From 0c00a3cb4d8eeda89cd91bda6a673c2b18758568 Mon Sep 17 00:00:00 2001 From: "Rasmus \"Pez\" Wejlgaard" Date: Tue, 9 Jun 2026 19:49:16 +0100 Subject: [PATCH] docs: remove decommissioned Miniflux refs; fix status-page + minor drift (#129) --- ansible/services/README.md | 1 - ansible/services/caddy/README.md | 1 - ansible/services/status-page/update-status.sh | 2 -- docs/hosts/london-b.md | 3 +-- docs/networking.md | 1 - docs/secrets.md | 4 ++-- docs/services.md | 6 +++--- 7 files changed, 6 insertions(+), 12 deletions(-) diff --git a/ansible/services/README.md b/ansible/services/README.md index 99c9f81..c649c4d 100644 --- a/ansible/services/README.md +++ b/ansible/services/README.md @@ -29,7 +29,6 @@ There is **no** per-host subdirectory — services are named by what they are, a | navidrome | Docker | london-b | Music streaming | | bookshelf | Docker | london-b | Ebook/audiobook manager (Readarr revival) | | slskd | Docker | london-b | Soulseek client | -| miniflux | Docker | london-b | RSS reader (with postgres) | | smartctl-exporter | Docker | london-b, copenhagen-a | SMART metrics | | plex-exporter | Docker | london-b | Plex metrics | | octopus-exporter | Docker | london-c | Octopus Energy metrics | diff --git a/ansible/services/caddy/README.md b/ansible/services/caddy/README.md index 84351b6..aa61cca 100644 --- a/ansible/services/caddy/README.md +++ b/ansible/services/caddy/README.md @@ -80,7 +80,6 @@ forward_auth localhost:9091 { | Radarr, Sonarr, Lidarr, Bookshelf | Authelia | Media management | | Prowlarr, Transmission (download) | Authelia | Download tools | | slskd (Soulseek) | Authelia | P2P client | -| Miniflux (RSS) | Authelia | RSS reader | | Apps dashboard | Authelia | Internal apps page | | Jellyfin, Plex | Own auth | Have built-in user management | | Overseerr, Jellyseerr | Own auth | Have built-in user management | diff --git a/ansible/services/status-page/update-status.sh b/ansible/services/status-page/update-status.sh index 96764d1..86a3396 100755 --- a/ansible/services/status-page/update-status.sh +++ b/ansible/services/status-page/update-status.sh @@ -25,7 +25,6 @@ SERVICE_MAP["100.84.65.101:8989"]="Sonarr" SERVICE_MAP["100.84.65.101:9091"]="Transmission" SERVICE_MAP["100.84.65.101:9696"]="Prowlarr" SERVICE_MAP["localhost:9091"]="Authelia" -SERVICE_MAP["100.84.65.101:8181"]="Miniflux" SERVICE_MAP["localhost:3000"]="Forgejo" # Desired display order @@ -46,7 +45,6 @@ DISPLAY_ORDER=( "100.84.65.101:8787" "100.84.65.101:9696" "100.84.65.101:9091" - "100.84.65.101:8181" "localhost:3000" ) diff --git a/docs/hosts/london-b.md b/docs/hosts/london-b.md index 305ee53..02f93ab 100644 --- a/docs/hosts/london-b.md +++ b/docs/hosts/london-b.md @@ -67,7 +67,6 @@ RAIDZ1 tolerates one drive failure per vdev. With this many drives and this much | Service | Port | URL | |---------|------|-----| | Nextcloud AIO | 11000 | cloud.pez.sh (internal) | -| Miniflux | 8181 | rss.pez.sh | | slskd (Soulseek) | 5030 | soulseek.pez.sh | | Syncthing (`syncthing@pez`) | 8384 | (LAN / Tailscale) | | Ollama | 11434 | (Tailscale) | @@ -96,7 +95,7 @@ The media automation suite and several supporting services run as native systemd | node_exporter | prometheus-node-exporter | apt-managed | | Alloy | alloy | Grafana Alloy, fleet-managed config | -Docker services: Nextcloud AIO, Jellyseerr, Navidrome, slskd, Miniflux (with postgres sidecar), smartctl-exporter, plex-exporter. +Docker services: Nextcloud AIO (manually managed via AIO mastercontainer, not in this repo), Jellyseerr, Navidrome, slskd, smartctl-exporter, plex-exporter. Snap: Overseerr (`latest/beta` channel). diff --git a/docs/networking.md b/docs/networking.md index 665c962..35bd65b 100644 --- a/docs/networking.md +++ b/docs/networking.md @@ -98,7 +98,6 @@ All subdomains are Cloudflare-proxied and terminate at helsinki-a. Hosts marked | jellyfin.pez.sh / .solutions | london-b:8096 | Own auth | | plex.pez.sh / .solutions | london-b:32400 | Own auth | | music.pez.sh | london-b:4533 (Navidrome) | Own auth | -| rss.pez.sh | london-b:8181 (Miniflux) | Authelia | | request.pez.sh / .solutions | london-b:5055 (Jellyseerr) | Own auth | | jellyfin-requests.pez.sh / .solutions | london-b:5056 (Overseerr) | Own auth | | radarr.pez.sh / .solutions | london-b:7878 | Authelia | diff --git a/docs/secrets.md b/docs/secrets.md index 3f72d05..0a9177b 100644 --- a/docs/secrets.md +++ b/docs/secrets.md @@ -14,7 +14,7 @@ Encrypted files use `.enc.` in their extension: ``` services/authelia/config.enc.yml # encrypted YAML -services/miniflux/miniflux.enc.env # encrypted env file +services//.enc.env # encrypted env file (convention) terraform/secrets.enc.yaml # encrypted Terraform vars ansible/group_vars/all/secrets.enc.yml ``` @@ -80,7 +80,7 @@ sops -d services/authelia/config.enc.yml ```bash # If you have a plaintext file you want to encrypt in-place: -sops -e -i services/miniflux/miniflux.enc.env +sops -e -i services//.enc.env ``` ### Add a new recipient diff --git a/docs/services.md b/docs/services.md index e4846c2..645e019 100644 --- a/docs/services.md +++ b/docs/services.md @@ -13,6 +13,7 @@ Complete map of every service in the fleet — what it does, where it runs, how | Bitwarden (Vaultwarden) | 8443, 8080 | Docker | Own auth | bitwarden.pez.sh | | Bitwarden MariaDB | 3306 (internal) | Docker | — | (Vaultwarden backing DB) | | Forgejo | 3000 (HTTP), 2222 (SSH) | Docker | Own auth | git.pez.sh | +| Apps dashboard | — | Static (`/srv/apps`, Caddy) | Authelia | apps.pez.sh | Caddy is the single entry point for all public traffic and runs as a native apt-managed systemd service so it can bind 80/443 directly. Everything else on this host runs in Docker. @@ -52,8 +53,7 @@ The arr stack pipeline: Jellyseerr/Overseerr accept requests → Radarr/Sonarr/L | Service | Port | Deployment | Auth | URL | |---------|------|-----------|------|-----| -| Nextcloud AIO | 11000 | Docker | Own auth | cloud.pez.sh (internal/Tailscale) | -| Miniflux | 8181 | Docker (with postgres sidecar) | Authelia | rss.pez.sh | +| Nextcloud AIO | 11000 | Docker (manually managed via AIO mastercontainer — not in this repo) | Own auth | cloud.pez.sh (internal/Tailscale) | | slskd (Soulseek) | 5030 | Docker | Authelia | soulseek.pez.sh | | Syncthing (`syncthing@pez`) | 8384 | Native (apt) | Own auth | (LAN/Tailscale only) | | Samba (`smbd`) | 445 | Native (apt) | Local users | (LAN/Tailscale only) | @@ -129,7 +129,7 @@ Plus host-specific exporters (smartctl, plex, octopus) called out above. See [mo Services fall into two categories: **Behind Authelia** (SSO via Caddy `forward_auth`): -- Radarr, Sonarr, Lidarr, Bookshelf, Prowlarr, Transmission, Soulseek, Miniflux, apps.pez.sh +- Radarr, Sonarr, Lidarr, Bookshelf, Prowlarr, Transmission, Soulseek, apps.pez.sh **Own auth** (handle login themselves): - Bitwarden, Forgejo, Plex, Jellyfin, Navidrome, Jellyseerr, Overseerr, Proxmox, poste.io