homelab/docker-infrastructure

T

poprhythm 31f09721cd falco: tune out host-reboot false positives from 2026-09-16 boot burst

Host rebooted 2026-09-16 17:47 UTC, recreating every container at once and
producing 70 alerts in a single burst - all traced to benign init-time
patterns that will recur on every future reboot: systemd-executor's PAM
reads during boot, firefly-iii/fidi's s6 healthcheck shell, and romm's own
loopback redis/app connection at container start.

2026-09-16 23:19:54 +00:00

Add navidrome skill for Subsonic API playlist curation

2026-09-13 23:20:02 +00:00

audiobookshelf: switch audiobooks mount from Docker NFS volume to systemd automount bind mount

2026-05-05 20:27:13 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

Switch backrest and filebrowser-colleen-hd to systemd automount bind mount

2026-02-20 21:30:57 +00:00

calibre: move SQLite DBs to local SSD, sync library to NAS via lsyncd

2026-03-08 00:03:17 +00:00

Fix clue-picker: remove host port binding (NPM handles ingress)

2026-03-04 20:11:40 +00:00

code-server: mount /srv/authelia/config for editing users_database.yaml

2026-02-23 15:25:26 +00:00

added comfyui

2026-02-04 02:55:08 +00:00

pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged

2026-08-07 00:07:36 +00:00

dashy: link falco alerts to netdata's Alerts tab instead of homepage

2026-08-16 16:43:38 +00:00

Exclude unupdatable containers from Watchtower

2026-02-28 16:07:23 +00:00

docker-registry

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

falco: tune out host-reboot false positives from 2026-09-16 boot burst

2026-09-16 23:19:54 +00:00

filebrowser-colleen-hd

pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged

2026-08-07 00:07:36 +00:00

firefly-iii: expose FIDI on 8383 for the SimpleFIN setup UI

2026-08-16 14:44:22 +00:00

gitea: lock down after cryptominer compromise

2026-08-06 23:56:28 +00:00

glances: attach to npm-network for reverse proxy access

2026-08-17 01:40:15 +00:00

Add grav-ksc/docker-compose.yml

2025-11-09 02:46:27 +00:00

grav-popcyclical

Update grav-popcyclical/docker-compose.yml

2025-11-09 03:03:02 +00:00

Update grav-rmstsa/docker-compose.yml

2025-11-09 02:38:51 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

homebox: add HBOX_AUTH_API_KEY_PEPPER env var (required by new version)

2026-06-15 01:36:40 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

inbox-zero: pin to v1.4.12 (latest tag has broken build, missing node_modules)

2026-06-15 01:56:41 +00:00

Connect jellyfin to npm-network for internal reverse-proxy access

2026-09-06 23:47:41 +00:00

Add kiwix and pmtiles services with NAS library share mounts

2026-03-12 19:50:18 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

Fix linkding OIDC env var names: drop LD_ prefix from provider settings

2026-02-23 18:56:00 +00:00

map-frontend: fix @protomaps/basemaps version (4 doesn't exist, use 5)

2026-03-13 14:24:44 +00:00

minecraft: set Survival SMP seed -1102400853764765851

2026-08-23 16:25:20 +00:00

update mqtt-network

2026-01-25 15:44:51 +00:00

Pin navidrome to 0.64.0 instead of :latest

2026-09-13 12:41:09 +00:00

netdata: silence 10min_cpu_usage alarm now that Falco covers miner detection

2026-08-21 01:28:33 +00:00

nginx-proxy-acme

nginx-proxy-acme: replace broken symlinks with empty files

2026-06-15 01:33:20 +00:00

nginx-proxy-manager

Update nginx-proxy-manager/docker-compose.yaml

2025-10-14 16:17:59 +00:00

Remove obico's GPU reservation to free VRAM for ollama

2026-09-13 13:27:37 +00:00

Add LiveSync synchronization method step to Obsidian setup guide

2026-02-24 18:02:18 +00:00

Fix ocis: replace Docker NFS volume with systemd automount bind mount

2026-03-02 03:59:43 +00:00

Set ollama's server-level context default to 11264, fix compose drift

2026-09-13 16:36:39 +00:00

Add Brave API key to openclaw, fix uptime-kuma auth and TCP monitors

2026-02-23 19:14:01 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

Add map-frontend (nginx + MapLibre GL), make pmtiles internal-only

2026-03-13 14:14:16 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

romm: pass ScreenScraper credentials via Portainer env vars

2026-03-20 22:03:49 +00:00

Add Sonarr for Jellyfin-compliant TV show organization

2026-09-08 02:14:02 +00:00

Fix Spoolman: remove user override, add PUID/PGID env vars

2026-03-01 04:29:31 +00:00

stable-diffusion

stable-diffusion: disable ai-dock service portal auth

2026-03-09 03:09:44 +00:00

pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged

2026-08-07 00:07:36 +00:00

subwave: resolve duplicates after library additions unlocked new matches

2026-09-12 23:54:07 +00:00

Update README with working ttyd web terminal configuration

2026-02-16 03:53:08 +00:00

Update Syncthing config

2025-12-11 15:07:12 +00:00

system-config/nfs-self-heal

Fix false-positive stale-mount detection in nfs-mount-heal.sh

2026-08-25 22:06:43 +00:00

technitium: add container-host DNS instance for cluster mode with dns02

2026-08-17 01:33:49 +00:00

Add tidbyt/docker-compose.yaml

2025-10-14 16:20:13 +00:00

torrents: document NPM web UI instance labels (OPEN/VPN badges)

2026-03-13 03:36:52 +00:00

tronbyt: disable open registration now that admin account exists

2026-09-05 01:53:57 +00:00

revert 877d916c15

2026-02-23 13:43:05 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

watchtower: reduce poll interval to 24h to cut notification spam

2026-07-20 13:25:05 +00:00

.gitignore

Add Authelia SSO, remove authentik, restrict ultralytics port

2026-02-22 20:21:11 +00:00

CLAUDE.md

add claude.md

2026-01-25 14:33:27 +00:00

NAS-CONNECTION-STRATEGIES.md

Add NFS self-heal automation for immich/calibre/ocis, backed up in git

2026-08-25 21:56:48 +00:00

portainer.sh

Add portainer.sh fix-git-auth for stacks with lost GitConfig credentials

2026-09-13 15:38:34 +00:00

qbt-relink-daily-batch.sh

Add qbt-relink-daily-batch.sh to drive qbt-relink-daily.sh over

2026-09-09 12:53:25 +00:00

qbt-relink-daily.sh

Add qbt-relink-daily.sh for single-file (daily show) torrents

2026-09-09 12:52:50 +00:00

qbt-relink-episode.sh

Add qbt-relink-episode.sh for single-file standard-episode torrents

2026-09-10 02:39:17 +00:00

qbt-relink.sh

Rewrite qbt-relink.sh with a real safety model, re-enable it

2026-09-09 03:16:05 +00:00

README.md

Initial commit

2025-08-06 18:55:15 +00:00

sonarr.sh

Fix second Argument-list-too-long spot in cmd_import

2026-09-09 12:15:27 +00:00

README.md

docker-infrastructure