add: gitea actions runner

gitea/docker-compose.yaml

@@ -13,6 +13,7 @@ services:
       - GITEA__database__USER=gitea
       - GITEA__database__PASSWD=gitea
       - GITEA__service__DISABLE_REGISTRATION=true
+      - GITEA__actions__ENABLED=true
     restart: always
     mem_limit: 2g
     mem_reservation: 512m
@@ -37,3 +38,20 @@ services:
     mem_limit: 512m
     volumes:
       - /docker/gitea/postgres:/var/lib/postgresql/data
+
+  runner:
+    image: gitea/runner:latest-dind
+    container_name: gitea-runner
+    restart: always
+    privileged: true
+    environment:
+      - GITEA_INSTANCE_URL=http://server:3000
+      - GITEA_RUNNER_REGISTRATION_TOKEN=amwiebvSCdGa7lwRjPOFvxhp7pgTxewMEkGdXrNF
+      - GITEA_RUNNER_NAME=gitea-runner
+      - TZ=Asia/Ho_Chi_Minh
+    mem_limit: 2g
+    volumes:
+      - /docker/gitea/runner/data:/data
+      - /docker/gitea/runner/docker:/var/lib/docker
+    depends_on:
+      - server

ignis/compose.yaml

@@ -0,0 +1,14 @@
+services:
+  ignis:
+    image: nobbe/ignis:latest
+    ports:
+      - "8031:8080"
+    environment:
+      - PUID=1000
+      - PGID=1000
+        #volumes:
+      #- ./vaults:/vaults
+        #- ./data:/app/data
+        #      - obsidian-app:/app/obsidian-app
+    restart: unless-stopped
+

openvpn/compose.yaml

@@ -0,0 +1,15 @@
+services:
+  openvpn:
+    image: kylemanna/openvpn:latest
+    container_name: openvpn
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Ho_Chi_Minh
+    ports:
+      - "1194:1194/udp"
+    volumes:
+      - /docker/openvpn:/etc/openvpn
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun

wg-easy/compose.yaml

@@ -0,0 +1,23 @@
+services:
+  wg-easy:
+    image: ghcr.io/wg-easy/wg-easy:15
+    container_name: wg-easy
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Ho_Chi_Minh
+      - WG_HOST=vpn.fireflylab.cc
+      - INSECURE=true
+    volumes:
+      - /docker/wg-easy:/etc/wireguard
+      - /lib/modules:/lib/modules:ro
+    ports:
+      - "51820:51820/udp"
+      - "8032:51821/tcp"
+    privileged: true
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    sysctls:
+      - net.ipv4.ip_forward=1
+      - net.ipv4.conf.all.src_valid_mark=1
+      - net.ipv6.conf.all.forwarding=1