fkrebs
0d83f83bc0
- mcp-gateway.md: 26 servers (added git, gitlab, paper-search catalog bridge); document --pass-environment requirement for env var passthrough in DinD bridges - ct-inventory.md + homelab-architecture.md: CT 109 IP conflict, CT 113 live - proxmox-state.md §16: Loki, sshwifty, Alloy, IP conflict note, sidecar table expanded to CT 103/111/113; build order updated - infra/portmap.md: CT 113 db section; QNAP TS-251D (Klipper/Mainsail) - services/backrest.md: full backup strategy doc (new) - services/databases.md: CT 113 postgres/WAL-G/pgAdmin doc (new) - services/arcane.md: Docker management IDE doc (new) - CHANGELOG.md: 2026-05-22 entry Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
98 lines
3.8 KiB
Markdown
98 lines
3.8 KiB
Markdown
# Databases
|
|
|
|
All application databases live on **CT 113** (`192.168.1.6:5432`) after Phase 2 migration. The LXC runs `postgres:17` in Docker at `/opt/stacks/db/`, tracked in Gitea `fkrebs/stacks-db`. WAL-G archives to Garage S3 bucket `ct113-pg-backup` on CT 104 (`http://192.168.1.40:10004`).
|
|
|
|
---
|
|
|
|
## Database inventory
|
|
|
|
| DB | Owner user | Size (pre-migration) | Service | Stack location |
|
|
|----|-----------|---------------------|---------|---------------|
|
|
| `vaultwarden` | vaultwarden | 11 MB | Vaultwarden | CT 104 `/opt/stacks/vaultwarden/` |
|
|
| `paperless` | paperless | 20 MB | Paperless-ngx | CT 104 `/opt/stacks/apps/paperless-ngx/` |
|
|
| `litellm` | litellm | 212 MB | LiteLLM | CT 104 `/opt/stacks/ai/` |
|
|
| `memos` | memos | 9 MB | Memos | CT 104 `/opt/stacks/memos/` |
|
|
| `n8n` | n8n | 12 MB | n8n | CT 104 `/opt/stacks/n8n/` |
|
|
| `gitea` | gitea | 15 MB | Gitea | CT 111 `/opt/stacks/gitea/` |
|
|
| `coder` | coder | 17 MB | Coder | CT 111 `/opt/stacks/coder/` |
|
|
|
|
**Not on CT 113:**
|
|
|
|
| DB | Container | Reason |
|
|
|----|-----------|--------|
|
|
| `lobechat` | `lobe-postgres` (paradedb) on CT 104 | Requires `pg_search` extension for `USING bm25` indexes |
|
|
| `immich` | `immich_postgres` on CT 104 | Version-pinned by Immich AIO |
|
|
| `nextcloud` | Nextcloud AIO on CT 105 | AIO manages its own postgres |
|
|
|
|
---
|
|
|
|
## Connection strings (post-migration target)
|
|
|
|
| Service | Connection string |
|
|
|---------|------------------|
|
|
| Vaultwarden | `postgresql://vaultwarden:<pw>@192.168.1.6:5432/vaultwarden` |
|
|
| Paperless | `PAPERLESS_DBHOST: 192.168.1.6` |
|
|
| LiteLLM | `postgresql://litellm:<pw>@192.168.1.6:5432/litellm` (in `ai/.env` and `litellm-config/config.yaml`) |
|
|
| Memos | `postgresql://memos:<pw>@192.168.1.6:5432/memos?sslmode=disable` |
|
|
| n8n | `DB_POSTGRESDB_HOST=192.168.1.6` |
|
|
| Gitea | `GITEA__database__HOST: 192.168.1.6:5432` |
|
|
| Coder | `postgresql://coder:<pw>@192.168.1.6:5432/coder?sslmode=disable` |
|
|
|
|
Passwords are in each service's `.env` file (never committed to git). See init script at `/opt/stacks/shared-db/init/01-create-users-dbs.sql` on CT 104 for the original credential set.
|
|
|
|
---
|
|
|
|
## Migration procedure (one DB at a time)
|
|
|
|
Order: vaultwarden → paperless → litellm → memos → n8n → gitea → coder
|
|
|
|
```bash
|
|
# 1. Stop the service
|
|
# docker compose -f <compose> stop <service>
|
|
|
|
# 2. Dump from source (via PVE host)
|
|
# For CT 104 services:
|
|
pct exec 104 -- docker exec -i shared-postgres pg_dump -U postgres <db> \
|
|
> /mnt/pve/unas/dump/<db>-migration-$(date +%Y%m%d).sql
|
|
|
|
# For CT 111 services:
|
|
pct exec 111 -- docker exec -i <container> pg_dump -U <user> <db> \
|
|
> /mnt/pve/unas/dump/<db>-migration-$(date +%Y%m%d).sql
|
|
|
|
# 3. Create user + DB on CT 113
|
|
pct exec 113 -- docker exec -i postgres psql -U postgres <<EOF
|
|
CREATE USER <user> WITH PASSWORD '<pw>';
|
|
CREATE DATABASE <db> OWNER <user>;
|
|
EOF
|
|
|
|
# 4. Restore on CT 113
|
|
pct exec 113 -- bash -c "docker exec -i postgres psql -U postgres -d <db>" \
|
|
< /mnt/pve/unas/dump/<db>-migration-*.sql
|
|
|
|
# 5. Update service connection string (shared-postgres → 192.168.1.6)
|
|
# Edit compose or .env
|
|
|
|
# 6. Start service; verify logs and function
|
|
|
|
# 7. Verify, then old DB/container can be removed
|
|
```
|
|
|
|
---
|
|
|
|
## Post-migration cleanup
|
|
|
|
After all 7 DBs are migrated and verified:
|
|
|
|
1. Drop stale DBs from `shared-postgres`: `daytona`, `lobechat` (duplicate — real one is in `lobe-postgres`), `paradedb`
|
|
2. Stop and remove `shared-postgres` container + named volume `shared-pgdata`
|
|
3. Stop and remove `gitea-db` and `coder-db` containers + volumes on CT 111
|
|
4. Update Backrest services plan: remove `shared-db` path, update to CT 113 WAL-G output
|
|
5. Enable **PVE protection** on CT 113 (prevents accidental delete)
|
|
|
|
---
|
|
|
|
## pgAdmin
|
|
|
|
pgAdmin on CT 113 at `http://192.168.1.6:5050` — pre-registered server: CT 113 postgres.
|
|
Credentials in `/opt/stacks/db/.env` (admin@nucli.de).
|