homelab/docker-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
306 Commits 1 Branch 0 Tags
d302060e4b68468fa644c6cb3deac2246dad63b1
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
poprhythm d302060e4b falco: exclude loopback destinations from miner-pool-port rule 
Confirmed 5 false positives over 2026-08-20 to 2026-08-25, all connecting
to ::1:8888 at ~21:3x daily - never a real mining-pool destination since
that's loopback, and every attempt failed instantly (nothing listens on
8888). Couldn't identify the source process (falco loses metadata for it
before it can be captured), but a real miner pool can never be localhost,
so excluding loopback fixes the false-positive class without weakening
the rule for actual remote pool connections.
2026-08-25 21:44:03 +00:00
.claude/skills/deploy-stack
add deploy-stack skill; falco: fix hook-tamper condition, add three more post-incident rules
2026-08-16 14:33:56 +00:00
audiobookshelf
audiobookshelf: switch audiobooks mount from Docker NFS volume to systemd automount bind mount
2026-05-05 20:27:13 +00:00
authelia
cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes
2026-07-20 02:19:32 +00:00
backrest
Switch backrest and filebrowser-colleen-hd to systemd automount bind mount
2026-02-20 21:30:57 +00:00
calibre
calibre: move SQLite DBs to local SSD, sync library to NAS via lsyncd
2026-03-08 00:03:17 +00:00
clue-picker
Fix clue-picker: remove host port binding (NPM handles ingress)
2026-03-04 20:11:40 +00:00
code-server
code-server: mount /srv/authelia/config for editing users_database.yaml
2026-02-23 15:25:26 +00:00
comfyui
added comfyui
2026-02-04 02:55:08 +00:00
couchdb
pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged
2026-08-07 00:07:36 +00:00
dashy
dashy: link falco alerts to netdata's Alerts tab instead of homepage
2026-08-16 16:43:38 +00:00
dns-updateip
Exclude unupdatable containers from Watchtower
2026-02-28 16:07:23 +00:00
docker-registry
security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost
2026-07-20 01:49:56 +00:00
falco
falco: exclude loopback destinations from miner-pool-port rule
2026-08-25 21:44:03 +00:00
filebrowser-colleen-hd
pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged
2026-08-07 00:07:36 +00:00
firefly-iii
firefly-iii: expose FIDI on 8383 for the SimpleFIN setup UI
2026-08-16 14:44:22 +00:00
gitea
gitea: lock down after cryptominer compromise
2026-08-06 23:56:28 +00:00
glances
glances: attach to npm-network for reverse proxy access
2026-08-17 01:40:15 +00:00
grav-ksc
Add grav-ksc/docker-compose.yml
2025-11-09 02:46:27 +00:00
grav-popcyclical
Update grav-popcyclical/docker-compose.yml
2025-11-09 03:03:02 +00:00
grav-rmstsa
Update grav-rmstsa/docker-compose.yml
2025-11-09 02:38:51 +00:00
home-assistant
security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost
2026-07-20 01:49:56 +00:00
homebox
homebox: add HBOX_AUTH_API_KEY_PEPPER env var (required by new version)
2026-06-15 01:36:40 +00:00
immich
cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes
2026-07-20 02:19:32 +00:00
inbox-zero
inbox-zero: pin to v1.4.12 (latest tag has broken build, missing node_modules)
2026-06-15 01:56:41 +00:00
kiwix
Add kiwix and pmtiles services with NAS library share mounts
2026-03-12 19:50:18 +00:00
ladder
cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes
2026-07-20 02:19:32 +00:00
linkding
Fix linkding OIDC env var names: drop LD_ prefix from provider settings
2026-02-23 18:56:00 +00:00
map-frontend
map-frontend: fix @protomaps/basemaps version (4 doesn't exist, use 5)
2026-03-13 14:24:44 +00:00
minecraft
minecraft: set Survival SMP seed -1102400853764765851
2026-08-23 16:25:20 +00:00
mosquitto
update mqtt-network
2026-01-25 15:44:51 +00:00
navidrome
Scope Navidrome to music/albums (curated MusicBrainz-tagged set)
2026-08-08 22:38:14 +00:00
netdata
netdata: silence 10min_cpu_usage alarm now that Falco covers miner detection
2026-08-21 01:28:33 +00:00
nginx-proxy-acme
nginx-proxy-acme: replace broken symlinks with empty files
2026-06-15 01:33:20 +00:00
nginx-proxy-manager
Update nginx-proxy-manager/docker-compose.yaml
2025-10-14 16:17:59 +00:00
obico
Fix obico model_cache mount path to /model_cache/ml_api
2026-02-26 17:04:22 +00:00
obsidian
Add LiveSync synchronization method step to Obsidian setup guide
2026-02-24 18:02:18 +00:00
ocis
Fix ocis: replace Docker NFS volume with systemd automount bind mount
2026-03-02 03:59:43 +00:00
ollama
ollama/open-webui: fix OIDC auth loop and session key persistence
2026-07-02 02:26:26 +00:00
openclaw
Add Brave API key to openclaw, fix uptime-kuma auth and TCP monitors
2026-02-23 19:14:01 +00:00
plex
security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost
2026-07-20 01:49:56 +00:00
pmtiles
Add map-frontend (nginx + MapLibre GL), make pmtiles internal-only
2026-03-13 14:14:16 +00:00
portainer
cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes
2026-07-20 02:19:32 +00:00
rackpeek
cleanup: remove quizmaster and leafweb (unused/orphaned), add watchtower monitor-only labels, minor consistency fixes
2026-07-20 02:19:32 +00:00
romm
romm: pass ScreenScraper credentials via Portainer env vars
2026-03-20 22:03:49 +00:00
spoolman
Fix Spoolman: remove user override, add PUID/PGID env vars
2026-03-01 04:29:31 +00:00
stable-diffusion
stable-diffusion: disable ai-dock service portal auth
2026-03-09 03:09:44 +00:00
statping
pin filebrowser, couchdb, statping to explicit versions instead of floating beta/dev/untagged
2026-08-07 00:07:36 +00:00
subwave
Add Navidrome and SUB/WAVE AI radio station
2026-08-08 21:20:40 +00:00
synchronet
Update README with working ttyd web terminal configuration
2026-02-16 03:53:08 +00:00
syncthing
Update Syncthing config
2025-12-11 15:07:12 +00:00
technitium
technitium: add container-host DNS instance for cluster mode with dns02
2026-08-17 01:33:49 +00:00
tidbyt
Add tidbyt/docker-compose.yaml
2025-10-14 16:20:13 +00:00
torrents
torrents: document NPM web UI instance labels (OPEN/VPN badges)
2026-03-13 03:36:52 +00:00
ultralytics
revert 877d916c15
2026-02-23 13:43:05 +00:00
uptime-kuma
security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost
2026-07-20 01:49:56 +00:00
watchtower
watchtower: reduce poll interval to 24h to cut notification spam
2026-07-20 13:25:05 +00:00
.gitignore
Add Authelia SSO, remove authentik, restrict ultralytics port
2026-02-22 20:21:11 +00:00
CLAUDE.md
add claude.md
2026-01-25 14:33:27 +00:00
NAS-CONNECTION-STRATEGIES.md
docs: update NAS connection strategies for Immich and nas_library/nas_family mounts
2026-03-14 02:10:52 +00:00
portainer.sh
Fix portainer.sh deploy: forward extra args (env vars) to cmd_deploy
2026-03-06 03:55:53 +00:00
README.md
Initial commit
2025-08-06 18:55:15 +00:00

README.md

docker-infrastructure

Reference in New Issue View Git Blame Copy Permalink
S
Description
No description provided
Readme
877 KiB
Languages
Shell 58.2%
Python 28%
JavaScript 10.5%
HTML 2.3%
DIGITAL Command Language 0.6%
Other 0.4%