Frank 73e46a1d85 marreta: content-cleaning proxy on Dankclaw, gluetun netns, guard-chained ...

Deploy manualdousuario/marreta (Laravel / serversideup php:8.4-fpm-nginx)
as a rootless Quadlet pair (marreta + marreta-browser/Lightpanda), both
joining gluetun's netns so all fetch egress exits the same ProtonVPN
tunnel as SearXNG.

- marreta relocated to NGINX_HTTP_PORT=8085 (netns already has searxng on
  8080); gluetun publishes 8082:8085; Caddy dials 192.168.0.143:8082.
- Guard chain: marreta.franksdank.cloud -> Anubis :8923 -> Authentik ->
  post-auth :8017 @marreta -> 8082. Access = any authenticated user.
- Secrets seeded to /home/dank/Containers/marreta/env (0600) from
  MARRETA_APP_KEY / MARRETA_ADMIN_EMAIL / MARRETA_ADMIN_PASSWORD.
- deploy-plan.py: marreta joins the gluetun netns family.
- New seam tests/marreta_quadlet.bats (17 contracts); scoping test updated
  for the widened netns family. Doc: Dankclaw/Marreta.md + index + log.

2026-09-12 10:09:12 -07:00

..

e2e

test(e2e): pin unauthenticated wget-style denial for copyparty and homepage

2026-09-04 19:34:59 -07:00

anubis.bats

anubis: fix image ref typo in deploy pull, health probe exec form, unit alias tag

2026-08-28 11:18:41 -07:00

authentik.bats

caddy+authentik tests: uniform Host-preserving :8016 proxy through embedded outpost

2026-08-29 23:49:39 -07:00

caddy_quadlet.bats

docs: rename docs/ -> serverAppConfigs-docs/ per system-wide PROJECTNAME-docs convention

2026-08-28 02:20:06 -07:00

caddyfile.bats

fix(observability): give loki an exec-form healthcheck in its image

2026-09-11 16:01:21 -07:00

changed_tests.bats

feat: swap both LLM services + remove config-assertion tests

2026-08-26 20:37:46 -07:00

comfyui_rocm.bats

AGENTS.md: External Exposure Policy (MANDATORY); comfyui_rocm seam retargeted

2026-08-30 23:26:18 -07:00

compose_validity.bats

feat: initialize serverAppConfigs with podman stacks for Dankserver and Dankclaw

2026-08-13 20:19:41 -07:00

dankserver_quadlet.bats

quadlet: drop the userns identity model — rootless cannot map uid 997

2026-09-01 22:46:00 -07:00

deployment_flow.bats

feat(llm): rename inference services dropping 'default' from names

2026-09-03 16:15:43 -07:00

deployment_scoping.bats

marreta: content-cleaning proxy on Dankclaw, gluetun netns, guard-chained

2026-09-12 10:09:12 -07:00

docs_completeness.bats

docs: rename docs/ -> serverAppConfigs-docs/ per system-wide PROJECTNAME-docs convention

2026-08-28 02:20:06 -07:00

e2e_scaffold.bats

e2e: Playwright suite for homepage + guard chain; RBAC gate on /admin; fix stale service links

2026-09-01 16:42:33 -07:00

env_consistency.bats

feat: initialize serverAppConfigs with podman stacks for Dankserver and Dankclaw

2026-08-13 20:19:41 -07:00

frank_large_quadlet.bats

feat(llm): swap frank-large to halogen-flash-server, retire frank-npu

2026-09-11 14:48:28 -07:00

frankbook_quadlet.bats

arr fleet: FrankBook-Pro is the sole deployment, all egress VPN-gated

2026-09-04 12:54:28 -07:00

helpers.bash

tests: LLM unit integrity, sudo-password leak guard, deploy LLM coverage

2026-08-22 15:49:44 -07:00

hermes_webui.bats

hermes-webui: bind 0.0.0.0 inside the container (host publish stays loopback)

2026-08-26 08:25:40 -07:00

homepage_caddy.bats

caddy: www holds the homepage; naked domain redirects at the TLS edge

2026-08-29 15:11:18 -07:00

homepage_checker.bats

Homepage (TDD slice 7): fix the /admin/ path + status.json perms

2026-08-23 16:49:33 -07:00

homepage_config.bats

Homepage (TDD slice 3): the real services.json + schema tests

2026-08-23 12:11:21 -07:00

homepage_deploy.bats

Deploy services independently by changed paths

2026-08-25 20:13:33 -07:00

homepage_pages.bats

Homepage (TDD slice 7): fix the /admin/ path + status.json perms

2026-08-23 16:49:33 -07:00

llm_secrets.bats

tests: LLM unit integrity, sudo-password leak guard, deploy LLM coverage

2026-08-22 15:49:44 -07:00

llm_units.bats

feat(llm): rename inference services dropping 'default' from names

2026-09-03 16:15:43 -07:00

marreta_quadlet.bats

marreta: content-cleaning proxy on Dankclaw, gluetun netns, guard-chained

2026-09-12 10:09:12 -07:00

mount_entropy.bats

Add CLI helper for entropy volume

2026-08-25 15:38:57 -07:00

observability_quadlet.bats

fix(build): build the loki/alloy/comfyui images in docker format

2026-09-11 16:02:47 -07:00

open_webui_quadlet.bats

feat(llm): rename inference services dropping 'default' from names

2026-09-03 16:15:43 -07:00

pihole.bats

pihole: also neutralize the /etc/sysctl.conf sysctl override

2026-08-26 20:08:30 -07:00

run.sh

feat: initialize serverAppConfigs with podman stacks for Dankserver and Dankclaw

2026-08-13 20:19:41 -07:00

scripts_syntax.bats

feat: initialize serverAppConfigs with podman stacks for Dankserver and Dankclaw

2026-08-13 20:19:41 -07:00

searxng_limiter.bats

Deploy services independently by changed paths

2026-08-25 20:13:33 -07:00

searxng_quadlet.bats

SearXNG quadlet: use AddDevice= (the generator rejects Device=)

2026-08-19 00:00:42 -07:00

seerr_quadlet.bats

seerr: quadlet on dankclaw + guard-chain vhost + deployer wiring

2026-09-01 14:40:10 -07:00