Routes claude-opus-4-8, gpt-5.5, qwen2.5:14b, llama3.1:8b through a
single OpenAI-compatible endpoint on :4000 (LAN-only, no auth).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Full wipe and fresh start: removed gitea_patch/unstructured_patch
hacks from startup commands, upgraded all onyxdotapp images from
nightly-latest-20260331 pin to :latest, removed UNSTRUCTURED_SERVER_URL
(service decommissioned 2026-04-14), added Watchtower disable labels
to ALL services (was missing on web_server, model_servers, db, cache,
opensearch, vespa, nginx), added nginx.conf for reverse proxy.
Alembic ran 349 migrations cleanly on fresh DB. All 10 containers up,
0 restarts, HTTP 200 at :3005.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Watchtower pulled a newer guacamole:latest image whose JDBC extension expected
tables not present in the existing DB (guacamole_user_attribute etc.). Fixed by
reinitializing the DB with the official 1.6.0 schema (001-create-schema.sql +
002-create-admin-user.sql) and pinning both guacamole and guacd to 1.6.0 with
com.centurylinklabs.watchtower.enable=false to prevent recurrence.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Watchtower pulled gitea/gitea:latest three times (Mar 12, Apr 19, Apr 25)
and at least one pull resulted in a broken image with git binary failures.
Pin to stable gitea/gitea:1.26.1 and add watchtower.enable=false label
so the image is only updated by deliberate human action.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Add a Flask backend service for cross-device state persistence, storing
JSON state on an NFS volume at /mnt/docker-data/configs/rongorongo/data.
Frontend Dockerfile/nginx.conf reorganised into frontend/ subdirectory;
frontend API calls now route to /api/* handled by the backend container
over a dedicated bridge network. Traefik basicAuth middleware added to
the public URL with the bcrypt hash deliberately kept out of git
(REPLACE_AT_DEPLOY placeholder in rongorongo.yml). Prometheus probe moved
from https-external to internal http://192.168.86.192:8181/health to
bypass the new auth wall.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Standalone Compose service running a locally-built nginx image that
serves a static Anthropic-API frontend. Traefik dynamic route added
for public HTTPS access. Blackbox probe added to prometheus.yml for
uptime monitoring. CLAUDE.md updated with service entry.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
DB alembic HEAD is 1d78c0ca7853 (remove_voice_provider_deleted_column).
20260331 is the exact build where that revision is HEAD — alembic runs
clean with no migrations applied. Later builds (20260412/latest) introduce
migrations d8cdfee5df80–503883791c39 that break api_server startup.
Watchtower disabled on api_server and background to prevent future
auto-upgrades from breaking alembic compatibility.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Node hf-pdocker-01 hardware fully repaired and rebuilt (2026-03-08). This
commit captures the completed Phase 2 migration where all failover services
are returned from hf-pdocker-02/bart back to hf-pdocker-01 as their permanent
home.
New compose stacks for hf-pdocker-01:
- adguard: AdGuard Home DNS/ad-blocking (:3000, :53)
- traefik: Reverse proxy with TLS (:80/:443/:8090), .env.example included
- monitoring: Grafana, Prometheus, Alertmanager, InfluxDB, Blackbox, matrix-receiver
- smarthome: Home Assistant (:8123), ESPHome (:6052), Mosquitto (:1883/:8883)
- matrix: Synapse homeserver (:8008) + synapse-db + well-known (:8010)
- guacamole: Guacamole (:8199) + guacd + guacamole-db (local MySQL)
- farm-manager: Farm Manager API (:8888)
Updated compose stacks for hf-pdocker-01:
- frigate-notify: MQTT/Matrix hosts reverted from bart (.167) to hf-pdocker-01 (.192)
Documentation:
- docs/plans/2026-03-08-hf-pdocker-01-phase2-migration.md (new)
- CLAUDE.md: Full service distribution update — failover labels removed,
hf-pdocker-02/bart cleaned up to reflect only permanent services,
NetClaw/Aaron added to hf-pdocker-02, DNSStubListener fix noted
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- HA and ESPHome now running on hf-pdocker-01 via smarthome compose stack
- Updated core.config_entries: MQTT broker, go2rtc, Frigate URLs all point to 192.168.86.192
- Removed stale .ha_run.lock before startup
- Stopped and removed HA + ESPHome containers from bart
- All smarthome services (mosquitto, homeassistant, esphome) now consolidated on hf-pdocker-01
These files were from the original IaC setup placeholder and no longer
reflect the actual infrastructure (Docker Swarm + Compose, no Nomad/Consul).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Switch from build: to pre-built image (frigate-notify:latest, built from
jeremy/frigate-notify Gitea repo). Added volume mount for SQLite DB on NAS,
CLIP/Ollama env vars for GPU machine, and corrected MQTT/Matrix hosts to
bart (192.168.86.167) since those services are on failover.
Deployed 2026-03-08, health check passing.
jeremy
pluto