Replace the dead dankserver open-webui (bare container, :3000, pointed at a dead :9090 backend) with a boot-persistent quadlet on dankclaw: - CPU image (:main); dankclaw is CPU-only, so the :cuda image is wasted. - Isolated on slirp4netns; publishes 3005 (3000 is Gitea's HTTP port). - Default LLM backend is the local vLLM on 52625 (frank-default-large). - Data persists under /home/dank/Containers/open-webui/data. - Caddy route now proxies to the published LAN port (the container is not on Caddy's network). Also corrects the model/port mapping in the docs: the live state (verified 2026-08-19) is frank-default-large on vLLM :52625 (dankclaw) and frank-default-small on llama.cpp :7770 (dankserver) — the reverse of the 2026-08-17 note.
79 lines
1.5 KiB
Caddyfile
79 lines
1.5 KiB
Caddyfile
# Dankclaw Caddyfile
|
|
# Reverse proxy for the Dankclaw stack. Caddy runs as a container on the
|
|
# podman network; upstreams are container names. Homepage is password
|
|
# protected. Replace the bcrypt hashes below (caddy hash-password) at deploy.
|
|
{
|
|
admin off
|
|
email admin@dankclaw.local
|
|
}
|
|
|
|
# --- Homepage (password protected) ---
|
|
dankclaw.local {
|
|
basicauth {
|
|
dank $2a$14$REPLACE_WITH_HASH
|
|
}
|
|
root * /srv/homepage
|
|
file_server
|
|
}
|
|
|
|
# --- SearXNG (behind the Gluetun tunnel) ---
|
|
search.dankclaw.local {
|
|
basicauth {
|
|
dank $2a$14$REPLACE_WITH_HASH
|
|
}
|
|
reverse_proxy gluetun:8080
|
|
}
|
|
|
|
# --- ComfyUI ---
|
|
comfyui.dankclaw.local {
|
|
reverse_proxy comfyui:8188
|
|
}
|
|
|
|
# --- OpenWebUI ---
|
|
# open-webui is a quadlet container on slirp4netns (isolated), so Caddy cannot
|
|
# reach it by container name. Proxy to its published LAN port instead.
|
|
chat.dankclaw.local {
|
|
basicauth {
|
|
dank $2a$14$REPLACE_WITH_HASH
|
|
}
|
|
reverse_proxy 192.168.0.143:3005
|
|
}
|
|
|
|
# --- Hermes ---
|
|
hermes.dankclaw.local {
|
|
basicauth {
|
|
dank $2a$14$REPLACE_WITH_HASH
|
|
}
|
|
reverse_proxy hermes:8090
|
|
}
|
|
|
|
# --- Gitea (migrated) ---
|
|
gitea.dankclaw.local {
|
|
reverse_proxy gitea-server:3000
|
|
}
|
|
|
|
# --- Grafana ---
|
|
grafana.dankclaw.local {
|
|
basicauth {
|
|
dank $2a$14$REPLACE_WITH_HASH
|
|
}
|
|
reverse_proxy grafana:3000
|
|
}
|
|
|
|
# --- Prometheus ---
|
|
prometheus.dankclaw.local {
|
|
basicauth {
|
|
dank $2a$14$REPLACE_WITH_HASH
|
|
}
|
|
reverse_proxy prometheus:9090
|
|
}
|
|
|
|
# --- Loki ---
|
|
loki.dankclaw.local {
|
|
basicauth {
|
|
dank $2a$14$REPLACE_WITH_HASH
|
|
}
|
|
reverse_proxy loki:3100
|
|
}
|