dohertj2/network
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
db35cffd8df97905a603e2f843ba9dc9f34ebb10
network/docker.md
T
dohertj2 91ec7d1762 Migrate Plex from ESXi VM to Docker container 
Plex ran on a dedicated Debian 11 VM at 10.100.0.24 until that OS reached
LTS EOL on 2026-08-31 and apt security updates started 404ing. It now runs
as a host-networked container on the Docker host at 10.100.0.35.

Adds plex-docker-migration.md: the decision record and the executed
procedure. The two choices worth knowing about are that media is bind
mounted at the paths the library DB already stores (/mnt/nfs/*) so the
migration rewrote none of its 32,262 absolute paths, and that the
container runs on host networking so Plex still sees real client source
IPs and does not throttle LAN playback as remote.

Preferences.xml was carried across, so the server kept machine identifier
7aa65063599874eac3d9a2f62df74c1816400c88 and Tautulli, seerr and existing
clients continued working without reconfiguration. Verified after cutover:
libraries 1959/421/146 and 11,481 history entries, all matching the
pre-migration baseline exactly.

Rewrites plex.md for the container, adds plex to docker.md, and updates
the component list in CLAUDE.md. The old VM is retained powered on with
plexmediaserver stopped and disabled as rollback, so docs for ESXi and
Veeam are deliberately left describing it until decommission.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-16 08:55:43 -04:00

6.1 KiB
Raw Blame History

Docker Server

Access

  • Hostname: DOCKER
  • FQDN: DOCKER.dohertylan.com
  • IP: 10.100.0.35 (LAN_100) / 10.50.0.35 (DATA_50) / 10.200.0.35 (IOT_200)
  • OS: Debian 13 (Trixie) 13.3, kernel 6.12.69+deb13-amd64
  • SSH: ssh dohertj2@10.100.0.35 (passwordless) — this is the local machine for Claude Code
  • Docker: 29.2.1
  • Docker Compose: v5.0.2

Hardware (VM on ESXi)

  • CPU: 22 vCPUs (Intel Xeon E5-2697 v4 @ 2.30GHz)
  • RAM: 32 GB
  • Disk: /dev/sda1 999 GB ext4 (930 GB free)

Network

Interface MAC IP MTU Port Group
ens192 00:0c:29:cf:bb:bb 10.100.0.35/24 1500 LAN_100
ens256 00:0c:29:cf:bb:c5 10.50.0.35/24 9000 DATA_50
ens161 00:0c:29:cf:bb:cf 10.200.0.35/24 1500 IOT_200
  • Default gateway: 10.100.0.1 (via ens192)
  • DNS: 10.100.0.1
  • Domain: dohertylan.com

Docker Networks

Network Driver
traefik bridge
semaphore_default bridge

NFS Mounts (via TrueNAS DATA_50)

All mounts use NFS 4.2 with nconnect=8,_netdev,nofail,x-systemd.automount.

Mount Point NFS Export
/mnt/share 10.50.0.25:/mnt/mypool/share
/mnt/other 10.50.0.25:/mnt/mypool/Other

Reverse Proxy (Traefik)

Traefik handles HTTPS ingress on ports 80/443. All services below are accessed via *.dohertylan.com through Traefik, with Authelia providing SSO/2FA.

Cloudflare Companion auto-updates DNS records.

Docker Containers

All 21 containers running. Most are on the traefik network.

Infrastructure

Container Image URL Port Purpose
traefik traefik:latest traefik.dohertylan.com 80, 443 Reverse proxy
authelia authelia/authelia:latest auth.dohertylan.com 9091 SSO / 2FA
cloudflare-companion tiredofit/traefik-cloudflare-companion:latest — — Auto DNS updates
portainer portainer/portainer-ce:latest portainer.dohertylan.com 9000, 9443 Docker management UI
homepage ghcr.io/gethomepage/homepage:latest home.dohertylan.com 3000 Dashboard
uptime-kuma louislam/uptime-kuma:latest uptime.dohertylan.com 3001 Uptime monitoring

Media Management (Arr Stack)

Container Image URL Port Purpose
sonarr lscr.io/linuxserver/sonarr:latest sonarr.dohertylan.com 8989 TV show management
radarr lscr.io/linuxserver/radarr:latest radarr.dohertylan.com 7878 Movie management
whisparr ghcr.io/hotio/whisparr:v3 whisp.dohertylan.com 6969 Adult content management
prowlarr lscr.io/linuxserver/prowlarr:latest prowlarr.dohertylan.com 9696 Indexer manager
seerr ghcr.io/seerr-team/seerr:latest requests.dohertylan.com 5055 Media request UI
profilarr santiagosayshey/profilarr:latest profilarr.dohertylan.com 6868 Quality profile sync
plex lscr.io/linuxserver/plex:latest plex.dohertylan.com 32400 (host net) Media server — see plex.md
tautulli ghcr.io/tautulli/tautulli:latest tautulli.dohertylan.com 8181 Plex analytics

Downloads

Container Image URL Port Purpose
nzbget nzbgetcom/nzbget:latest nzb.dohertylan.com 6789 Usenet downloader
gluetun qmcgaw/gluetun:latest — 6881 VPN container
qbittorrent linuxserver/qbittorrent:latest — (via gluetun) — Torrent client (VPN)

Utilities

Container Image URL Port Purpose
microbin danielszabo99/microbin:latest bin.dohertylan.com 8080 Pastebin
ittools corentinth/it-tools:latest ittools.dohertylan.com 80 IT utilities
stash stashapp/stash:latest stash.dohertylan.com 9999 Media organizer
ilo-fan ilo_fan-ilo-fan fan.dohertylan.com 8000 iLO fan control

Automation

Container Image URL Port Purpose
semaphore semaphoreui/semaphore:latest http://10.100.0.35:3000 3000 Ansible UI

lmxopcua (carry project=lmxopcua label)

Stacks under /opt/otopcua-*/ migrated from the Wonderware dev VM (DESKTOP-6JL3KKO) on 2026-04-28. Discoverable via docker ps --filter label=project=lmxopcua. Brought up on demand by the developer from WW via lmxopcua-fix.ps1 (in ~/bin/ on WW), which SSHes here and runs compose.

Container/Stack Image Port Purpose
otopcua-mssql (always-on) mcr.microsoft.com/mssql/server:2022-latest 14330→1433 Central config DB for OtOpcUa v2
otopcua-pymodbus-* otopcua-pymodbus:3.13.0 (local build) 5020 Modbus driver test fixture (5 profiles)
otopcua-ab-server-* otopcua-ab-server:libplctag-release (local build) 44818 AB CIP driver test fixture (4 profiles)
otopcua-python-snap7-* otopcua-python-snap7:1.0 (local build) 1102 S7 driver test fixture
otopcua-opc-plc mcr.microsoft.com/iotedge/opc-plc:2.14.10 50000 OPC UA reference simulator

Semaphore / Ansible

  • Semaphore UI: http://10.100.0.35:3000
  • Data: /opt/semaphore/data/database.sqlite
  • Compose file: /opt/semaphore/docker-compose.yml

Ansible Playbook

  • Location: /home/dohertj2/playbook/
  • Main playbook: /home/dohertj2/playbook/site.yml
  • Roles: /home/dohertj2/playbook/roles/
  • Import tasks: /home/dohertj2/playbook/import/ (radarr, sonarr, nzbget, prowlarr, docker-compose-arr)
  • iLO fan playbook: /home/dohertj2/playbook/ilo_fan/

Docker Compose Locations

All compose files are under /opt/<service>/docker-compose.yml:

/opt/traefik/         /opt/portainer/       /opt/homepage/
/opt/sonarr/          /opt/radarr/          /opt/whisparr/
/opt/prowlarr/        /opt/seerr/           /opt/profilarr/
/opt/tautulli/        /opt/nzbget/          /opt/vpn_downloads/
/opt/uptime_kuma/     /opt/stash/           /opt/utilities/
/opt/semaphore/       /opt/ilo_fan/
/opt/plex/
/opt/otopcua-mssql/   /opt/otopcua-modbus/  /opt/otopcua-abcip/
/opt/otopcua-s7/      /opt/otopcua-opcuaclient/
Reference in New Issue View Git Blame Copy Permalink