7eb8d756d1
Read all 62 source files (Dev: 37, Homelab: 22, Venture: 3, Reference: 0). Entity pages created (17): - Wiki/Reference: lovebug, jenny, sunnie, n8n, ob1, tailscale, authentik, traefik, cloudflare, obsidian, gitea, plant-based-southerner, claude-code, dispatch, docker - Wiki/Homelab: proxmox - Wiki/Dev: pbs-hub, herbydev Synthesis pages created (2): - Wiki/Homelab/homelab-ingress-stack — four-layer ingress model (Cloudflare + Traefik + Authentik + Tailscale); operational lessons from 10+ source files - Wiki/Dev/ai-memory-architecture — three memory layers (wiki + OB1 + Dispatch context); ingest paths; harness-vs-model design decision All 11 index pages rebuilt (Sources/Dev, Venture, Homelab, Reference, Sources root; Wiki/Dev, Venture, Homelab, Reference, Wiki root; vault root index.md). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
54 lines
2.1 KiB
Markdown
54 lines
2.1 KiB
Markdown
---
|
|
type: entity
|
|
path: Wiki/Reference
|
|
tags:
|
|
- docker
|
|
- homelab
|
|
- automation
|
|
created: 2026-05-08
|
|
updated: 2026-05-08
|
|
---
|
|
|
|
# Docker
|
|
|
|
## What it is
|
|
|
|
Docker is the container runtime used across both PBS infrastructure and the homelab. In PBS, the entire application stack runs as Docker Compose services on the Linode server. In the homelab, Docker runs selected services on Proxmox LXCs or VMs. Docker provides environment isolation, reproducible deploys, and the foundation for the Ansible-based tag-driven deployment pipeline.
|
|
|
|
## Current state
|
|
|
|
Active. Two primary contexts:
|
|
|
|
**PBS Docker stack (Linode):**
|
|
- Services: WordPress, WooCommerce, n8n, pbs-hub (Flask), MySQL, Redis, Gitea, Supercronic, Traefik
|
|
- Deployment: Ansible `common/deploy.yml` with tag-based service targeting via `pbsdeploybot`
|
|
- CI/CD: GitHub Actions self-hosted runner on ustest1 triggers deploys
|
|
|
|
**Homelab Docker:**
|
|
- Services: Authentik, select homelab tools, MCP server, Hunyuan3D, InstantMesh
|
|
- Management: Ansible playbooks via herbydev
|
|
|
|
Security: `.env` files hardened to `root:root 0600`; `pbsdeploy` user cannot read secrets directly.
|
|
|
|
## Where it lives
|
|
|
|
- PBS: Linode VPS (Docker Engine + Docker Compose)
|
|
- Homelab: Proxmox LXCs/VMs running Docker Engine
|
|
|
|
## Related projects
|
|
|
|
- [[Sources/Dev/ansible-container-deploy|ansible-container-deploy]] — tag-based Ansible deploy pipeline
|
|
- [[Sources/Homelab/env-file-hardening|env-file-hardening]] — .env security hardening
|
|
- [[Sources/Dev/pbsii-cicd-pipeline|pbsii-cicd-pipeline]] — GitHub Actions CI/CD
|
|
- [[Sources/Dev/github-deploy-refactor|github-deploy-refactor]] — deploy user refactor
|
|
- [[Sources/Homelab/hunyuan3d-sunnie-pipeline|hunyuan3d-sunnie-pipeline]] — Docker for 3D pipeline
|
|
- [[Wiki/Reference/traefik|traefik]] — Docker service ingress
|
|
- [[Wiki/Reference/n8n|n8n]] — Docker service
|
|
|
|
## History
|
|
|
|
- Ongoing — Core container runtime for all services
|
|
- **2026** — Ansible tag-based deploy pipeline standardized
|
|
- **2026** — `.env` hardening: `root:root 0600`, pbsdeploy access restricted
|
|
- **2026** — Supercronic added as WP-Cron replacement Docker sidecar
|