---
type: entity
path: Wiki/Reference
tags:
  - docker
  - homelab
  - automation
created: 2026-05-08
updated: 2026-05-08
---

# Docker

## What it is

Docker is the container runtime used across both PBS infrastructure and the homelab. In PBS, the entire application stack runs as Docker Compose services on the Linode server. In the homelab, Docker runs selected services on Proxmox LXCs or VMs. Docker provides environment isolation, reproducible deploys, and the foundation for the Ansible-based tag-driven deployment pipeline.

## Current state

Active. Two primary contexts:

**PBS Docker stack (Linode):**
- Services: WordPress, WooCommerce, n8n, pbs-hub (Flask), MySQL, Redis, Gitea, Supercronic, Traefik
- Deployment: Ansible `common/deploy.yml` with tag-based service targeting via `pbsdeploybot`
- CI/CD: GitHub Actions self-hosted runner on ustest1 triggers deploys

**Homelab Docker:**
- Services: Authentik, select homelab tools, MCP server, Hunyuan3D, InstantMesh
- Management: Ansible playbooks via herbydev

Security: `.env` files hardened to `root:root 0600`; `pbsdeploy` user cannot read secrets directly.

## Where it lives

- PBS: Linode VPS (Docker Engine + Docker Compose)
- Homelab: Proxmox LXCs/VMs running Docker Engine

## Related projects

- [[Sources/Dev/ansible-container-deploy|ansible-container-deploy]] — tag-based Ansible deploy pipeline
- [[Sources/Homelab/env-file-hardening|env-file-hardening]] — .env security hardening
- [[Sources/Dev/pbsii-cicd-pipeline|pbsii-cicd-pipeline]] — GitHub Actions CI/CD
- [[Sources/Dev/github-deploy-refactor|github-deploy-refactor]] — deploy user refactor
- [[Sources/Homelab/hunyuan3d-sunnie-pipeline|hunyuan3d-sunnie-pipeline]] — Docker for 3D pipeline
- [[Wiki/Reference/traefik|traefik]] — Docker service ingress
- [[Wiki/Reference/n8n|n8n]] — Docker service

## History

- Ongoing — Core container runtime for all services
- **2026** — Ansible tag-based deploy pipeline standardized
- **2026** — `.env` hardening: `root:root 0600`, pbsdeploy access restricted
- **2026** — Supercronic added as WP-Cron replacement Docker sidecar