• Create new domain urbaman.cloud
• Setup the domain on cloudflare
• Create directory paths

Network and Core tools

• Install Traefik (uninstall nginx)
• Portainer
• Try to proxy both Asustor itself and Portainer
• Dozzle
• Homepage
• Pihole with dhcphelper and cloudflared for DoH
• Nginx Proxy Manager (not used)
• OpenVPN - https://github.com/dockovpn/dockovpn

Tools

• IT-tools
• Stirling PDF
• Draw.io
• BOINC
• Code Server
• Media server (Transmission, Prowlarr, Flaresolverr, Sonarr, Radarr, Readarr, Lidarr, Sonarr, Umpackerr, Plex, ...) - https://academy.pointtosource.com/containers/all-in-one-media-server-docker/ - https://wiki.servarr.com/ - https://trash-guides.info/
• Calibre and Calibre web - https://academy.pointtosource.com/containers/ebooks-calibre-readarr/

Monitoring:

• Prometheus
• Alertmanager
• Pushgateway
• Grafana
• Cadvisor
• Node Exporter
• Pihole Exporter
• Traefik monitoring

• Create an A record, and a CNAME for every service to proxy
• Use Full (strict) if you have proper Letsencrypt certs on the server (do it)
• SSL:
  • Always Use HTTPS: ON
  • HTTP Strict Transport Security (HSTS): Enable
  • Minimum TLS Version: 1.2
  • Opportunistic Encryption: ON
  • TLS 1.3: ON
  • Automatic HTTPS Rewrites: ON
  • Certificate Transparency Monitoring: ON
• Firewall/WAF
  • Security Level: High
  • Bot Fight Mode: ON
  • Challenge Passage: 30 Minutes
  • Browser Integrity Check: ON
• Speed (check each setting for your apps)
  • Brotli: ON
  • Cloudflare Fonts: ON
  • Early Hints: ON
  • Rocket Loader: ON
  • Minification: ON for all
• Cache
  • Standard level
  • TTL: 1h

• \volume1\home\nasadmin\docker-compose
  • \volume1\home\nasadmin\docker-compose\compose
  • \volume1\home\nasadmin\docker-compose\compose\core
  • \volume1\home\nasadmin\docker-compose\compose\network
  • \volume1\home\nasadmin\docker-compose\compose\tools
  • \volume1\home\nasadmin\docker-compose\secrets (root:root, 600)
  • \volume1\home\nasadmin\docker-compose.env (root:root, 600)
  • \volume1\home\nasadmin\docker-compose...

• \volume1\Docker
  • \volume1\Docker\configs
    • \volume1\Docker\configs\app1
    • \volume1\Docker\configs\app2
    • \volume1\Docker\configs...
  • \volume1\Docker\data
    • \volume1\Docker\data\app1
    • \volume1\Docker\data\app2
    • \volume1\Docker\data...
  • \volume1\Docker\logs
    • \volume1\Docker\logs\app1
    • \volume1\Docker\logs\app2
    • \volume1\Docker\logs...

docker network create --driver=bridge --subnet=192.168.2.0/24 --gateway=192.168.2.1 dnet
docker network create --driver=bridge --subnet=192.168.3.0/24 --gateway=192.168.3.1 traefik
docker network create --driver=bridge --subnet=192.168.4.0/24 --gateway=192.168.4.1 pihole