- services.yaml: all 13 user-facing services organized by category
with Pi-hole and Grafana widgets for live stats
- widgets.yaml: greeting, datetime, search, and Pi-hole glances widget
- bookmarks.yaml: developer resource links (GitHub, Stack Overflow,
Docker Hub, Grafana Docs, InfluxDB Docs)
- settings.yaml: layout configuration (row style, column counts),
Docker provider via socket proxy, and branding
Previously only docker.yaml existed, resulting in a bare-bones
dashboard with no widgets, bookmarks, or layout.
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
- Route Dockhand Docker access through docker-socket-proxy via
DOCKER_HOST=tcp://docker-socket-proxy:2375 instead of direct
socket mount, enforcing the security model documented in AGENTS.md
- Add POST, DELETE, ALLOW_START, ALLOW_STOP, ALLOW_RESTARTS
permissions to socket proxy for Dockhand container management
- Add deploy.resources.limits.memory to all 16 services
(128M-1024M depending on service needs)
- Add MailHog SMTP port 4019 mapping (1025 internal) so applications
can actually send test emails to MailHog
- Remove stale config/portainer/ directory
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
- Add .gitignore excluding generated docker-compose.yml, demo.env,
editor files, and temporary files
- Remove demo/docker-compose.yml from tracking (generated by envsubst)
- Remove demo/demo.env from tracking (contains per-machine values)
- Add demo/demo.env.template as reference for required configuration
- Remove stale config/portainer/ directory (Portainer not in stack)
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
- Fix DrawIO/Kroki health checks from wget to curl (DrawIO has no wget,
Kroki /health endpoint unreliable with wget)
- Fix script paths in demo/AGENTS.md (./demo-test.sh → ./scripts/demo-test.sh)
- Fix script paths in demo/README.md (./demo-stack.sh → ./scripts/demo-stack.sh)
- Fix all service URLs from 192.168.3.6 to localhost in demo/README.md
- Fix hardcoded variable references to actual port values in demo/README.md
- Fix root AGENTS.md doc paths (docs/ → demo/docs/)
- Reorganize demo.env: group related vars, fix TA_HOST to container DNS,
fix ES_JAVA_OPTS quoting, move service credentials with their configs
- Add CWD guidance note to troubleshooting guide
- Regenerate docker-compose.yml with corrected TA_HOST
All 16 services healthy, 38/38 tests passing.
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
Fix all documentation to match the actual running stack. Every service
count, port number, credential, network name, container name, and
dependency is now accurate across all files.
Key changes:
- Remove all stale Portainer/portainer references (replaced by Dockhand)
- Fix project name from tsysdevstack to kneldevstack everywhere
- Fix volume name pattern (underscore not dash after project name)
- Fix network names (add -network suffix, correct subnet in commands)
- Fix Homepage category from Infrastructure to Developer Tools
- Add companion services (ta-redis, ta-elasticsearch) to all service lists
- Fix Dockhand dependency description (direct socket, not proxy)
- Remove port 4005 from all host-facing health check loops and port tables
- Fix broken commands (docker exec dockhand docker version, wrong volume globs)
- Fix INFLUXDB_ADMIN_USER credential references from demo_admin to admin
- Fix Grafana datasource user to match
- Fix misleading "ports 4000-4018" range to explicit port list
- Add Docker Socket Proxy internal-only notes where applicable
- Update root AGENTS.md service categories to match compose labels
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
Rewrite demo-stack.sh, demo-test.sh, validate-all.sh, and all test
files to match the current 16-service stack reality.
Key changes:
- demo-stack.sh: full rewrite with deploy/stop/restart/status/smoke/summary
- demo-test.sh: fix hardcoded kneldevstack filter to use $COMPOSE_PROJECT_NAME,
raise volume threshold from 10 to 15, remove curl dependency (use /dev/tcp),
fix security compliance check for Dockhand direct socket mount
- validate-all.sh: remove port 4005 check (internal only), add missing env
var validation (TA_PASSWORD, ELASTIC_PASSWORD, GF_*, PIHOLE_WEBPASSWORD)
- integration tests: fix container names, add TubeArchivist companion tests
- e2e tests: use correct project-relative paths, dynamic port lists from env
- Add fix-and-ship.sh as convenience wrapper for demo-stack.sh
- Remove stale tmp_template.yml
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
Restore 3 services that were previously removed due to health issues,
bringing the stack to 16 services. Add companion services (Elasticsearch,
Redis) required by TubeArchivist.
Key changes:
- Add ArchiveBox with proper health check and admin credentials
- Add TubeArchivist with ta-redis and ta-elasticsearch companions
- Add Atuin server with correct `server start` command and TCP health check
- Fix Wakapi health check to use /app/healthcheck binary
- Add Grafana provisioning bind mount for datasources/dashboards
- Add Homepage config bind mount for docker.yaml
- Fix Docker Socket Proxy label (remove unreachable localhost:4005 href)
- Fix credentials: INFLUXDB_ADMIN_USER and TA_USERNAME → admin
- Fix Grafana datasources.yml user to match
- Fix homepage/docker.yaml to contain Docker provider config
- Add all missing env vars (TA_PASSWORD, ELASTIC_PASSWORD, ES_JAVA_OPTS, etc.)
- Remove Pi-hole port 53 bindings (DNS not needed for demo)
- Bump template version to 2.0
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
reachableceo