chore: sync accumulated infra changes and docs

Removals: openwebui and netclaw compose + Traefik routes (both decommissioned). Updates: litellm, n8n, vaultwarden, ai-agents, media, traefik routes, CLAUDE.md (nodes/ports/known-issues), agent definitions. Additions: Rongorongo tree, LinkedStorm plan, rename-bart spec, vllm brief, tls-options and security-headers Traefik config. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-11 11:19:21 -05:00
parent 47ac49a039
commit 27f6d95bf6
34 changed files with 8589 additions and 322 deletions
@@ -0,0 +1,48 @@
+version: "3.8"
+
+services:
+  rongorongo:
+    image: registry.hobbs.farm/rongorongo:latest
+    networks:
+      - traefik-public
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+        delay: 10s
+        max_attempts: 3
+      update_config:
+        parallelism: 1
+        delay: 10s
+        failure_action: rollback
+      labels:
+        - "traefik.enable=true"
+        - "traefik.docker.network=traefik-public"
+
+        # HTTP → HTTPS redirect
+        - "traefik.http.routers.rongorongo-http.rule=Host(`rongorongo.hobbs.farm`)"
+        - "traefik.http.routers.rongorongo-http.entrypoints=web"
+        - "traefik.http.routers.rongorongo-http.middlewares=redirect-to-https"
+
+        # HTTPS router
+        - "traefik.http.routers.rongorongo.rule=Host(`rongorongo.hobbs.farm`)"
+        - "traefik.http.routers.rongorongo.entrypoints=websecure"
+        - "traefik.http.routers.rongorongo.tls=true"
+        - "traefik.http.routers.rongorongo.tls.certresolver=cloudflare"
+
+        # Service
+        - "traefik.http.services.rongorongo.loadbalancer.server.port=80"
+
+        # Middlewares
+        - "traefik.http.routers.rongorongo.middlewares=rongorongo-headers"
+        - "traefik.http.middlewares.rongorongo-headers.headers.customResponseHeaders.X-Robots-Tag=noindex,nofollow"
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost/health"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+
+networks:
+  traefik-public:
+    external: true