homelab/docker-infrastructure

T

poprhythm c23ff52563 netdata: alert on sustained high CPU via Telegram, restrict LAN exposure

Two cryptominer incursions (inbox-zero, then gitea) went unnoticed until
found manually — there was no alerting on sustained host CPU. Wired
netdata's existing 10min_cpu_usage alarm to notify via the shared Telegram
bot (config is host-only, not committed). Also narrowed the dashboard port
from 0.0.0.0 to the host's LAN IP to reduce exposure.

2026-08-07 00:12:18 +00:00

audiobookshelf: switch audiobooks mount from Docker NFS volume to systemd automount bind mount

2026-05-05 20:27:13 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

Switch backrest and filebrowser-colleen-hd to systemd automount bind mount

2026-02-20 21:30:57 +00:00

calibre: move SQLite DBs to local SSD, sync library to NAS via lsyncd

2026-03-08 00:03:17 +00:00

Fix clue-picker: remove host port binding (NPM handles ingress)

2026-03-04 20:11:40 +00:00

code-server: mount /srv/authelia/config for editing users_database.yaml

2026-02-23 15:25:26 +00:00

added comfyui

2026-02-04 02:55:08 +00:00

pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged

2026-08-07 00:07:36 +00:00

Exclude unupdatable containers from Watchtower

2026-02-28 16:07:23 +00:00

docker-registry

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

filebrowser-colleen-hd

pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged

2026-08-07 00:07:36 +00:00

Add Firefly III data import plan

2026-03-06 20:06:22 +00:00

gitea: lock down after cryptominer compromise

2026-08-06 23:56:28 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

Add grav-ksc/docker-compose.yml

2025-11-09 02:46:27 +00:00

grav-popcyclical

Update grav-popcyclical/docker-compose.yml

2025-11-09 03:03:02 +00:00

Update grav-rmstsa/docker-compose.yml

2025-11-09 02:38:51 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

homebox: add HBOX_AUTH_API_KEY_PEPPER env var (required by new version)

2026-06-15 01:36:40 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

inbox-zero: pin to v1.4.12 (latest tag has broken build, missing node_modules)

2026-06-15 01:56:41 +00:00

Add kiwix and pmtiles services with NAS library share mounts

2026-03-12 19:50:18 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

Fix linkding OIDC env var names: drop LD_ prefix from provider settings

2026-02-23 18:56:00 +00:00

map-frontend: fix @protomaps/basemaps version (4 doesn't exist, use 5)

2026-03-13 14:24:44 +00:00

minecraft: comment out immersive portals server

2026-07-29 23:44:06 +00:00

update mqtt-network

2026-01-25 15:44:51 +00:00

netdata: alert on sustained high CPU via Telegram, restrict LAN exposure

2026-08-07 00:12:18 +00:00

nginx-proxy-acme

nginx-proxy-acme: replace broken symlinks with empty files

2026-06-15 01:33:20 +00:00

nginx-proxy-manager

Update nginx-proxy-manager/docker-compose.yaml

2025-10-14 16:17:59 +00:00

Fix obico model_cache mount path to /model_cache/ml_api

2026-02-26 17:04:22 +00:00

Add LiveSync synchronization method step to Obsidian setup guide

2026-02-24 18:02:18 +00:00

Fix ocis: replace Docker NFS volume with systemd automount bind mount

2026-03-02 03:59:43 +00:00

ollama/open-webui: fix OIDC auth loop and session key persistence

2026-07-02 02:26:26 +00:00

Add Brave API key to openclaw, fix uptime-kuma auth and TCP monitors

2026-02-23 19:14:01 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

Add map-frontend (nginx + MapLibre GL), make pmtiles internal-only

2026-03-13 14:14:16 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes

2026-07-20 02:19:32 +00:00

romm: pass ScreenScraper credentials via Portainer env vars

2026-03-20 22:03:49 +00:00

Fix Spoolman: remove user override, add PUID/PGID env vars

2026-03-01 04:29:31 +00:00

stable-diffusion

stable-diffusion: disable ai-dock service portal auth

2026-03-09 03:09:44 +00:00

pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged

2026-08-07 00:07:36 +00:00

Update README with working ttyd web terminal configuration

2026-02-16 03:53:08 +00:00

Update Syncthing config

2025-12-11 15:07:12 +00:00

Add tidbyt/docker-compose.yaml

2025-10-14 16:20:13 +00:00

torrents: document NPM web UI instance labels (OPEN/VPN badges)

2026-03-13 03:36:52 +00:00

revert 877d916c15

2026-02-23 13:43:05 +00:00

security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost

2026-07-20 01:49:56 +00:00

watchtower: reduce poll interval to 24h to cut notification spam

2026-07-20 13:25:05 +00:00

.gitignore

Add Authelia SSO, remove authentik, restrict ultralytics port

2026-02-22 20:21:11 +00:00

CLAUDE.md

add claude.md

2026-01-25 14:33:27 +00:00

NAS-CONNECTION-STRATEGIES.md

docs: update NAS connection strategies for Immich and nas_library/nas_family mounts

2026-03-14 02:10:52 +00:00

portainer.sh

Fix portainer.sh deploy: forward extra args (env vars) to cmd_deploy

2026-03-06 03:55:53 +00:00

README.md

Initial commit

2025-08-06 18:55:15 +00:00

README.md

docker-infrastructure