f5cd320433
Initial documentation of the hubris Proxmox homelab as a cross-linked markdown wiki. Per-node pages, cross-cutting infrastructure pages, an investigation log, and an operations cheatsheet. Each node and topic ends with a Changelog section so changes can be tracked in-place going forward. Refreshed against live state on 2026-04-28 — 14 active LXCs (109 syncthing currently stopped) + 1 VM (108 haos). Reflects post-A/B-test state of the 2026-04-21 hubris crash-loop investigation.
59 lines
3.8 KiB
Markdown
59 lines
3.8 KiB
Markdown
# 104 — `gitea`
|
|
|
|
Self-hosted git server. Source of truth for all `dtoro/*` repositories that auto-deploy across the lab.
|
|
|
|
## At a glance
|
|
- **Hostname:** `gitea`
|
|
- **IP:** `192.168.8.121`
|
|
- **Privilege:** privileged
|
|
- **Resources:** 1 core / 1 GiB RAM / 8 GiB rootfs
|
|
- **Mounts:** `/mnt/library` ↔ `/mnt/library` (under `/mnt/library/repos`, owner UID 102 / GID 105 — don't touch from other containers)
|
|
- **Public hostname:** [`git.hubris.network`](../infrastructure/dns.md) → [caddy](121-caddy.md) → `:3000`
|
|
- **Version:** 1.25.4 (last verified)
|
|
|
|
## Service / port map
|
|
|
|
| Service | Listen | Notes |
|
|
| ------- | -------- | ------------------------------ |
|
|
| gitea | `:3000` | HTTP web + git over HTTP |
|
|
| gitea SSH | `:22` | git over SSH |
|
|
| `gitea-deploy-webhook` | `127.0.0.1:9797` | Receives push events for the customizations repo |
|
|
|
|
## Customizations
|
|
`/var/lib/gitea/custom` is a checkout of [`dtoro/gitea-customizations`](https://git.hubris.network/dtoro/gitea-customizations).
|
|
- `templates/custom/footer.tmpl` injects:
|
|
- **Online3DViewer** v0.18.0 (vendored under `public/assets/o3dv/`) for inline 3D preview of CAD raw-file links: 3dm, 3ds, 3mf, amf, bim, brep, dae, fbx, fcstd, glb, gltf, ifc, igs, iges, stp, step, stl, obj, off, ply, wrl.
|
|
- **PlantUML client JS** (vanilla, vendored from `gitea.com/davidsvantesson/plantuml-code-highlight`). Browser calls `https://git.hubris.network/_plantuml/img/<encoded>` — caddy `handle_path /_plantuml/*` rewrites and proxies to the PlantUML server on [apps (105)](105-apps.md) `:8079`.
|
|
- `home.tmpl` is the anonymous landing page (Homesauce hero + sign-in/explore buttons).
|
|
- O3DV binary assets are *not* tracked — `deploy.sh` fetches them on first run.
|
|
|
|
## Auto-deploy
|
|
Push to `dtoro/gitea-customizations` master → gitea webhook → `http://127.0.0.1:9797/deploy` (loopback) → `gitea-deploy-webhook.service` validates HMAC against `/etc/gitea-deploy/secret` → runs `/opt/gitea-customizations/deploy.sh`. Then `systemctl restart gitea` if templates changed.
|
|
|
|
`app.ini` `[webhook] ALLOWED_HOST_LIST` includes `127.0.0.1`, `192.168.8.175`, `192.168.8.205`, `192.168.8.230`, `192.168.8.136`, `192.168.8.77` — every webhook target across the lab. **Don't strip these when editing app.ini.** See [auto-deploy](../infrastructure/auto-deploy.md) for the full list.
|
|
|
|
Git creds for the deploy service: `/etc/gitea-deploy/git-credentials` (mode 600), referenced via `credential.helper = store --file=/etc/gitea-deploy/git-credentials` in the repo's `.git/config` (because `ProtectHome=true` blocks `/root`).
|
|
|
|
## DNS workaround
|
|
LXC has `/etc/hosts` override mapping `auth.hubris.network → 192.168.8.175` (router DNS resolves the public IONOS A record, which is a dead end for LAN clients — see [DNS](../infrastructure/dns.md)). Belt-and-suspenders systemd unit `hubris-hosts-override.service` re-applies it idempotently. Override line is **outside** the `# --- BEGIN PVE ---` markers (Proxmox rewrites inside).
|
|
|
|
## Related
|
|
- [Caddy](121-caddy.md)
|
|
- [DNS](../infrastructure/dns.md)
|
|
- [Auto-deploy pipelines](../infrastructure/auto-deploy.md)
|
|
- [PlantUML server lives on apps (105)](105-apps.md)
|
|
|
|
## Changelog
|
|
|
|
### 2026-04-28 — wiki entry created
|
|
Initial documentation.
|
|
|
|
### 2026-04-22 — `app.ini` ALLOWED_HOST_LIST extended for Artifacto webhook
|
|
Added `192.168.8.205`. See [Artifacto auto-deploy on apps (105)](105-apps.md).
|
|
|
|
### 2026-04-21 — `/etc/hosts` override for `auth.hubris.network` added
|
|
For OIDC integration with [authentik (124)](124-authentik.md). Outside the PVE markers, with a hubris-hosts-override.service for idempotency.
|
|
|
|
### 2026-04-20 — gitea customizations + auto-deploy pipeline shipped
|
|
`dtoro/gitea-customizations` repo created; webhook receiver at loopback `:9797` validates HMAC and runs `deploy.sh`. CAD and PlantUML loaders live in `footer.tmpl`.
|