- Quote file modes. Unquoted 644/755 were read as decimal, so files landed as 1204. Templates holding secrets are now 0640 root:docker. - Stop publishing Authentik 9000/9443 and Karakeep 3000 (Caddy reaches them over the docker network), bind dir2opds to the Tailscale IP, and drop Caddy's unused 8448. - Atuin login uses no_log and only runs once; the installer only runs when Atuin is missing. - Make chsh, ufw-docker install, the bat symlink and Atuin dotfiles idempotent. - Back up the Paperless data volume (SQLite DB), stopping Paperless during the backup. - Close public sign-up on kosync and ByteStash. - Replace hardcoded IPs and domains with variables. - Remove teardown tasks and templates for 9 retired services. - Fix the dockcheck comment: it auto-updates labelled containers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
27 lines
939 B
Django/Jinja
27 lines
939 B
Django/Jinja
services:
|
|
dockge:
|
|
image: louislam/dockge:1
|
|
restart: unless-stopped
|
|
labels:
|
|
glance.name: Dockge
|
|
glance.icon: si:docker
|
|
glance.url: http://{{ network.tailscale_hostname }}:5001
|
|
glance.description: Docker management
|
|
ports:
|
|
# Host Port : Container Port
|
|
- 5001:5001
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- ./data:/app/data
|
|
|
|
# If you want to use private registries, you need to share the auth file with Dockge:
|
|
# - /root/.docker/:/root/.docker
|
|
|
|
# Stacks Directory
|
|
# ⚠️ READ IT CAREFULLY. If you did it wrong, your data could end up writing into a WRONG PATH.
|
|
# ⚠️ 1. FULL path only. No relative path (MUST)
|
|
# ⚠️ 2. Left Stacks Path === Right Stacks Path (MUST)
|
|
- /opt/stacks:/opt/stacks
|
|
environment:
|
|
# Tell Dockge where is your stacks directory
|
|
- DOCKGE_STACKS_DIR=/opt/stacks |