Sync workspace with Gitea: merge June/July session docs

- README + siklos-docker-services: add authentik/searxng/beszel rows, photos VM section,
  2026-06-24 cleanup notes, 2026-07-03 Portainer conversion note (jgpc naming preserved)
- Add: authentik setup docs, frigate docs/config, OCIS migration docs, AdventureLog bug
  report, install-native-apps.sh, workstation-disk-analysis.md
- Remove obsolete: cgitta-nextcloud-zip-analysis.md, kopia-restore-guide.md
- .gitignore: ocis-credentials.md (secrets stay local), *.bak
This commit is contained in:
2026-07-08 14:12:05 -05:00
parent bab19cd790
commit 7cb2ebed2d
27 changed files with 1611 additions and 595 deletions
+14 -5
View File
@@ -26,6 +26,7 @@ All stacks are managed via **Portainer** at http://192.168.88.27:9000 (or https:
| siklos | 192.168.88.27 | Main Docker server (VM 112 on Proxmox) | 3 (local) | 26.1.5 |
| jellyfin | 192.168.88.10 | Media server | 4 (agent) | 26.1.5 |
| jgpc | 192.168.88.41 | Workstation / Ollama / AI | 5 (agent) | 29.4.2 |
| photos | 192.168.88.32 | Photos VM (VM 113) — Immich | 8 (agent) | — |
## Stack Inventory
@@ -34,7 +35,7 @@ All stacks are managed via **Portainer** at http://192.168.88.27:9000 (or https:
| Stack | Port(s) | Data Path | URL | Notes |
|---|---|---|---|---|
| actual-budget | 5006 | /srv/docker/actual-budget | budget.jgitta.com | Budget tracking |
| beszel | 8085 | /srv/docker/beszel | beszel.jgitta.com | Beszel hub — all-in-one monitoring (replaced Prometheus/Grafana/cAdvisor) |
| authentik | 9011 | /srv/docker/authentik | auth.jgitta.com | SSO / identity provider (stack 58; secrets stored as Portainer env vars) |
| dashboard | 8096 | /srv/docker/dashboard | dashboard.jgitta.com | Custom homepage |
| dashy | 8081 | /srv/docker/dashy | dashy.jgitta.com | Dashboard |
| gitea | 3002, 2222 | /srv/docker/gitea/data | gitea.jgitta.com | Git server — this repo |
@@ -47,13 +48,21 @@ All stacks are managed via **Portainer** at http://192.168.88.27:9000 (or https:
| linkwarden | 3015 | /srv/docker/linkwarden/pgdata | links.jgitta.com | Link manager |
| litellm | 4000 | /srv/docker/litellm | — | LLM API gateway |
| meshcentral | 444 | /srv/docker/meshcentral | mesh.jgitta.com | Remote management |
| beszel | 8085 | /srv/docker/beszel | beszel.jgitta.com | Beszel hub — all-in-one monitoring (replaced Prometheus/Grafana/cAdvisor) |
| onlyoffice | 8880 | /srv/docker/onlyoffice | office.jgitta.com | Office document server (replaced Collabora) |
| pihole | host network | /srv/docker/pihole | pihole.jgitta.com | DNS ad blocker |
| pihole | host network | /srv/docker/pihole | pihole.jgitta.com | DNS ad blocker + faster-whisper + open-webui |
| portainer | 9000, 9443 | /srv/docker/portainer | portainer.jgitta.com | Container management UI |
| uptime-kuma | 3001 | /srv/docker/uptime-kuma/data | status.jgitta.com | Uptime monitoring |
| searxng | 8092 | /srv/docker/searxng | search.jgitta.com | Private search engine |
| watchtower | — | — | — | Auto-updates containers |
| wordpress | 8095 | /srv/docker/wordpress | jgitta.com | WordPress site |
### photos (192.168.88.32) — 1 stack
| Stack | Port(s) | Data Path | URL | Notes |
|---|---|---|---|---|
| immich | 2283 | /mnt/immich-photos (uploads), /srv/docker/immich/postgres (DB) | pictures.jgitta.com | Stack 45; postgres needs `shared_preload_libraries=vectors.so,vchord.so` (unquoted, list-form command) |
### jellyfin (192.168.88.10) — 3 stacks
| Stack | Port(s) | Data Path | Notes |
@@ -62,14 +71,13 @@ All stacks are managed via **Portainer** at http://192.168.88.27:9000 (or https:
| beszel-agent | 45876 | — | Beszel agent (systemd binary, not Docker) |
| portainer-agent | 9001 | — | Portainer agent (fully managed) |
### jgpc (192.168.88.41) — 4 stacks
### jgpc (192.168.88.41) — 3 stacks
| Stack | Port(s) | Data Path | Notes |
|---|---|---|---|
| frigate | 5000, 8554, 8555 | /srv/docker/frigate | NVR / camera AI |
| open-webui | 3000 | /srv/docker/open-webui | Ollama web UI |
| portainer-agent | 9001 | — | Portainer agent (shows "limited" — expected, see notes) |
| stirling-pdf | 8081 | /srv/docker/stirling-pdf | PDF tools |
| beszel-agent | 45876 | — | Beszel agent (systemd binary, not Docker) |
## Caddy Reverse Proxy
@@ -111,6 +119,8 @@ All stack data is stored under `/srv/docker/<stack-name>/` on each host.
Old compose files were renamed to `.bak` after migration to Portainer.
**2026-07-03 — external stacks converted to Portainer:** authentik (stack 58), beszel (57), searxng (56) were created in Portainer; watchtower (18), karakeep (21), frigate (31), immich (45) were redeployed so Portainer owns the running containers. Frigate and immich stack definitions were updated to match the newer host compose files (frigate: cpuset pinning + 8G memory limit; immich: /mnt/immich-photos path + vectorchord postgres image). Host compose files renamed to `.bak`. Do not run `docker compose up` from /srv/docker — deploy via Portainer only.
## Kopia Backup Notes (updated 2026-05-07)
Kopia backs up Nextcloud data (VM 103) and other sources to TrueNAS NFS.
@@ -142,4 +152,3 @@ siklos to manage all three Docker hosts from one UI.
| OCIS VM | VM 114 (192.168.88.63) — cloud.jgitta.com |
| Docker server VM | VM 112 = siklos (192.168.88.27) |
| Caddy proxy VM | 192.168.88.110 |