Commit Graph

3 Commits

Author SHA1 Message Date
Gan, Jimmy cdd364e645 security: bind service ports to localhost only
Bind navidrome, n8n, immich, openclaw, gitea web ports to 127.0.0.1
to prevent direct LAN access bypassing Caddy/Authelia.

Tailscale userspace networking on Synology proxies through localhost,
so VPS Caddy access via Tailscale IP continues to work.

Gitea SSH port (2222) remains on all interfaces for external git push.
2026-02-28 22:47:36 +08:00
Gan, Jimmy 47a97a09fe feat: add claude-dev docker setup & update openclaw config
Added Dockerfile and docker-compose.yml for claude-dev on NAS. Updated openclaw docker-compose.yml to include --allow-unconfigured argument.
2026-02-20 09:19:36 +08:00
Gan, Jimmy 64ecd99dc7 Add OpenClaw, backup automation, health checks, Telegram notifications
Phase 6: OpenClaw docker-compose (port 3100) with health check
Phase 9: Enhanced backup.sh with full DB/config coverage + Telegram alerts
Phase 10: Health checks on all compose files, /api/system/notify endpoint
2026-02-19 21:40:34 +08:00