diff --git a/servers/corviduo-dev/README.md b/servers/corviduo-dev/README.md index 1bcd92a..2ccaeef 100644 --- a/servers/corviduo-dev/README.md +++ b/servers/corviduo-dev/README.md @@ -68,6 +68,7 @@ future infra-ops sessions find them. |---|---|---| | `/home/vh/docker/compose/beszel/` | `beszel-agent` (host port 45876, `network_mode: host`) | Agent for the Beszel hub at ana-docker:8090. Hub SSH-polls inbound using the seeded ed25519 pubkey. | | `/home/vh/docker/compose/dozzle-agent/` | `dozzle-agent` (host port 7007) | Agent for the Dozzle hub at ana-docker:8088. Hub connects inbound over mTLS (auto-generated certs on first run). | +| `/home/vh/docker/compose/dockge/` | `dockge` (host port 5001) | Per-host compose UI. Scoped to PFI-managed stacks under `/home/vh/docker/compose/` — does NOT see `/opt/worldtree*/` (worldtree-team boundary). `DOCKGE_HOST_STACKS_ROOT=/home/vh/docker` overrides the fleet-default `/opt/docker`. | The empty `traefik-net` external docker network was created on this host as a side effect of dozzle-agent's compose (which declares it external). Future diff --git a/stacks/dockge/.env.example b/stacks/dockge/.env.example index b3d8c8f..5181261 100644 --- a/stacks/dockge/.env.example +++ b/stacks/dockge/.env.example @@ -20,4 +20,13 @@ DOCKGE_HOST_LABEL= # nh3-docker → 10.100.50.40 # esh-docker-vm → 10.0.50.45 # vm-esh-nas → 10.0.50.154 +# corviduo-dev → 10.250.50.152 DOCKGE_HOST_IP= + +# Host directory containing the per-stack compose dirs. Default +# /opt/docker matches the fleet convention. Override only for hosts +# where /opt/docker isn't writable / appropriate. +# corviduo-dev → /home/vh/docker +# Trailing slash NOT required. Dockge sees the .../compose/ subdir +# as its stacks root (DOCKGE_STACKS_DIR derives from this). +DOCKGE_HOST_STACKS_ROOT=/opt/docker diff --git a/stacks/dockge/README.md b/stacks/dockge/README.md index 700ad13..e7c528e 100644 --- a/stacks/dockge/README.md +++ b/stacks/dockge/README.md @@ -1,9 +1,15 @@ # dockge Per-host [Dockge](https://dockge.kuma.pet/) — a lightweight web UI for -the compose files in `/opt/docker/compose/`. Runs one instance on every +managing the host's docker compose stacks. Runs one instance on every Docker host in the fleet. +Default stacks root is `/opt/docker/compose/` (fleet convention). +Hosts where `/opt/docker/` isn't writable by the deploying user +override `DOCKGE_HOST_STACKS_ROOT` in their `.env` — corviduo-dev +sets it to `/home/vh/docker` (vh lacks passwordless sudo on the +worldtree-team-managed host; see `servers/corviduo-dev/README.md`). + ## Layout - `compose.yaml` — canonical, same file pushed to every host diff --git a/stacks/dockge/compose.yaml b/stacks/dockge/compose.yaml index 7be2152..6a56c38 100644 --- a/stacks/dockge/compose.yaml +++ b/stacks/dockge/compose.yaml @@ -16,9 +16,14 @@ services: volumes: - /var/run/docker.sock:/var/run/docker.sock - dockge_data:/app/data - - /opt/docker:/opt/docker + # Bind-mount the host's stacks root at the same path inside the + # container. Default /opt/docker matches the fleet convention; + # corviduo-dev overrides to /home/vh/docker because PFI's standard + # /opt/docker path is sudo-gated by deploy:deploy there and vh + # lacks passwordless sudo. See servers/corviduo-dev/README.md. + - ${DOCKGE_HOST_STACKS_ROOT:-/opt/docker}:${DOCKGE_HOST_STACKS_ROOT:-/opt/docker} environment: - - DOCKGE_STACKS_DIR=/opt/docker/compose + - DOCKGE_STACKS_DIR=${DOCKGE_HOST_STACKS_ROOT:-/opt/docker}/compose networks: - tnet labels: