Merge branch 'main' into renovate/ghcr.io-goauthentik-server

Reviewed-on: #187

.forgejo/workflows/CD.yml

@@ -33,6 +33,9 @@ jobs:
           IFS=' ' read -r -a folder_array <<< "${{ steps.detect-changes.outputs.folders }}"
           for folder in "${folder_array[@]}"; do
             case $folder in
+              actual)
+                target_host="ubu.lan"
+                ;;
               arrs)
                 target_host="arrs.lan"
                 ;;
@@ -60,11 +63,14 @@ jobs:
               netboot)
                 target_host="netboot.lan"
                 ;;
-              nexus)
-                target_host="nexus.lan"
+              nexterm)
+                target_host="ubu.lan"
                 ;;
-              pages)
-                target_host="pages.lan"
+              npm)
+                target_host="npm.lan"
+                ;;  
+              paperless)
+                target_host="ubu.lan"
                 ;;
               portainer)
                 target_host="port.lan"

docker/arm/docker-compose.yml

@@ -65,6 +65,30 @@ services:
     restart: unless-stopped
     networks:
       - gitea_main
+  
+  fail2ban:
+    image: crazymax/fail2ban:1.1.0
+    container_name: fail2ban
+    network_mode: "host"
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
+    volumes:
+      - "/docker/appdata/fail2ban/data:/data"
+      - "/var/log/auth.log:/var/log/auth.log:ro"
+      - "/docker/appdata/nginx/data/logs/:/log/npm/:ro"
+    environment:
+      - TZ=America/New_York
+      - F2B_LOG_TARGET=STDOUT
+      - F2B_LOG_LEVEL=INFO
+      - F2B_DB_PURGE_AGE=1d
+      - SSMTP_HOST=$SSMTP_HOST
+      - SSMTP_PORT=587
+      - SSMTP_HOSTNAME=$SSMTP_HOSTNAME
+      - SSMTP_USER=$SSMTP_USER
+      - SSMTP_PASSWORD=$SSMTP_PASSWORD
+      - SSMTP_TLS=YES
+    restart: always
 
   uptime-kuma:
     image: louislam/uptime-kuma:1.23.13
@@ -109,7 +133,7 @@ services:
     networks:
       - gitea_main
   n8n:
-    image: ghcr.io/n8n-io/n8n:1.59.0
+    image: ghcr.io/n8n-io/n8n:1.59.1
     container_name: n8n
     ports:
       - 5678:5678

docker/paperless/docker-compose.yml

@@ -6,7 +6,7 @@ services:
       - redisdata:/data
 
   webserver:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.12.0
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.12.1
     restart: unless-stopped
     depends_on:
       - broker