Known Issues

← Home

Active bugs, workarounds, and incomplete migrations.

Overlay Network Stale Attachments (PCT 102)

After a stack redeploy, containers on PCT 102 can get broken VXLAN entries. The service shows 1/1 and the container is healthy, but Traefik gets 504 because it can't reach the container over the overlay.

Diagnose:

TRAEFIK=$(pct exec 108 -- docker ps -q --filter name=traefik)
IP=$(pct exec 102 -- docker inspect <container-name> --format '{{(index .NetworkSettings.Networks "traefik-public").IPAddress}}')
pct exec 108 -- docker exec $TRAEFIK ping -c 2 $IP

Fix:

pct exec 108 -- docker service update --force <service-name>

All 11 media-core services were force-updated 2026-05-13 to clear a full-stack stale attachment event.

See Docker Swarm → Overlay Network Health Check for more detail.

PCT 108 Appdata Migration Incomplete

migrate-108-appdata.sh failed (script ran inside the container where pct is unavailable). PCT 108 appdata remains on rootfs (local-lvm, 50 GB, ~55% used), not on ZFS.

Portainer compose files at /mnt/tank/appdata/portainer/compose/ are on ZFS (mp0) and are fine. Only Portainer's own internal data (network_portainer_data volume) and Homarr's appdata are on rootfs.

gcjobs-filler AI Narrative Generation Broken

Client.__init__() got an unexpected keyword argument 'proxies' — OpenAI client version incompatibility in gcjobs-filler. AI narrative generation for screening questions fails silently, leaving narratives unfilled.

See GC Jobs for context.

Authentik Middleware Removed from routes.yml (2026-06-12)

All routes.yml routers are now unprotected — the authentik middleware definition was removed. Services protected via compose deploy.labels still have the label but it references a non-existent middleware, so it has no effect.

To re-protect a static route: add the authentik@file middleware definition back to routes.yml and force-restart Traefik.

See Network Stack → Authentik for details.