Purpose
05 — Servers & Docker
Last updated: 2026-09-05 · Status: 🚧 Draft · Owner: TBD
Purpose
Inventory of all servers and the Docker containers running on them: what each one does, where it lives, how it’s backed up, and how to get back in if the UI stops working.
Server inventory
| Hostname | IP | Hardware | OS | Uptime target | Roles |
|---|
| nas | 10.0.10.3 | TBD | TrueNAS / Proxmox | 99.9% | storage, backups, VMs |
| srv1 | 10.0.10.4 | TBD | Debian 12 | 99.5% | docker host, DNS |
| TBD | TBD | TBD | TBD | TBD | |
Docker host(s)
| Item | Value |
|---|
| Host | TBD |
| Docker version | TBD |
| Compose projects root | /opt/compose (TBD) |
| Auto-update mechanism | Watchtower / update container / manual |
| Registry credentials | SEE:PM:docker-registry |
Container inventory
One row per container. Keep the “image + tag” current so re-provisioning a
host takes minutes, not days.
| Service | Compose project | Image (tag) | Ports exposed | Volumes | Depends on | Access URL | Notes |
|---|
| DNS sinkhole | pihole | pihole/pihole:latest | 53/53, 80→8080 | /etc/pihole, /etc/dnsmasq | — | http://10.0.10.2 | |
| Home Assistant | homeassistant | ghcr.io/home-assistant/home-assistant:stable | 8123/tcp | /config | — | http://10.0.10.x:8123 | see 08 |
| Tailscale | tailscale | tailscale/tailscale:latest | — | /var/lib/tailscale | — | — | mesh VPN |
| Media server | TBD | TBD | 8096/tcp | /data/media | nas | TBD | |
| Backup (restic/borg) | TBD | TBD | — | /data/backups | — | — | offsite? |
| NVR / cam stack | TBD | TBD | TBD | TBD | — | TBD | |
| … | | | | | | | |
Storage & volumes
| Path | Mount | Size | Used for | Snapshot/backup |
|---|
| /data/media | TBD | TBD | Movies, music, photos | TBD |
| /data/backups | TBD | TBD | Restic/borg repos | offsite TBD |
| /opt/compose | local | — | compose files (git repo? | git |
Backups
| What | Tool | Schedule | Retention | Restore tested |
|---|
| Containers (compose files) | git | on change | forever | date TBD |
| App data (/config etc.) | restic/borg | nightly | TBD | date TBD |
| Media | TBD | TBD | TBD | date TBD |
| Firewall/switch configs | SEE:PM:backup-path | weekly | TBD | date TBD |
Recovery notes
- If a server is rebuilt: restore order is 1) infra (DNS, VPN), 2)
storage mounts, 3) app containers, 4) restore latest backup.
- Console / recovery access per server: SEE:PM:
<hostname>-recovery
Change log
| Date | Change | Why |
|---|
| 2026-09-05 | Boilerplate created | — |
Source Disclaimer