From 073d9ff569f81e1ef6e41ee469743eaf534e08da Mon Sep 17 00:00:00 2001 From: mr-forust Date: Fri, 23 Jan 2026 11:12:36 +0100 Subject: [PATCH 1/8] feat: add initial kener instance (uptime monitoring) --- kener/.env.example | 3 +++ kener/compose.yaml | 21 +++++++++++++++++++++ 2 files changed, 24 insertions(+) create mode 100644 kener/.env.example create mode 100644 kener/compose.yaml diff --git a/kener/.env.example b/kener/.env.example new file mode 100644 index 0000000..35469a3 --- /dev/null +++ b/kener/.env.example @@ -0,0 +1,3 @@ +KENER_SECRET_KEY=your_secret_key_here +ORIGIN=http://localhost:3000 +TZ=Etc/UTC \ No newline at end of file diff --git a/kener/compose.yaml b/kener/compose.yaml new file mode 100644 index 0000000..f9c1e86 --- /dev/null +++ b/kener/compose.yaml @@ -0,0 +1,21 @@ +services: + kener: + image: rajnandan1/kener:latest + container_name: kener + ports: + - 3000:3000/tcp + environment: + - KENER_SECRET_KEY=${KENER_SECRET_KEY?Kener requires a secret key} + - ORIGIN=${ORIGIN:-http://localhost:3000} + - TZ:${TZ:-Etc/UTC} + volumes: + - db:/app/database + - uploads:/app/uploads + networks: + - proxy +volumes: + db: + uploads: +networks: + proxy: + external: true \ No newline at end of file From 8e57f21e44c7d5e97875d04567b990c42082985d Mon Sep 17 00:00:00 2001 From: mr-forust Date: Fri, 23 Jan 2026 11:26:55 +0100 Subject: [PATCH 2/8] feat: add traefik routers for kener (status subdomain) --- kener/compose.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/kener/compose.yaml b/kener/compose.yaml index f9c1e86..d1eaec8 100644 --- a/kener/compose.yaml +++ b/kener/compose.yaml @@ -11,6 +11,23 @@ services: volumes: - db:/app/database - uploads:/app/uploads + labels: + - "traefik.enable=true" + - "traefik.docker.network=proxy" + - "traefik.http.services.kener.loadbalancer.server.port=3000" + + # Prod Router + - "traefik.http.routers.kener.rule=Host(`status.forust.xyz`)" + - "traefik.http.routers.kener.entrypoints=websecure" + - "traefik.http.routers.kener.tls=true" + # Local Router + - "traefik.http.routers.kener-local.rule=Host(`status.workstation.internal`)" + - "traefik.http.routers.kener-local.entrypoints=websecure" + - "traefik.http.routers.kener-local.tls=true" + # Dev Router + - "traefik.http.routers.kener-dev.rule=Host(`status.gigaforust.internal`)" + - "traefik.http.routers.kener-dev.entrypoints=websecure" + - "traefik.http.routers.kener-dev.tls=true" networks: - proxy volumes: From 5068591b8bfa131561633d955faedcb386a8ec09 Mon Sep 17 00:00:00 2001 From: mr-forust Date: Fri, 23 Jan 2026 17:48:00 +0100 Subject: [PATCH 3/8] fix: xdfnx's certificate --- traefik/dynamic/tls.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/traefik/dynamic/tls.yml b/traefik/dynamic/tls.yml index 988545d..30f4476 100644 --- a/traefik/dynamic/tls.yml +++ b/traefik/dynamic/tls.yml @@ -1,11 +1,11 @@ # TLS Configuration -# tls: -# certificates: +tls: + certificates: # # Cloudflare Origin CA *.forust.xyz # - certFile: /certs/cloudflare.pem # keyFile: /certs/cloudflare.key -# - certFile: /certs/xdfnx.pem -# keyFile: /certs/xdfnx.key + - certFile: /certs/xdfnx.pem + keyFile: /certs/xdfnx.key stores: default: defaultCertificate: From b7ecf880522f0ed0363a82896fa5a8e8a6cd18e5 Mon Sep 17 00:00:00 2001 From: mr-forust Date: Fri, 23 Jan 2026 17:54:00 +0100 Subject: [PATCH 4/8] fix: correct metube local router rule and fix TLS configuration comments --- metube/compose.yaml | 2 +- traefik/dynamic/tls.yml | 18 +++++++++--------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/metube/compose.yaml b/metube/compose.yaml index a4714e3..133f0e9 100644 --- a/metube/compose.yaml +++ b/metube/compose.yaml @@ -23,7 +23,7 @@ services: - "traefik.http.routers.metube.middlewares=security-chain@file" - "traefik.http.routers.metube.tls=true" # Local Router - - "traefik.http.routers.metube-local.rule=Host(`metube.workstation.internal`))" + - "traefik.http.routers.metube-local.rule=Host(`metube.workstation.internal`)" - "traefik.http.routers.metube-local.entrypoints=websecure" - "traefik.http.routers.metube-local.middlewares=security-headers@file" - "traefik.http.routers.metube-local.tls=true" diff --git a/traefik/dynamic/tls.yml b/traefik/dynamic/tls.yml index 30f4476..666c3f0 100644 --- a/traefik/dynamic/tls.yml +++ b/traefik/dynamic/tls.yml @@ -1,17 +1,17 @@ # TLS Configuration tls: certificates: -# # Cloudflare Origin CA *.forust.xyz -# - certFile: /certs/cloudflare.pem -# keyFile: /certs/cloudflare.key + # Cloudflare Origin CA *.forust.xyz + # - certFile: /certs/cloudflare.pem + # keyFile: /certs/cloudflare.key - certFile: /certs/xdfnx.pem keyFile: /certs/xdfnx.key - stores: - default: - defaultCertificate: - # Fallback local certificate - certFile: /certs/gigaforust.internal+1.pem - keyFile: /certs/gigaforust.internal+1-key.pem + stores: + default: + defaultCertificate: + # Fallback local certificate + certFile: /certs/gigaforust.internal+1.pem + keyFile: /certs/gigaforust.internal+1-key.pem options: default: From 303d23968d929f5a5f40a2656253e7d0299c5666 Mon Sep 17 00:00:00 2001 From: mr-forust Date: Sat, 24 Jan 2026 00:53:41 +0100 Subject: [PATCH 5/8] fix: set restart policy of errorpages to Unelss stopped --- errorpages/compose.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/errorpages/compose.yaml b/errorpages/compose.yaml index bac9dc2..5dae93b 100644 --- a/errorpages/compose.yaml +++ b/errorpages/compose.yaml @@ -2,6 +2,7 @@ services: errorpage: build: . container_name: error-pages + restart: unless-stopped ports: - 1234:80 networks: From bee3f16cb2cafed5b8a1a06fd30ac1a58ab22163 Mon Sep 17 00:00:00 2001 From: mr-forust Date: Sat, 24 Jan 2026 00:55:43 +0100 Subject: [PATCH 6/8] fix: set restart policy of kener to Unelss stopped --- kener/compose.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kener/compose.yaml b/kener/compose.yaml index d1eaec8..c151dc3 100644 --- a/kener/compose.yaml +++ b/kener/compose.yaml @@ -2,6 +2,7 @@ services: kener: image: rajnandan1/kener:latest container_name: kener + restart: unless-stopped ports: - 3000:3000/tcp environment: @@ -35,4 +36,4 @@ volumes: uploads: networks: proxy: - external: true \ No newline at end of file + external: true From 7f7d0de09004ec94d9e7fb8350820fc95fddfa3c Mon Sep 17 00:00:00 2001 From: mr-forust Date: Sat, 24 Jan 2026 00:58:09 +0100 Subject: [PATCH 7/8] fix: comment out kener ports --- kener/compose.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kener/compose.yaml b/kener/compose.yaml index c151dc3..235ba2f 100644 --- a/kener/compose.yaml +++ b/kener/compose.yaml @@ -3,8 +3,8 @@ services: image: rajnandan1/kener:latest container_name: kener restart: unless-stopped - ports: - - 3000:3000/tcp + # ports: + # - 3000:3000/tcp environment: - KENER_SECRET_KEY=${KENER_SECRET_KEY?Kener requires a secret key} - ORIGIN=${ORIGIN:-http://localhost:3000} From dd0ca27f4f8f847c2d54c2624d391460ef31d3a4 Mon Sep 17 00:00:00 2001 From: mr-forust Date: Sat, 24 Jan 2026 01:16:24 +0100 Subject: [PATCH 8/8] fix: add TZ env for checkmk --- checkmk/compose.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/checkmk/compose.yaml b/checkmk/compose.yaml index e44f4e8..3b94f16 100644 --- a/checkmk/compose.yaml +++ b/checkmk/compose.yaml @@ -13,6 +13,7 @@ services: environment: - CMK_PASSWORD=${CMK_PASSWORD:-password} - CMK_SITE_ID=cmk + - TZ=${TZ:-Etc/UTC} labels: - "traefik.enable=true" - "traefik.docker.network=proxy"