Docker Containers
Full inventory of Docker containers across all hosts with ports, purpose, and access details
Docker Containers
Docker containers run on two primary hosts: Altair-Link on the Milky Way and Meridian-Host on the Andromeda. Between them, they host over 30 containerized services covering everything from code hosting and password management to media monitoring and remote access.
Altair-Link (10.42.0.199)
Altair-Link is the primary services host on the Milky Way. It runs Ubuntu Server and hosts the bulk of the user-facing applications, development tools, and monitoring stack. Tailscale IP: 100.64.0.234.88.
Application Services
| Container | Port | Description |
|---|---|---|
| Homepage | 3001 | Dashboard / services portal |
| Gitea | 3000 | Self-hosted Git (code repositories) |
| OpenWebUI | 30000 | Web UI for LLM interaction |
| Vaultwarden | 31745 | Bitwarden-compatible password manager |
| FileBrowser | 32110 | Web-based file manager |
| Quartz | 31033 | Obsidian notes publisher (static site) |
| VS Code Server | 31062 | Browser-based VS Code IDE |
| IT-Tools | 8070 | Developer utilities (encoding, hashing, etc.) |
| Sonar (Arcturus-Prime-sonar) | 8096 | Network scanner + admin tools (nmap, arp-scan, traceroute, DNS) |
Homepage (Port 3001)
The central dashboard. Homepage aggregates links and status widgets for every service across both networks. It is the default landing page and the first place to check when looking for a service URL.
Access: http://10.42.0.199:3001 or http://100.64.0.234.88:3001
Gitea (Port 3000)
Self-hosted Git forge. All private repositories live here, including the gentoo-build-swarm codebase, Arcturus-Prime site source, dotfiles, and infrastructure-as-code. Gitea is exposed publicly through a Cloudflare Tunnel for clone/push access from outside the LAN.
Access: http://10.42.0.199:3000
OpenWebUI (Port 30000)
Web interface for interacting with local and remote LLM models. Supports multiple backends (Ollama, OpenAI-compatible APIs). Used for AI-assisted development and experimentation.
Access: http://10.42.0.199:30000
Vaultwarden (Port 31745)
Lightweight Bitwarden-compatible server. Stores all passwords, TOTP tokens, and secure notes. Browser extensions and mobile apps connect to this instance. Exposed through Cloudflare Tunnel for remote access with HTTPS.
Access: http://10.42.0.199:31745
VS Code Server (Port 31062)
code-server instance providing a full VS Code environment in the browser. Useful for remote development sessions when SSH + local VS Code is not available.
Access: http://10.42.0.199:31062
Monitoring Stack
| Container | Port | Description |
|---|---|---|
| Grafana | 3002 | Dashboards and visualization |
| Uptime Kuma | 3003 | Service uptime monitoring |
| Netdata | 19999 | Real-time system metrics |
| Glances | 61208 | System overview (v3) |
| Dozzle | 9999 | Docker log viewer |
Grafana (Port 3002)
Central dashboarding for Milky Way-side metrics. Pulls data from Netdata, Prometheus exporters, and other sources. Custom dashboards for build swarm status, host health, and network metrics.
Access: http://10.42.0.199:3002
Uptime Kuma (Port 3003)
Monitors the availability of services across both networks. Sends notifications when services go down. Tracks uptime history and response times for HTTP endpoints, TCP ports, and ping targets.
Access: http://10.42.0.199:3003
Glances (Port 61208)
Runs Glances v3 on Altair-Link. This is a deliberate version choice — the v3 web UI is used here while Meridian-Host runs v4. Both expose on the same port (61208) for consistency.
Access: http://10.42.0.199:61208
Dozzle (Port 9999)
Real-time Docker log viewer. Shows logs from all containers running on Altair-Link in a single web UI. No agents or sidecars needed — Dozzle connects directly to the Docker socket.
Access: http://10.42.0.199:9999
Utility Services
| Container | Port | Description |
|---|---|---|
| Speedtest | 8765 | Self-hosted speed test |
| RustDesk | 21115-21117 | Remote desktop relay server |
| Arcturus-Prime-command-center | 8093 | Custom admin/command center app |
RustDesk (Ports 21115-21117)
Self-hosted RustDesk relay server for remote desktop access. Replaces TeamViewer/AnyDesk with a self-hosted solution. The relay runs on Altair-Link and clients connect through it.
| Port | Protocol | Purpose |
|---|---|---|
| 21115 | TCP | NAT type test |
| 21116 | TCP/UDP | Hole punching / relay |
| 21117 | TCP | Relay |
Access: Configure RustDesk clients to use 100.64.0.234.88 as the ID/Relay server.
Arcturus-Prime-command-center (Port 8093)
Custom-built admin application for managing Arcturus-Prime infrastructure. Provides a web-based command center for common operations.
Access: http://10.42.0.199:8093
Meridian-Host (192.168.20.50)
Meridian-Host is the primary NAS and compute node on the Andromeda. Runs Unraid with ~100TB of storage and 24 CPU cores. Docker runs natively on Unraid. Tailscale IP: 100.64.0.15.30.
Media and Content
| Container | Port | Description |
|---|---|---|
| ruTorrent | — | Torrent client with web UI |
| Tautulli | 8181 | Plex monitoring and analytics |
| Audiobookshelf | 13378 | Audiobook and podcast server |
Tautulli (Port 8181)
Monitors the Plex Media Server instances running on Polaris-Media (192.168.20.201). Tracks who is watching what, stream quality, history, and library statistics. Essential for diagnosing Plex playback issues.
Access: http://192.168.20.50:8181 or http://100.64.0.15.30:8181
Audiobookshelf (Port 13378)
Self-hosted audiobook and podcast server. Streams audiobooks from the Meridian-Host storage array. Supports mobile apps for listening on the go.
Access: http://192.168.20.50:13378
Monitoring Stack
| Container | Port | Description |
|---|---|---|
| Grafana | 3001 | Dashboards (Andromeda-side) |
| Uptime Kuma | 3002 | Service monitoring (Andromeda-side) |
| Netdata | 19999 | Real-time system metrics |
| Glances | 61208 | System overview (v4) |
| Dozzle | 9999 | Docker log viewer |
Note the port differences from Altair-Link: Grafana is on 3001 (vs. 3002 on Altair-Link) and Uptime Kuma is on 3002 (vs. 3003 on Altair-Link). This is because Homepage occupies 3001 on Altair-Link.
Glances (Port 61208)
Runs Glances v4 on Meridian-Host, which is the newer version with an updated web UI. Provides real-time CPU, memory, disk, and network metrics for the Unraid host.
Access: http://192.168.20.50:61208 or http://100.64.0.15.30:61208
File Management
| Container | Port | Description |
|---|---|---|
| FileBrowser | 5801 | Web-based file manager |
| Krusader | 5800 | Dual-pane file manager (web VNC) |
Krusader (Port 5800)
Krusader runs in a container with a noVNC web frontend on port 5800. Provides a dual-pane file manager for operations across the Meridian-Host storage array — bulk moves, renames, and directory comparisons.
Access: http://192.168.20.50:5800
Utility Services
| Container | Port | Description |
|---|---|---|
| IT-Tools | 8070 | Developer utilities |
| Speedtest | 8765 | Self-hosted speed test |
| Portainer | 9443 | Docker management UI (HTTPS) |
Portainer (Port 9443)
Full Docker management UI for Meridian-Host. Provides container lifecycle management, image pulls, volume management, and stack deployment through a web interface. Runs on HTTPS (port 9443).
Access: https://192.168.20.50:9443 or https://100.64.0.15.30:9443
Build Infrastructure
| Container | Cores | Description |
|---|---|---|
| dr-Meridian-Host | 24 | Build swarm drone |
dr-Meridian-Host is a Docker-based build drone running on Meridian-Host. With 24 cores, it is the highest-capacity drone in the entire fleet. It runs as a container rather than a VM or LXC, leveraging Unraid’s Docker support.
Port Reference (Quick Lookup)
Altair-Link (10.42.0.199 / 100.64.0.234.88)
3000 Gitea
3001 Homepage
3002 Grafana
3003 Uptime Kuma
8070 IT-Tools
8093 Arcturus-Prime-command-center
8765 Speedtest
9999 Dozzle
19999 Netdata
21115 RustDesk (NAT test)
21116 RustDesk (relay)
21117 RustDesk (relay)
30000 OpenWebUI
31033 Quartz
31062 VS Code Server
31745 Vaultwarden
32110 FileBrowser
61208 Glances (v3)Meridian-Host (192.168.20.50 / 100.64.0.15.30)
3001 Grafana
3002 Uptime Kuma
5800 Krusader
5801 FileBrowser
8070 IT-Tools
8181 Tautulli
8765 Speedtest
9443 Portainer (HTTPS)
9999 Dozzle
13378 Audiobookshelf
19999 Netdata
61208 Glances (v4)Container Management
Altair-Link
Containers on Altair-Link are managed via Docker Compose or direct docker run commands. Compose files are stored in the home directory or /opt/ on the host.
# SSH to Altair-Link
ssh [email protected]
# List running containers
docker ps
# View logs for a specific container
docker logs -f homepage
# Restart a container
docker restart gitea
# Pull and update a container
docker compose pull && docker compose up -dMeridian-Host
Meridian-Host uses Unraid’s Docker management. Containers can be managed through:
- Unraid Web UI (
http://192.168.20.50) — native Docker tab - Portainer (
https://192.168.20.50:9443) — full Docker management - SSH —
dockerCLI directly
Unraid stores container templates and configurations in its own format. Updating containers follows the Unraid workflow (check for updates in the Docker tab, apply).
Cloudflare Tunnel Exposure
The following services on Altair-Link are exposed publicly through the Cloudflare Tunnel:
- Gitea (code hosting)
- Vaultwarden (password manager)
- Homepage (dashboard, if configured)
- Other services as configured in the
cloudflaredconfig
All other services are LAN-only or Tailscale-only. Nothing on Meridian-Host is directly exposed to the internet — access to Andromeda services requires Tailscale or Plex’s own remote access relay.