Architecture decision records¶
Short records of the decisions that aren't obvious from the code: the context, what was decided, and what it costs. They're numbered in the order they were made and are never rewritten; a changed decision gets a new record that supersedes the old one.
| ADR | Decision | Date |
|---|---|---|
| 0001 | Traefik with Docker labels instead of Nginx Proxy Manager | 2026-03-06 |
| 0002 | Replace Jellyseerr with Seerr | 2026-10-23 |
| 0003 | Sync qBittorrent's port from Gluetun; narrow its login bypass | 2026-10-25 |
| 0004 | No desktop VPN app on the server | 2026-10-25 |
| 0005 | One wildcard certificate, requested by one router | 2026-10-25 |
| 0006 | Public DNS-only wildcard record instead of router DNS | 2026-10-25 |
| 0007 | One purpose per stack, dependencies point one way | 2026-10-25 |
| 0008 | Authelia for single sign-on on admin pages | 2026-10-25 |
| 0009 | Homepage without the Docker socket, with its own env file | 2026-10-25 |
| 0010 | Tailscale subnet route for remote access | 2026-10-25 |
| 0011 | Scan compose hardening on every push, images weekly | 2026-10-27 |
| 0012 | Family requests inside the Moonfin app; Seerr off the internet | 2026-10-27 |