jeremy
5d7c8ea030
- gitea: LevelDB queues -> local /var/lib/gitea-queues (stale NFS lock, 7,972-restart loop) - semaphore-db: data -> local /var/lib/semaphore-db (stale ibdata1 NFS lock, 975 restarts) - sonarr: config -> local /var/lib/sonarr (SQLite-on-NFS migration crash) - nzbhydra2: mem_limit 768M -> 1G (was pinned at limit, unhealthy) - jellyfin: deploy pending VAAPI device passthrough (i965/renderD128) - openvas: disable Watchtower (latest major pull forced pg_upgrade crash-loop) - onyx: fully decommissioned (down since ~June 8 unnoticed) - remove duplicate monitoring/traefik/guacamole stacks from .100, failover guacamole from bart - synapse: raise rc_message (alertmanager receiver was 429-limited; alerts silently dropped for weeks) - prometheus: UniFi probe 8443 -> 11443, solo.hobbs.farm via 401-tolerant module, drop onyx target - frigate restart cron: unwritable /var/log path meant it never ran; now 4x daily to ~glyptic - CLAUDE.md: document all of the above + AdGuard broken/unconfigured since 2026-05-17 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
81 lines
2.3 KiB
YAML
81 lines
2.3 KiB
YAML
services:
|
|
semaphore:
|
|
image: semaphoreui/semaphore:latest
|
|
container_name: semaphore
|
|
restart: unless-stopped
|
|
ports:
|
|
- "3004:3000"
|
|
environment:
|
|
- SEMAPHORE_DB_DIALECT=mysql
|
|
- SEMAPHORE_DB_HOST=semaphore-db
|
|
- SEMAPHORE_DB_PORT=3306
|
|
- SEMAPHORE_DB_USER=semaphore
|
|
- SEMAPHORE_DB_PASS=${SEMAPHORE_DB_PASSWORD}
|
|
- SEMAPHORE_DB_NAME=semaphore
|
|
- SEMAPHORE_DB=semaphore
|
|
- SEMAPHORE_PLAYBOOK_PATH=/tmp/semaphore
|
|
- SEMAPHORE_ADMIN_PASSWORD=${SEMAPHORE_ADMIN_PASSWORD}
|
|
- SEMAPHORE_ADMIN_NAME=admin
|
|
- SEMAPHORE_ADMIN_EMAIL=admin@hobbs.farm
|
|
- SEMAPHORE_ADMIN=admin
|
|
- SEMAPHORE_ACCESS_KEY_ENCRYPTION=${SEMAPHORE_ENCRYPTION_KEY}
|
|
- SEMAPHORE_LDAP_ACTIVATED=no
|
|
volumes:
|
|
- /mnt/docker-data/configs/semaphore:/etc/semaphore
|
|
- /mnt/docker-data/configs/semaphore/playbooks:/tmp/semaphore
|
|
depends_on:
|
|
semaphore-db:
|
|
condition: service_healthy
|
|
networks:
|
|
- semaphore-internal
|
|
mem_limit: 512M
|
|
memswap_limit: 512M
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget -q --spider http://localhost:3000/api/ping || exit 1"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 60s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "50m"
|
|
max-file: "3"
|
|
|
|
semaphore-db:
|
|
image: mysql:8.0
|
|
container_name: semaphore-db
|
|
restart: unless-stopped
|
|
user: "1024:100"
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${SEMAPHORE_MYSQL_ROOT_PASSWORD}
|
|
- MYSQL_DATABASE=semaphore
|
|
- MYSQL_USER=semaphore
|
|
- MYSQL_PASSWORD=${SEMAPHORE_DB_PASSWORD}
|
|
volumes:
|
|
# LOCAL disk, not NFS: MySQL on NFS suffers stale-lock and InnoDB corruption
|
|
# (2026-07-11 corruption, 2026-07-13 stale ibdata1 lock after power event)
|
|
- /var/lib/semaphore-db:/var/lib/mysql
|
|
networks:
|
|
- semaphore-internal
|
|
labels:
|
|
- "com.centurylinklabs.watchtower.enable=false"
|
|
command: --innodb-buffer-pool-size=128M --innodb-log-file-size=32M
|
|
mem_limit: 512M
|
|
memswap_limit: 512M
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 --silent"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 30s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "50m"
|
|
max-file: "3"
|
|
|
|
networks:
|
|
semaphore-internal:
|
|
driver: bridge
|