Document dockerization decisions and status

- Mark dockerization task as complete
- Document reasons for non-dockerized services:
  - Glances/Netdata: Need full system access for monitoring
  - Syncthing: Docker permission issues with config directory
  - Nginx: Reverse proxy requires system integration
- Update service status: Copyparty now dockerized
- Remove Cockpit references (removed from system)
- Update VNC documentation to reflect temporary usage pattern
This commit is contained in:
2025-10-06 22:45:58 +02:00
parent 7eaf16f53e
commit d0727bd8a7

19
TODO.md
View File

@@ -23,7 +23,7 @@
- [ ] WireGuard VPN server configuration - [ ] WireGuard VPN server configuration
- [ ] UFW firewall setup and rules - [ ] UFW firewall setup and rules
- [ ] fail2ban for intrusion prevention - [ ] fail2ban for intrusion prevention
- [ ] Security enhancement for VNC connections (in the meantime: only run the vnc service for short time while we are using it) - [x] VNC setup for remote desktop access *(TigerVNC installed, enabled temporarily via SSH when needed)*
## Git & Development ## Git & Development
- [x] Gitea Docker container setup *(completed - running on port 3000)* - [x] Gitea Docker container setup *(completed - running on port 3000)*
@@ -91,9 +91,8 @@ Lower priority - mostly using SSH or TTY anyways
- [x] Shared media folders with Copyparty (Music, Videos, shared) - [x] Shared media folders with Copyparty (Music, Videos, shared)
- [ ] Set up self-hosted chat server (Matrix or Mattermost) - [ ] Set up self-hosted chat server (Matrix or Mattermost)
- [ ] Install monitoring and management tools *(in progress)* - [ ] Install monitoring and management tools *(in progress)*
- [ ] Portainer (Docker management with built-in auth) - [x] Portainer (Docker management with built-in auth)
- [ ] Glances (system monitoring with nginx basic auth) - [x] Glances (system monitoring with nginx basic auth)
- [ ] Cockpit (system administration with PAM auth)
- [ ] lazydocker (terminal Docker management) - [ ] lazydocker (terminal Docker management)
- [ ] Configure nginx basic auth for Glances endpoint - [ ] Configure nginx basic auth for Glances endpoint
- [ ] Update nginx reverse proxy config for new admin services - [ ] Update nginx reverse proxy config for new admin services
@@ -101,14 +100,16 @@ Lower priority - mostly using SSH or TTY anyways
- [ ] Set up Nextcloud for advanced file synchronization features - [ ] Set up Nextcloud for advanced file synchronization features
- Copyparty covers basic file sharing needs - Copyparty covers basic file sharing needs
- [x] Set up reverse proxy with SSL certificates *(completed - HTTPS working with auto-renewal)* - [x] Set up reverse proxy with SSL certificates *(completed - HTTPS working with auto-renewal)*
- [ ] Make sure all services are dockerized unless we have a good reason not to - [x] Make sure all services are dockerized unless we have a good reason not to
- Gitea: ✅ Docker - Gitea: ✅ Docker
- Jellyfin: ✅ Docker - Jellyfin: ✅ Docker
- Copyparty: ❌ systemd service (consider dockerizing) - qBittorrent: ✅ Docker
- Nginx: ❌ system package (fine as-is for reverse proxy)
- Portainer: ✅ Docker - Portainer: ✅ Docker
- Glances: ❌ system package (web server mode) - Copyparty: ✅ Docker
- Cockpit: ❌ system package (system integration required) - Glances: ❌ systemd (needs full system access for accurate monitoring)
- Netdata: ❌ systemd (needs full system access for accurate monitoring)
- Syncthing: ❌ systemd (Docker permission issues with config directory)
- Nginx: ❌ system package (reverse proxy, system integration required)
## Hardware & Troubleshooting ## Hardware & Troubleshooting
- [ ] Fix bluetooth audio connectivity issues - [ ] Fix bluetooth audio connectivity issues