Home A - Z Create page
Page Index

An Otter Wiki

Blame

75dffb Damien 2026-06-15 10:02:38
Flesh out all pages — add Home Assistant, LAN Machines, GC Jobs, Known Issues; expand Infrastructure, Docker Swarm, Network/Media/Documents/Traefik pages
1 
# Known Issues
2
3
← [[Home]]
4
5
Active bugs, workarounds, and incomplete migrations.
6
7
---
8
9
## Overlay Network Stale Attachments (PCT 102)
10
11
After a stack redeploy, containers on PCT 102 can get broken VXLAN entries. The service shows `1/1` and the container is healthy, but Traefik gets 504 because it can't reach the container over the overlay.
12
13
**Diagnose:**
14
```bash
15
TRAEFIK=$(pct exec 108 -- docker ps -q --filter name=traefik)
16
IP=$(pct exec 102 -- docker inspect <container-name> --format '{{(index .NetworkSettings.Networks "traefik-public").IPAddress}}')
17
pct exec 108 -- docker exec $TRAEFIK ping -c 2 $IP
18
```
19
20
**Fix:**
21
```bash
22
pct exec 108 -- docker service update --force <service-name>
23
```
24
25
All 11 media-core services were force-updated 2026-05-13 to clear a full-stack stale attachment event.
26
27
See [[Docker Swarm]] → Overlay Network Health Check for more detail.
28
29
---
30
31
## PCT 108 Appdata Migration Incomplete
32
33
`migrate-108-appdata.sh` failed (script ran inside the container where `pct` is unavailable). PCT 108 appdata remains on rootfs (local-lvm, 50 GB, ~55% used), not on ZFS.
34
35
Portainer compose files at `/mnt/tank/appdata/portainer/compose/` are on ZFS (mp0) and are fine. Only Portainer's own internal data (`network_portainer_data` volume) and Homarr's appdata are on rootfs.
36
37
---
38
39
## gcjobs-filler AI Narrative Generation Broken
40
41
`Client.__init__() got an unexpected keyword argument 'proxies'` — OpenAI client version incompatibility in `gcjobs-filler`. AI narrative generation for screening questions fails silently, leaving narratives unfilled.
42
43
See [[GC Jobs]] for context.
44
45
---
46
47
## Authentik Middleware Removed from routes.yml (2026-06-12)
48
49
All `routes.yml` routers are now unprotected — the `authentik` middleware definition was removed. Services protected via compose `deploy.labels` still have the label but it references a non-existent middleware, so it has no effect.
50
51
To re-protect a static route: add the `authentik@file` middleware definition back to `routes.yml` and force-restart Traefik.
52
53
See [[Network Stack]] → Authentik for details.