Frank
da68b5ce1a
basicauth (2026-08-22 incident): - the Caddyfile template carried its own $2a$14$ prefix and deploy.sh substituted the full hash (prefix included), rendering an invalid double-prefixed hash. Every basicauth vhost rejected every password with 401 and Caddy logged nothing. - template is now a bare REPLACE_WITH_HASH token; tests pin the render contract (no prefix in template; rendered line is exactly 'dank <hash>'). open-webui (2026-08-22 incident): - its slirp4netns helper process died, leaving the container running with only 'lo' in its netns: port 3005 accepted TCP and reset every request, so chat served empty responses for ~2 days, unlogged. - move to a pinned bridge network (systemd-open-webui, 10.89.3.0/24, gw 10.89.3.1) — no per-container helper to die. - LLM endpoint reached via the gateway (host.containers.internal is slirp-only): OPENAI_API_BASE_URL=http://10.89.3.1:52625. - add a quadlet healthcheck: /health (app) + non-loopback interface (network liveness; the dead-tap state leaves only 'lo'). - deploy script now copies the .network file too. - docs updated (OpenWebUI History section, Caddy basic-auth contract).
Server App Configs
Podman deployment configuration for two homelab servers: Dankserver and Dankclaw.
Targets
| Host | User | IP | Stack |
|---|---|---|---|
| dankclaw | dank | 192.168.0.143 | AI, search, development, observability |
| dankserver | dank | 192.168.0.235 | media and library |
Active Services
| Service | Host | Hostname | Port |
|---|---|---|---|
| RomM | dankserver | romm.dankserver.local | 8085 |
| Copyparty | dankserver | files.dankserver.local | 3923 |
| Calibre-Web | dankserver | books.dankserver.local | 8083 |
| SearXNG | dankclaw | search.dankclaw.local | 8081 |
| ComfyUI | dankclaw | comfyui.dankclaw.local | 8188 |
| OpenWebUI | dankclaw | chat.dankclaw.local | 3000 |
| Hermes | dankclaw | hermes.dankclaw.local | 8090 |
| Gitea | dankclaw | gitea.dankclaw.local | 3001 |
| Grafana | dankclaw | grafana.dankclaw.local | 3002 |
| Prometheus | dankclaw | prometheus.dankclaw.local | 9090 |
Structure
dankserver/— compose.yaml + Caddyfile + .env.example for the Dankserver stackdankclaw/— compose.yaml + Caddyfile + .env.example for the Dankclaw stackshared/— homepage, prometheus config, deploy helpersscripts/— deploy.sh and stack control scriptsdocs/— project knowledge base (Obsidian vault, wikilinks)tests/— bats test suite (see Testing Policy)
Deployment
See [docs/Architecture/Deployment Flow.md](docs/Architecture/Deployment Flow.md). Run ./scripts/deploy.sh <dankclaw|dankserver> after pushing committed changes.
Knowledge Base
The docs/ directory is an Obsidian vault. Start at docs/index.md.
Testing
Run ./tests/run.sh before every push. See [docs/Architecture/Testing Policy.md](docs/Architecture/Testing Policy.md).
Also See
- vllmScripts (local:
../vllmScripts) — the model-serving scripts this stack consumes:frank-default-large(llama.cpp PP head,:7770, backend of OpenWebUI) andfrank-default-small(FastFlowLM NPU,:52625)