wiki-vault/Wiki/Reference/docker.md
Travis Herbranson 7eb8d756d1 compile: first compile — 17 entities, 2 synthesis, all indexes rebuilt
Read all 62 source files (Dev: 37, Homelab: 22, Venture: 3, Reference: 0).

Entity pages created (17):
- Wiki/Reference: lovebug, jenny, sunnie, n8n, ob1, tailscale, authentik,
  traefik, cloudflare, obsidian, gitea, plant-based-southerner, claude-code,
  dispatch, docker
- Wiki/Homelab: proxmox
- Wiki/Dev: pbs-hub, herbydev

Synthesis pages created (2):
- Wiki/Homelab/homelab-ingress-stack — four-layer ingress model (Cloudflare +
  Traefik + Authentik + Tailscale); operational lessons from 10+ source files
- Wiki/Dev/ai-memory-architecture — three memory layers (wiki + OB1 + Dispatch
  context); ingest paths; harness-vs-model design decision

All 11 index pages rebuilt (Sources/Dev, Venture, Homelab, Reference, Sources
root; Wiki/Dev, Venture, Homelab, Reference, Wiki root; vault root index.md).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-08 18:15:31 -04:00

2.1 KiB

type path tags created updated
entity Wiki/Reference
docker
homelab
automation
2026-05-08 2026-05-08

Docker

What it is

Docker is the container runtime used across both PBS infrastructure and the homelab. In PBS, the entire application stack runs as Docker Compose services on the Linode server. In the homelab, Docker runs selected services on Proxmox LXCs or VMs. Docker provides environment isolation, reproducible deploys, and the foundation for the Ansible-based tag-driven deployment pipeline.

Current state

Active. Two primary contexts:

PBS Docker stack (Linode):

  • Services: WordPress, WooCommerce, n8n, pbs-hub (Flask), MySQL, Redis, Gitea, Supercronic, Traefik
  • Deployment: Ansible common/deploy.yml with tag-based service targeting via pbsdeploybot
  • CI/CD: GitHub Actions self-hosted runner on ustest1 triggers deploys

Homelab Docker:

  • Services: Authentik, select homelab tools, MCP server, Hunyuan3D, InstantMesh
  • Management: Ansible playbooks via herbydev

Security: .env files hardened to root:root 0600; pbsdeploy user cannot read secrets directly.

Where it lives

  • PBS: Linode VPS (Docker Engine + Docker Compose)
  • Homelab: Proxmox LXCs/VMs running Docker Engine

History

  • Ongoing — Core container runtime for all services
  • 2026 — Ansible tag-based deploy pipeline standardized
  • 2026.env hardening: root:root 0600, pbsdeploy access restricted
  • 2026 — Supercronic added as WP-Cron replacement Docker sidecar