security rework and memory optimilizations.

2025-11-17 08:48:00 +01:00
parent 72a653f494
commit e8eb2e954c
55 changed files with 8301 additions and 245 deletions
@@ -35,6 +35,9 @@ This is the `tower-of-joy` project - a containerized home server infrastructure

 **External Access Rule:** All public/external services MUST route through Nginx Proxy Manager (NPM) for Let's Encrypt SSL management and unified logging. Never expose service ports directly to the internet (except NPM and Headscale).

+**Service Maintenance**
+- **Stack Management** the portainer (and docker), NPM and Uptime Kuma services are managed through the core-api service. To maintain settings and configurations of these systems, read the documentation at http://tower-of-joy:8083/docs and prefer to use the api functions over direct reads an edits.
+
 **Service Integration Policy:** A service deployment is INCOMPLETE until cross-service integrations are implemented. Every new service MUST be integrated with:
 - **Uptime Kuma:** Add health check monitor (use `scripts/setup-kuma-monitors.sh` as guide)
 - **Organizr:** Configure service in dashboard (Settings → Tab Editor, Homepage Items)