ntbops-ansible/docs/service-catalog.md

Service Catalog

These Docker service roles are available through nbops_roles.

Media and downloads:

• jellyfin
• jellyseerr
• qbittorrent
• transmission
• wizarr
• flaresolverr
• cleanuparr
• pinchflat
• kavita

Identity and access:

• authentik
• authentik_ldap
• authentik_proxy
• authentik_rac
• vaultwarden

Dashboards and file tools:

• homarr
• nginx_content
• code_server
• filebrowser_quantum
• kiwix_serve
• requarks
• fiveetools
• ntfy

Infrastructure:

• pelican_panel
• pelican_server
• gitea
• gitea_act_runner
• postgres
• php_fpm
• valkey
• syncthing
• ipv6nat

Monitoring:

• grafana
• loki
• alloy
• grafana_renderer
• prometheus
• uptime_kuma

Compose-backed roles use the shared compose_project lifecycle directly or via the docker_app single-container adapter. They support:

• host routing mode: publish ports directly and open UFW rules.
• traefik routing mode: attach to the proxy network and render Traefik labels.
• traefik_file routing mode: publish service ports for central edge Traefik, without rendering Docker labels. Prefer traefik for normal multi-VM deployments so edge Traefik forwards to internal Traefik, and internal Traefik routes to applications by labels.

Override role defaults in host_vars or group_vars; do not edit generated Compose files on the VM.

Upstream README and Compose examples are tracked as copied snapshots under each role's upstream/ directory. See docs/upstream-sources.yml and docs/compose-update-policy.md.