unattended-upgrades rebooted dankclaw at 15:01; the legacy podman-compose gitea stack had no systemd units, so rootless podman did not auto-start the containers. Gitea was down ~1 hour. - add quadlet units (dankclaw/gitea/quadlet/): gitea-postgres, gitea-server, gitea-caddy + gitea.network (DNS enabled; the default rootless podman network has dns_enabled=false) - add gitea stack Caddyfile (upstream gitea-server:3000) and .env.example; live password stays in /opt/gitea/.env (0600) - fix latent name bugs in main stack config: DATABASE_HOST gitea-postgres, Caddyfile upstream gitea-server - docs: rewrite Gitea page for the quadlet stack (management, boot persistence, secrets, gotchas, incident log); fix port 3000 in stack table; Postgres connection notes - legacy compose retired on target to /opt/gitea/.deprecated/
42 lines
1.3 KiB
Markdown
42 lines
1.3 KiB
Markdown
# Dankclaw Stack
|
|
|
|
Dankclaw (192.168.0.143) runs the AI, search, and development stack. It hosts the inference endpoint (llama.cpp, port 7770, from the `vllmScripts` repo), the agent tools, the privacy search, and the observability stack.
|
|
|
|
```mermaid
|
|
graph LR
|
|
U[User] --> C[Caddy :80/:443]
|
|
C --> O[OpenWebUI]
|
|
C --> S[SearXNG]
|
|
C --> G[Gitea]
|
|
C --> F[ComfyUI]
|
|
C --> D[Grafana]
|
|
S --> V[Gluetun VPN]
|
|
O --> L[llama.cpp :7770]
|
|
O --> H[Hermes]
|
|
```
|
|
|
|
## Services
|
|
|
|
| Service | Hostname | Port | Docs |
|
|
|---------|----------|------|------|
|
|
| SearXNG | search.dankclaw.local | 8081 | [[SearXNG]] |
|
|
| ComfyUI | comfyui.dankclaw.local | 8188 | [[ComfyUI]] |
|
|
| OpenWebUI | chat.dankclaw.local | 3000 | [[OpenWebUI]] |
|
|
| Hermes | hermes.dankclaw.local | 8090 | [[Hermes]] |
|
|
| Gitea | gitea.dankclaw.local | 3000 | [[Gitea]] |
|
|
| Grafana | grafana.dankclaw.local | 3002 | [[Grafana]] |
|
|
| Prometheus | prometheus.dankclaw.local | 9090 | [[Prometheus]] |
|
|
| Homepage | dankclaw.local | 80/443 | — |
|
|
|
|
## Routing Rules
|
|
|
|
- SearXNG outbound traffic exits through the [[Gluetun]] VPN container.
|
|
- Every other service uses the normal LAN route.
|
|
- The homepage lists all services with status.
|
|
|
|
## See Also
|
|
|
|
- [[index]] — repository index
|
|
- [[Network Architecture]] — routing and proxy
|
|
- [[Observability]] — Grafana, Prometheus, logs
|