Skip to content

Docker Infrastructure Documentation

Binding
Set

Application error: a client-side exception has occurred while loading gymplan.rbnk.uk (see the browser console for more information).

Welcome to the comprehensive documentation for the self-hosted Docker infrastructure on rbnk.uk.

Auto-rebuild enabled: Documentation automatically rebuilds when changes are detected.

🆕 What's New

December 2025

  • CodeScribe - Code documentation generator with REST API, MCP server, and CLI for AI context generation (docs)
  • Browser Use - LLM-powered browser automation service with REST API, Gradio UI, and MCP integration (docs)
  • Claude Code Safety Hooks - Comprehensive safety infrastructure with pre/post tool hooks, audit logging, and dangerous command blocking (docs)
  • Backup Infrastructure Overhaul - Enhanced dual backup system with Prometheus metrics, Grafana dashboards, and improved R2 integration
  • Supabase Enhancements - Added Realtime, Edge Functions, Analytics, Vector (logging), and ImgProxy services

November 2025

  • Zurg + Jellyfin - Media streaming stack with Real-Debrid integration and hardware transcoding
  • Docs Auto-Rebuild - Automatic documentation rebuilding on git push with llms.txt generation

August 2025

  • Iodine DNS Tunnel - DNS tunneling service optimized for captive portal bypass (port 53 with AdGuard forwarding)
  • Coolify-Traefik Bridge - Automated routing of Coolify services through main Traefik with DNS record creation
  • Authentik SSO - Single sign-on with dual-route authentication strategy
  • StackWiz MCP - Model Context Protocol server enabling AI-powered Docker stack management
  • Monitoring Overhaul - Comprehensive Prometheus, Grafana, Loki, and AlertManager improvements

📚 Documentation Index

Architecture

Services

Core Infrastructure

Data & Development

  • Supabase - PostgreSQL-based backend-as-a-service
  • Pocketbase - Lightweight SQLite alternative
  • Gitea - Self-hosted Git service with GitHub mirroring

AI & Automation

  • Browser Use - LLM-powered browser automation with REST API and Gradio UI
  • CodeScribe - Code documentation generator for AI context with MCP server
  • Ollama - Local LLM service with dual-disk setup
  • Open WebUI - AI chat interface
  • LiteLLM - Unified LLM API proxy
  • LiteLLM Virtual Keys - Virtual keys implementation for secure LLM access
  • n8n - Workflow automation platform with visual programming interface
  • StackWiz MCP - Model Context Protocol server for Docker stack management

Storage & Backup

  • Rclone - Cloud storage backup and synchronization service with infrastructure backups to Cloudflare R2
  • Paperless-AI - AI-powered document management with intelligent search

Media & Streaming

  • Zurg + Jellyfin - Media streaming stack with Real-Debrid integration
  • AIOStreams - Unified streaming addon management
  • Metube - Web-based YouTube downloader for video and audio content

Utilities

  • Watchtower - Automated container updates with service exclusions

Operations

Development

Troubleshooting

Security

  • Git Security - Dual repository security model, secret filtering, and sync workflows

Version Control

Reference

🚀 Quick Start

  1. Deploy a new service: Use stackwiz to create a new service stack
  2. Access services: All services available at https://*.rbnk.uk
  3. View logs: docker compose -f SERVICE/docker-compose.yml logs -f
  4. Backup data: Run /srv/dockerdata/_scripts/SERVICE-backup.sh
  5. Access Git: Browse code at https://gitea.rbnk.uk or clone via SSH/HTTPS
  6. AI Automation: Use StackWiz MCP with Claude to create and manage Docker stacks automatically

🏗️ Infrastructure Overview

┌─────────────────────────────────────────────────────────────┐
│                        Internet                              │
└────────────────────┬────────────────────────────────────────┘
                     │ HTTPS (*.rbnk.uk)
           ┌─────────┴──────────┐
           │   Cloudflare DNS   │
           │  (SSL Certificates)│
           └─────────┬──────────┘
                     │
           ┌─────────┴──────────┐
           │     Traefik        │ ← Reverse Proxy
           │  (Docker Labels)   │   Auto-SSL
           └─────────┬──────────┘
                     │
        ┌────────────┴────────────┬─────────────┬──────────────┐
        │                         │             │              │
┌───────┴────────┐      ┌────────┴───────┐  ┌──┴────────┐  ┌──┴────────┐
│    Supabase    │      │   Open WebUI   │  │  LiteLLM  │  │   Gitea   │
│  (PostgreSQL)  │      │  (AI Chat UI)  │  │ (LLM API) │  │   (Git)   │
└────────────────┘      └────────────────┘  └───────────┘  └───────────┘

┌────────────────┐      ┌─────────────────────┐    ┌────────────────┐
│     Rclone     │      │   Monitoring Stack  │    │  n8n + MCP     │
│ (Cloud Backup) │      │ (Prometheus/Grafana)│    │  (Automation)  │
│  & R2 Storage  │      └─────────────────────┘    └────────────────┘
└────────────────┘                                                    

┌─────────────────────────────────────────────────────────────────┐
│                    Notification Stack                            │
│          (Apprise + ntfy + Mailrise + Uptime Kuma)             │
└─────────────────────────────────────────────────────────────────┘

💾 Storage Layout

  • System Disk (/dev/sda - 100GB): OS and system files (29% used)
  • Data Disk (/dev/sdb - 500GB): /srv/dockerdata - All Docker data (39% used)

🔐 Version Control

The infrastructure uses a dual repository strategy for secure code management:

  • Private Repository (Gitea): https://gitea.rbnk.uk - Contains all files including sensitive configuration
  • Public Repository (GitHub): Public mirror with sensitive files automatically filtered out
  • Automated Sync: Changes pushed to Gitea are automatically synced to GitHub with security filtering
  • Access: Gitea provides full Git functionality with web UI for code browsing and management

🔑 Key Principles

  1. Service Isolation: Each service in its own directory with dedicated docker-compose.yml
  2. Automatic SSL: Traefik + Cloudflare handles all SSL certificates
  3. Network Security: Internal services (databases) not exposed publicly
  4. Standardized Structure: Consistent patterns across all services
  5. Infrastructure as Code: Everything configured through files, not UIs
  6. Secure Version Control: Private Gitea instance with automated public GitHub sync

⚠️ Important Notes

  • Disk Space: System disk (100GB, 29% used), Data disk (500GB, 39% used) - healthy capacity
  • Backups: Automated dual backup system - cloud backups at 2 AM, infrastructure backups to R2 at 4 AM
  • Secrets: Stored in .env files - ensure proper permissions (640)
  • Container Updates: Watchtower handles automatic updates but critical services (databases, infrastructure) are protected
  • Git Security: Never commit sensitive files to public repos - use Gitea for private code

📝 Contributing to Docs

When adding documentation: 1. Include the "why" not just the "how" 2. Add examples where helpful 3. Cross-reference related documentation 4. Update this index when adding new guides

Last Updated: December 2025 - Added CodeScribe code documentation service with MCP server