- Remove port 8011 binding, route through Traefik instead
- Add Traefik labels for docs.home.frostlabs.me
- Update Paperless URLs to use HTTPS with local domain
- Configure allowed hosts and CSRF trusted origins
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
- Update all volume paths from /home/doc/swarm-data to /home/doc/projects/swarm-data
- Add Traefik local entrypoint on port 8443 with host mode networking
- Add Adminer local route with Traefik labels
- Configure Vikunja OIDC integration with Authentik
- Add Outline stack configuration
- Add traefik-local stack for local network routing
- Update .gitignore with backup files and dynamic configs
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
- Promoted p1, p2, p3 from worker to manager nodes for 4-node quorum
- Removed unnecessary hostname constraints from service configs
- Only traefik and portainer remain pinned to p0
- Services now auto-balance across all nodes via GlusterFS shared storage
- Updated README with cluster overview and distribution strategy
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
Adds new Authentik (v2025.10.0) authentication/SSO stack with:
- Redis cache service
- Authentik server (exposed at auth.frostlabs.me via Traefik)
- Authentik worker for background tasks
- Fixed depends_on references to use correct service name (redis)
- External PostgreSQL backend at 10.0.4.10
- Docker secrets integration for sensitive credentials
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
