¶ 🐳 Docker Server Infrastructure Documentation
The documentation provides detailed information about the server architecture, services, and management procedures.
¶ 📌 See Also
- 🔗 Proxmox Host Documentation
- 🗄️ Storage Configuration
- 🕒 Crontab Jobs Analysis
- 🔐 Backup Strategy Documentation
- 🖥️ Virtual Machine Configuration
- 🌐 Network Configuration and Security Analysis
¶ 📚 Table of Contents
- 🏠 Home Automation
Homeassistant, frigate with MQTT integration - 🎞️ Media Services
Media Services Mangement - 📊 Monitoring Stack
Container Stack for monitoring - 📝 WordPress Management
Guide for managing WordPress installations - 🌍 WordPress Sites
Details about all WordPress sites hosted on the server - 💾 Backups
Comprehensive backup strategy and procedures - 🔐 Certificate Management
SSL certificate management and renewal
¶ 🔧 Command References
- ⚙️ Common Server Commands
Frequently used commands for server management - 📦 Docker Compose Commands
Docker Compose commands and examples
¶ 🧩 Core Services
The server hosts the following core services:
- 🔀 Traefik: Reverse proxy for routing traffic to containers
- 🖥️ Portainer: Docker container management UI
- 📚 Wiki.js: Documentation system (which hosts this documentation)
- 🏠 Home Assistant: Home automation platform
- ☁️ Nextcloud: File sharing and synchronization
- 🎬 Plex: Media server
- 🚫 AdGuard Home: Network-wide ad blocking
¶ 📊 Monitoring Stack
The server includes a comprehensive monitoring stack:
- 📈 Prometheus: Metrics collection and storage
- 📉 Grafana: Visualization and dashboards
- 📋 Loki: Log aggregation
- ⚡ Netdata: Real-time performance monitoring
- 🚨 Alert Manager: Alert handling and routing
¶ 🎞️ Media Services
Media services include:
- 🎬 Plex: Media server
- 📺 Sonarr: TV show management
- 🎥 Radarr: Movie management
- 🌐 Jackett: Torrent proxy
- 📬 Overseerr: Media requests
- 🎧 Audiobookshelf: Audiobook management
¶ ⏱️ Scheduled Tasks
The server runs several automated tasks:
- 📦 Daily Docker Backup (1:00 AM):
/home/ali3nz/docker/backups/dockerbackup.sh - 🔐 Certificate Renewal (Bi-monthly):
/home/ali3nz/docker/scripts/renewcerts.sh - 🔄 Docker Restart (Weekly, Tuesday 2:30 AM):
/home/ali3nz/docker/scripts/restartdocker.sh - 🧹 System Cleanup (Daily, 3:15 AM):
/home/ali3nz/docker/scripts/cleanup.sh - 🔧 Nextcloud Maintenance (Every 5 minutes):
/home/ali3nz/docker/scripts/nextcloud.sh
¶ 🚀 Quick Start
For common tasks, refer to these guides:
¶ Troubleshooting
If you encounter issues with the server, check the following:
- Container Status:
docker psto verify containers are running - Docker Logs:
docker logs <container_name>to check for errors - System Resources: Check disk space with
df -h - Network Issues: Check if Traefik is running and properly configured
- Backup Status: Check backup logs at
/home/ali3nz/docker/backups/backup.log
¶ Site Overview
graph TD
Internet[Internet] --> Firewall[Firewall]
Firewall --> DockerHost[Docker Host]
DockerHost --> Traefik[Traefik Reverse Proxy]
DockerHost --> AdGuard[DNS/AdGuard Home]
Traefik --> DockerNetwork[Docker Network]
DockerNetwork --> Websites[Websites Section]
DockerNetwork --> CoreServices[Core Services]
DockerNetwork --> MediaServices[Media Services]
DockerNetwork --> Monitoring[Monitoring Stack]
DockerNetwork --> HomeAutomation[Home Automation]
¶ This is my HomePage (https://gethomepage.dev/) which has most of the services I am running:
¶ The Websites are hosted using Demyx (https://demyx.sh/) which automates updates, certificate renewal and deployment
graph TD
Traefik[Traefik Reverse Proxy] --> Sites[WordPress Sites]
Sites --> Site1[achievable.co.nz]
Sites --> Site2[andysdriving.co.nz]
Sites --> Site3[autoradiators.co.nz]
Sites --> Site4[befranklegal.co.nz]
Sites --> Site5[buildfast.co.nz]
Sites --> Site6[coastfamilies.co.nz]
Sites --> Site7[dynamicnewsystems.com]
Sites --> Site8[evantage.nz]
Sites --> Site9[firstauto.co.nz]
Sites --> Site10[hbpowdercoating.co.nz]
Sites --> Site11[iesolutions.nz]
Sites --> Site12[joelwillfixit.co.nz]
Sites --> Site13[limelightcreative.co.nz]
Sites --> Site14[newinsight.co.nz]
Sites --> Site15[nopotholes.co.nz]
Sites --> Site16[rachelemilysfitnessandhealth.com]
Sites --> Site17[risingflow.com]
Sites --> Site18[securesolutions.co.nz]
Sites --> Site19[smarthomenz.com]
Sites --> Site20[summersketches.com]
%% Showing full container structure for newinsight.co.nz with SFTP and Redis
Site14 --> Nginx14[Nginx Container nx_uq4e4-1]
Nginx14 --> WP14[WordPress Container wp_uq4e4-1]
WP14 --> DB14[MariaDB Container db_uq4e4-1]
WP14 --> Redis14[Redis Cache Container rd_uq4e4-1]
WP14 --> SFTP14[SFTP Container sftp_uq4e4-1]
%% Showing smarthomenz.com with Redis
Site19 --> Nginx19[Nginx Container nx_6rgh2-1]
Nginx19 --> WP19[WordPress Container wp_6rgh2-1]
WP19 --> DB19[MariaDB Container db_6rgh2-1]
WP19 --> Redis19[Redis Cache Container rd_6rgh2-1]
%% Showing standard site
Site1 --> Nginx1[Nginx Container]
Nginx1 --> WP1[WordPress Container]
WP1 --> DB1[MariaDB Container]
%% Showing site with Redis only
Site17 --> Nginx17[Nginx Container]
Nginx17 --> WP17[WordPress Container]
WP17 --> DB17[MariaDB Container]
WP17 --> Redis17[Redis Cache Container]
¶ WordPress Site Configurations
WordPress sites use the following container structures:
-
Standard WordPress Site:
- Nginx Container (
nx_*) - WordPress Container (
wp_*) - MariaDB Container (
db_*)
- Nginx Container (
-
WordPress Site with Redis Cache:
- Nginx Container (
nx_*) - WordPress Container (
wp_*) - MariaDB Container (
db_*) - Redis Container (
rd_*)
- Nginx Container (
-
WordPress Site with SFTP:
- Nginx Container (
nx_*) - WordPress Container (
wp_*) - MariaDB Container (
db_*) - SFTP Container (
sftp_*)
'''
- Nginx Container (
¶ Storage Configuration
| Mount Point | Size | Used | Available | Usage % | Type |
|---|---|---|---|---|---|
| /mnt/movies | 5.5TB | 4.6TB | 936GB | 84% | CIFS (NAS) |
| /mnt/tvshows | 5.5TB | 4.9TB | 652GB | 89% | CIFS (NAS) |
| / (root) | 440GB | 164GB | 253GB | 40% | ext4 on VM 2x NVME 512GB Drives in ZFS Configuration on Proxmox host |
¶ Core Services
graph TD
Traefik[Traefik Reverse Proxy] --> CoreServices[Core Services]
CoreServices --> Wiki[Wiki.js]
CoreServices --> Nextcloud[Nextcloud]
CoreServices --> HomeAssistant[Home Assistant]
CoreServices --> Portainer[Portainer]
CoreServices --> AdGuard[AdGuard Home]
Wiki --> PostgreSQL[PostgreSQL Database]
Nextcloud --> MariaDB1[MariaDB Database]
Nextcloud --> RedisNC[Redis Cache]
HomeAssistant --- Mosquitto[MQTT Broker]
Mosquitto --- Frigate[Frigate NVR]
Portainer --> PortainerAgent[Portainer Agent]
¶ Media Services
graph TD
Traefik[Traefik Reverse Proxy] --> MediaServices[Media Services]
MediaServices --> Plex[Plex Media Server]
MediaServices --> MediaTools[Media Tools]
MediaServices --> SpecializedMedia[Specialized Media]
Plex --> MediaStorage[Media Storage]
MediaTools --> Sonarr[Sonarr - TV Shows]
MediaTools --> Radarr[Radarr - Movies]
MediaTools --> Jackett[Jackett - Torrent Proxy]
MediaTools --> Overseerr[Overseerr - Requests]
SpecializedMedia --> Audiobookshelf[Audiobookshelf]
SpecializedMedia --> Mealie[Mealie - Recipes]
¶ Monitoring Stack
graph TD
MetricsCollection[Metrics Collection] --> Prometheus[Prometheus]
LogCollection[Log Collection] --> Loki[Loki]
NodeExporter[Node Exporter] --> Prometheus
FortigateExporter[Fortigate Exporter] --> Prometheus
Promtail[Promtail] --> Loki
Prometheus --> Grafana[Grafana Dashboards]
Loki --> Grafana
Prometheus --> AlertManager[Alert Manager]
AlertManager --> Notifications[Notification Channels]
¶ Home Automation System
graph TD
Devices[Smart Devices] --> HomeAutomation[Home Automation]
IoTDevices[IoT Devices] --> HomeAssistant[Home Assistant]
IPCameras[IP Cameras] --> Frigate[Frigate]
Frigate --> Mosquitto[MQTT Broker]
Mosquitto --> HomeAssistant
SmartDevices[Smart Home Devices] --> Mosquitto
HomeAssistant --> Dashboards[Dashboards]
¶ Backup System
graph TD
BackupSources[Backup Sources] --> BackupProcess[Backup Process]
WPBackups[WordPress Backups] --> BackupScript[dockerbackup.sh]
DockerConfig[Docker Config] --> BackupScript
NextcloudData[Nextcloud Data] --> BackupScript
BackupScript --> OneDriveStorage[OneDrive via rclone]
CleanupScript[cleanup.sh] --> OneDriveStorage
¶ Certificate Management
graph TD
LetsEncrypt[Let's Encrypt] --> CertTypes[Certificate Types]
CertTypes --> WPCerts[WordPress Certs]
CertTypes --> SpecialCerts[Special Service Certs]
CertTypes --> FortigateCert[Fortigate Cert]
SpecialCerts --> RenewScript[renewcerts.sh]
FortigateCert --> OneDriveCopy[OneDrive Copy]
RenewScript --> ContainerCopy[Copy to Containers]
ContainerCopy --> Services[Services]
WPCerts --> Traefik[Traefik Container]
¶ 🏗️ Server Architecture
The server hosts multiple services and websites using Docker containers, orchestrated primarily through:
- 🔀 Traefik: Reverse proxy for routing traffic to containers
- 🖥️ Portainer: Container management interface
- 📦 Demyx: WordPress container management
¶ 🧩 Core Services
| 🔧 Service | 📋 Purpose | 🌐 URL | 📦 Container Name |
|---|---|---|---|
| 📚 Wiki.js | Documentation system | wiki.risingflow.com |
wikijs |
| 🏠 Home Assistant | Home automation | home.risingflow.com |
homeassistant |
| ☁️ Nextcloud | File sharing/sync | cloud.risingflow.com |
nextcloud |
| 🎬 Plex | Media server | plex.risingflow.com |
plex |
| 🖥️ Portainer | Docker management | portainer.risingflow.com |
portainer |
| 🚫 AdGuard Home | Network-wide ad blocking | adguard.risingflow.com |
adguardhome |
| 💻 Code Server | VS Code in browser | code.risingflow.com |
code-server |
¶ 📊 Monitoring Stack
| 📊 Service | 📋 Purpose | 📦 Container Name |
|---|---|---|
| ⚡ Netdata | Real-time monitoring | netdata |
| 📈 Prometheus | Metrics collection | prometheus |
| 📉 Grafana | Monitoring dashboards | grafana |
| 📋 Loki | Log aggregation | loki |
| 📤 Promtail | Log collection | promtail |
| 🖥️ Node Exporter | System metrics | node-exporter |
| 🚨 Alert Manager | Alert routing | alertmanager |
¶ 🎞️ Media Management
| 🎬 Service | 📋 Purpose | 📦 Container Name |
|---|---|---|
| 🎥 Radarr | Movie management | radarr |
| 📺 Sonarr | TV show management | sonarr |
| 🌐 Jackett | Torrent proxy | jackett |
| 📬 Overseerr | Media requests | overseerr |
¶ 🌐 Hosted Websites
The server hosts multiple WordPress websites, each with a dedicated set of containers (nginx, WordPress, MariaDB):
| 🌍 Website | 📦 Container Prefix | 📝 Description |
|---|---|---|
summersketches.com |
summersketchescom |
Art portfolio site |
smarthomenz.com |
smarthomenzcom |
Smart home information |
securesolutions.co.nz |
securesolutionsconz |
Security services |
risingflow.com |
risingflowcom |
Main company site |
rachelemilysfitnessandhealth.com |
rachelemilysfitnessandhealthcom |
Fitness coaching |
nopotholes.co.nz |
nopotholesconz |
Road maintenance |
newinsight.co.nz |
newinsightconz |
Business insights |
limelightcreative.co.nz |
limelightcreativeconz |
Creative agency |
joelwillfixit.co.nz |
joelwillfixitconz |
Repair services |
iesolutions.nz |
iesolutionsnz |
IT solutions |
hbpowdercoating.co.nz |
hbpowdercoatingconz |
Powder coating service |
firstauto.co.nz |
firstautoconz |
Automotive service |
evantage.nz |
evantagenz |
Business advantage |
dynamicnewsystems.com |
dynamicnewsystemscom |
System solutions |
coastfamilies.co.nz |
coastfamiliesconz |
Family services |
buildfast.co.nz |
buildfastconz |
Construction services |
befranklegal.co.nz |
befranklegalconz |
Legal services |
autoradiators.co.nz |
autoradiatorsconz |
Auto radiator service |
andysdriving.co.nz |
andysdrivingconz |
Driving school |
achievable.co.nz |
achievableconz |
Personal development |
🔗 See 📁 WordPress Sites for detailed information about each site.
¶ 🛡️ Backup Strategy
¶ 🗂️ Daily Docker Backup
- 🕒 Schedule: Daily at 1:00 AM
- 📝 Script:
/home/ali3nz/docker/backups/dockerbackup.sh - ☁️ Storage: OneDrive mounted via rclone
- ♻️ Retention: 5 days
- 📂 Contents:
- Docker volume data from Demyx (WordPress sites)
- Docker config from
/home/ali3nz/dockerand/etc/docker - Extra files from
/opt/docker
¶ 📝 WordPress Backups
- Managed by Demyx container
- Only the latest backup per site is retained via
cleanup.sh
🔗 See 🧾 Backup Procedures for more details.
¶ 🔐 Certificate Management
- 🕒 Schedule: Bi-monthly (1st of even months, midnight)
- 📝 Script:
/home/ali3nz/docker/scripts/renewcerts.sh - 🌐 Domains:
home.risingflow.comcloud.risingflow.comfortigate.risingflow.com
- 🔁 Certificates distributed post-renewal to relevant containers
🔗 See 🔐 Certificate Management for more.
¶ 🧹 System Maintenance
¶ 🔄 Weekly Docker Restart
- 🕒 Time: Tuesday 2:30 AM
- 📝 Script:
/home/ali3nz/docker/scripts/restartdocker.sh - ⚙️ Actions: Remount FS, stop/start containers, restart Docker
¶ 🧼 Daily Cleanup
- 🕒 Time: 3:15 AM
- 📝 Script:
/home/ali3nz/docker/scripts/cleanup.sh - ⚙️ Actions: System update, Docker pruning, log cleanup, backup trim
¶ ☁️ Nextcloud Maintenance
- 🕒 Frequency: Every 5 minutes
- 📝 Script:
/home/ali3nz/docker/scripts/nextcloud.sh - ⚙️ Includes: DB cleanup, scheduled jobs, weekly Sunday tasks
🔗 See 🧽 Maintenance Procedures
¶ 🧯 Troubleshooting
¶ 1. ❌ Website Unavailable
docker logs demyx_traefikdocker ps | grep <website-prefix>
¶ 2. ⚠️ DB Issues
docker logs <db-container>- Check container networking
¶ 3. 📛 Certificate Errors
cat /home/ali3nz/docker/scripts/renew_certs.logsh /home/ali3nz/docker/scripts/renewcerts.sh
¶ 4. 🔁 Backup Failures
cat /home/ali3nz/docker/backups/backup.logdf -h | grep onedrive
¶ 5. 🧱 Disk Space Issues
- Run cleanup:
sh cleanup.sh df -handdu -sh /var/lib/docker/*
¶ 📘 Additional Resources
¶ 📚 Links to Service Docs
- 📊 Grafana
- 🚫 AdGuard
- 🏠 HomeAssistant
- 🍲 Mealie
- 🤖 SecureAI
- 🖥️ Portainer
- ☁️ NextCloud
- 📂 Paperless
- 📚 Zotero
- 💾 Backups
- 🌐 CloudFlareTunnel
- 💻 CodeServer
- 📰 FreshRSS
- 🏠 Homepage
- 🚀 SpeedTestTracker
- 📡 UnifiController
- 📶 Uptime-Kuma
- ✅ Vikunja
- 🔁 WatchTower
- 🌐 WebMap
- 📚 Wiki.js
- ✉️ SMTP Server
- 🎧 AudioBookShelf
- 🎬 Plex
- 🌐 Jackett
- 📺 Sonarr