Files
esh-pfi-infrastructure/stacks/homepage/conf/docker.yaml
T
vh 65dc586497 feat(esh-ml1): wire telemetry and monitoring; fix Dozzle's stale agent list
- Beszel: NVIDIA agent (stacks/beszel hosts/esh-ml1.yaml), hub system
  registered with Status/Disk/CPU/Memory/Temperature alerts; GPU samples
  verified (RTX 2000E Ada util, VRAM, power, temp).
- Uptime Kuma: health monitors for the TEI embed (:8001) and rerank (:8013)
  services — the sole backends behind the gateway, so the one exception to
  "seats are out of Kuma's lane". Reward seat excluded (no consumer).
- Homepage: dockerd on tcp/2375 bound to 10.0.50.80 (playbook step);
  esh-ml1-docker added to docker.yaml.
- Dozzle: agent v10.4.1 on esh-ml1. The hub's DOZZLE_REMOTE_AGENT still
  named ana-ml2's 10.250.50.54 and irv-ml1's retired 10.100.79.3; repointed
  to 10.251.50.54 / 10.6.110.50 (fv-ml1 and irv-ml1 logs were missing).
- Documented nh3-dev's Beszel agent failing on NH3 cold start (bind of an
  automounted NAS share); revived by hand, fix still open.
2026-09-25 09:20:36 -07:00

48 lines
1.4 KiB
YAML

---
# https://gethomepage.dev/latest/configs/docker/
#
# All four Docker hosts expose the engine on port 2375. This is plaintext
# and works fine on a trusted LAN; if any host is ever exposed or shared,
# switch to a TLS socket (examples commented below).
esh-vm-docker:
host: 10.0.50.45
port: 2375
ana-pfi-docker:
host: 10.250.50.70
port: 2375
nh3-pfi-docker:
host: 10.100.50.40
port: 2375
# fv-ml1-docker — direct. The socat relay on ana-docker (stacks/fv-ml1-proxy) was
# retired 2026-09-12: once FV joined the mesh and the three site gateways got
# 10.251.0.0/16 statics, ESH reaches fv-ml1:2375 directly (verified).
fv-ml1-docker:
host: 10.251.50.54
port: 2375
# irv-ml1 — moved 10.100.79.3 -> 10.6.110.50 on 2026-09-06 (headscale cutover;
# the old wg0 tunnel IP is dormant and no longer answers). Reachable from
# esh-docker-vm via the mesh (10.6.110.50:2375 verified OPEN 2026-09-07).
irv-ml1-docker:
host: 10.6.110.50
port: 2375
# esh-ml1 — CT 110 on esh-pve: the fleet embed/rerank (TEI) + reward seats.
# dockerd listens only on its own address (playbooks/esh-ml1-lxc.yaml), 2026-09-25.
esh-ml1-docker:
host: 10.0.50.80
port: 2375
# Example TLS socket (if/when a host moves off plaintext 2375):
# ana-pfi-docker:
# host: 10.250.50.70
# port: 2376
# tls:
# keyFile: docker-tls/ana-docker/key.pem
# caFile: docker-tls/ana-docker/ca.pem
# certFile: docker-tls/ana-docker/cert.pem