admin
6eb75204b6
New controller features:
- Web-based setup wizard replaces docker-setup.sh interactive config
- Dual listener: :8080 (Traefik) + :8081 (direct HTTP for LAN)
- Drive scanner finds .felhom-infra-backup/ on all block devices
- Hub recovery pull (GET /api/v1/recovery/{id}) with retrieval password
- Fresh install: Hub config download or manual wizard
- CSRF protection, state persistence, Hungarian UI
- Local infra backup written to all connected drives after each backup cycle
- .felhom-infra-backup/backup.json + metadata.json with SHA256 checksum
- Hub verification: parse customer_blocked from report push response
- Limited mode after 7 days without verification
- Recovery info page on Settings + recovery-info.txt file generation
- Pending events queue: DR events sent to Hub on next report push
- docker-setup.sh v6.0.0: removed interactive wizard, minimal controller.yaml only
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
74 lines
3.1 KiB
YAML
74 lines
3.1 KiB
YAML
# =============================================================================
|
|
# felhom-controller Docker Compose
|
|
# This is deployed as an infrastructure component alongside Traefik/Cloudflared
|
|
# =============================================================================
|
|
|
|
services:
|
|
felhom-controller:
|
|
image: gitea.dooplex.hu/admin/felhom-controller:latest
|
|
container_name: felhom-controller
|
|
restart: unless-stopped
|
|
privileged: true # Required for disk operations (mkfs, mount, sfdisk)
|
|
ports:
|
|
- "8080:8080"
|
|
- "8081:8081" # Setup wizard direct HTTP (only active during setup mode)
|
|
volumes:
|
|
# Docker socket — required for compose operations + DB dumps (docker exec)
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
# Controller directory (compose file access for self-update)
|
|
- /opt/docker/felhom-controller:/opt/docker/felhom-controller
|
|
# Controller config (read-only override on top of directory mount)
|
|
- /opt/docker/felhom-controller/controller.yaml:/opt/docker/felhom-controller/controller.yaml:ro
|
|
# Controller persistent data (named volume override on top of directory mount)
|
|
- controller-data:/opt/docker/felhom-controller/data
|
|
# Stack compose files (read + write for git sync)
|
|
- /opt/docker/stacks:/opt/docker/stacks
|
|
# Backup directories (restic repo + db dumps)
|
|
- /srv/backups:/srv/backups
|
|
# All external storage — rshared propagation so mounts created inside
|
|
# the container (disk init) propagate to the host and vice versa
|
|
- type: bind
|
|
source: /mnt
|
|
target: /mnt
|
|
bind:
|
|
propagation: rshared
|
|
# Host /sys — for CPU temperature reading (read-only)
|
|
- /sys:/host/sys:ro
|
|
# Host OS info — for monitoring page system info
|
|
- /etc/os-release:/host/etc/os-release:ro
|
|
# Host hostname — for monitoring page (os.Hostname() returns container ID)
|
|
- /etc/hostname:/host/etc/hostname:ro
|
|
# Block devices — mounted at /host-dev (can't override Docker's /dev tmpfs)
|
|
- /dev:/host-dev:rw
|
|
# Host fstab — UUID-based mount persistence (mounted as /host-fstab inside container)
|
|
- /etc/fstab:/host-fstab
|
|
# udev metadata — for blkid/lsblk device model info
|
|
- /run/udev:/run/udev:ro
|
|
environment:
|
|
- TZ=Europe/Budapest
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.controller.rule=Host(`felhom.${DOMAIN}`)"
|
|
- "traefik.http.routers.controller.entrypoints=websecure"
|
|
- "traefik.http.routers.controller.tls=true"
|
|
- "traefik.http.services.controller.loadbalancer.server.port=8080"
|
|
- "traefik.docker.network=traefik-public"
|
|
# Health check labels for monitoring
|
|
- "felhom.managed=true"
|
|
- "felhom.component=controller"
|
|
networks:
|
|
- traefik-public
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8080/api/health"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
start_period: 10s
|
|
retries: 3
|
|
|
|
volumes:
|
|
controller-data:
|
|
|
|
networks:
|
|
traefik-public:
|
|
external: true
|