Files

T

PhilandClaude Opus 5.5 0c14ee5b1d Bring the docs up to date with the running stack

The READMEs, CLAUDE.md and todo.md still described Authentik, services
removed long ago (Ghost, MMDL, Postiz, Pinchflat...) and two servers. Now
they list the 24 services actually deployed (checked against docker ps),
explain that netcup and docker-01 are one machine, document Gondulf,
StarPunk, Listmonk, Gokapi and dockcheck, and use bin/deploy throughout.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-31 11:30:50 -06:00

files

Remove the unused Glance dashboard

2026-10-31 08:34:14 -06:00

handlers

fix: improve dockcheck cron job logging and reliability

2025-06-20 10:30:51 -06:00

tasks

Harden permissions, close exposed ports, and clean up tasks

2026-10-29 21:03:54 -06:00

templates

Retire Authentik now that every app logs in with Pocket ID

2026-10-31 10:07:39 -06:00

README.md

Bring the docs up to date with the running stack

2026-10-31 11:30:50 -06:00

README.md

Cron Role

Cron jobs on the server (tag cron). "Cron jobs" in this repo always means jobs on the server, never on the machine running Ansible.

Jobs

Time	User	Job
08:00 daily	phil	`~/.local/bin/run_dockcheck.sh`: container updates
09:10 daily	root	`/usr/local/bin/update_warhammer_feed.sh`: Warhammer RSS feed

Dockcheck (container updates)

Downloads dockcheck and its Gotify notify templates into /home/phil/.local/bin/.
Templates /home/phil/.config/dockcheck.config from dockcheck.config.j2 (Gotify token from vault_dockcheck).
Settings: OnlyLabel=true and AutoMode=true, so containers labelled mag37.dockcheck.update=true are pulled and recreated automatically; any other container with an update gets a Gotify notice. dawarich_db and dawarich_redis are skipped.
run_dockcheck.sh logs to /var/log/dockcheck/dockcheck.log.

To see what needs updating by hand, run dockcheck on the server:

ssh phil@100.70.169.99 '~/.local/bin/dockcheck.sh -n'

Warhammer RSS feed

update_warhammer_feed.sh runs the git.thesatelliteoflove.com/phil/rss-warhammer container to build warhammer_rss_feed.xml and copies it to /opt/stacks/caddy/site/tsol/feeds/, where Caddy serves it on the main site.

Adding a job

Add a cron task to tasks/main.yml (copy the script with copy first if it needs one), then bin/deploy --tags cron.