First attempt at diarization (with custom Dockerfile extension).

README.md

@@ -1,3 +1,3 @@
 # containers
 
-compose.yaml and other configuration data for Docker containers
+compose.yaml and other configuration data for Docker containers.

beszel/.gitignore

@@ -0,0 +1,3 @@
+/beszel_agent_data/
+/beszel_data/
+

beszel/compose.full

@@ -1,27 +0,0 @@
-services:
-  beszel:
-    image: henrygd/beszel:latest
-    container_name: beszel
-    restart: unless-stopped
-    environment:
-      APP_URL: http://localhost:8090
-    ports:
-      - 8090:8090
-    volumes:
-      - ./beszel_data:/beszel_data
-      - ./beszel_socket:/beszel_socket
-
-  beszel-agent:
-    image: henrygd/beszel-agent:latest
-    container_name: beszel-agent
-    restart: unless-stopped
-    network_mode: host
-    volumes:
-      - ./beszel_agent_data:/var/lib/beszel-agent
-      - ./beszel_socket:/beszel_socket
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-    environment:
-      LISTEN: /beszel_socket/beszel.sock
-      HUB_URL: http://localhost:8090
-      TOKEN: da52524a-fa93-47ef-908c-dd001c9e8e18
-      KEY: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFgDayLLA8JOzQ7fZtqTlUaRIQvhtoYSZvkUC9PrdQJG"

beszel/compose.hubonly

@@ -1,13 +0,0 @@
-services:
-  beszel:
-    image: henrygd/beszel:latest
-    container_name: beszel
-    restart: unless-stopped
-    environment:
-      APP_URL: http://localhost:8090
-    ports:
-      - 8090:8090
-    volumes:
-      - ./beszel_data:/beszel_data
-      - ./beszel_socket:/beszel_socket
-

beszel/compose.yaml

@@ -8,8 +8,8 @@ services:
     ports:
       - 8090:8090
     volumes:
-      - ./beszel_data:/beszel_data
-      - ./beszel_socket:/beszel_socket
+      - /var/lib/beszel/beszel_data:/beszel_data
+      - /var/lib/beszel/beszel_socket:/beszel_socket
 
   beszel-agent:
     image: henrygd/beszel-agent:latest
@@ -17,8 +17,8 @@ services:
     restart: unless-stopped
     network_mode: host
     volumes:
-      - ./beszel_agent_data:/var/lib/beszel-agent
-      - ./beszel_socket:/beszel_socket
+      - /var/lib/beszel/beszel_agent_data:/var/lib/beszel-agent
+      - /var/lib/beszel/beszel_socket:/beszel_socket
       - /var/run/docker.sock:/var/run/docker.sock:ro
     environment:
       LISTEN: /beszel_socket/beszel.sock

gitea/compose.yaml

@@ -18,7 +18,7 @@ services:
     networks:
       - gitea
     volumes:
-      - /mnt/storage/appdata/gitea/data:/data
+      - /var/lib/gitea/data:/data
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
     ports:
@@ -38,6 +38,6 @@ services:
     networks:
       - gitea
     volumes:
-      - /mnt/storage/appdata/gitea/mysql:/var/lib/mysql
+      - /var/lib/gitea/db:/var/lib/mysql
 
       

immich/.env

@@ -1,15 +1,16 @@
 # You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables
 
 # The location where your uploaded files are stored
-UPLOAD_LOCATION=/mnt/storage/appdata/immich/library
+UPLOAD_LOCATION=/var/lib/immich/data
 # The location where your database files are stored
-DB_DATA_LOCATION=/mnt/storage/appdata/immich/postgres
+DB_DATA_LOCATION=/var/lib/immich/db
 
 # To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
 TZ=America/New_York
 
 # The Immich version to use. You can pin this to a specific version like "v1.71.0"
-IMMICH_VERSION=v2.3.1
+IMMICH_VERSION=v2.7.5
+
 
 # Connection secret for postgres. You should change it to a random password
 DB_PASSWORD=postgres

jellyfin/compose.yaml

@@ -4,19 +4,19 @@ services:
     container_name: jellyfin
     network_mode: 'host'
     volumes:
-      - /mnt/storage/appdata/jellyfin/config:/config
-      - /mnt/storage/appdata/jellyfin/config/web-config.json:/jellyfin/jellyfin-web/config.json
-      - /mnt/storage/appdata/jellyfin/cache:/cache
+      - /etc/jellyfin:/config
+#      - /etc/jellyfin/web-config.json:/jellyfin/jellyfin-web/config.json
+      - /var/lib/jellyfin/cache:/cache
       - /mnt/cygnus:/cygnus:ro
       - type: bind
-        source: /mnt/storage/appdata/jellyfin/media
+        source: /var/lib/jellyfin/media
         target: /media
         read_only: true
     restart: 'unless-stopped'
     # Optional - alternative address used for autodiscovery
-    # environment:
-    #   - JELLYFIN_PublishedServerUrl=http://example.com
+    environment:
+      - JELLYFIN_PublishedServerUrl=http://127.0.0.1:8096
     # Optional - may be necessary for docker healthcheck to pass if running in host network mode
     # extra_hosts:
     #   - 'host.docker.internal:host-gateway'
-      
+    

loki/alloy/config.alloy

@@ -1,90 +0,0 @@
-// Grafana Alloy configuration
-// Collects:
-//   1. Syslog over UDP/TCP port 514  — for MikroTik RB5009 and other network gear
-//   2. Docker container logs          — for all containers on this host
-// Forwards everything to Loki.
-
-// ── 1. SYSLOG RECEIVER ────────────────────────────────────────────────────────
-// Listens on 514 UDP and TCP. Point your MikroTik logging action at this host.
-
-loki.source.syslog "network_devices" {
-  listener {
-    address  = "0.0.0.0:514"
-    protocol = "udp"
-    labels   = {
-      job    = "syslog",
-      source = "network",
-    }
-  }
-  listener {
-    address  = "0.0.0.0:514"
-    protocol = "tcp"
-    labels   = {
-      job    = "syslog",
-      source = "network",
-    }
-  }
-
-  // Forward to the relabeling stage below
-  forward_to = [loki.process.syslog_relabel.receiver]
-}
-
-// Relabel syslog: promote the hostname field (sent by RouterOS) to a label
-// so you can filter by device in Grafana with {host="RB5009"} etc.
-loki.process "syslog_relabel" {
-  stage.labels {
-    values = {
-      host     = "__syslog_message_hostname",
-      severity = "__syslog_message_severity",
-      facility = "__syslog_message_facility",
-      app      = "__syslog_message_app_name",
-    }
-  }
-  forward_to = [loki.write.default.receiver]
-}
-
-
-// ── 2. DOCKER CONTAINER LOGS ─────────────────────────────────────────────────
-// Tails logs from all Docker containers on this host.
-// Adds container_name and image as labels for easy filtering.
-
-discovery.docker "containers" {
-  host = "unix:///var/run/docker.sock"
-}
-
-// Relabel Docker metadata into useful Loki labels
-discovery.relabel "docker_labels" {
-  targets = discovery.docker.containers.targets
-
-  rule {
-    source_labels = ["__meta_docker_container_name"]
-    regex         = "/(.*)"
-    target_label  = "container"
-  }
-  rule {
-    source_labels = ["__meta_docker_container_log_stream"]
-    target_label  = "stream"
-  }
-  rule {
-    source_labels = ["__meta_docker_image_name"]
-    target_label  = "image"
-  }
-}
-
-loki.source.docker "docker_logs" {
-  host          = "unix:///var/run/docker.sock"
-  targets       = discovery.relabel.docker_labels.output
-  labels        = { job = "docker" }
-  forward_to    = [loki.write.default.receiver]
-  relabel_rules = discovery.relabel.docker_labels.rules
-}
-
-
-// ── 3. LOKI WRITE TARGET ──────────────────────────────────────────────────────
-// All sources above forward here.
-
-loki.write "default" {
-  endpoint {
-    url = "http://loki:3100/loki/api/v1/push"
-  }
-}

loki/config/alloy.alloy

@@ -1,89 +0,0 @@
-// Grafana Alloy configuration
-// Collects:
-//   1. Syslog over UDP/TCP port 514  — for MikroTik RB5009 and other network gear
-//   2. Docker container logs          — for all containers on this host
-// Forwards everything to Loki.
-
-// ── 1. SYSLOG RECEIVER ────────────────────────────────────────────────────────
-// Listens on 514 UDP and TCP. Point your MikroTik logging action at this host.
-
-loki.source.syslog "network_devices" {
-  listener {
-    address       = "0.0.0.0:5140"
-    protocol      = "udp"
-    syslog_format = "rfc3164"
-    labels = {
-      job    = "syslog",
-      source = "network",
-    }
-  }
-  listener {
-    address       = "0.0.0.0:5140"
-    protocol      = "tcp"
-    syslog_format = "rfc3164"
-    labels = {
-      job    = "syslog",
-      source = "network",
-    }
-  }
-  forward_to = [loki.process.syslog_relabel.receiver]
-}
-
-
-// Enrich syslog entries with a hostname label extracted from the syslog message
-loki.process "syslog_relabel" {
-  forward_to = [loki.write.local_loki.receiver]
-
-  stage.labels {
-    values = {
-      // These internal __syslog_message_ labels are created by the source component
-      hostname = "__syslog_message_hostname",
-      app      = "__syslog_message_app_name",
-      severity = "__syslog_message_severity",
-      facility = "__syslog_message_facility",
-    }
-  }
-}
-
-// ── 2. DOCKER CONTAINER LOGS ─────────────────────────────────────────────────
-// Tails logs from all Docker containers on this host.
-// Adds container name and image as labels for easy filtering.
-
-discovery.docker "containers" {
-  host = "unix:///var/run/docker.sock"
-}
-
-// Relabel Docker metadata into useful Loki labels.
-discovery.relabel "docker_labels" {
-  targets = discovery.docker.containers.targets
-
-  rule {
-    source_labels = ["__meta_docker_container_name"]
-    regex         = "/(.*)"
-    target_label  = "container"
-  }
-  rule {
-    source_labels = ["__meta_docker_container_log_stream"]
-    target_label  = "stream"
-  }
-  rule {
-    source_labels = ["__meta_docker_image_name"]
-    target_label  = "image"
-  }
-}
-
-loki.source.docker "docker_logs" {
-  host       = "unix:///var/run/docker.sock"
-  targets    = discovery.relabel.docker_labels.output
-  labels     = { job = "docker" }
-  forward_to = [loki.write.local_loki.receiver]
-}
-
-
-// ── 3. LOKI WRITE TARGET ──────────────────────────────────────────────────────
-
-loki.write "local_loki" {
-  endpoint {
-    url = "http://loki:3100/loki/api/v1/push"
-  }
-}

loki/config/alloy.original

@@ -1,98 +0,0 @@
-// Alloy configuration
-// Collects: (1) Docker container logs, (2) Syslog from network devices (MikroTik etc.)
-// Pushes everything to local Loki instance.
-
-// ── Loki destination ──────────────────────────────────────────────────────────
-loki.write "local_loki" {
-  endpoint {
-    url = "http://loki:3100/loki/api/v1/push"
-  }
-}
-
-// ── Docker container log collection ──────────────────────────────────────────
-// Discovers all running containers and tails their logs automatically.
-// New containers are picked up without restarting Alloy.
-
-discovery.docker "containers" {
-  host = "unix:///var/run/docker.sock"
-}
-
-discovery.relabel "docker_labels" {
-  targets = discovery.docker.containers.targets
-
-  // Use container name as the job label (strips the leading slash Docker adds)
-  rule {
-    source_labels = ["__meta_docker_container_name"]
-    regex         = "/(.*)"
-    target_label  = "container"
-  }
-
-  // Carry through the Docker Compose service name if present
-  rule {
-    source_labels = ["__meta_docker_container_label_com_docker_compose_service"]
-    target_label  = "service"
-  }
-
-  // Carry through the Docker Compose project name if present
-  rule {
-    source_labels = ["__meta_docker_container_label_com_docker_compose_project"]
-    target_label  = "compose_project"
-  }
-
-  rule {
-    target_label = "source"
-    replacement  = "docker"
-  }
-}
-
-loki.source.docker "docker_logs" {
-  host          = "unix:///var/run/docker.sock"
-  targets       = discovery.relabel.docker_labels.output
-  forward_to    = [loki.write.local_loki.receiver]
-  relabeling {
-    source_labels = ["__meta_docker_container_name"]
-    regex         = "/(.*)"
-    target_label  = "container"
-  }
-}
-
-// ── Syslog receiver (MikroTik RB5009 and other network devices) ──────────────
-// Listens on UDP 514 and TCP 514.
-// On your RB5009, set the remote logging action to point at this host's IP.
-
-loki.source.syslog "network_syslog" {
-  listener {
-    address  = "0.0.0.0:514"
-    protocol = "udp"
-    labels = {
-      source = "syslog",
-      job    = "network_devices",
-    }
-  }
-  listener {
-    address  = "0.0.0.0:514"
-    protocol = "tcp"
-    labels = {
-      source = "syslog",
-      job    = "network_devices",
-    }
-  }
-
-  forward_to = [loki.process.syslog_relabel.receiver]
-}
-
-// Enrich syslog entries with a hostname label extracted from the syslog message
-loki.process "syslog_relabel" {
-  forward_to = [loki.write.local_loki.receiver]
-
-  stage.syslog {}   // Parses RFC3164/RFC5424 syslog and extracts hostname, app, facility, severity
-
-  stage.labels {
-    values = {
-      hostname = "hostname",   // Extracted by stage.syslog
-      app      = "app_name",   // e.g. "dhcp", "firewall", "interface" on RouterOS
-      severity = "severity",
-      facility = "facility",
-    }
-  }
-}

loki/config/grafana-datasources.yml

@@ -1,16 +0,0 @@
-# Grafana datasource provisioning
-# Automatically configures Loki as a datasource on first startup.
-# No manual setup needed in the Grafana UI.
-
-apiVersion: 1
-
-datasources:
-  - name: Loki
-    type: loki
-    access: proxy
-    url: http://loki:3100
-    isDefault: true
-    editable: false
-    jsonData:
-      maxLines: 5000
-      timeout: 60

loki/config/loki.yml

@@ -1,58 +0,0 @@
-# Loki configuration - single binary mode, suitable for homelab scale
-# Docs: https://grafana.com/docs/loki/latest/configuration/
-
-auth_enabled: false
-
-server:
-  http_listen_port: 3100
-  grpc_listen_port: 9096
-  log_level: warn
-
-common:
-  instance_addr: 127.0.0.1
-  path_prefix: /loki
-  storage:
-    filesystem:
-      chunks_directory: /loki/chunks
-      rules_directory: /loki/rules
-  replication_factor: 1
-  ring:
-    kvstore:
-      store: inmemory
-
-schema_config:
-  configs:
-    - from: 2024-01-01
-      store: tsdb
-      object_store: filesystem
-      schema: v13
-      index:
-        prefix: index_
-        period: 24h
-
-# ── Retention ─────────────────────────────────────────────────────────────────
-# Adjust these to suit your disk space. 90 days is a good starting point for
-# homelab troubleshooting — long enough to catch recurring issues.
-limits_config:
-  retention_period: 90d
-  reject_old_samples: true
-  reject_old_samples_max_age: 168h  # 7 days — increase if needed
-  ingestion_rate_mb: 4
-  ingestion_burst_size_mb: 8
-
-compactor:
-  working_directory: /loki/compactor
-  retention_enabled: true
-  retention_delete_delay: 2h
-  delete_request_store: filesystem
-
-# ── Query performance ─────────────────────────────────────────────────────────
-query_range:
-  results_cache:
-    cache:
-      embedded_cache:
-        enabled: true
-        max_size_mb: 100
-
-ruler:
-  alertmanager_url: http://localhost:9093

loki/grafana/provisioning/datasources/loki.yml

@@ -1,17 +0,0 @@
-apiVersion: 1
-
-datasources:
-  - name: Loki
-    type: loki
-    access: proxy
-    url: http://loki:3100
-    isDefault: true
-    editable: false
-    jsonData:
-      maxLines: 5000
-      # Derive fields let you turn log content into clickable links.
-      # This example makes trace IDs in logs clickable — remove if not needed.
-      derivedFields:
-        - name: TraceID
-          matcherRegex: "traceID=(\\w+)"
-          url: ""

loki/loki/loki-config.yml

@@ -1,57 +0,0 @@
-# Loki configuration — single-binary mode, suitable for homelab scale
-# Stores data in the local filesystem via the 'loki-data' Docker volume
-
-auth_enabled: false
-
-server:
-  http_listen_port: 3100
-  grpc_listen_port: 9096
-  log_level: warn
-
-common:
-  instance_addr: 127.0.0.1
-  path_prefix: /loki
-  storage:
-    filesystem:
-      chunks_directory: /loki/chunks
-      rules_directory: /loki/rules
-  replication_factor: 1
-  ring:
-    kvstore:
-      store: inmemory
-
-# How long to keep logs. Adjust to taste.
-# 90 days is generous but reasonable for a homelab — tune down if disk is tight.
-limits_config:
-  retention_period: 90d
-  reject_old_samples: true
-  reject_old_samples_max_age: 168h  # 7 days — increase if needed
- # Reject log lines larger than 256KB (protects against runaway logging)
-  max_line_size: 256KB
-
-schema_config:
-  configs:
-    - from: 2024-01-01
-      store: tsdb
-      object_store: filesystem
-      schema: v13
-      index:
-        prefix: index_
-        period: 24h
-
-compactor:
-  working_directory: /loki/compactor
-  # Enables the retention policy above
-  retention_enabled: true
-  retention_delete_delay: 2h
-  delete_request_store: filesystem
-
-query_range:
-  results_cache:
-    cache:
-      embedded_cache:
-        enabled: true
-        max_size_mb: 100
-
-ruler:
-  alertmanager_url: http://localhost:9093

nextcloud/compose.yaml

@@ -4,7 +4,7 @@ services:
     restart: always
     command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
     volumes:
-      - /mnt/storage/appdata/nextcloud/mysql:/var/lib/mysql
+      - /var/lib/nextcloud/db:/var/lib/mysql
     networks:
       - default
     environment:
@@ -16,12 +16,12 @@ services:
   app:
     depends_on:
       - db
-    image: nextcloud:32
+    image: nextcloud:33
     restart: always
     ports:
       - 8080:80
     volumes:
-      - /mnt/storage/appdata/nextcloud/www/html:/var/www/html
+      - /var/lib/nextcloud/data/www/html:/var/www/html
     networks:
       - default
     environment:

portainer/compose.yaml

@@ -1,33 +1,16 @@
 services:
   portainer:
-    image: portainer/portainer:latest
+    image: portainer/portainer-ce:lts
     container_name: portainer
     restart: unless-stopped
-    security_opt:
-      - no-new-privileges:true
-    networks:
-      - proxy
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-      - /mnt/storage/appdata/portainer/data:/data
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/lib/portainer:/data
     ports:
-      - 9000:9000
-    labels:
-      - "traefik.enable=false"
-      - "traefik.http.routers.portainer.entrypoints=http"
-      - "traefik.http.routers.portainer.rule=Host(`portainer.objectbrokers.com`)"
-      - "traefik.http.middlewares.portainer-https-redirect.redirectscheme.scheme=https"
-      - "traefik.http.routers.portainer.middlewares=portainer-https-redirect"
-      - "traefik.http.routers.portainer-secure.entrypoints=https"
-      - "traefik.http.routers.portainer-secure.rule=Host(`portainer.objectbrokers.com`)"
-      - "traefik.http.routers.portainer-secure.tls=true"
-      - "traefik.http.routers.portainer-secure.tls.certresolver=http"
-      - "traefik.http.routers.portainer-secure.service=portainer"
-      - "traefik.http.services.portainer.loadbalancer.server.port=9000"
-      - "traefik.docker.network=proxy"
+      - 9443:9443
+      - 8000:8000
 
 networks:
-  proxy:
-    external: true
-    
+  default:
+    name: portainer_network

prometheus/compose.yaml

@@ -1,88 +0,0 @@
-volumes:
-  prometheus_data: {}
-  grafana_data: {}
-
-networks:
-  monitoring:
-    driver: bridge
-
-services:
-  prometheus:
-    image: prom/prometheus:latest
-    container_name: prometheus
-    volumes:
-      - ./prometheus:/etc/prometheus
-      - prometheus_data:/prometheus
-    command:
-      - '--config.file=/etc/prometheus/prometheus.yml'
-      - '--storage.tsdb.path=/prometheus'
-      - '--web.console.libraries=/usr/share/prometheus/console_libraries'
-      - '--web.console.templates=/usr/share/prometheus/consoles'
-      - '--web.enable-lifecycle'
-    ports:
-      - "9098:9090"
-    networks:
-      - monitoring
-    restart: unless-stopped
-
-  node-exporter:
-    image: prom/node-exporter:latest
-    container_name: node-exporter
-    volumes:
-      - /proc:/host/proc:ro
-      - /sys:/host/sys:ro
-      - /:/rootfs:ro
-    command:
-      - '--path.procfs=/host/proc'
-      - '--path.sysfs=/host/sys'
-      - '--collector.filesystem.ignored-mount-points=^/(sys|proc|dev|host|etc)($|/)'
-    ports:
-      - "9100:9100"
-    networks:
-      - monitoring
-    restart: unless-stopped
-
-  cadvisor:
-    image: gcr.io/cadvisor/cadvisor:latest
-    container_name: cadvisor
-    volumes:
-      - /:/rootfs:ro
-      - /var/run:/var/run:rw
-      - /sys:/sys:ro
-      - /var/lib/docker/:/var/lib/docker:ro
-      - /dev/disk/:/dev/disk:ro
-    ports:
-      - "8080:8080"
-    networks:
-      - monitoring
-    restart: unless-stopped
-
-  grafana:
-    image: grafana/grafana:latest
-    container_name: grafana
-    volumes:
-      - grafana_data:/var/lib/grafana
-      - ./grafana/provisioning:/etc/grafana/provisioning
-    environment:
-      - GF_SECURITY_ADMIN_USER=admin
-      - GF_SECURITY_ADMIN_PASSWORD=admin
-      - GF_USERS_ALLOW_SIGN_UP=false
-    ports:
-      - "3000:3000"
-    networks:
-      - monitoring
-    restart: unless-stopped
-
-  alertmanager:
-    image: prom/alertmanager:latest
-    container_name: alertmanager
-    volumes:
-      - ./alertmanager:/etc/alertmanager
-    command:
-      - '--config.file=/etc/alertmanager/config.yml'
-      - '--storage.path=/alertmanager'
-    ports:
-      - "9093:9093"
-    networks:
-      - monitoring
-    restart: unless-stopped

prometheus/prometheus.yml

@@ -1,13 +0,0 @@
-global:
-  scrape_interval: 15s
-
-scrape_configs:
-  - job_name: 'prometheus'
-    static_configs:
-      - targets: ['localhost:9098']
-
-  - job_name: 'docker'
-    static_configs:
-      - targets: ['172.17.0.1:9323']
-
-

vaultwarden/compose.yaml

@@ -8,10 +8,10 @@ services:
       - 8030:80
     environment:
 #      - DOMAIN='https://vaultwarden.objectbrokers.com'
-      - ADMIN_TOKEN="llanfairpwll"
+      - ADMIN_TOKEN=mfLzuPlsXDqtIwTGSN/oZ3cgmFKWXY/zv+hO94gtqsJeHdl7+O+tJeMZrTzQNMfI
 #      DOMAIN: "https://vaultwarden.objectbrokers.com"  # Your domain; vaultwarden needs to know it's https to work properly with attachments
 #      ADMIN_TOKEN: ADMIN_TOKEN=${VAULTWARDEN_ADMIN_TOKEN}
     volumes:
-      - /mnt/storage/appdata/bitwarden:/data
+      - /var/lib/vaultwarden:/data
 
 

whisper/.gitignore

@@ -0,0 +1 @@
+whisper-live.env

whisper/Dockerfile

@@ -0,0 +1,5 @@
+FROM ghcr.io/collabora/whisperlive-openvino:latest
+
+# Install pyannote.audio and its dependencies.
+# --no-cache-dir keeps the image layer smaller.
+RUN pip install --no-cache-dir pyannote.audio

whisper/compose.yaml

@@ -0,0 +1,35 @@
+services:
+  whisper-live:
+    image: whisper-live-diarization:latest
+    container_name: whisper-live
+    restart: unless-stopped
+    ports:
+      - "9097:9090"
+    volumes:
+      - whisper-live-data:/var/lib/whisper-live
+      - whisper-pyannote-cache:/root/.cache/huggingface/hub
+    env_file:
+      - whisper-live.env          # contains HUGGING_FACE_HUB_TOKEN — not in git
+    command:
+      - "python3"
+      - "run_server.py"
+      - "--port"
+      - "9090"
+      - "--backend"
+      - "openvino"
+      - "--omp_num_threads"
+      - "4"
+      - "--max_clients"
+      - "1"
+      - "--max_connection_time"
+      - "7200"
+      - "--raw_pcm_input"
+    devices:
+      - /dev/dri/renderD128:/dev/dri/renderD128
+      - /dev/dri/card1:/dev/dri/card1
+    cpuset: "0-7"
+    mem_limit: 10g
+
+volumes:
+  whisper-live-data:
+  whisper-pyannote-cache: