feat: add pulsenode stack

Infrastructure dashboard monitoring all the stacks in this repo, built via stacks new pulsenode and then hand-adjusted for what a generic scaffold can't know: pulls the published image (dev.pivoine.art/valknar/pulsenode:latest) instead of building, mounts /var/run/docker.sock:ro plus its own config/ directory read-only, runs read-only/non-root/cap-dropped (group_add on DOCKER_GID to get socket access without running as root), and uses its own healthcheck.mjs rather than curl (not present in its minimal image). config/config.yml is real, not a placeholder: docker/database widgets for every container across all ten stacks here, discovery enabled against falcon_network as a safety net for anything added later.
2026-08-17 15:42:08 +02:00
parent 6e96e33875
commit 1c5ee1002a
5 changed files with 216 additions and 0 deletions
@@ -0,0 +1,11 @@
+# Public hostnames of the services PulseNode links to / monitors.
+# These are not secrets, but keeping them here (rather than hardcoded in
+# config.yml) means the same config.yml works across environments.
+TRAEFIK_HOST_CODE=code.example.com
+TRAEFIK_HOST_COOLIFY=coolify.example.com
+TRAEFIK_HOST_GITEA=git.example.com
+TRAEFIK_HOST_HEADSCALE=headscale.example.com
+TRAEFIK_HOST_IMMICH=photos.example.com
+TRAEFIK_HOST_N8N=n8n.example.com
+TRAEFIK_HOST_PASSBOLT=passbolt.example.com
+TRAEFIK_HOST_UMAMI=analytics.example.com
@@ -0,0 +1,150 @@
+settings:
+  title: PulseNode
+
+theme:
+  mode: dark
+  variables:
+    --pn-accent: "#38bdf8"
+
+# Manual widgets below always take precedence over an auto-discovered one for
+# the same container - this is on as a safety net for anything added to
+# falcon_network later without a config.yml update, not to duplicate what's
+# already listed here. Requires DOCKER_GID set correctly (see .env.example).
+discovery:
+  docker:
+    enabled: true
+    network: falcon_network
+
+groups:
+  - name: Core Infra
+    widgets:
+      - type: docker
+        name: Traefik
+        containerName: traefik
+        interval: 10s
+        # No href: the dashboard is disabled (--api.dashboard=false).
+        # Swap for a `traefik` widget (router/entrypoint/middleware view)
+        # if the API gets enabled - see Traefik's --api.dashboard docs.
+
+      - type: docker
+        name: Coolify
+        containerName: coolify
+        href: https://${TRAEFIK_HOST_COOLIFY}
+        interval: 10s
+
+  - name: Dev Tools
+    widgets:
+      - type: docker
+        name: Gitea
+        containerName: gitea
+        href: https://${TRAEFIK_HOST_GITEA}
+        interval: 10s
+
+      - type: docker
+        name: Gitea Runner
+        containerName: gitea_runner
+        showStats: true
+        interval: 15s
+
+      - type: docker
+        name: Code Server
+        containerName: code
+        href: https://${TRAEFIK_HOST_CODE}
+        interval: 10s
+
+  - name: Apps
+    widgets:
+      - type: docker
+        name: Immich
+        containerName: immich
+        href: https://${TRAEFIK_HOST_IMMICH}
+        interval: 10s
+
+      - type: docker
+        name: Immich ML
+        containerName: immich_ml
+        interval: 15s
+
+      - type: docker
+        name: n8n
+        containerName: n8n
+        href: https://${TRAEFIK_HOST_N8N}
+        interval: 10s
+
+      - type: docker
+        name: Passbolt
+        containerName: passbolt
+        href: https://${TRAEFIK_HOST_PASSBOLT}
+        interval: 10s
+
+      - type: docker
+        name: Umami
+        containerName: umami
+        href: https://${TRAEFIK_HOST_UMAMI}
+        interval: 10s
+
+      - type: docker
+        name: Headscale
+        containerName: headscale
+        href: https://${TRAEFIK_HOST_HEADSCALE}
+        interval: 10s
+
+      - type: docker
+        name: Mailpit
+        containerName: mailpit
+        interval: 15s
+
+  - name: Data Services
+    widgets:
+      - type: database
+        name: Coolify DB
+        containerName: coolify_db
+        engine: postgres
+        interval: 20s
+
+      - type: database
+        name: Coolify Redis
+        containerName: coolify_redis
+        engine: redis
+        interval: 20s
+
+      - type: database
+        name: Gitea DB
+        containerName: gitea_db
+        engine: postgres
+        interval: 20s
+
+      - type: database
+        name: Immich DB
+        containerName: immich_db
+        engine: postgres
+        interval: 20s
+
+      - type: database
+        name: Immich Redis
+        containerName: immich_redis
+        engine: redis
+        interval: 20s
+
+      - type: database
+        name: n8n DB
+        containerName: n8n_db
+        engine: postgres
+        interval: 20s
+
+      - type: database
+        name: Passbolt DB
+        containerName: passbolt_db
+        engine: postgres
+        interval: 20s
+
+      - type: database
+        name: Umami DB
+        containerName: umami_db
+        engine: postgres
+        interval: 20s
+
+  - name: Search
+    widgets:
+      - type: search
+        engines: [duckduckgo, google]