feat: self-host Hobbs Family Organizer (Shield TV dashboard) on hf-pdocker-02:8340

- tv app/Hobbs-Family-Organizer-Self-Hosted-v1.0.0: release bundle (Next.js app + Shield APK v1.4 + source) - compose/hf-pdocker-02/hobbs-organizer: override (local-disk secrets, watchtower off), .env (port 8340), Shield provisioning script - CLAUDE.md: service tree + internal ports Trusted-LAN mode. Secrets live only on .100 /var/lib/hobbs-organizer/secrets (not in git). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01E9NnVEico3WvFxLyjy1iW3
2026-11-04 18:27:22 -06:00
parent 122ea392d1
commit e9c7e9df1a
68 changed files with 12831 additions and 0 deletions
@@ -0,0 +1,58 @@
+name: hobbs-family-organizer
+
+services:
+  organizer:
+    image: hobbs-family-organizer:1.0.0
+    build:
+      context: .
+      dockerfile: Dockerfile
+    restart: unless-stopped
+    init: true
+    environment:
+      NODE_ENV: production
+      HOSTNAME: 0.0.0.0
+      PORT: "3000"
+      TZ: ${ORGANIZER_TIMEZONE:-America/Chicago}
+      ORGANIZER_TIMEZONE: ${ORGANIZER_TIMEZONE:-America/Chicago}
+      WEATHER_LOCATION: ${WEATHER_LOCATION:-Sapulpa, OK}
+      WEATHER_LATITUDE: ${WEATHER_LATITUDE:-35.9987}
+      WEATHER_LONGITUDE: ${WEATHER_LONGITUDE:--96.11417}
+      NWS_FORECAST_URL: ${NWS_FORECAST_URL:-https://api.weather.gov/gridpoints/TSA/37,98/forecast}
+      WEATHER_USER_AGENT: ${WEATHER_USER_AGENT:-Hobbs-Family-Organizer/1.0 (self-hosted)}
+      CALENDAR_ICAL_URLS_FILE: /run/secrets/calendar_ical_urls
+      ORGANIZER_ACCESS_TOKEN_FILE: /run/secrets/organizer_access_token
+    secrets:
+      - calendar_ical_urls
+      - organizer_access_token
+    ports:
+      - "${HOBBS_BIND_ADDRESS:-0.0.0.0}:${HOBBS_HTTP_PORT:-8080}:3000"
+    read_only: true
+    tmpfs:
+      - /tmp:size=64m,mode=1777
+      - /app/.next-build/cache:size=128m,uid=10001,gid=10001,mode=0750
+    cap_drop:
+      - ALL
+    cap_add:
+      - SETGID
+      - SETUID
+    security_opt:
+      - no-new-privileges:true
+    pids_limit: 128
+    stop_grace_period: 20s
+    healthcheck:
+      test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:3000/api/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 20s
+    logging:
+      driver: json-file
+      options:
+        max-size: 10m
+        max-file: "3"
+
+secrets:
+  calendar_ical_urls:
+    file: ./secrets/calendar_ical_urls.json
+  organizer_access_token:
+    file: ./secrets/organizer_access_token.txt