valknar
4b99e21a99
- Add AFFiNE stack (affine.pivoine.art): main app, migration job, redis, pgvector postgres - Remove blinko stack - Update backup.sh: swap blinko_db → affine_db - Update README Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
84 lines
2.9 KiB
Markdown
84 lines
2.9 KiB
Markdown
# Stacks
|
|
|
|
Self-contained Docker Compose stacks for `pivoine.art` infrastructure.
|
|
|
|
Each stack is independently deployable with its own `compose.yml` and `.env`. All persistent data lives in `../.data/<stack>/`.
|
|
|
|
## Stacks
|
|
|
|
| Stack | Description | Services |
|
|
|---|---|---|
|
|
| `traefik` | Reverse proxy, TLS termination | traefik |
|
|
| `mailpit` | SMTP relay (no web UI) | mailpit |
|
|
| `watchtower` | Automatic container updates | watchtower |
|
|
| `umami` | Web analytics | umami, db |
|
|
| `immich` | Photo & video management | immich, ml, redis, db |
|
|
| `affine` | Collaborative workspace & notes | affine, redis, db |
|
|
| `n8n` | Workflow automation & notification relay | n8n, db |
|
|
| `gitea` | Git hosting + CI runner | gitea, runner, db |
|
|
| `coolify` | Deployment platform | coolify, realtime, redis, db |
|
|
| `vaultwarden` | Password manager | vaultwarden |
|
|
|
|
## Tools
|
|
|
|
| Directory | Description |
|
|
|---|---|
|
|
| `_backup` | Daily restic backups to HiDrive (host script + systemd timer) |
|
|
|
|
## Deployment
|
|
|
|
```bash
|
|
# Copy example env and fill in secrets
|
|
cp <stack>/.env.example <stack>/.env
|
|
|
|
# Sync a stack to VPS
|
|
rsync -avz <stack>/ vps:~/stacks/<stack>/
|
|
|
|
# Start a stack
|
|
ssh vps 'cd ~/stacks/<stack> && docker compose up -d'
|
|
```
|
|
|
|
## Network
|
|
|
|
All stacks share the external `falcon_network` Docker network for inter-service communication (e.g. traefik routing, mailpit SMTP).
|
|
|
|
## Backup
|
|
|
|
The `_backup` stack runs a daily restic backup at 3:00 AM. It dumps all Postgres databases, then backs up the entire `.data/` directory to HiDrive. Retention: 7 daily, 4 weekly, 6 monthly snapshots. Notifications go to Telegram via n8n.
|
|
|
|
```bash
|
|
# Deploy backup stack
|
|
rsync -avz _backup/ vps:~/stacks/_backup/
|
|
|
|
# Initialize restic repo (first time only)
|
|
ssh vps 'source ~/stacks/_backup/.env && restic init -r /mnt/hidrive/users/valknar/Backup/stacks'
|
|
|
|
# Install systemd units
|
|
ssh vps 'ln -sf ~/stacks/_backup/stacks-backup.service /etc/systemd/system/ && \
|
|
ln -sf ~/stacks/_backup/stacks-backup.timer /etc/systemd/system/ && \
|
|
systemctl daemon-reload && systemctl enable --now stacks-backup.timer'
|
|
|
|
# Manual test run
|
|
ssh vps '~/stacks/_backup/backup.sh'
|
|
|
|
# Check timer status
|
|
ssh vps 'systemctl status stacks-backup.timer'
|
|
|
|
# View snapshots
|
|
ssh vps 'source ~/stacks/_backup/.env && restic -r /mnt/hidrive/users/valknar/Backup/stacks snapshots'
|
|
```
|
|
|
|
## Notifications
|
|
|
|
Watchtower and the backup script both POST to an n8n webhook, which forwards messages to Telegram.
|
|
|
|
The webhook URL is set in two places:
|
|
- `_backup/.env` → `WEBHOOK_URL`
|
|
- `watchtower/.env` → `NOTIFICATION_URL` (uses `generic+https://` shoutrrr scheme)
|
|
|
|
Both point to the same n8n workflow at `https://n8n.pivoine.art`. The workflow accepts `{ "message": "..." }` from both senders and forwards it to Telegram.
|
|
|
|
## Data
|
|
|
|
Persistent data is stored in `~/stacks/.data/<stack>/` on the VPS using bind mounts. Database stacks use dedicated Postgres instances with simple credentials.
|