initial commit

system/daemon.json

@@ -0,0 +1,8 @@
+{
+    "runtimes": {
+        "nvidia": {
+            "args": [],
+            "path": "nvidia-container-runtime"
+        }
+    }
+}

system/docker-daemon.json

@@ -0,0 +1,8 @@
+{
+    "runtimes": {
+        "nvidia": {
+            "args": [],
+            "path": "nvidia-container-runtime"
+        }
+    }
+}

system/firewalld/public.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<zone>
+  <short>Public</short>
+  <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
+  <service name="ssh"/>
+  <service name="dhcpv6-client"/>
+  <service name="cockpit"/>
+  <service name="samba"/>
+  <service name="https"/>
+  <service name="smtp"/>
+  <port port="465" protocol="tcp"/>
+  <port port="19999" protocol="tcp"/>
+  <port port="3901" protocol="tcp"/>
+  <port port="25500-25600" protocol="tcp"/>
+  <port port="25500-25600" protocol="udp"/>
+  <port port="23333" protocol="tcp"/>
+  <port port="24444" protocol="tcp"/>
+  <rule family="ipv4">
+    <source address="192.168.2.0/24"/>
+    <port port="3900" protocol="tcp"/>
+    <accept/>
+  </rule>
+  <forward/>
+</zone>

system/msmtprc

@@ -0,0 +1,9 @@
+account default
+host smtp.fastmail.com
+port 465
+tls on
+tls_starttls off
+auth on
+user timothykim@fastmail.fm
+password REDACTED
+from argento@fastmail.com

system/root-crontab

@@ -0,0 +1,8 @@
+MAILTO=timothykim@fastmail.com
+*/5 * * * * docker exec -u www-data nextcloud php /var/www/html/cron.php
+1 * * * * /opt/argento/docker/jellyfin/jellyfin-monitor.sh
+0 2 * * * /opt/argento/scripts/sync-system.sh
+0 3 * * * /opt/argento/scripts/backup.sh
+0 3 * * 0 docker system prune -f --volumes > /dev/null
+0 6 * * * /opt/argento/scripts/server-health-check.sh --error-only --email
+0 8 * * 1 /opt/argento/scripts/server-health-check.sh --email

system/sanoid.conf

@@ -0,0 +1,21 @@
+[nextcloud/data]
+    use_template = production
+    hourly = 24
+    daily = 30
+    monthly = 3
+
+[threeteras/media]
+    use_template = production
+    hourly = 0
+    daily = 30
+    monthly = 6
+
+[threeteras/garage]
+    use_template = production
+    hourly = 0
+    daily = 14
+    monthly = 0
+
+[template_production]
+    autosnap = yes
+    autoprune = yes

system/smartd.conf

@@ -0,0 +1 @@
+DEVICESCAN -a -o on -S on -n standby,q -s (S/../.././02|L/../../6/03) -m timothykim@fastmail.com -M exec /usr/bin/msmtp

system/smb.conf

@@ -0,0 +1,50 @@
+# See smb.conf.example for a more detailed config file or
+# read the smb.conf manpage.
+# Run 'testparm' to verify the config is correct after
+# you modified it.
+#
+# Note:
+# SMB1 is disabled by default. This means clients without support for SMB2 or
+# SMB3 are no longer able to connect to smbd (by default).
+
+[global]
+	workgroup = SAMBA
+	security = user
+	include = registry
+	passdb backend = tdbsam
+#	printing = cups
+#	printcap name = cups
+#	load printers = yes
+#	cups options = raw
+
+[media]
+        path = /opt/argento/smb/media
+	force group = sambagroup
+	#valid users = timothykim
+        browseable = yes
+        writable = yes
+        read only = no
+        guest ok = no
+
+
+#[homes]
+#	comment = Home Directories
+#	valid users = %S, %D%w%S
+#	browseable = No
+#	read only = No
+#	inherit acls = Yes
+#
+#[printers]
+#	comment = All Printers
+#	path = /var/tmp
+#	printable = Yes
+#	create mask = 0600
+#	browseable = No
+#
+#[print$]
+#	comment = Printer Drivers
+#	path = /var/lib/samba/drivers
+#	write list = @printadmin root
+#	force group = @printadmin
+#	create mask = 0664
+#	directory mask = 0775

system/tracked-configs

@@ -0,0 +1,6 @@
+/etc/samba/smb.conf:system/smb.conf
+/etc/sanoid/sanoid.conf:system/sanoid.conf
+/etc/docker/daemon.json:system/docker-daemon.json
+/etc/firewalld/zones/public.xml:system/firewalld/public.xml
+/etc/msmtprc:system/msmtprc
+/etc/smartd.conf:system/smartd.conf