PhilandClaude Opus 5.5
c0145dd5a2
- Quote file modes. Unquoted 644/755 were read as decimal, so files landed as 1204. Templates holding secrets are now 0640 root:docker. - Stop publishing Authentik 9000/9443 and Karakeep 3000 (Caddy reaches them over the docker network), bind dir2opds to the Tailscale IP, and drop Caddy's unused 8448. - Atuin login uses no_log and only runs once; the installer only runs when Atuin is missing. - Make chsh, ufw-docker install, the bat symlink and Atuin dotfiles idempotent. - Back up the Paperless data volume (SQLite DB), stopping Paperless during the backup. - Close public sign-up on kosync and ByteStash. - Replace hardcoded IPs and domains with variables. - Remove teardown tasks and templates for 9 retired services. - Fix the dockcheck comment: it auto-updates labelled containers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
27 lines
560 B
YAML
27 lines
560 B
YAML
# Infrastructure Configuration
|
|
|
|
# Docker configuration
|
|
docker:
|
|
network_name: "lava"
|
|
stacks_path: "/opt/stacks"
|
|
hairpin_ip: "172.20.0.5"
|
|
|
|
# SMTP configuration
|
|
smtp:
|
|
host: "smtp.resend.com"
|
|
username: "resend"
|
|
from_domain: "{{ email_domains.updates }}"
|
|
|
|
# Network configuration
|
|
network:
|
|
netcup_ip: "152.53.36.98"
|
|
docker_host_ip: "100.70.169.99"
|
|
tailscale_hostname: "netcup.porgy-porgy.ts.net"
|
|
|
|
# Paths
|
|
paths:
|
|
stacks: "{{ docker.stacks_path }}"
|
|
|
|
# Notification services
|
|
notifications:
|
|
appriseapi_endpoint: "http://apprise:8000/notify/apprise" |