"vault backup: 2026-03-08 14:11:41 from Flow"

This commit is contained in:
2026-03-08 14:11:41 -05:00
parent c171d48865
commit 9e24922618
40 changed files with 96 additions and 3143 deletions

View File

@@ -39,13 +39,13 @@ Each major service registers itself as a separate Tailscale node via the sidecar
| 3000 | TCP | Gitea web UI |
| 5001 | TCP | Linkwarden |
| 5010 | TCP | OpenProject |
| 5100 | TCP | Python process (unknown) |
| 5100 | TCP | Kao |
| 5555 | TCP | Dockhand |
| 5678 | TCP | n8n |
| 8001 | TCP | Gluetun HTTP control server |
| 8388 | TCP/UDP | Gluetun Shadowsocks |
| 8888 | TCP | Gluetun HTTP proxy |
| 9170 | TCP | system-bridge |
| 9170 | TCP | system-bridge (Home Assistant connector) |
| 25565 | TCP | Minecraft |
| 24454 | UDP | Minecraft voice chat |
| 35000 | TCP | Homepage |
@@ -70,4 +70,4 @@ Each major service registers itself as a separate Tailscale node via the sidecar
## DNS
- `127.0.0.53` — systemd-resolved (stub resolver)
- Gluetun is configured to use `192.168.2.112` as DNS (likely the Pihole on the LAN)
- Gluetun is configured to use `192.168.2.112` as DNS — this is the Raspberry Pi running Pi-hole (`raspi`)

View File

@@ -30,12 +30,9 @@ Most stacks include a `tailscale/tailscale` sidecar that joins the Tailnet and m
- **Dockhand vulnerability scanner caches** use named volumes (`dockhand-grype-db`, `dockhand-trivy-db`)
### Orphaned Volumes
The following named volumes exist but are not attached to any running container — likely leftovers from deleted stacks:
- `moltis_moltis-data`
- `moltis_moltis-config`
- `moltis_moltis-tailscale-state`
The following named volumes exist but are not attached to any running container — leftovers from deleted stacks. Safe to prune:
- `portainer_data`
- `open-project_open_project_tailscale_state`
- `openproject_openproject_tailscale_state` (from an older `openproject` stack iteration)
> Orphaned networks (`blight_default`, old `openproject_default`) have been pruned.
> Orphaned networks (`blight_default`, old `openproject_default`) and `moltis_*` volumes have been pruned.

View File

@@ -144,7 +144,23 @@ volumes:
| `/home/artanis/DockerFiles/Matrix/slackdata` | Slack bridge config/state |
| `/home/artanis/DockerFiles/Matrix/discorddata` | Discord bridge config/state |
## Matrix Relay
`matrix-relay` is a small custom Python/Flask app. Its purpose is to receive Matrix push notifications and forward them to Home Assistant via webhook.
- **Source:** `/home/artanis/DockerFiles/Matrix/matrix_relay.py`
- **Dockerfile:** `/home/artanis/DockerFiles/Matrix/matrix_relay.Dockerfile`
- **Listens on:** port `5101` (internal only)
- **Forwards to:** `https://homeassistant.bunny-wyvern.ts.net/api/webhook/artanis_matrix_push`
- **Stack rebuild docs:** check `/home/artanis/DockerFiles/Matrix/` for any additional docs
To rebuild the image after source changes:
```bash
cd /home/artanis/DockerFiles/Matrix/matrix
docker compose build matrix-relay
docker compose up -d matrix-relay
```
## Notes
- The `matrix-relay` container is built from a local `matrix_relay.Dockerfile` located one directory up from the compose file (`/home/artanis/DockerFiles/Matrix/`)
- Synapse does not expose any ports to the host — it is only reachable via the `matrix_matrix-internal` network and through Tailscale
- The Tailscale sidecar attaches to `synapse`'s network namespace, so Synapse's internal ports (8008, 8448) become accessible at `matrix.bunny-wyvern.ts.net`

View File

@@ -55,6 +55,6 @@ services:
## Notes
- Database: SQLite (stored in the `n8n_storage` named volume)
- `N8N_HOST` and `DOMAIN_NAME` are set via `.env` file at `/home/artanis/DockerFiles/n8n/.env`
- `.env` at `/home/artanis/DockerFiles/n8n/.env` sets `DOMAIN_NAME=bunny-wyvern.ts.net` and `SUBDOMAIN=n8n`, resolving `N8N_HOST` to `n8n.bunny-wyvern.ts.net`
- `N8N_RUNNERS_ENABLED=true` enables the task runner mode for better workflow execution performance
- `N8N_SECURE_COOKIE` is commented out — HTTPS is handled by Tailscale so cookies are secure by default