🛠️ Tools — Homelab Infrastructure Tools
Host: Homelab · Compose:
Homelab/Docker/tools/compose.yaml
Stack name:tools
1. Overview
Small but critical infrastructure services: a Newt tunnel client connecting to the Pangolin/Fossorial network, a Docker socket proxy for secure API access, and traefik-kop which relays Traefik routing labels from this host to the primary Traefik instance via Redis.
2. Architecture & Services
| Service | Image | Port | Role |
|---|---|---|---|
newt |
fosrl/newt:1.13.0 |
— | Pangolin tunnel client — creates an encrypted tunnel back to the Starbuck VPS |
socket-proxy |
11notes/socket-proxy:2.1.7 |
— | Secure read-only Docker socket proxy |
traefik-kop_ds |
jittering/traefik-kop:0.20.1 |
— | Publishes Docker labels to Traefik's Redis backend |
3. Networking
internal(external) — Socket proxy is on the internal network.traefik(external) —traefik-kopuses this to communicate with the Redis backend.newtuses no Docker networking (direct tunnel socket).
4. Persistent Storage
socket-proxyvolume (named, for proxy socket) — ephemeral/anonymous.
5. Environment Variables
| Variable | Service | Description |
|---|---|---|
PANGOLIN_ENDPOINT |
newt |
https://pangolin.fossorial.io |
NEWT_ID |
newt |
Newt client ID |
NEWT_SECRET |
newt |
Newt client secret |
ACCEPT_CLIENTS |
newt |
Allow incoming client connections |
REDIS_ADDR |
traefik-kop_ds |
Redis address for Traefik label sync (traefik_redis:6379) |
SKIP_REPLACE |
traefik-kop_ds |
1 — don't replace existing routes |
6. Access & Usage
These are infrastructure daemons — no web UI. Verify with:
# Check traefik-kop is syncing labels
docker logs traefik-kop_ds -f
# Check Newt tunnel
docker logs newt -f
7. Maintenance & Backup
docker compose -f Homelab/Docker/tools/compose.yaml pull
docker compose -f Homelab/Docker/tools/compose.yaml up -d
No persistent data to back up.