vh
e376d0aec9
Captures the full workspace state built up to this point:
- CLAUDE.md + README.md describing conventions and the four-host fleet
(ana-ml2, ana-docker, nh3-docker, esh-docker-vm).
- Per-host notes under servers/<host>/ with ssh-target fallback files
and latest system-details snapshots (two in-compose credential leaks
scrubbed; the upstream compose files still need to move those to .env).
- scripts/: server_inspect.sh (read-only remote diagnostic),
refresh-server-info.sh (dir-driven discovery + snapshot capture with
validation warnings), add-host.sh, sync-stacks.sh (pull
compose/conf trees), deploy-stack.sh (push with per-file diff + prompt).
- stacks/: canonical compose for backrest, beszel, dozzle, llama-swap,
rest-server-ana, rest-server-nh3, vllm-qwen3, plus the retired
infinity reference. All use the .env-driven + traefik-net + homepage
label pattern.
- configs/restic/ana-docker/: first resticprofile config + pre-backup
hook (Synapse pg_dump, Seafile mysqldump, Vaultwarden SQLite); templates
for the other three hosts to come.
- docs/pfi/: general infrastructure reference carried over.
- .gitignore excludes .env, stacks-mirror/, and assorted secret/state
filenames to prevent re-leaks on later commits.
42 lines
1.4 KiB
Bash
42 lines
1.4 KiB
Bash
# rest-server-ana stack tunables. Copy to `.env` on ana-docker.
|
|
#
|
|
# cp .env.example .env
|
|
# # edit if needed
|
|
# docker compose up -d
|
|
#
|
|
# Matches stacks/rest-server-nh3/.env.example — keep them aligned so
|
|
# restic clients see the same URL shape against either endpoint.
|
|
|
|
REST_SERVER_VERSION=latest
|
|
|
|
# Host port the container listens on (container internal is 8000)
|
|
REST_PORT=8000
|
|
|
|
# Where restic pack files live. TrueNAS NFS share is already mounted at
|
|
# /mnt/backup on ana-docker; the "repo/ana" subdir is the historical
|
|
# location used by the prior (non-private-repos) rest-server.
|
|
#
|
|
# With --private-repos, layout becomes:
|
|
# ${DATA_DIR}/ana-docker/
|
|
# ${DATA_DIR}/ana-ml2/
|
|
# ${DATA_DIR}/nh3-docker/
|
|
# ${DATA_DIR}/esh-docker-vm/
|
|
# Plus the auth file at ${DATA_DIR}/.htpasswd.
|
|
DATA_DIR=/mnt/backup/restic/repo/ana
|
|
|
|
# UID/GID the container process runs as. Must match the owner of
|
|
# DATA_DIR so NFS root_squash doesn't bite. On ana-docker this is the
|
|
# `lkraven` user (1000:1000).
|
|
REST_UID=1000
|
|
REST_GID=1000
|
|
|
|
# Timezone — affects log lines and /metrics timestamps
|
|
TZ=America/Los_Angeles
|
|
|
|
# Extra rest-server flags. Examples:
|
|
# --prometheus-no-auth — make /metrics public (needed if Beszel or
|
|
# Prometheus scrapes without creds)
|
|
# --no-verify-upload — trust the client's hash; faster writes
|
|
# Leave blank unless you have a reason.
|
|
EXTRA_OPTIONS=
|