diff --git a/README.md b/README.md index 3fb12df..cdacc13 100644 --- a/README.md +++ b/README.md @@ -202,16 +202,17 @@ ScaleTail provides ready-to-run [Docker Compose](https://docs.docker.com/compose ### ๐Ÿ“ฑ Utilities -| ๐Ÿ“ฑ Service | ๐Ÿ“ Description | ๐Ÿ”— Link | -| ---------------- | -------------------------------------------------------------------------------------- | ------------------------------- | -| ๐Ÿ” **ConvertX** | A fast, full-featured self-hosted conversion API for images, docs, videos, and more. | [Details](services/convertx) | -| ๐Ÿ”” **Gotify** | A simple server for sending and receiving messages in real-time. | [Details](services/gotify) | -| ๐Ÿ“ฃ **ntfy** | A simple HTTP-based pub/sub notification service for sending push notifications. | [Details](services/ntfy) | -| ๐Ÿš— **LubeLogger** | Self-hosted vehicle maintenance tracker with private access. | [Details](services/lube-logger) | -| ๐Ÿš— **Tracktor** | Self-hosted vehicle maintenance tracker. | [Details](services/tracktor) | -| ๐Ÿ“ฑ **Mini-QR** | A minimal, self-hosted QR code generator with a mobile-friendly UI. | [Details](services/miniqr) | -| ๐Ÿ” **Hemmelig** | A self-hosted, zero-knowledge encrypted secret sharing platform with expiring secrets. | [Details](services/hemmelig) | -| ๐Ÿ“ฆ **Homebox** | A self-hosted home inventory and asset management system. | [Details](services/homebox) | +| ๐Ÿ“ฑ Service | ๐Ÿ“ Description | ๐Ÿ”— Link | +| ---------------- | ----------------------------------------------------------------------------------------------------------------- | ------------------------------- | +| ๐Ÿ” **ConvertX** | A fast, full-featured self-hosted conversion API for images, docs, videos, and more. | [Details](services/convertx) | +| ๐Ÿ”” **Gotify** | A simple server for sending and receiving messages in real-time. | [Details](services/gotify) | +| ๐Ÿ” **Hemmelig** | A self-hosted, zero-knowledge encrypted secret sharing platform with expiring secrets. | [Details](services/hemmelig) | +| ๐Ÿ“ฆ **Homebox** | A self-hosted home inventory and asset management system. | [Details](services/homebox) | +| ๐Ÿš— **LubeLogger** | Self-hosted vehicle maintenance tracker with private access. | [Details](services/lube-logger) | +| ๐Ÿ“ฑ **Mini-QR** | A minimal, self-hosted QR code generator with a mobile-friendly UI. | [Details](services/miniqr) | +| ๐Ÿ“ฃ **ntfy** | A simple HTTP-based pub/sub notification service for sending push notifications. | [Details](services/ntfy) | +| ๐Ÿš— **Tracktor** | Self-hosted vehicle maintenance tracker. | [Details](services/tracktor) | +| ๐Ÿ” **Transmute** | A self-hosted file conversion and transformation service for handling documents, media, and other format changes. | [Details](services/transmute) | ### ๐Ÿฝ๏ธ Food & Wellness @@ -252,8 +253,8 @@ A huge thank you to all our contributors! ScaleTail wouldnโ€™t be what it is tod - - + + - - + + - - + + - - + + - - + + - - + +
crypt0rr @@ -296,8 +297,8 @@ A huge thank you to all our contributors! ScaleTail wouldnโ€™t be what it is tod adamsthws
theryukverse @@ -340,8 +341,8 @@ A huge thank you to all our contributors! ScaleTail wouldnโ€™t be what it is tod mikkotor
NI-R0 @@ -384,8 +385,8 @@ A huge thank you to all our contributors! ScaleTail wouldnโ€™t be what it is tod pjv
wedge22 @@ -428,8 +429,8 @@ A huge thank you to all our contributors! ScaleTail wouldnโ€™t be what it is tod cdkooistra
Aurorainic @@ -458,8 +459,8 @@ A huge thank you to all our contributors! ScaleTail wouldnโ€™t be what it is tod orchard0
diff --git a/services/transmute/.env b/services/transmute/.env new file mode 100644 index 0000000..d17b120 --- /dev/null +++ b/services/transmute/.env @@ -0,0 +1,24 @@ +#version=1.1 +#URL=https://github.com/tailscale-dev/ScaleTail +#COMPOSE_PROJECT_NAME= # Optional: only use when running multiple deployments on the same infrastructure. + +# Service Configuration +SERVICE=transmute # Service name (e.g., adguard). Used as hostname in Tailscale and for container naming (app-${SERVICE}). +IMAGE_URL=ghcr.io/transmute-app/transmute:latest # Docker image URL from container registry (e.g., adguard/adguard-home). + +# Network Configuration +SERVICEPORT=3313 # Port to expose to local network. Uncomment the "ports:" section in compose.yaml to enable. +DNS_SERVER=9.9.9.9 # Preferred DNS server for Tailscale. Uncomment the "dns:" section in compose.yaml to enable. + +# Tailscale Configuration +TS_AUTHKEY= # Auth key from https://tailscale.com/admin/authkeys. See: https://tailscale.com/kb/1085/auth-keys#generate-an-auth-key for instructions. + +# Optional Service variables +# PUID=1000 + +#Time Zone setting for containers +TZ=Europe/Amsterdam # See: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones + +# Any Container environment variables are declared below. See https://docs.docker.com/compose/how-tos/environment-variables/ + +#EXAMPLE_VAR="Environment varibale" diff --git a/services/transmute/README.md b/services/transmute/README.md new file mode 100644 index 0000000..c50001c --- /dev/null +++ b/services/transmute/README.md @@ -0,0 +1,33 @@ +# Transmute with Tailscale Sidecar Configuration + +This Docker Compose configuration sets up **Transmute** with a Tailscale sidecar container, allowing you to securely access your instance over your private Tailnet. With this setup, Transmute remains private by default and is only accessible from devices authenticated to your Tailscale network. + +## Transmute + +[**Transmute**](https://github.com/transmute-app/transmute) is an open-source file conversion and transformation service designed to handle a wide variety of document, media, and data format conversions through a clean API and web interface. It is particularly useful for workflows that require automated or repeatable transformations between formats. + +Running Transmute behind Tailscale ensures that your file processing pipelines and potentially sensitive data remain secure, without exposing the service publicly. + +## Key Features + +- Convert files between multiple formats (documents, images, and more) +- API-first design for automation and integrations +- Web interface for manual conversions +- Lightweight and container-friendly deployment +- Self-hosted with full control over your data + +## Configuration Overview + +In this setup, the `tailscale-transmute` service runs Tailscale and manages secure connectivity to your Tailnet. The `transmute` container shares the same network stack using Dockerโ€™s `network_mode: service:tailscale-transmute`. + +## Service Notes / Gotchas + +- Some conversions may require additional system dependencies depending on formats used +- Initial startup may take longer if Transmute initializes processing tools +- Ensure sufficient CPU and memory for heavy conversions + +## Useful Links + +- GitHub Repository: +- Tailscale Auth Keys: +- Tailscale Serve Docs: diff --git a/services/transmute/compose.yaml b/services/transmute/compose.yaml new file mode 100644 index 0000000..d283b93 --- /dev/null +++ b/services/transmute/compose.yaml @@ -0,0 +1,71 @@ +configs: + ts-serve: + content: | + {"TCP":{"443":{"HTTPS":true}}, + "Web":{"$${TS_CERT_DOMAIN}:443": + {"Handlers":{"/": + {"Proxy":"http://127.0.0.1:3313"}}}}, + "AllowFunnel":{"$${TS_CERT_DOMAIN}:443":false}} + +services: +# Make sure you have updated/checked the .env file with the correct variables. +# All the ${ xx } need to be defined there. + # Tailscale Sidecar Configuration + tailscale: + image: tailscale/tailscale:latest # Image to be used + container_name: tailscale-${SERVICE} # Name for local container management + hostname: ${SERVICE} # Name used within your Tailscale environment + environment: + - TS_AUTHKEY=${TS_AUTHKEY} + - TS_STATE_DIR=/var/lib/tailscale + - TS_SERVE_CONFIG=/config/serve.json # Tailscale Serve configuration to expose the web interface on your local Tailnet - remove this line if not required + - TS_USERSPACE=false + - TS_ENABLE_HEALTH_CHECK=true # Enable healthcheck endpoint: "/healthz" + - TS_LOCAL_ADDR_PORT=127.0.0.1:41234 # The : for the healthz endpoint + #- TS_ACCEPT_DNS=true # Uncomment when using MagicDNS + - TS_AUTH_ONCE=true + configs: + - source: ts-serve + target: /config/serve.json + volumes: + - ./config:/config # Config folder used to store Tailscale files - you may need to change the path + - ./ts/state:/var/lib/tailscale # Tailscale requirement - you may need to change the path + devices: + - /dev/net/tun:/dev/net/tun # Network configuration for Tailscale to work + cap_add: + - net_admin # Tailscale requirement + #ports: + # - 0.0.0.0:${SERVICEPORT}:${SERVICEPORT} # Binding port ${SERVICE}PORT to the local network - may be removed if only exposure to your Tailnet is required + # If any DNS issues arise, use your preferred DNS provider by uncommenting the config below + #dns: + # - ${DNS_SERVER} + healthcheck: + test: ["CMD", "wget", "--spider", "-q", "http://127.0.0.1:41234/healthz"] # Check Tailscale has a Tailnet IP and is operational + interval: 1m # How often to perform the check + timeout: 10s # Time to wait for the check to succeed + retries: 3 # Number of retries before marking as unhealthy + start_period: 10s # Time to wait before starting health checks + restart: always + + # ${SERVICE} + application: + image: ${IMAGE_URL} # Image to be used + network_mode: service:tailscale # Sidecar configuration to route ${SERVICE} through Tailscale + container_name: app-${SERVICE} # Name for local container management + environment: # Varibles are delared in .env file. + - PUID=1000 + - PGID=1000 + - TZ=${TZ} + #- EXAMPLE_VAR=${EXAMPLE_VAR} + volumes: + - ./${SERVICE}-data:/app/data + depends_on: + tailscale: + condition: service_healthy + healthcheck: + test: ["CMD", "wget", "-q", "-O", "/dev/null", "--tries=1", "http://localhost:3313/api/health/ready"] + interval: 1m + timeout: 10s + retries: 3 + start_period: 30s + restart: always \ No newline at end of file