup
 # cp start.sh /usr/sbin/start
 
-docker stack deploy -c compose.yml ${PWD##*/}
+#docker stack deploy -c compose.yml ${PWD##*/}
+
+env $(grep -v '^#' ${PWD}/.env | sed 's/#.*//' | xargs) docker stack deploy -c compose.yml ${PWD##*/}

tor-privoxy/.env

@@ -0,0 +1,6 @@
+# Environment variables for Tor and Privoxy configuration
+
+# Ports
+PORT_TOR_PROXY=9050
+PORT_TOR_CONTROL=9051
+PORT_PRIVOXY=8118

tor-privoxy/compose.yml

@@ -8,14 +8,14 @@ services:
     networks:
       - tor-privoxy
     ports:
-      - "9050:9050" # Tor proxy
-      - "9051:9051" # Tor control port
-      - "8118:8118" # Privoxy
+      - "${PORT_TOR_PROXY}:9050" # Tor proxy
+      - "${PORT_TOR_CONTROL}:9051" # Tor control port
+      - "${PORT_PRIVOXY}:8118" # Privoxy
     deploy:
       placement:
         constraints:
           - node.role == manager
-pihole      labels:
+      labels:
         - homepage.group=Services
         - homepage.name=Tor-Privoxy
         #- homepage.icon=portainer.png

uptime_kuma/compose.yml

@@ -11,7 +11,6 @@ services:
     networks:
       - uptime-kuma
     ports:
-#            - '127.0.0.1:3001:3001'
       - '3001:3001'
     restart: always
     deploy:

vaultwarden/.env

@@ -1,10 +1,9 @@
 #General Settings
-ADMIN_TOKEN='HFoztERqAoXreBf7yM0NPbKhTguKoVDpKm4NIWVhiegIbuZKAzhr1ITTJdyCIFII' # randomly generated string of characters, for example running openssl rand -base64 48
-#//Refer https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page#secure-the-admin_token 
+# randomly generated string of characters, for example running openssl rand -base64 48
+ADMIN_TOKEN='HFoztERqAoXreBf7yM0NPbKhTguKoVDpKm4NIWVhiegIbuZKAzhr1ITTJdyCIFII' #//Refer https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page#secure-the-admin_token 
 
 WEBSOCKET_ENABLED=true
-SIGNUPS_ALLOWED=false ##change to false once create the admin account
-#DOMAIN=https://bitwarden.example.com #replace example.com with your domain
+SIGNUPS_ALLOWED=false #change to false once create the admin account
 DOMAIN='https://vaultwarden.ramberg.net' #replace example.com with your domain
 
 # SMTP server configuration

vaultwarden/compose copy 2.yml

@@ -0,0 +1,36 @@
+# Service Name: VaultWarden
+# Description : Open source server for bitwarden clients
+# Homepage    : https://github.com/dani-garcia/vaultwarden
+
+services:
+  vaultwarden:
+    image: vaultwarden/server:latest
+#    container_name: vaultwarden
+#    restart: unless-stopped
+    environment:
+#      DOMAIN: "https://vaultwarden.ramberg.net"
+      - DOMAIN=https://vaultwarden.ramberg.net
+      - ADMIN_TOKEN=HFoztERqAoXreBf7yM0NPbKhTguKoVDpKm4NIWVhiegIbuZKAzhr1ITTJdyCIFII
+      - WEBSOCKET_ENABLED=true
+      - SIGNUPS_ALLOWED=false
+    volumes:
+      - /home/rcadmin/docker/vaultwarden/data/:/data/
+    ports:
+      - 8082:80
+    networks:
+      - vaultwarden
+
+    deploy:
+      labels:
+        - homepage.group=Services
+        - homepage.name=Vaultwarden
+        - homepage.icon=vaultwarden.png
+        - homepage.href=https://vaultwarden.ramberg.net/
+        #- homepage.instance.internal.href=http://emby.lan/
+        #- homepage.instance.public.href=https://emby.mydomain.com/
+        #- homepage.description=GIT server
+
+networks:
+  vaultwarden:
+    driver: overlay
+    attachable: true

vaultwarden/compose.yml

@@ -5,14 +5,11 @@
 services:
   vaultwarden:
     image: vaultwarden/server:latest
-#    container_name: vaultwarden
-#    restart: unless-stopped
     environment:
-#      DOMAIN: "https://vaultwarden.ramberg.net"
-      - DOMAIN=https://vaultwarden.ramberg.net
-      - ADMIN_TOKEN=HFoztERqAoXreBf7yM0NPbKhTguKoVDpKm4NIWVhiegIbuZKAzhr1ITTJdyCIFII
-      - WEBSOCKET_ENABLED=true
-      - SIGNUPS_ALLOWED=false
+      - DOMAIN=${DOMAIN}
+      - ADMIN_TOKEN=${ADMIN_TOKEN}
+      - WEBSOCKET_ENABLED=${WEBSOCKET_ENABLED}
+      - SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}
     volumes:
       - /home/rcadmin/docker/vaultwarden/data/:/data/
     ports:
@@ -25,7 +22,7 @@ services:
         - homepage.group=Services
         - homepage.name=Vaultwarden
         - homepage.icon=vaultwarden.png
-        - homepage.href=https://vaultwarden.ramberg.net/
+        - homepage.href=${DOMAIN}
         #- homepage.instance.internal.href=http://emby.lan/
         #- homepage.instance.public.href=https://emby.mydomain.com/
         #- homepage.description=GIT server