restart policy

dashboard/config/novemila.yml

@@ -43,8 +43,8 @@
           - title: 4get
             url: https://search.novemila.org
             icon: si:searxng
-          - title: Fresh RSS
-            url: https://rss.novemila.org
+          - title: Miniflux
+            url: https://feed.novemila.org
             icon: si:rss
           - title: Gitea
             url: https://git.novemila.org

etc/caddy/Caddyfile

@@ -75,11 +75,11 @@ https://ntfy.novemila.org {
 
 # RSS
 
-https://rss.novemila.org {
-	import common
-	encode gzip zstd
-	reverse_proxy localhost:3004
-}
+# https://rss.novemila.org {
+# 	import common
+# 	encode gzip zstd
+# 	reverse_proxy localhost:3004
+# }
 
 # COLLABORA
 
@@ -212,6 +212,15 @@ https://memos.novemila.org {
 	reverse_proxy localhost:3024
 }
 
+# MINIFLUX
+
+https://feed.novemila.org {
+	import common
+	encode gzip zstd
+	reverse_proxy localhost:3025
+}
+
+
 # MOLLY
 
 https://molly.novemila.org {

etc/sysctl.d/60-wireguard.conf

@@ -0,0 +1,22 @@
+net.ipv4.ip_forward=1
+net.ipv6.conf.all.disable_ipv6 = 1
+#net.ipv4.tcp_congestion_control=bbr
+net.core.default_qdisc=fq
+net.ipv4.tcp_congestion_control=hybla
+fs.file-max=51200
+net.core.netdev_max_backlog=250000
+net.core.rmem_max=67108864
+net.core.somaxconn=4096
+net.core.wmem_max=67108864
+net.ipv4.ip_local_port_range=10000 65000
+net.ipv4.tcp_fastopen=3
+net.ipv4.tcp_fin_timeout=30
+net.ipv4.tcp_keepalive_time=1200
+net.ipv4.tcp_max_syn_backlog=8192
+net.ipv4.tcp_max_tw_buckets=5000
+net.ipv4.tcp_mem=25600 51200 102400
+net.ipv4.tcp_mtu_probing=1
+net.ipv4.tcp_rmem=4096 87380 67108864
+net.ipv4.tcp_syncookies=1
+net.ipv4.tcp_tw_reuse=1
+net.ipv4.tcp_wmem=4096 65536 67108864

etc/sysctl.d/70-memory-overcommit.conf

@@ -0,0 +1 @@
+vm.overcommit_memory=1

etc/sysctl.d/80-caddy-mem.conf

@@ -0,0 +1,2 @@
+net.core.rmem_max=7500000
+net.core.wmem_max=7500000

immich/docker-compose.yml

@@ -33,7 +33,7 @@ services:
     #   file: hwaccel.ml.yml
     #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
     mem_limit: 1.5g
-    cpus: 0.3
+    cpus: 0.5
     volumes:
       - model-cache:/cache
     env_file:

miniflux/.env

@@ -0,0 +1,4 @@
+ADMIN_USERNAME=""
+ADMIN_PASSWORD=""
+POSTGRES_USER=""
+POSTGRES_PASSWORD=""

miniflux/docker-compose.yml

@@ -0,0 +1,40 @@
+services:
+  miniflux:
+    image: miniflux/miniflux:latest
+    restart: unless-stopped
+    mem_limit: 256m
+    healthcheck:
+      test: ["CMD", "/usr/bin/miniflux", "-healthcheck", "auto"]
+    ports:
+      - "127.0.0.1:3025:8080"
+    depends_on:
+      db:
+        condition: service_healthy
+    environment:
+      - DATABASE_URL=postgres://miniflux:${POSTGRES_PASSWORD}@db/miniflux?sslmode=disable
+      - RUN_MIGRATIONS=1
+      - BASE_URL=https://feed.novemila.org
+      - ICON_FETCH_ALLOW_PRIVATE_NETWORKS=1
+#      - CREATE_ADMIN=1
+#      - ADMIN_USERNAME=${ADMIN_USERNAME}
+#      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
+  db:
+    image: postgres:18
+    restart: unless-stopped    
+    mem_limit: 256m
+    environment:
+      - POSTGRES_USER=miniflux
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=miniflux
+    volumes:
+      - miniflux-db:/var/lib/postgresql
+    healthcheck:
+      test: ["CMD", "pg_isready", "-U", "miniflux"]
+      interval: 10s
+      start_period: 30s
+volumes:
+  miniflux-db:
+
+# https://miniflux.app/docs/docker.html
+# https://miniflux.app/docs/configuration.html#base-url
+# CREATE_ADMIN, ADMIN_USERNAME, and ADMIN_PASSWORD allow the creation of the first admin user. These can be removed after the first initialization