Commit Graph

169 Commits

Author SHA1 Message Date
poprhythm c4157023f6 Add token_endpoint_auth_method: client_secret_post to linkding OIDC client 2026-02-23 19:00:11 +00:00
poprhythm 38d5edc37f Fix linkding OIDC env var names: drop LD_ prefix from provider settings 2026-02-23 18:56:00 +00:00
poprhythm d0037cf4cd Add Linkding OIDC via Authelia, fix jwks key name in config
- linkding: add OIDC env vars pointing to Authelia as identity provider
- authelia/config: fix issuer_private_keys → jwks (correct key for 4.38.x)
  and replace non-functional template function with host-managed note
2026-02-23 18:45:33 +00:00
poprhythm 4c838e1989 code-server: mount /srv/authelia/config for editing users_database.yaml 2026-02-23 15:25:26 +00:00
poprhythm 3ec74c1f69 Restrict wildcard rule to admins; jsmith (guests) can only access ultralytics 2026-02-23 14:41:18 +00:00
poprhythm 4ec70062ce revert 877d916c15
revert Update ultralytics/docker-compose.yml
2026-02-23 13:43:05 +00:00
poprhythm 877d916c15 Update ultralytics/docker-compose.yml 2026-02-23 13:40:28 +00:00
poprhythm 4293022561 Fix authelia: default_redirection_url must differ from authelia_url 2026-02-22 20:26:00 +00:00
poprhythm 9f98a4081e Add Authelia SSO, remove authentik, restrict ultralytics port
- Add authelia/ stack: Authelia 4.38 + Redis 7-alpine on isolated
  authelia-internal bridge; Authelia also on npm-network for NPM
  forward-auth. Secrets via env vars (not committed).
- Add authelia/config/configuration.yaml: file-based users, SQLite
  storage, one_factor policy for *.kolpacksoftware.com
- Add **/users_database.yaml to .gitignore (host-only secret)
- Remove authentik/ (non-functional leftover)
- ultralytics: bind port 8501 to 127.0.0.1 only (auth enforced via NPM)
2026-02-22 20:21:11 +00:00
poprhythm 717ba151e5 Rename leafweb-vision to ultralytics 2026-02-22 19:50:12 +00:00
poprhythm 7ef6d248da Load yolo-plant-leaf-detection model as default in Streamlit UI
Run streamlit directly to pass model path via -- arg, loading
yolo11x_leaf.pt as the preselected model in the sidebar dropdown.
2026-02-21 19:58:49 +00:00
poprhythm aa9560569f Fix leafweb-vision: use YAML list form for command to avoid parse errors 2026-02-21 19:53:32 +00:00
poprhythm 697818845d Fix leafweb-vision: patch cv2.destroyAllWindows via sed at startup
opencv-python-headless swap doesn't override conda's cv2. Instead,
sed-patch the one offending line in streamlit_inference.py directly.
2026-02-21 19:51:49 +00:00
poprhythm eebb5d11d0 Fix leafweb-vision OpenCV headless error on cv2.destroyAllWindows
Replace opencv-python with opencv-python-headless so GUI calls are
no-ops instead of crashing in a display-less container.
2026-02-21 19:49:00 +00:00
poprhythm 3eeaa8ff6d Fix leafweb-vision: use yolo solutions inference + install streamlit at startup
streamlit-predict was removed in newer ultralytics; yolo solutions inference
is the current equivalent. Installs streamlit on startup via pip cache volume.
2026-02-21 19:46:00 +00:00
poprhythm 0aae4324a8 Add leafweb-vision service with YOLO Streamlit web UI
Runs ultralytics/ultralytics with yolo streamlit-predict on port 8501,
NVIDIA GPU passthrough, and npm-network for reverse proxy access.
2026-02-21 19:39:59 +00:00
poprhythm 1944589989 Revert OLLAMA_NUM_CTX (not a valid env var; using Modelfile instead) 2026-02-20 22:27:49 +00:00
poprhythm 03bf4bc05c Set OLLAMA_NUM_CTX=16384 to prevent prompt truncation for openclaw 2026-02-20 22:23:15 +00:00
poprhythm 2ab1cccdc8 Switch openclaw default model to qwen2.5:7b (supports tools) 2026-02-20 22:11:54 +00:00
poprhythm 0b38b19d20 Fix openclaw model contextWindow to 32768 (minimum is 16000) 2026-02-20 22:08:29 +00:00
poprhythm 18b202909c Rebuild openclaw from npm instead of premade image, configure Ollama
- Add Dockerfile using node:22-bookworm-slim + npm install -g openclaw@latest
- Update docker-compose.yml: use local build, add OLLAMA_API_KEY=ollama-local,
  remove legacy OPENCLAW_AGENT_PROVIDER/MODEL/OLLAMA_BASE_URL env vars
- Add setup.sh to create openclaw.json with explicit Ollama provider config

Key fixes vs previous attempt:
- Config file is openclaw.json (not config.json or auth-profiles.json)
- models.providers.ollama needs baseUrl with /v1 suffix + explicit model list
- OLLAMA_API_KEY env var is required to opt in to Ollama support
- reasoning:false on models prevents 400 errors from Ollama
2026-02-20 22:03:43 +00:00
poprhythm e9bf43469c Switch backrest and filebrowser-colleen-hd to systemd automount bind mount
Replace Docker CIFS named volumes with bind mounts to /mnt/nas_backup,
which is managed by a systemd automount unit. This handles drive spin-down
reconnection independently of Docker container lifecycle.
2026-02-20 21:30:57 +00:00
poprhythm bb41473360 Replace hard (ignored) with echo_interval=300 for CIFS spin-down resilience 2026-02-20 21:06:25 +00:00
poprhythm 03a2ce647b Add hard+noserverino to CIFS mounts to survive unRAID drive spin-down 2026-02-20 21:02:54 +00:00
poprhythm c84175640f Fix CIFS mount permissions: use uid=0/noperm for root-running containers 2026-02-19 02:33:43 +00:00
poprhythm 8523f597da Switch filebrowser-colleen-hd from NFS to SMB for reliable reconnection after drive spin-up 2026-02-18 19:18:46 +00:00
poprhythm 2544694586 Move hardcoded secrets to .env files for dns-updateip, docker-registry, openclaw
- dns-updateip: APIKEY now uses ${APIKEY} substitution
- docker-registry: SECRET_KEY_BASE now uses ${SECRET_KEY_BASE} substitution
- openclaw: OPENCLAW_GATEWAY_TOKEN now uses ${OPENCLAW_GATEWAY_TOKEN} substitution
- Add .env.example templates for backrest, dns-updateip, docker-registry, openclaw
2026-02-18 19:02:01 +00:00
poprhythm 5f704441fb Switch backrest backup mount from NFS to SMB for reliable reconnection after drive spin-up 2026-02-18 13:45:52 +00:00
poprhythm 3474043bb9 Update README with working ttyd web terminal configuration 2026-02-16 03:53:08 +00:00
poprhythm 9a7b00780c Set baud rate to 56k (7000 bytes/sec) for better balance 2026-02-16 03:35:02 +00:00
poprhythm ab465c0234 Add 2400 baud rate throttling for classic BBS nostalgia 2026-02-16 03:34:29 +00:00
poprhythm 54f3c37e7c Increase font size to 18 and set custom ORMG BBS title 2026-02-16 03:30:58 +00:00
poprhythm 9fbd6f6900 Enable write mode in ttyd with -W flag 2026-02-16 03:28:44 +00:00
poprhythm d7f7f19fbd Revert to simple busybox telnet - users can set ANSI in BBS settings 2026-02-16 03:26:44 +00:00
poprhythm eaaf15339d Use socat for raw TCP connection to BBS 2026-02-16 03:24:19 +00:00
poprhythm cba9531a71 Switch ttyd to use SSH instead of telnet for proper ANSI support 2026-02-16 03:23:24 +00:00
poprhythm 9f0d0249cd Use inetutils-telnet for proper terminal type negotiation 2026-02-16 03:22:18 +00:00
poprhythm 57150c9e5c Configure ttyd with xterm-256color for ANSI support 2026-02-16 03:20:45 +00:00
poprhythm 058247465a Fix ttyd container - use alpine image with busybox telnet 2026-02-16 03:19:20 +00:00
poprhythm e846a9c1cb Add ttyd web terminal for browser-based BBS access 2026-02-16 03:13:58 +00:00
poprhythm 23498377fc Add ORMG branding customization for Synchronet BBS
- Add custom ANSI art with "ORMG" branding instead of "Synchronet"
- Replace "bbs software" with "door games" in welcome screen
- Include original synch.ans as backup
- Update README with customization instructions
- Custom branding applied to /srv/synchronet/ctrl/answer.ans
2026-02-15 03:32:20 +00:00
poprhythm 752de89955 Change Synchronet HTTPS port to 8444 (8443 in use by code-server) 2026-02-15 02:46:09 +00:00
poprhythm eb56dd2513 Add Synchronet setup helper script 2026-02-15 02:42:05 +00:00
poprhythm 15901a6ff7 Add Synchronet BBS with Legend of the Red Dragon
- Configure bbsio/synchronet:3.19c Docker image
- Expose web interface (ports 8023/8443) and fTelnet websocket terminals
- Include telnet (23), SSH (2222), and classic BBS protocols
- LORD (Legend of the Red Dragon) included as built-in door game
- Add comprehensive README with setup and configuration instructions
2026-02-15 02:40:17 +00:00
poprhythm 0b34690bc5 Add user directive to RackPeek for proper permissions 2026-02-14 02:48:41 +00:00
poprhythm a712132eef Change RackPeek port to 8081 (8080 used by qbittorrent) 2026-02-14 02:47:36 +00:00
poprhythm 68f97de1ea Add RackPeek infrastructure documentation tool
RackPeek is a CLI tool to discover, manage, and document IT infrastructure
and home lab setups. It will help track hardware, services, networks, and
their relationships in a scriptable way.
2026-02-14 02:44:59 +00:00
poprhythm 7ab8533910 Simplify audiobookshelf volume configuration
Use local storage for application data and single NFS volume:
- /srv/audiobookshelf/config - local application config
- /srv/audiobookshelf/metadata - local metadata database
- NFS volume: /mnt/user/media/audiobooks (contains library/ and untagged/ subdirs)
2026-02-10 19:31:00 +00:00
poprhythm 2bf8895740 Configure audiobookshelf to use NFS volumes
Switch from local bind mounts to NFS volumes on 192.168.1.192:
- config: /mnt/user/media/audiobooks/config
- metadata: /mnt/user/media/audiobooks/metadata
- library: /mnt/user/media/audiobooks/library
- untagged: /mnt/user/media/audiobooks/untagged

Follows the same NFS pattern used by calibre for media storage.
2026-02-10 19:28:37 +00:00
poprhythm 24b6e247a6 Add audiobookshelf setup
Configure audiobookshelf for audiobook library management with:
- Library path: /mnt/media/audiobooks/library
- Untagged imports: /mnt/media/audiobooks/untagged
- Reverse proxy integration via npm-network
- Accessible at audiobookshelf.kolpacksoftware.com
2026-02-10 19:19:36 +00:00