All services run as plain Docker Compose stacks under /opt/stacks/<service>/ — never combined stacks, one service per compose file.
Caddy, PowerDNS, Unbound, Keycloak (auth.house-of-trae.com), Docker Mailserver, Roundcube (webmail.house-of-trae.com), CrowdSec, Tor (ERPNext onion mirror), Vaultwarden (secrets management — see Vaultwarden & Secrets), Ntfy, Gatus (independent uptime monitor), Dockge (stack management UI, Tailscale-only), sms-relay (Twilio SMS for critical alerts).
| Service | URL |
|---|---|
| Forgejo | git.securenexus.net |
| PowerDNS-Admin | dns-admin.house-of-trae.com |
| Namevault | namevault.co.uk |
| This wiki | wiki.house-of-trae.com |
Stratus Digital's client sites — 6 in total: Stratus Digital, Discreet Elite, Emerald Markets, Ruby Osiris, Evil Rabbit Art, Dickson Supplies (web).
Grafana (grafana.house-of-trae.com), Prometheus (internal), Loki, Uptime Kuma (status.house-of-trae.com public status page, monitor.house-of-trae.com admin).
Wazuh SIEM (wazuh.house-of-trae.com), Forgejo Runner (CI/CD for git.securenexus.net).
PrivateNexus itself (privatenexus.net), its docs (docs.privatenexus.net), plus Catalogue-deployed product-feature demos (Nextcloud, Notesnook), local monitoring stand-in, Watchtower, Discovery agent.
ERPNext v16 (erp.dickson-supplies.com, plus a Tor onion mirror), node-exporter, local Prometheus stand-in.
/opt/stacks/<service>/docker-compose.yml, Docker secrets for credentials (never plain env vars)oauth2-proxy wall (only works under house-of-trae.com, not securenexus.net — a hard technical constraint, not a preference)Full version: see Deployment Checklists.