homelab/docker-infrastructure

T

poprhythm 2f1a988ac3 security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose
- plex: remove stale/dead PLEX_CLAIM token
- uptime-kuma: mount docker.sock read-only (only needs to read container state)
- home-assistant: drop privileged: true (no device passthrough configured)
- glances: drop privileged: true, bind dashboard port to 127.0.0.1
- couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)

2026-07-20 01:49:56 +00:00

audiobookshelf: switch audiobooks mount from Docker NFS volume to systemd automount bind mount

2026-05-05 20:27:13 +00:00

authelia: add ownCloud iOS OIDC client to git config

2026-03-29 18:59:51 +00:00

Switch backrest and filebrowser-colleen-hd to systemd automount bind mount

2026-02-20 21:30:57 +00:00

calibre: move SQLite DBs to local SSD, sync library to NAS via lsyncd

2026-03-08 00:03:17 +00:00

Fix clue-picker: remove host port binding (NPM handles ingress)

2026-03-04 20:11:40 +00:00

code-server: mount /srv/authelia/config for editing users_database.yaml

2026-02-23 15:25:26 +00:00

added comfyui

2026-02-04 02:55:08 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

Exclude unupdatable containers from Watchtower

2026-02-28 16:07:23 +00:00

docker-registry

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

filebrowser-colleen-hd

Switch backrest and filebrowser-colleen-hd to systemd automount bind mount

2026-02-20 21:30:57 +00:00

Add Firefly III data import plan

2026-03-06 20:06:22 +00:00

Update dashy, gitea, homebox, docker-registry for git-linked deployment

2026-02-08 03:23:38 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

Add grav-ksc/docker-compose.yml

2025-11-09 02:46:27 +00:00

grav-popcyclical

Update grav-popcyclical/docker-compose.yml

2025-11-09 03:03:02 +00:00

Update grav-rmstsa/docker-compose.yml

2025-11-09 02:38:51 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

homebox: add HBOX_AUTH_API_KEY_PEPPER env var (required by new version)

2026-06-15 01:36:40 +00:00

immich: migrate postgres from deprecated pgvecto.rs to VectorChord

2026-07-04 01:41:10 +00:00

inbox-zero: pin to v1.4.12 (latest tag has broken build, missing node_modules)

2026-06-15 01:56:41 +00:00

Add kiwix and pmtiles services with NAS library share mounts

2026-03-12 19:50:18 +00:00

Update ladder/docker-compose.yml

2026-02-06 03:22:51 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

Fix linkding OIDC env var names: drop LD_ prefix from provider settings

2026-02-23 18:56:00 +00:00

map-frontend: fix @protomaps/basemaps version (4 doesn't exist, use 5)

2026-03-13 14:24:44 +00:00

minecraft: immersive: fix chat (disable enforce-secure-profile), op OlympicJumperL, allow flight

2026-07-12 17:27:07 +00:00

update mqtt-network

2026-01-25 15:44:51 +00:00

Update netdata/docker-compose.yaml

2025-11-26 19:37:51 +00:00

nginx-proxy-acme

nginx-proxy-acme: replace broken symlinks with empty files

2026-06-15 01:33:20 +00:00

nginx-proxy-manager

Update nginx-proxy-manager/docker-compose.yaml

2025-10-14 16:17:59 +00:00

Fix obico model_cache mount path to /model_cache/ml_api

2026-02-26 17:04:22 +00:00

Add LiveSync synchronization method step to Obsidian setup guide

2026-02-24 18:02:18 +00:00

Fix ocis: replace Docker NFS volume with systemd automount bind mount

2026-03-02 03:59:43 +00:00

ollama/open-webui: fix OIDC auth loop and session key persistence

2026-07-02 02:26:26 +00:00

Add Brave API key to openclaw, fix uptime-kuma auth and TCP monitors

2026-02-23 19:14:01 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

Add map-frontend (nginx + MapLibre GL), make pmtiles internal-only

2026-03-13 14:14:16 +00:00

Add portainer/docker-compose.yaml

2025-08-06 19:00:02 +00:00

Add quizmaster/docker-compose.yaml

2025-10-14 16:19:33 +00:00

Add user directive to RackPeek for proper permissions

2026-02-14 02:48:41 +00:00

romm: pass ScreenScraper credentials via Portainer env vars

2026-03-20 22:03:49 +00:00

Fix Spoolman: remove user override, add PUID/PGID env vars

2026-03-01 04:29:31 +00:00

stable-diffusion

stable-diffusion: disable ai-dock service portal auth

2026-03-09 03:09:44 +00:00

Add statping/docker-compose.yml

2025-09-13 02:22:21 +00:00

Update README with working ttyd web terminal configuration

2026-02-16 03:53:08 +00:00

Update Syncthing config

2025-12-11 15:07:12 +00:00

Add tidbyt/docker-compose.yaml

2025-10-14 16:20:13 +00:00

torrents: document NPM web UI instance labels (OPEN/VPN badges)

2026-03-13 03:36:52 +00:00

revert 877d916c15

2026-02-23 13:43:05 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

.gitignore

Add Authelia SSO, remove authentik, restrict ultralytics port

2026-02-22 20:21:11 +00:00

CLAUDE.md

add claude.md

2026-01-25 14:33:27 +00:00

NAS-CONNECTION-STRATEGIES.md

docs: update NAS connection strategies for Immich and nas_library/nas_family mounts

2026-03-14 02:10:52 +00:00

portainer.sh

Fix portainer.sh deploy: forward extra args (env vars) to cmd_deploy

2026-03-06 03:55:53 +00:00

README.md

Initial commit

2025-08-06 18:55:15 +00:00

README.md

docker-infrastructure