Round 10: Add Traefik routing to monitoring services

- Added Traefik labels and routing to prometheus, grafana, loki, cadvisor
- Fixed Grafana ROOT_URL to use domain-based URL (https://grafana.${DOMAIN})
- Added uptime-kuma bypass rule in Authelia (needs initial setup)
- Updated all services to use traefik-network
- Synced domain from kelin-hass to kelin-casa across all configs
- Fixed missing tls=true label on uptime-kuma
- Note: Loki is API-only service (no web UI, accessed via Grafana)

docker-compose/utilities.yml

@@ -1,6 +1,12 @@
 # Backup and Utility Services
 # Place in /opt/stacks/utilities/docker-compose.yml
 
+# Service Access URLs:
+# - Backrest: https://backrest.${DOMAIN}
+# - Duplicati: https://duplicati.${DOMAIN}
+# - Form.io: https://forms.${DOMAIN}
+# - Vaultwarden (Bitwarden): https://bitwarden.${DOMAIN}
+
 services:
   # Backrest - Backup solution for restic
   # Access at: https://backrest.${DOMAIN}
@@ -12,8 +18,8 @@ services:
       - homelab-network
       - traefik-network
     volumes:
-      - /opt/stacks/backrest/data:/data
-      - ./$(basename $file .yml)/config:/config
+      - ./backrest/data:/data
+      - ./backrest/config:/config
       - /opt/stacks:/opt/stacks:ro  # Backup source
       - /mnt:/mnt:ro  # Backup additional drives
       - backrest-cache:/cache
@@ -34,14 +40,14 @@ services:
   # Duplicati - Backup solution
   # Access at: https://duplicati.${DOMAIN}
   duplicati:
-    image: lscr.io/linuxserver/duplicati:latest
+    image: lscr.io/linuxserver/duplicati:2.0.7
     container_name: duplicati
     restart: unless-stopped
     networks:
       - homelab-network
       - traefik-network
     volumes:
-      - ./$(basename $file .yml)/config:/config
+      - ./duplicati/config:/config
       - /opt/stacks:/source/stacks:ro
       - /mnt:/source/mnt:ro
       - /mnt/backups:/backups
@@ -59,67 +65,68 @@ services:
       - "traefik.http.routers.duplicati.middlewares=authelia@docker"
       - "traefik.http.services.duplicati.loadbalancer.server.port=8200"
 
-  # Form.io - Form builder (if needed)
-  # Access at: https://forms.${DOMAIN}
-  formio:
-    image: formio/formio:latest
-    container_name: formio
-    restart: unless-stopped
-    networks:
-      - homelab-network
-      - traefik-network
-      - formio-network
-    environment:
-      - MONGO_URL=mongodb://formio-mongo:27017/formio
-      - JWT_SECRET=${FORMIO_JWT_SECRET}
-      - DB_SECRET=${FORMIO_DB_SECRET}
-    depends_on:
-      - formio-mongo
-    labels:
-      - "homelab.category=utilities"
-      - "homelab.description=Form builder platform"
-      - "traefik.enable=true"
-      - "traefik.http.routers.formio.rule=Host(`forms.${DOMAIN}`)"
-      - "traefik.http.routers.formio.entrypoints=websecure"
-      - "traefik.http.routers.formio.tls.certresolver=letsencrypt"
-      - "traefik.http.routers.formio.middlewares=authelia@docker"
-      - "traefik.http.services.formio.loadbalancer.server.port=3000"
+  # Form.io - Form builder (DISABLED - image not available)
+  # Uncomment and configure if formio/formio image becomes available
+  # formio:
+  #   image: formio/formio:latest
+  #   container_name: formio
+  #   restart: unless-stopped
+  #   networks:
+  #     - homelab-network
+  #     - traefik-network
+  #     - formio-network
+  #   environment:
+  #     - MONGO_URL=mongodb://formio-mongo:27017/formio
+  #     - JWT_SECRET=${FORMIO_JWT_SECRET}
+  #     - DB_SECRET=${FORMIO_DB_SECRET}
+  #   depends_on:
+  #     - formio-mongo
+  #   labels:
+  #     - "homelab.category=utilities"
+  #     - "homelab.description=Form builder platform"
+  #     - "traefik.enable=true"
+  #     - "traefik.http.routers.formio.rule=Host(`forms.${DOMAIN}`)"
+  #     - "traefik.http.routers.formio.entrypoints=websecure"
+  #     - "traefik.http.routers.formio.tls.certresolver=letsencrypt"
+  #     - "traefik.http.routers.formio.middlewares=authelia@docker"
+  #     - "traefik.http.services.formio.loadbalancer.server.port=3000"
 
-  formio-mongo:
-    image: mongo:6
-    container_name: formio-mongo
-    restart: unless-stopped
-    networks:
-      - formio-network
-    volumes:
-      - formio-mongo-data:/data/db
-    labels:
-      - "homelab.category=utilities"
-      - "homelab.description=Form.io database"
+  # formio-mongo:
+  #   image: mongo:6.0
+  #   container_name: formio-mongo
+  #   restart: unless-stopped
+  #   networks:
+  #     - formio-network
+  #   volumes:
+  #     - formio-mongo-data:/data/db
+  #   labels:
+  #     - "homelab.category=utilities"
+  #     - "homelab.description=Form.io database"
 
   # Bitwarden (Vaultwarden) - Password manager
   # Access at: https://bitwarden.${DOMAIN}
   # Note: SSO disabled for browser extension and mobile app compatibility
   vaultwarden:
-    image: vaultwarden/server:latest
+    image: vaultwarden/server:1.30.1
     container_name: vaultwarden
     restart: unless-stopped
     networks:
       - homelab-network
       - traefik-network
     volumes:
-      - /opt/stacks/vaultwarden/data:/data
+      - ./vaultwarden/data:/data
     environment:
       - DOMAIN=https://bitwarden.${DOMAIN}
       - SIGNUPS_ALLOWED=${BITWARDEN_SIGNUPS_ALLOWED:-true}
       - INVITATIONS_ALLOWED=${BITWARDEN_INVITATIONS_ALLOWED:-true}
       - ADMIN_TOKEN=${BITWARDEN_ADMIN_TOKEN}
-      - SMTP_HOST=${SMTP_HOST}
-      - SMTP_FROM=${SMTP_FROM}
-      - SMTP_PORT=${SMTP_PORT:-587}
-      - SMTP_SECURITY=${SMTP_SECURITY:-starttls}
-      - SMTP_USERNAME=${SMTP_USERNAME}
-      - SMTP_PASSWORD=${SMTP_PASSWORD}
+      # SMTP disabled - uncomment and configure to enable email
+      # - SMTP_HOST=${SMTP_HOST}
+      # - SMTP_FROM=${SMTP_FROM}
+      # - SMTP_PORT=${SMTP_PORT:-587}
+      # - SMTP_SECURITY=${SMTP_SECURITY:-starttls}
+      # - SMTP_USERNAME=${SMTP_USERNAME}
+      # - SMTP_PASSWORD=${SMTP_PASSWORD}
     labels:
       - "homelab.category=utilities"
       - "homelab.description=Self-hosted password manager (Bitwarden)"
@@ -134,7 +141,7 @@ services:
   # Authelia Redis - Session storage for Authelia
   # No web UI - backend service
   authelia-redis:
-    image: redis:alpine
+    image: redis:7-alpine
     container_name: authelia-redis
     restart: unless-stopped
     networks: