infra/roles
jack 2b5524f258
All checks were successful
CI/CD / syntax-check (push) Successful in 1m9s
CI/CD / deploy (push) Successful in 15m33s
fix: remove promtail nested /var/log/traefik volume mount
Docker cannot mount to /var/log/traefik when /var/log is already
bind-mounted (read-only). The nested mount fails with 'read-only
file system' error in the overlay upper layer.

The mount was unused anyway — promtail config only reads syslog,
auth.log, and Docker container logs via the socket.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-22 15:55:39 +07:00
..
backup feat: add n8n, outline routes, remove syncthing, fix backup awscli 2026-03-22 06:19:39 +07:00
base feat: extend fail2ban with Forgejo SSH and Traefik HTTP jails 2026-03-22 04:51:43 +07:00
docker feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00
services fix: remove promtail nested /var/log/traefik volume mount 2026-03-22 15:55:39 +07:00
tools fix: add front network to tools stack for Docker port binding 2026-03-22 15:10:52 +07:00