Commit Graph
12 Commits
Author SHA1 Message Date
PhilandClaude Opus 5.5 8071c29fe0 Restart apprise, audiobookshelf and dawarich after reboots
apprise and audiobookshelf had no restart policy, and the dawarich app
and sidekiq used on-failure. Docker stops containers cleanly on a
reboot or daemon upgrade, so none of them came back on their own.
Use unless-stopped like the other services.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-29 22:30:43 -06:00
PhilandClaude Opus 5.5 c0145dd5a2 Harden permissions, close exposed ports, and clean up tasks
- Quote file modes. Unquoted 644/755 were read as decimal, so files
  landed as 1204. Templates holding secrets are now 0640 root:docker.
- Stop publishing Authentik 9000/9443 and Karakeep 3000 (Caddy reaches
  them over the docker network), bind dir2opds to the Tailscale IP, and
  drop Caddy's unused 8448.
- Atuin login uses no_log and only runs once; the installer only runs
  when Atuin is missing.
- Make chsh, ufw-docker install, the bat symlink and Atuin dotfiles
  idempotent.
- Back up the Paperless data volume (SQLite DB), stopping Paperless
  during the backup.
- Close public sign-up on kosync and ByteStash.
- Replace hardcoded IPs and domains with variables.
- Remove teardown tasks and templates for 9 retired services.
- Fix the dockcheck comment: it auto-updates labelled containers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-29 21:03:54 -06:00
philandClaude 336e197176 feat: add dockcheck update labels and fix Gotify service names
- Add mag37.dockcheck.update labels to audiobookshelf, caddy, gitea services
- Fix Gotify container names in Caddyfile routing
- Add explicit container names for gotify and igotify-assistant services
- Update Authentik to version 2025.6.3
- Fix environment variable format in gotify-compose template

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-23 11:26:17 -06:00
philandClaude 12582b352c feat: implement comprehensive variable management system
- Create standardized group_vars directory structure
- Add domains.yml with centralized subdomain mappings
- Add infrastructure.yml with network, SMTP, and path config
- Reorganize vault.yml secrets by service with consistent naming
- Update 15+ Docker compose templates to use new variable structure
- Simplify playbook commands by removing --extra-vars requirement
- Replace hardcoded domains/IPs with template variables
- Standardize secret references across all services

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-06-06 15:14:47 -06:00
phil 3908ffa9e6 set variable to allow non-https connections 2025-02-28 12:28:45 -07:00
phil d43f70b68f Glance updates 2025-02-09 21:21:07 -07:00
phil b0d0f41116 switch audiobookshelf to use latest tag 2025-01-04 09:10:43 -07:00
phil cd15f6a9c4 bump audiobookshelf version 2024-12-09 18:47:46 -07:00
phil 9544300044 audiobookshelf version bump 2024-12-03 18:07:50 -07:00
phil fb1ae448aa Bump audiobookshelf version 2024-11-25 10:35:58 -07:00
phil 6e32b4fb5a bumped audiobookshelf version 2024-11-06 15:18:23 -07:00
phil 1fe3f7bdd5 added audiobookshelf to stack 2024-10-28 15:17:52 -06:00