infra: deploy Open WebUI on hf-pdocker-01 with Ollama + Claude backends

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

stacks/monitoring/prometheus.yml

@@ -39,15 +39,15 @@ scrape_configs:
     static_configs:
       - targets: ['blackbox-exporter:9115']
 
-  # Matrix Alertmanager Receiver metrics (running on hf-pdocker-02 during failover)
+  # Matrix Alertmanager Receiver metrics (now on hf-pdocker-01)
   - job_name: 'matrix-alertmanager-receiver'
     scrape_interval: 1m
     static_configs:
-      - targets: ['192.168.86.100:9094']
+      - targets: ['192.168.86.192:9094']
         labels:
-          hostname: 'hf-pdocker-02'
+          hostname: 'hf-pdocker-01'
 
-  # HTTP Health Checks - hf-pdocker-01 services (native services only; failover services tracked in other jobs)
+  # HTTP Health Checks - hf-pdocker-01 services
   - job_name: 'http-pdocker01'
     metrics_path: /probe
     params:
@@ -56,8 +56,19 @@ scrape_configs:
       - targets:
         - http://192.168.86.192:5000        # Frigate NVR (standalone, host network)
         - http://192.168.86.192:5199/health  # Frigate Notify
+        - http://192.168.86.192:5200/health  # clip-service (CLIP embeddings)
+        - http://192.168.86.192:3010        # Open WebUI
         - http://192.168.86.192:8888/health  # Farm Manager API
         - http://192.168.86.192:8889/health  # Farm Agent
+        - http://192.168.86.192:8123        # Home Assistant
+        - http://192.168.86.192:6052        # ESPHome
+        - http://192.168.86.192:8199/guacamole/  # Guacamole
+        - http://192.168.86.192:8008        # Matrix Synapse
+        - http://192.168.86.192:3000        # AdGuard Home
+        - http://192.168.86.192:8090/dashboard/  # Traefik Dashboard
+        - http://192.168.86.192:3001        # Grafana
+        - http://192.168.86.192:9095        # Prometheus
+        - http://192.168.86.192:9093        # Alertmanager
     relabel_configs:
       - source_labels: [__address__]
         target_label: __param_target
@@ -66,7 +77,7 @@ scrape_configs:
       - target_label: __address__
         replacement: blackbox-exporter:9115
 
-  # HTTP Health Checks - hf-pdocker-02 services (native + failover from hf-pdocker-01)
+  # HTTP Health Checks - hf-pdocker-02 services
   - job_name: 'http-pdocker02'
     metrics_path: /probe
     params:
@@ -80,10 +91,8 @@ scrape_configs:
         - http://192.168.86.100:5006        # Actual Budget
         - http://192.168.86.100:8001/openapi.json  # MCPO
         - http://192.168.86.100:8889/health  # Farm Agent
-        - http://192.168.86.100:3001        # Grafana (FAILOVER from hf-pdocker-01)
-        - http://192.168.86.100:9095        # Prometheus (FAILOVER from hf-pdocker-01)
-        - http://192.168.86.100:9093        # Alertmanager (FAILOVER from hf-pdocker-01)
-        - http://192.168.86.100:3000        # AdGuard Home (FAILOVER from hf-pdocker-01)
+        - http://192.168.86.100:8888        # SearXNG
+        - http://192.168.86.100:8000/healthcheck  # Unstructured API
         - http://192.168.86.100:9000        # Portainer
     relabel_configs:
       - source_labels: [__address__]
@@ -109,7 +118,7 @@ scrape_configs:
       - target_label: __address__
         replacement: blackbox-exporter:9115
 
-  # HTTP Health Checks - bart services (native + failover from hf-pdocker-01)
+  # HTTP Health Checks - bart services
   - job_name: 'http-bart'
     metrics_path: /probe
     params:
@@ -124,10 +133,10 @@ scrape_configs:
         - http://192.168.86.167:5055        # Jellyseerr
         - http://192.168.86.167:9392        # OpenVAS
         - http://192.168.86.167:8889/health  # Farm Agent
-        - http://192.168.86.167:8123        # Home Assistant (FAILOVER from hf-pdocker-01)
-        - http://192.168.86.167:6052        # ESPHome (FAILOVER from hf-pdocker-01)
-        - http://192.168.86.167:8199/guacamole/  # Guacamole (FAILOVER from hf-pdocker-01)
-        - http://192.168.86.167:8008        # Matrix Synapse (FAILOVER from hf-pdocker-01)
+      - targets:
+        - http://192.168.86.167:3005        # Onyx
+        labels:
+          name: onyx
     relabel_configs:
       - source_labels: [__address__]
         target_label: __param_target
@@ -148,6 +157,7 @@ scrape_configs:
         - https://yoda.hobbs.farm          # Home Assistant
         - https://vault.hobbs.farm         # Vaultwarden
         - https://git.hobbs.farm           # Gitea
+        - https://open.hobbs.farm          # Open WebUI
     relabel_configs:
       - source_labels: [__address__]
         target_label: __param_target

stacks/traefik/dynamic/openwebui.yml

@@ -0,0 +1,26 @@
+http:
+  routers:
+    openwebui:
+      rule: "Host(`open.hobbs.farm`)"
+      entryPoints:
+        - websecure
+      service: openwebui
+      tls:
+        certResolver: letsencrypt
+    openwebui-http:
+      rule: "Host(`open.hobbs.farm`)"
+      entryPoints:
+        - web
+      middlewares:
+        - openwebui-https-redirect
+      service: openwebui
+  middlewares:
+    openwebui-https-redirect:
+      redirectScheme:
+        scheme: https
+        permanent: true
+  services:
+    openwebui:
+      loadBalancer:
+        servers:
+          - url: "http://192.168.86.192:3010"