Role: the application host. LAN address 192.168.5.52, docker2.lan; its own hostname is cicd. Public traffic reaches it only through cloudflared on the cloudflare host. The conventions for services here are in Home Lab Fleet and Ingress.
Checked with ss -ltn and docker ps on 2026-10-10; the Roller rows are stopped since 2026-10-18 (see below). The convention for a new service is plain HTTP on a free port at or above 8080; once you claim one, add it to this table. 80 and 443 are free.
| Port | Bound to | Owner |
|---|---|---|
8080 | all interfaces | Roller's Caddy, stopped since 2026-10-18: free while it stays stopped. |
8443 | all interfaces | Roller's Caddy HTTPS listener, stopped since 2026-10-18. |
8082 | all interfaces | CrafterCMS crafter-proxy (nginx), serving jakefear.com and maiiavorobiova.com |
8084 | all interfaces | Crafter Studio (authoring-tomcat) |
9192 | all interfaces | Crafter authoring-deployer |
9202 | all interfaces | Crafter authoring OpenSearch |
9209 | 172.17.0.1 | crafter-exporter, scraped by jakemon |
8081 | loopback | Roller's Umami console, stopped since 2026-10-18 |
18082 | loopback | Roller's Listmonk console, stopped since 2026-10-18 |
12345 | loopback | jakemon Alloy agent |
5432 | loopback | Not a container; owner not checked |
The delivery stack behind jakefear.com and maiiavorobiova.com: two vhosts on one Engine, selected by the Host header.
| Service | Port | Purpose |
|---|---|---|
| crafter-proxy (nginx) | 8082 | Delivery proxy fronting both vhosts |
| crafter-delivery / crafter-delivery-green | — | Delivery Engine (blue/green pair) |
| authoring-tomcat | 8084 | Crafter Studio authoring |
| crafter-deployer / authoring-deployer | 9191 (container only) / 9192 | Deployers |
| OpenSearch ×2 | 9202 (authoring) | Search for authoring and delivery |
| crafter-exporter | 172.17.0.1:9209 | Prometheus metrics from the Crafter monitoring APIs |
Monitoring for this stack is the craftercms-platform and craftercms-traffic dashboards, plus per-vhost blackbox probes and deployer readiness checks (IncidentCrafterDeployerTargetNotReady) through the proxy (see jakemon/hosts/docker2/apps.alloy).
Roller moved to docker1 on 2026-10-18; blog.wikantik.com has been served from there since the tunnel route was switched that day. The stack here was stopped with docker compose stop (its containers restart only unless-stopped, so it stays down across reboots).
Kept, not removed, as a fallback: the stopped containers, the seven roller_* volumes (database, backups, media), the images, and ~/roller (the live .env with its secrets, .admin-password, and .bak-* copies from each upgrade). Removing them frees the disk and the secrets once the docker1 deployment no longer needs a way back.
inference was away. It is back on inference (192.168.5.53); see JakemonHub.repo, port 8080, with its own pgvector database. It and its Alloy scrape block were removed. Leftover inert files may remain under ~/wikantik/ on the host.bin/deploy-agent.sh docker2 deploys this host's Alloy agent, and bin/deploy-exporter.sh docker2 crafter-exporter deploys the Crafter exporter. Per-host scrape targets live in hosts/docker2/apps.alloy.