6.3 KiB
6.3 KiB
created, id, keywords, links, modified, summary, tags, title
| created | id | keywords | links | modified | summary | tags | title | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026-04-16T00:45:32+00:00 | 7a9a2585-0be1-4409-a8d0-b5c87671ed60 |
|
2026-04-16T00:45:32+00:00 | Complete Docker service inventory for ana-docker (10.250.50.70): 20 containers across 15 stacks, host details, config paths, and per-service issues. |
|
Ana Colo — Docker Service Inventory |
Ana Colo — Docker Service Inventory
Last surveyed: 2026-04-15 Host: ana-docker · 10.250.50.70
Host Details
| Property | Value |
|---|---|
| OS | Debian 12 (bookworm) |
| Kernel | 6.1.0-44-amd64 |
| Resources | 8 vCPU (QEMU), 16GB RAM, 245GB disk (153GB free) |
| User | llmuser (UID 1001, GID 1001), sudo no password |
| Docker | 20.10.24 |
| Compose | v5.1.1 |
| Buildx | v0.31.1 |
| Python | 3.11.2 |
| Node | v20.12.2 (nvm) |
| Firewall | ❌ None (no UFW, firewalld, SELinux, AppArmor) |
NFS Mounts
| Mount | Source |
|---|---|
| /mnt/compose | 10.250.50.50 |
| /mnt/backup | 10.250.50.50 |
| /mnt/tnvms | 10.250.50.50 |
File Layout
| Path | Purpose |
|---|---|
| /opt/docker/compose/<stack>/compose.yaml | Compose files |
| /opt/docker/conf/<service>/ | Config files |
Service Inventory (20 containers)
Traefik (reverse proxy)
| Property | Value |
|---|---|
| Image | traefik:latest |
| Ports | 80, 443, 8380 (dashboard) |
| Network | traefik-net |
| Health check | ❌ none |
| Config | /opt/docker/conf/traefik-ana/config/traefik.yml, /opt/docker/compose/traefik/.env |
Issues:
- Debug logging enabled (
--log.level=DEBUG) - Dashboard unprotected on :8380
- Stale commented-out configs in traefik.yml
Matrix (Synapse + Element + Postgres)
| Property | Value |
|---|---|
| Images | matrixdotorg/synapse:v1.120.0, vectorim/element-web:v1.11.80, postgres:16-alpine |
| Ports | Internal only (Traefik-routed) |
| Networks | traefik-net + matrix-net |
| Health check | ✅ Postgres only |
| DB | Local Postgres volume |
| Config | /opt/docker/conf/synapse/homeserver.yaml, aipa_appservice.yaml |
Notes:
- AIPA appservice configured for MCP bridge integration
- Virtual hosts:
matrix.phasefinal.com(Synapse),chat.phasefinal.com(Element)
Issues:
- DB password hardcoded in compose.yaml
- Multiple secrets in homeserver.yaml (DB password, registration secret, macaroon key, form secret, appservice tokens)
Gitea
| Property | Value |
|---|---|
| Image | gitea/gitea:latest |
| Ports | 3000 (Traefik-routed), 222 (SSH) |
| Network | traefik-net |
| Health check | ❌ none |
| DB | Remote PostgreSQL on 10.250.50.80 |
Issues:
- DB password hardcoded in compose.yaml
Seafile (Seafile + MariaDB + Memcached)
| Property | Value |
|---|---|
| Images | seafileltd/seafile-mc:11.0-latest, mariadb:10.6, memcached:1.6.18 |
| Ports | 9180 (Traefik-routed), internal DB |
| Networks | traefik-net + seafile-net |
| Health check | ❌ none |
| DB | Local MariaDB volume |
Issues:
- MySQL root password hardcoded AND duplicated in .env
- Admin credentials in .env
SillyTavern
| Property | Value |
|---|---|
| Image | ghcr.io/sillytavern/sillytavern:latest |
| Ports | 8100 (direct, not Traefik-routed) |
| Network | default only |
| Health check | ❌ none |
| Config | /opt/docker/conf/sillytavern/config.yaml |
Open WebUI
| Property | Value |
|---|---|
| Image | ghcr.io/open-webui/open-webui:main |
| Ports | 3100 (direct, not Traefik-routed) |
| Network | default only |
| Health check | ✅ curl localhost:8080 |
| DB | External Ollama on 10.250.50.51:11434 |
| Config | /opt/docker/compose/openwebui/.env |
Vaultwarden
| Property | Value |
|---|---|
| Image | vaultwarden/server:latest |
| Ports | 9080 (Traefik-routed) |
| Network | traefik-net |
| Health check | ✅ curl localhost:80 |
| DB | Remote PostgreSQL on 10.250.50.80 |
Dockge (compose manager)
| Property | Value |
|---|---|
| Images | louislam/dockge:latest, custom backup image 9392b1d81976 (no repo tag) |
| Ports | 5001 (direct) |
| Network | default only |
| Health check | ✅ curl localhost:5001 |
Issues:
- Backup uses untagged custom image — needs documentation or tagging
Portainer (legacy — consider removal)
| Property | Value |
|---|---|
| Images | portainer/portainer-ce:latest (3 years old), portainer/agent:2.19.4 |
| Ports | 9000, 9001 (direct) |
| Network | default only |
| Health check | ❌ none |
Issues:
- Very old images (Portainer CE ~3 years, agent ~2 years)
- Consider migrating to Dockge-only or removing entirely
RustDesk (hbbs + hbbr)
| Property | Value |
|---|---|
| Image | rustdesk/rustdesk-server:latest (13 months old) |
| Ports | Host network mode (hbbs + hbbr + NAT relay) |
| Network | Host network |
| Health check | ❌ none |
Issues:
- Host network breaks Docker isolation model
- Image is 13 months old
Restic Server
| Property | Value |
|---|---|
| Image | restic/rest-server |
| Ports | 8000 (direct) |
| Network | default only |
| Health check | ❌ none |
| Storage | NFS-backed volume |
IT Tools
| Property | Value |
|---|---|
| Image | corentinth/it-tools:latest (13 months old) |
| Ports | 8780 (direct) |
| Network | default only |
| Health check | ❌ none |
Issues:
- Homepage labels present but no Homepage container running
- Image 13 months old
Mailrise
| Property | Value |
|---|---|
| Image | yoryan/mailrise:latest |
| Ports | 8025 (direct) |
| Network | default only |
| Health check | ❌ none |
| Config | /opt/docker/conf/mailrise/mailrise.conf |
Issues:
- SendGrid API key and webhook tokens in plaintext config
Mattermost (not currently running)
| Property | Value |
|---|---|
| Image | mattermost/mattermost-enterprise-edition:latest |
| Ports | 8065 (Traefik-routed), UDP 8443 from WAN |
| Networks | traefik-net + mattermost-net |
| DB | Remote PostgreSQL on 10.250.50.80 |
| Config | /opt/docker/data/mattermost/.../config.json |
Issues:
- SendGrid API key, SMTP password, encryption keys, salts all in config.json
- Not currently running (container stopped)