Files
esh-pfi-infrastructure/stacks/homepage/conf/docker.yaml
T
vh 913d2d2a6c feat(homepage): wire ana-ml2 back into discovery via socat proxy on ana-docker
ana-ml2 is up but not reachable cross-site from ESH (return-route gap on ana-ml2,
no SSH access to fix it). New stacks/ana-ml2-proxy: a pinned alpine/socat relay on
ana-docker (host net) exposing 10.250.50.70:2354 -> ana-ml2 10.250.50.54:2375.
Homepage docker.yaml ana-ml2-docker re-enabled pointed at the proxy. Verified:
esh-docker-vm reaches ana-ml2's docker (29.3.1) through it; /api/services returns
in 0s with 111 services; ana-ml2's inference seats (gen, coder, embed, rerank,
reward, image-bench, dockge) render. Reversible: point back at 10.250.50.54:2375
and compose-down the proxy once ana-ml2 routes to ESH.
2026-09-07 16:34:13 -07:00

45 lines
1.4 KiB
YAML

---
# https://gethomepage.dev/latest/configs/docker/
#
# All four Docker hosts expose the engine on port 2375. This is plaintext
# and works fine on a trusted LAN; if any host is ever exposed or shared,
# switch to a TLS socket (examples commented below).
esh-vm-docker:
host: 10.0.50.45
port: 2375
ana-pfi-docker:
host: 10.250.50.70
port: 2375
nh3-pfi-docker:
host: 10.100.50.40
port: 2375
# ana-ml2-docker — reached via a socat proxy on ana-docker (stacks/ana-ml2-proxy).
# ana-ml2's own :2375 is up but not reachable cross-site from ESH (a return-route
# gap on ana-ml2 itself; no SSH access from the ops seats to fix its routing).
# ana-docker is on the same Anaheim subnet and IS reachable from ESH, so it
# relays 10.250.50.70:2354 -> 10.250.50.54:2375. Point back at 10.250.50.54:2375
# and `docker compose down` the proxy once ana-ml2 has a return route to ESH.
ana-ml2-docker:
host: 10.250.50.70
port: 2354
# irv-ml1 — moved 10.100.79.3 -> 10.6.110.50 on 2026-09-06 (headscale cutover;
# the old wg0 tunnel IP is dormant and no longer answers). Reachable from
# esh-docker-vm via the mesh (10.6.110.50:2375 verified OPEN 2026-09-07).
irv-ml1-docker:
host: 10.6.110.50
port: 2375
# Example TLS socket (if/when a host moves off plaintext 2375):
# ana-pfi-docker:
# host: 10.250.50.70
# port: 2376
# tls:
# keyFile: docker-tls/ana-docker/key.pem
# caFile: docker-tls/ana-docker/ca.pem
# certFile: docker-tls/ana-docker/cert.pem