Frank b5173033b6 fix(caddy): *arr stack and qBittorrent are LAN-only at the edge ...

A missing Porkbun record was never the gate: Caddy issues one certificate per
name and every one is in public CT logs, so the *arr hostnames were discoverable
and the edge accepted them. Each of the five vhosts now carries a remote_ip
source gate (LAN proxies through, everything else gets 404) - the posture the
Sonarr comment already claimed. AGENTS.md records the LAN-gate shape as the
required form of internal-only, and Caddy.md records why DNS secrecy is fiction.

2026-11-04 13:45:25 -08:00

..

alloy

copy /bin/busybox.static (the -static package does not overwrite /bin/busybox)

2026-08-22 04:13:55 -07:00

anubis

anubis: pin v1.27.0, fleet-wide cookie domain, persistent signing key

2026-09-01 17:09:09 -07:00

authentik/quadlet

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

caddy

docs: rename docs/ -> serverAppConfigs-docs/ per system-wide PROJECTNAME-docs convention

2026-08-28 02:20:06 -07:00

comfyui

frank-small: Swift-1.5 IQ3_S-mtp swap (parallel session) + fleet docs index

2026-10-05 23:26:59 -07:00

gitea

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

hermes

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

host

feat(frank-dragoon): run the XDNA2 NPU lane beside the flash model

2026-10-19 21:22:50 -07:00

loki

fix(build): build the loki/alloy/comfyui images in docker format

2026-09-11 16:02:47 -07:00

marreta/quadlet

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

observability/quadlet

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

open-notebook/quadlet

feat(open-notebook): put the podcast generator behind the guard chain

2026-10-19 16:13:53 -07:00

open-webui/quadlet

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

pihole

chore(abs): name the Audiobookshelf door audiobooks.franksdank.cloud

2026-11-03 01:23:54 -08:00

searxng/quadlet

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

seerr/quadlet

chore(images): refresh every registry pin to current upstream digest

2026-10-30 15:00:52 -07:00

udev

feat(frank-dragoon): open the NPU node the way rootless can actually reach it

2026-10-19 22:35:06 -07:00

voiceservice

docs(frank-tts): record the iGPU cutover, close the NPU question

2026-10-19 14:37:29 -07:00

.env.example

feat(open-notebook): env contract — CPU guard, credential store, auth posture

2026-10-18 16:26:43 -07:00

apply_qwen21_patch.py

comfyui: fix in_channels to use shape[0] (latent input dim)

2026-09-21 20:31:39 -07:00

Caddyfile

fix(caddy): *arr stack and qBittorrent are LAN-only at the edge

2026-11-04 13:45:25 -08:00

comfyui-start.sh

comfyui: bake qwen_image21 patch into image via startup wrapper

2026-09-21 19:55:00 -07:00

Containerfile.comfyui

comfyui: fix in_channels to use shape[0] (latent input dim)

2026-09-21 20:31:39 -07:00