Skip to content

Services Documentation

This directory contains detailed documentation for each service deployed in the infrastructure.

Available Services

Core Infrastructure

  1. Traefik - Reverse proxy and SSL termination
  2. Automatic HTTPS via Cloudflare
  3. Service discovery and routing
  4. Load balancing and health checks

  5. Authentication integration

  6. Authentik - OAuth2/OIDC authentication provider

  7. Centralized single sign-on (SSO)
  8. User and group management
  9. Forward authentication for services

  10. Session management and security policies

  11. Supabase - Backend-as-a-Service platform

  12. PostgreSQL database with extensions
  13. Authentication service (GoTrue)
  14. REST API generation (PostgREST)
  15. Object storage
  16. Real-time subscriptions

Authentication Integration

The infrastructure implements a comprehensive dual-route authentication strategy using Authentik that provides:

  • Centralized Single Sign-On (SSO): One authentication system for all services
  • Browser Protection: Web interfaces secured by OAuth2/OIDC authentication
  • API Accessibility: Programmatic access maintained without authentication barriers
  • Priority-Based Routing: Smart routing that differentiates between human and machine access

Protected Services

The following services are currently protected by Authentik authentication:

  • Infrastructure: Prometheus, Portainer, Rclone, Glance
  • Applications: LiteLLM, Apprise, Paperless-AI, Metube

Documentation

Development Tools

  1. Gitea - Self-hosted Git service
  2. Git repository hosting
  3. Web-based repository management
  4. Issue tracking and pull requests
  5. Webhook integrations

  6. GitHub sync capabilities

  7. Pocketbase - Lightweight backend for rapid development

  8. SQLite database
  9. Built-in auth and user management
  10. Real-time subscriptions
  11. File storage

  12. Admin dashboard

  13. CodeScribe - Code documentation generator for AI context

  14. Directory scanning with .gitignore support
  15. Markdown documentation generation
  16. Security scanning for secrets detection
  17. Token counting for multiple AI models
  18. REST API, MCP server, and CLI interfaces
  19. Remote repository processing (GitHub, GitLab, etc.)

AI/ML Services

  1. LiteLLM - AI/LLM proxy service
  2. Unified API for multiple LLM providers
  3. Request routing and load balancing
  4. Usage tracking and analytics
  5. Virtual keys for cost control and security isolation

  6. Virtual Keys Implementation - Enhanced security and budget management

  7. Ollama - Local LLM runtime

  8. Run open-source models locally
  9. Model management
  10. GPU acceleration support

  11. REST API interface

  12. Open WebUI - Web interface for LLMs

  13. Chat interface for multiple models
  14. Conversation management
  15. Model switching

  16. Integration with Ollama and OpenAI-compatible APIs

  17. Paperless-AI - AI-powered document management

  18. Intelligent document classification and tagging
  19. OCR with multiple language support
  20. RAG (Retrieval-Augmented Generation) for semantic search
  21. Natural language document queries
  22. Automated workflow processing

Automation & Workflows

  1. n8n - Workflow automation platform
  2. Visual workflow builder
  3. API integrations with infrastructure services
  4. Scheduled and webhook-triggered workflows

  5. Custom nodes and community integrations

  6. StackWiz MCP - AI-powered Docker stack management

  7. Natural language commands for stack operations
  8. Model Context Protocol (MCP) server
  9. Integrates with Claude, Cline, and other AI assistants
  10. Automated Docker Compose generation and management

Monitoring & Observability

  1. Monitoring Stack - Complete observability platform
  2. Prometheus for metrics collection
  3. Grafana for visualization
  4. Loki for log aggregation
  5. AlertManager for alert routing
  6. Multiple exporters for comprehensive metrics

Network Services

  1. AdGuard Home - DNS filtering and ad blocking
  2. Network-wide ad and tracker blocking
  3. Malware and phishing protection
  4. Custom filtering rules and whitelists
  5. DNS-over-HTTPS and DNS-over-TLS support
  6. Detailed query statistics and analytics

Notification & Communication

  1. Notification Stack - Unified notification system
  2. Apprise for 100+ notification service integrations
  3. ntfy for push notifications with authentication
  4. Mailrise SMTP gateway for legacy applications
  5. Uptime Kuma for service monitoring and alerts

Backup & Storage

  1. Rclone - Cloud storage backup and sync service
  2. Automated backups to cloud storage providers
  3. Scheduled synchronization of critical data
  4. Support for 70+ cloud storage backends
  5. Encrypted transfers and storage
  6. Bandwidth limiting and scheduling

Container Management

  1. Watchtower - Automated Docker container updates
  2. Monitors running containers for newer image versions
  3. Graceful container restarts with minimal downtime
  4. Email notifications for all update activities
  5. Selective exclusion of critical infrastructure services
  6. Automatic cleanup of old Docker images

Media & Content

  1. Metube - YouTube and video platform downloader
  2. Web-based interface for video downloads
  3. Support for 1000+ video platforms via yt-dlp
  4. Queue management with concurrent downloads
  5. Format and quality selection

  6. Subtitle support and embedding

  7. Stremthru - Streaming proxy service for debrid providers

  8. Unified API for multiple debrid services (Real-Debrid, AllDebrid, etc.)
  9. IP restriction bypassing through proxy streaming
  10. Improved compatibility with streaming players
  11. Redis caching for performance optimization

  12. Integration with TMDB, Trakt, and GitHub APIs

  13. AIOStreams - Lightweight Stremio addon for debrid services

  14. Simple alternative to Stremthru with no database dependencies
  15. Direct Stremio integration with preset addon configurations
  16. Support for Real-Debrid, AllDebrid, Premiumize, and 5+ other services
  17. Local SQLite storage for configuration and caching
  18. Web-based configuration interface with custom addon support

Service Categories

Databases

  • PostgreSQL (via Supabase) - Primary relational database
  • SQLite (via Pocketbase) - Lightweight application databases

Authentication

  • Supabase Auth - Full-featured authentication service
  • Pocketbase Auth - Simple auth for small applications
  • Gitea Auth - Git service user management

Storage

  • Supabase Storage - S3-compatible object storage
  • Pocketbase Storage - File attachments for records
  • Gitea LFS - Large file storage for Git
  • Rclone - Cloud storage backup and synchronization

API Services

  • PostgREST (Supabase) - Auto-generated REST APIs
  • Pocketbase API - REST and realtime APIs
  • Gitea API - Repository and user management
  • LiteLLM API - Unified LLM access

Quick Start Guides

Deploy a New Service

# Using StackWiz for generic services
stackwiz service-name

# For Pocketbase-based apps
stackwiz --pocketbase app-name

# With automatic DNS creation
stackwiz --create-dns service-name

Access Services

All services are accessible via HTTPS with automatic SSL certificates:

  • Traefik Dashboard: Internal only (port 8080)
  • Supabase Studio: https://supabase.rbnk.uk
  • Gitea: https://gitea.rbnk.uk
  • LiteLLM: https://litellm.rbnk.uk
  • n8n: https://n8n.rbnk.uk
  • Grafana: https://grafana.rbnk.uk
  • Prometheus: https://prometheus.rbnk.uk (protected)
  • AdGuard: https://dns.rbnk.uk
  • Rclone: https://rclone.rbnk.uk (web GUI interface)
  • Apprise: https://apprise.rbnk.uk (notification aggregator)
  • ntfy: https://ntfy.rbnk.uk (push notifications)
  • Uptime Kuma: https://uptime.rbnk.uk (service monitoring)
  • Metube: https://metube.rbnk.uk (video downloader)
  • Stremthru: https://stremthru.rbnk.uk (streaming proxy)
  • AIOStreams: https://aiostreams.rbnk.uk (Stremio addon for debrid services)
  • CodeScribe: https://codescribe.rbnk.uk (code documentation API)
  • Other services: https://[service-name].rbnk.uk

Common Operations

  1. View Service Logs: 

    docker compose -f [service]/docker-compose.yml logs -f

  2. Restart Service: 

    docker compose -f [service]/docker-compose.yml restart

  3. Update Service: 

    docker compose -f [service]/docker-compose.yml pull
docker compose -f [service]/docker-compose.yml up -d

  4. Check Service Health: 

    docker ps | grep [service-name]
curl https://[service].rbnk.uk/health

Service Dependencies

graph TD
    A[Traefik] --> B[Supabase]
    A --> C[Gitea]
    A --> D[LiteLLM]
    A --> E[Pocketbase Apps]
    A --> F[Open WebUI]
    A --> I[n8n]
    A --> K[StackWiz MCP]
    A --> N[CodeScribe]

    B --> G[PostgreSQL]
    C --> G

    F --> D
    F --> H[Ollama]

    I --> B
    I --> C
    I --> J[External APIs]

    K --> L[Docker API]
    K --> M[File System]

    N --> M
    N --> O[Git Repos]

    style A fill:#f9f,stroke:#333,stroke-width:4px
    style G fill:#9ff,stroke:#333,stroke-width:4px
    style I fill:#ff9,stroke:#333,stroke-width:2px
    style K fill:#f96,stroke:#333,stroke-width:2px
    style N fill:#9f9,stroke:#333,stroke-width:2px

Backup and Recovery

All services follow a consistent backup strategy:

  1. Database Backups: Daily automated backups of PostgreSQL and SQLite databases
  2. Configuration Backups: Service configurations and environment files
  3. Data Backups: User uploads, Git repositories, and other persistent data
  4. Recovery Procedures: Documented in each service's guide

Security Considerations

  1. Network Isolation: Services use separate Docker networks
  2. SSL/TLS: All external traffic encrypted via Traefik
  3. Authentication: Multiple auth providers and methods
  4. Access Control: Role-based permissions and API keys
  5. Secrets Management: Environment variables and secure storage

Monitoring and Maintenance

  • Health Checks: Built into Docker Compose configurations
  • Log Aggregation: Centralized logging for troubleshooting
  • Update Schedule: Regular updates following security advisories
  • Performance Metrics: Resource usage monitoring

For specific details about each service, refer to their individual documentation files.