🛠️ Tools — Homelab Infrastructure Tools
Host: Homelab · Compose:
Homelab/Docker/tools/compose.yaml
Stack name:tools
1. Overview
Small but critical infrastructure services: a Newt tunnel client connecting to the Pangolin/Fossorial network, a Docker socket proxy for secure API access, and traefik-kop which relays Traefik routing labels from this host to the primary Traefik instance via Redis.
2. Architecture & Services
| Service | Image | Port | Role |
|---|---|---|---|
newt |
fosrl/newt:1.17.0 |
— | Pangolin tunnel client — creates an encrypted tunnel back to the Starbuck VPS |
socket-proxy |
11notes/socket-proxy:2.1.7 |
— | Secure read-only Docker socket proxy |
traefik-kop_ds |
ghcr.io/jittering/traefik-kop:0.20.1 |
— | Publishes Docker labels to Traefik's Redis backend |
3. Networking
internal— —traefik— —
4. Persistent Storage
| Container | Host Path / Volume | Description |
|---|---|---||
| socket-proxy | /run/docker.sock | — |
| socket-proxy | socket-proxy | — |
| traefik-kop_ds | /var/run/docker.sock | — |
5. Environment Variables
| Variable | Service | Description |
|---|---|---|
ACCEPT_CLIENTS |
newt |
Allow incoming client connections |
NEWT_ID |
newt |
Newt client ID |
NEWT_SECRET |
newt |
Newt client secret |
PANGOLIN_ENDPOINT |
newt |
https://pangolin.fossorial.io |
REDIS_ADDR |
traefik-kop_ds |
Redis address for Traefik label sync (traefik_redis:6379) |
SKIP_REPLACE |
traefik-kop_ds |
1 — don't replace existing routes |
6. Access & Usage
These are infrastructure daemons — no web UI. Verify with:
# Check traefik-kop is syncing labels
docker logs traefik-kop_ds -f
# Check Newt tunnel
docker logs newt -f
7. Maintenance & Backup
docker compose -f Homelab/Docker/tools/compose.yaml pull
docker compose -f Homelab/Docker/tools/compose.yaml up -d
No persistent data to back up.