experiments: add HomeBox stack; fix gitignore workflow for experiments/

Made-with: Cursor

Author: romkey

.github/workflows/concatenate_gitignore.yml

@@ -4,7 +4,7 @@ on:
   push:
     paths:
       - "apps/**/.gitignore"
-      - "experimental/**/.gitignore"
+      - "experiments/**/.gitignore"
       - ".gitignore.initial"
   workflow_dispatch:
 
@@ -29,7 +29,7 @@ jobs:
           # they work correctly from the top-level .gitignore.
           # The section header names the parent directory so the origin of
           # each block is clear.
-          for parent_dir in apps experimental; do
+          for parent_dir in apps experiments; do
             if [ ! -d "$parent_dir" ]; then
               continue
             fi

experiments/homebox/.env.example

@@ -0,0 +1,9 @@
+# Container image tag (see https://github.com/sysadminsmedia/homebox/pkgs/container/homebox )
+IMAGE_VERSION=latest
+
+# Optional: timezone inside the container
+# TZ=America/Los_Angeles
+
+# HomeBox merges /data/config.yml with environment variables using the HBOX_
+# prefix (see https://homebox.software/ ). Example behind a reverse proxy:
+# HBOX_OPTIONS_TRUST_PROXY=true

experiments/homebox/.gitignore

@@ -0,0 +1 @@
+.env

experiments/homebox/.rsync-exclude

@@ -0,0 +1,65 @@
+# homebox (experiment)
+
+[HomeBox](https://github.com/sysadminsmedia/homebox) is a self-hosted home inventory and organization app (SQLite, low resource use). This stack runs the maintained **`ghcr.io/sysadminsmedia/homebox`** image (continuation of the original hay-kot project).
+
+## Configuration
+
+### Environment
+
+Copy `.env.example` to `.env`:
+
+```bash
+cp .env.example .env
+```
+
+Set `IMAGE_VERSION` if you want to pin a tag other than `latest` (see [GHCR packages](https://github.com/sysadminsmedia/homebox/pkgs/container/homebox)).
+
+Additional runtime tuning can use `HBOX_*` variables; see the [HomeBox documentation](https://homebox.software/).
+
+### Config file (required)
+
+The image expects **`/data/config.yml`** on the persistent volume (same directory as the SQLite database).
+
+1. Ensure the data directory exists (repository convention):
+
+   ```bash
+   mkdir -p ../../lib/homebox
+   ```
+
+2. Install the config once:
+
+   ```bash
+   cp config/config.yml.default ../../lib/homebox/config.yml
+   ```
+
+3. Edit `../../lib/homebox/config.yml` as needed (public URL / hostname, OIDC, mailer, registration policy, etc.).
+
+For **`latest-rootless`** or **`latest-hardened`**, the upstream image may require ownership on `/data` (e.g. `chown 65532:65532`); see the [HomeBox quick start](https://homebox.software/en/quick-start/).
+
+## Networks
+
+- **`nginx-proxy-net`** — attach your reverse proxy vhost to the container’s internal port **7745**.
+
+## Usage
+
+### Start
+
+```bash
+docker compose up -d
+```
+
+### Stop
+
+```bash
+docker compose down
+```
+
+### Logs
+
+```bash
+docker compose logs -f
+```
+
+### Backup
+
+Back up the directory **`../../lib/homebox`** (includes `config.yml`, SQLite DB, and uploads).

experiments/homebox/README.md

@@ -0,0 +1,20 @@
+# Copy to ../../lib/homebox/config.yml and adjust.
+# The container entrypoint expects the config at /data/config.yml (same volume as SQLite).
+
+mode: production
+
+web:
+  port: "7745"
+  # Behind nginx-proxy, `trust_proxy` below (or HBOX_OPTIONS_TRUST_PROXY=true) is recommended.
+
+storage:
+  prefix_path: data
+  conn_string: "file:///?no_tmp_dir=true"
+
+database:
+  driver: sqlite3
+  sqlite_path: "/data/homebox.db?_pragma=busy_timeout=2000&_pragma=journal_mode=WAL&_fk=1&_time_format=sqlite"
+
+options:
+  trust_proxy: true
+  allow_analytics: false

experiments/homebox/config/config.yml.default

@@ -0,0 +1,34 @@
+services:
+  homebox:
+    image: ghcr.io/sysadminsmedia/homebox:${IMAGE_VERSION:-latest}
+    container_name: homebox
+    hostname: homebox
+    restart: unless-stopped
+    env_file:
+      - .env
+    volumes:
+      - ../../lib/homebox:/data
+#   ports:
+#     - 3100:7745
+    networks:
+      - proxy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "wget",
+          "--no-verbose",
+          "--tries=1",
+          "-O",
+          "-",
+          "http://localhost:7745/api/v1/status",
+        ]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
+
+networks:
+  proxy:
+    external: true
+    name: nginx-proxy-net