Merge branch 'main' into renovate/ghcr.io-paperless-ngx-paperless-ngx-2.x

.forgejo/workflows/CD.yml

@@ -33,6 +33,9 @@ jobs:
           IFS=' ' read -r -a folder_array <<< "${{ steps.detect-changes.outputs.folders }}"
           for folder in "${folder_array[@]}"; do
             case $folder in
+              actual)
+                target_host="ubu.lan"
+                ;;
               arrs)
                 target_host="arrs.lan"
                 ;;
@@ -60,11 +63,14 @@ jobs:
               netboot)
                 target_host="netboot.lan"
                 ;;
-              nexus)
-                target_host="nexus.lan"
+              nexterm)
+                target_host="ubu.lan"
                 ;;
-              pages)
-                target_host="pages.lan"
+              npm)
+                target_host="npm.lan"
+                ;;  
+              paperless)
+                target_host="ubu.lan"
                 ;;
               portainer)
                 target_host="port.lan"

docker/arm/docker-compose.yml

@@ -65,6 +65,30 @@ services:
     restart: unless-stopped
     networks:
       - gitea_main
+  
+  fail2ban:
+    image: crazymax/fail2ban:1.1.0
+    container_name: fail2ban
+    network_mode: "host"
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
+    volumes:
+      - "/docker/appdata/fail2ban/data:/data"
+      - "/var/log/auth.log:/var/log/auth.log:ro"
+      - "/docker/appdata/nginx/data/logs/:/log/npm/:ro"
+    environment:
+      - TZ=America/New_York
+      - F2B_LOG_TARGET=STDOUT
+      - F2B_LOG_LEVEL=INFO
+      - F2B_DB_PURGE_AGE=1d
+      - SSMTP_HOST=$SSMTP_HOST
+      - SSMTP_PORT=587
+      - SSMTP_HOSTNAME=$SSMTP_HOSTNAME
+      - SSMTP_USER=$SSMTP_USER
+      - SSMTP_PASSWORD=$SSMTP_PASSWORD
+      - SSMTP_TLS=YES
+    restart: always
 
   uptime-kuma:
     image: louislam/uptime-kuma:1.23.13

docker/nexterm/docker-compose.yml

@@ -0,0 +1,11 @@
+services:
+  nexterm:
+    container_name: nexterm
+    ports:
+      - "6989:6989"
+    restart: always
+    volumes:
+      - nexterm:/app/data
+    image: germannewsmaker/nexterm:1.0.2-OPEN-PREVIEW
+volumes:
+  nexterm: