我在日本的存算分离方案（四）具体服务的搭建思路和compose文件

version: '3.8'
services:
  npm:
    image: 'jc21/nginx-proxy-manager:latest'
    container_name: npm
    restart: unless-stopped
    ports:
      - '80:80'    # HTTP 流量
      - '443:443'  # HTTPS 流量
      - '81:81'    # 管理界面端口
    volumes:
      - /docker/npm/data:/data
      - /docker/npm/letsencrypt:/etc/letsencrypt

services:
  homarr:
    container_name: homarr
    image: ghcr.io/ajnart/homarr:latest
    restart: unless-stopped
    volumes:
      - /docker/homarr/configs:/app/data/configs
      - /docker/homarr/icons:/app/public/icons
    ports:
      - '7575:7575'

version: "3"
services:
  syncthing:
    image: syncthing/syncthing:latest
    container_name: syncthing
    hostname: Japan-Main-Node # 给你的日本节点起个好听的名字
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Tokyo
    volumes:
      - /docker/syncthing/config:/var/syncthing/config # 配置在 SSD
      - /data:/var/syncthing/Sync # 数据在大硬盘
    ports:
      - 8384:8384 # Web GUI 端口
      - 22000:22000/tcp # 数据传输端口
      - 22000:22000/udp # 数据传输端口
      - 21027:21027/udp # 本地发现端口
    restart: unless-stopped

version: '3.8'

services:
  nextcloud-db:
    image: mariadb:10.11
    container_name: nextcloud_db
    restart: always
    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
    volumes:
      - /docker/nextcloud/db:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=12345678 # root密码
      - MYSQL_PASSWORD=23456789 # 数据库密码
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud

  nextcloud-redis:
    image: redis:alpine
    container_name: nextcloud_redis
    restart: always

  nextcloud-app:
    image: nextcloud:latest
    container_name: nextcloud_app
    restart: always
    depends_on:
      - nextcloud-db
      - nextcloud-redis
    ports:
      - "38081:80"
    volumes:
      - /docker/nextcloud/app:/var/www/html
      - /data/Nextcloud/data:/var/www/html/data # 核心数据放在大硬盘
      - /docker/nextcloud/custom_fonts:/usr/share/fonts/truetype/custom:ro # 注入字体
    environment:
      - MYSQL_PASSWORD=23456789 # 数据库密码
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - MYSQL_HOST=nextcloud-db
      - REDIS_HOST=nextcloud-redis
      - PHP_UPLOAD_LIMIT=10G
      - PHP_MEMORY_LIMIT=4G
    devices:
      - /dev/dri:/dev/dri # 启用 Intel 核显加速

  # [新增] 独立的 Collabora Online (CODE) 服务器
  nextcloud-collabora:
    image: collabora/code:latest
    container_name: nextcloud_collabora
    restart: always
    ports:
      - "9980:9980"
    environment:
      # 替换为你的实际域名，点号需要转义
      - aliasgroup1=
      - domain=
      - username=
      - password=
      # 开启硬件加速选项
      - extra_params=--o:ssl.enable=false --o:ssl.termination=true
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /docker/nextcloud/custom_fonts:/usr/share/fonts/truetype/custom:ro # 关键：将字体注入编辑引擎
    devices:
      - /dev/dri:/dev/dri # 利用 i5-12500T 核显加速文档渲染
    depends_on:
      - nextcloud-app

version: '3.1'

services:
  wordpress:
    image: wordpress:latest
    container_name: wordpress-app
    restart: always
    ports:
      - 8888:80
    environment:
      WORDPRESS_DB_HOST: db
      WORDPRESS_DB_USER: wordpress
      WORDPRESS_DB_PASSWORD: 12345678 #数据库密码
      WORDPRESS_DB_NAME: wordpress
    volumes:
      - /docker/wordpress/html:/var/www/html
      # 新增下面这一行，挂载自定义 PHP 配置
      - /docker/wordpress/uploads.ini:/usr/local/etc/php/conf.d/uploads.ini

  db:
    image: mariadb:10.6
    container_name: wordpress-db
    restart: always
    environment:
      MYSQL_DATABASE: wordpress
      MYSQL_USER: wordpress
      MYSQL_PASSWORD: 12345678 #数据库密码
      MYSQL_RANDOM_ROOT_PASSWORD: '1'
    volumes:
      - /docker/wordpress/mariadb:/var/lib/mysql

services:
  trilium:
    image: zadam/trilium:latest
    container_name: trilium
    restart: always
    ports:
      - "8086:8080"
    volumes:
      - /docker/trilium:/home/node/trilium-data
    environment:
      - TRILIUM_DATA_DIR=/home/node/trilium-data

version: "3.8"

services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:release
    volumes:
      - /data/Photos/library:/data # 核心照片库放在大硬盘
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - stack.env
    ports:
      - 2283:2283
    depends_on:
      - redis
      - database
    restart: always

  immich-machine-learning:
    container_name: immich_machine_learning
    image: ghcr.io/immich-app/immich-machine-learning:release-openvino
    device_cgroup_rules:
      - 'c 189:* rmw'
    devices:
      - /dev/dri:/dev/dri
    volumes:
      - model-cache:/cache
      - /dev/bus/usb:/dev/bus/usb
      - /docker/immich/model-cache:/cache # 模型缓存建议留在系统 SSD
    env_file:
      - stack.env
    restart: always

  redis:
    container_name: immich_redis
    image: registry.hub.docker.com/library/redis:6.2-alpine
    restart: always

  database:
    container_name: immich_postgres
    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3
    environment:
      - POSTGRES_PASSWORD=${DB_PASSWORD}
      - POSTGRES_USER=${DB_USERNAME}
      - POSTGRES_DB=${DB_DATABASE}
    volumes:
      - /docker/immich/postgres:/var/lib/postgresql/data # 数据库留在系统 SSD
    restart: always

version: '3.8'
services:
  jellyfin:
    image: jellyfin/jellyfin:latest
    container_name: jellyfin
    user: 1000:1000 # 对应你的 PUID:PGID
    network_mode: bridge
    ports:
      - 8096:8096
    volumes:
      - /docker/jellyfin/config:/config
      - /docker/jellyfin/cache:/cache
      - /data/Media:/media:ro # 大硬盘媒体库，只读挂载更安全
    devices:
      - /dev/dri:/dev/dri # 核心：Intel 核显直通
    environment:
      - TZ=Asia/Tokyo
      - JELLYFIN_PublishedServerUrl=https:// #你的网址
    restart: unless-stopped

services:
  alist:
    image: 'xhofe/alist:latest'
    container_name: alist
    volumes:
      - /docker/alist:/opt/alist/data
      - /data/alist:/data:rw  # 映射整个 iSCSI 挂载点，读写权限
    ports:
      - '5244:5244'
    environment:
      - PUID=1000
      - PGID=1000
      - UMASK=022
    restart: always

version: '3.3'

services:
  firefly-db:
    image: mariadb:10
    container_name: firefly-db
    restart: always
    environment:
      - MYSQL_RANDOM_ROOT_PASSWORD=yes
      - MYSQL_DATABASE=firefly
      - MYSQL_USER=user
      - MYSQL_PASSWORD=12345678 # 请修改密码
    volumes:
      - /docker/firefly/db:/var/lib/mysql

  firefly-app:
    image: fireflyiii/core:latest
    container_name: firefly-app
    restart: always
    depends_on:
      - firefly-db
    environment:
      - APP_KEY= <生成一个32位的随机英数字符串># 必须是32位
      - DB_HOST=firefly-db
      - DB_PORT=3306
      - DB_CONNECTION=mysql
      - DB_DATABASE=firefly
      - DB_USERNAME=user
      - DB_PASSWORD=12345678 # 需与上方一致
      - TZ=Asia/Tokyo
      - APP_URL=https://
      - TRUSTED_PROXIES=**
    volumes:
      - /docker/firefly/export:/var/www/html/storage/export
      - /docker/firefly/upload:/var/www/html/storage/upload
    ports:
      - "8089:8080"

version: '3.8'
services:
  homeassistant:
    container_name: homeassistant
    image: "ghcr.io/home-assistant/home-assistant:stable"
    volumes:
      - /docker/homeassistant:/config
      - /etc/localtime:/etc/localtime:ro
      - /run/dbus:/run/dbus:ro # 蓝牙通信必须挂载 dbus
    restart: unless-stopped
    privileged: true # 赋予特权模式以访问无线网卡和蓝牙硬件
    network_mode: host # 必须使用 Host 模式，否则无线发现功能无效

version: '3.8'
services:
  open-webui:
    image: ghcr.io/open-webui/open-webui:main
    container_name: open-webui
    restart: unless-stopped
    ports:
      - '8080:8080'
    volumes:
      - /docker/open-webui:/app/backend/data
    environment:
      # 关闭本地 Ollama 自动连接，节省资源
      - 'ENABLE_OLLAMA=False'