"vault backup: 2026-03-08 13:36:25 from Flow"

21-Server Reference/stacks/mealie.md

@@ -0,0 +1,63 @@
+# Mealie
+
+Self-hosted recipe manager and meal planner.
+
+## Access
+- **Tailscale:** [mealie.bunny-wyvern.ts.net](https://mealie.bunny-wyvern.ts.net)
+
+## Containers
+
+| Container | Image | Role |
+|---|---|---|
+| `mealie` | `ghcr.io/mealie-recipes/mealie:latest` | Web app |
+| `mealie-tailscale-sidecar` | `tailscale/tailscale:latest` | Tailscale node |
+
+## Compose File
+**Path:** `/home/artanis/DockerFiles/Mealie/docker-compose.yaml`
+
+```yaml
+services:
+  mealie:
+    image: ghcr.io/mealie-recipes/mealie:latest
+    container_name: mealie
+    restart: always
+    deploy:
+      resources:
+        limits:
+          memory: 1000M
+    volumes:
+      - /home/artanis/DockerFiles/Mealie/data:/app/data/
+    environment:
+      ALLOW_SIGNUP: "false"
+      PUID: 1000
+      PGID: 1000
+      TZ: America/Chicago
+      SECURITY_MAX_LOGIN_ATTEMPTS: 5
+      SECURITY_USER_LOCKOUT_TIME: 1
+      BASE_URL: https://mealie.bunny-wyvern.ts.net/
+
+  mealie-tailscale-sidecar:
+    image: tailscale/tailscale:latest
+    container_name: mealie-tailscale-sidecar
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun
+    volumes:
+      - mealie_tailscale_state:/var/lib/tailscale
+    environment:
+      - TS_AUTHKEY=<redacted>
+      - TS_HOSTNAME=mealie
+      - TS_STATE_DIR=/var/lib/tailscale
+    network_mode: "service:mealie"
+
+volumes:
+  mealie_tailscale_state:
+```
+
+## Notes
+- Public signup is disabled — accounts must be created by an admin
+- Memory capped at 1 GB
+- Data is bind-mounted to `/home/artanis/DockerFiles/Mealie/data`
+- OpenAI/LLM integration was previously attempted (commented out in compose) — it was disabled because it was too resource-intensive and caused crashes