Added Diun and Wireguard

backup.sh

@@ -67,6 +67,8 @@ sudo rsync -avR --numeric-ids palworld/{compose.yaml,.env,palworld/Pal/Saved/Sav
   homepage \
   gitea \
   postgres_backup \
+  diun/compose.yaml \
+  wireguard \
   "${BASE_NAME}_tmp/"
 
 #backup has been created, remove the cleanup trap, restore services before uploading backup
@@ -107,8 +109,9 @@ find . -maxdepth 1 -type f -name "full_backup_*.tar.xz.gpg" -printf '%T@ %p\n' |
 
 #cleanup B2
 echo "Evaluating remote retention..."
-rclone delete "${B2_REMOTE}" --min-age 60d --rmdirs --log-file="$HOME/backup.log"
+rclone delete "${BACKUP_REMOTE}" --min-age 60d --rmdirs --log-file="$HOME/backup.log"
 
 echo "Backup Complete"
 
-#todo make something to test bakcups
+#todo make something to test bakcups
+#gpg --batch -d --passphrase "password_here" full_backup_2026-08-19_01-00.tar.xz.gpg | xz -d -T0 | tar xf -

diun/compose.yaml

@@ -0,0 +1,26 @@
+name: diun
+
+services:
+  diun:
+    image: crazymax/diun:latest
+    container_name: diun
+    command: serve
+    volumes:
+      - "./data:/data"
+      - "/var/run/docker.sock:/var/run/docker.sock"
+    environment:
+      - "TZ=Europe/Paris"
+      - "DIUN_WATCH_WORKERS=20"
+      - "DIUN_WATCH_SCHEDULE=0 */6 * * *"
+      - "DIUN_WATCH_JITTER=30s"
+      - "DIUN_PROVIDERS_DOCKER=true"
+      - "DIUN_PROVIDERS_DOCKER_WATCHBYDEFAULT=true"
+    healthcheck:
+      test: ["CMD", "diun", "healthcheck"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 60s
+    labels:
+      - "diun.enable=true"
+    restart: unless-stopped

start_everything.sh

@@ -32,4 +32,8 @@ docker compose -f ~/gitea/compose.yaml --project-directory ~/gitea up -d
 #todo?: make sure database exists
 docker compose -f ~/nextcloud/compose.yaml --project-directory ~/nextcloud up -d
 
+docker compose -f ~/wireguard/compose.yaml --project-directory ~/wireguard up -d
+
+docker compose -f ~/diun/compose.yaml --project-directory ~/diun up -d
+
 printf "Service creation complete\n"

wireguard/compose.yaml

@@ -0,0 +1,27 @@
+services:
+  wireguard:
+    image: lscr.io/linuxserver/wireguard:latest
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Warsaw
+      - SERVERURL=foxgirls.date
+      - SERVERPORT=51820
+      - PEERS=pc,phone,pcMaint
+      - PEERDNS=1.1.1.1
+      - INTERNAL_SUBNET=10.13.13.0
+      - ALLOWEDIPS=0.0.0.0/0
+    volumes:
+      - ./config:/config
+      - /lib/modules:/lib/modules
+    ports:
+      - 51820:51820/udp
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+    networks:
+      - VPN
+    restart: unless-stopped