unattended-upgrades rebooted dankclaw at 15:01; the legacy podman-compose gitea stack had no systemd units, so rootless podman did not auto-start the containers. Gitea was down ~1 hour. - add quadlet units (dankclaw/gitea/quadlet/): gitea-postgres, gitea-server, gitea-caddy + gitea.network (DNS enabled; the default rootless podman network has dns_enabled=false) - add gitea stack Caddyfile (upstream gitea-server:3000) and .env.example; live password stays in /opt/gitea/.env (0600) - fix latent name bugs in main stack config: DATABASE_HOST gitea-postgres, Caddyfile upstream gitea-server - docs: rewrite Gitea page for the quadlet stack (management, boot persistence, secrets, gotchas, incident log); fix port 3000 in stack table; Postgres connection notes - legacy compose retired on target to /opt/gitea/.deprecated/
1.3 KiB
1.3 KiB
Dankclaw Stack
Dankclaw (192.168.0.143) runs the AI, search, and development stack. It hosts the inference endpoint (llama.cpp, port 7770, from the vllmScripts repo), the agent tools, the privacy search, and the observability stack.
graph LR
U[User] --> C[Caddy :80/:443]
C --> O[OpenWebUI]
C --> S[SearXNG]
C --> G[Gitea]
C --> F[ComfyUI]
C --> D[Grafana]
S --> V[Gluetun VPN]
O --> L[llama.cpp :7770]
O --> H[Hermes]
Services
| Service | Hostname | Port | Docs |
|---|---|---|---|
| SearXNG | search.dankclaw.local | 8081 | SearXNG |
| ComfyUI | comfyui.dankclaw.local | 8188 | ComfyUI |
| OpenWebUI | chat.dankclaw.local | 3000 | OpenWebUI |
| Hermes | hermes.dankclaw.local | 8090 | Hermes |
| Gitea | gitea.dankclaw.local | 3000 | Gitea |
| Grafana | grafana.dankclaw.local | 3002 | Grafana |
| Prometheus | prometheus.dankclaw.local | 9090 | Prometheus |
| Homepage | dankclaw.local | 80/443 | — |
Routing Rules
- SearXNG outbound traffic exits through the Gluetun VPN container.
- Every other service uses the normal LAN route.
- The homepage lists all services with status.
See Also
- index — repository index
- Network Architecture — routing and proxy
- Observability — Grafana, Prometheus, logs