Stack	Description	Services
`traefik`	Reverse proxy, TLS termination	traefik
`mailpit`	SMTP relay (no web UI)	mailpit
`watchtower`	Automatic container updates	watchtower
`umami`	Web analytics	umami, db
`immich`	Photo & video management	immich, ml, redis, db
`blinko`	AI-powered personal notes	blinko, db
`mattermost`	Team chat	mattermost, db
`gitea`	Git hosting + CI runner	gitea, runner, db
`coolify`	Deployment platform	coolify, realtime, redis, db
`sexy`	pivoine.art website	directus, frontend, redis, db
`vaultwarden`	Password manager	vaultwarden

Tools

Directory	Description
`_backup`	Daily restic backups to HiDrive (host script + systemd timer)

Deployment

# Sync a stack to VPS
rsync -avz <stack>/ vps:~/stacks/<stack>/

# Start a stack
ssh vps 'cd ~/stacks/<stack> && docker compose up -d'

Network

All stacks share the external falcon_network Docker network for inter-service communication (e.g. traefik routing, mailpit SMTP).

Backup

The _backup stack runs a daily restic backup at 3:00 AM. It dumps all Postgres databases, then backs up the entire .data/ directory to HiDrive. Retention: 7 daily, 4 weekly, 6 monthly snapshots. Notifications go to Mattermost.

# Deploy backup stack
rsync -avz _backup/ vps:~/stacks/_backup/

# Initialize restic repo (first time only)
ssh vps 'source ~/stacks/_backup/.env && restic init -r /mnt/hidrive/users/valknar/Backup/stacks'

# Install systemd units
ssh vps 'ln -sf ~/stacks/_backup/stacks-backup.service /etc/systemd/system/ && \
         ln -sf ~/stacks/_backup/stacks-backup.timer /etc/systemd/system/ && \
         systemctl daemon-reload && systemctl enable --now stacks-backup.timer'

# Manual test run
ssh vps '~/stacks/_backup/backup.sh'

# Check timer status
ssh vps 'systemctl status stacks-backup.timer'

# View snapshots
ssh vps 'source ~/stacks/_backup/.env && restic -r /mnt/hidrive/users/valknar/Backup/stacks snapshots'

Data

Persistent data is stored in ~/stacks/.data/<stack>/ on the VPS using bind mounts. Database stacks use dedicated Postgres instances with simple credentials.