MetaPlugin/MetaFeeder/MetaTransport apps: headless services (no AppShield, no Caddy route, no webui); drop parent; MetaFeederUsenet tile → nntmux

Apps/MetaFeederInternetArchive/docker-compose.yml

@@ -22,8 +22,8 @@ name: metafeederinternetarchive
 services:
   # ---------------------------------------------------------------------------
   # metafeederinternetarchive-feeder — the feeder itself. The gateway reaches it directly on
-  # `pcs` for discovery/query/compute; the human sees it through the AppShield
-  # gate below.
+  # `pcs` for discovery/query/compute; the human configures it
+  # from the MetaGateway dashboard (configure panel).
   # ---------------------------------------------------------------------------
   metafeederinternetarchive-feeder:
     image: ghcr.io/worph/meta-feeder-internetarchive:1.1.2
@@ -53,48 +53,8 @@ services:
       retries: 10
       start_period: 5s
     networks:
-      - metafeederinternetarchive
       - pcs
-
-  # ---------------------------------------------------------------------------
-  # AppShield gate — the feeder's config page behind Yundera OIDC SSO.
-  # container_name == subdomain prefix (the auth-registrar derives the client_id
-  # from it). The gateway still reaches the feeder directly on `pcs`; index → /config.
-  # ---------------------------------------------------------------------------
-  metafeederinternetarchive:
-    image: ghcr.io/yundera/appshield:2.0.9
-    cpu_shares: 80
-    container_name: metafeederinternetarchive
-    hostname: metafeederinternetarchive
-    restart: unless-stopped
-    user: "0:0"
-    expose:
-      - 80
-    environment:
-      OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
-      REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.nip.io,${APP_PUBLIC_IP_DASH}.sslip.io"
-      BACKEND_HOST: "metafeederinternetarchive-feeder"
-      BACKEND_PORT: "8080"
-      LISTEN_PORT: "80"
-    labels:
-      caddy_0: metafeederinternetarchive-${APP_DOMAIN}
-      caddy_0.import: gateway_tls
-      caddy_0.reverse_proxy: "{{upstreams 80}}"
-      caddy_1: metafeederinternetarchive-${APP_PUBLIC_IP_DASH}.nip.io
-      caddy_1.import: gateway_tls
-      caddy_1.reverse_proxy: "{{upstreams 80}}"
-      caddy_2: metafeederinternetarchive-${APP_PUBLIC_IP_DASH}.sslip.io
-      caddy_2.reverse_proxy: "{{upstreams 80}}"
-    depends_on:
-      - metafeederinternetarchive-feeder
-    networks:
-      - metafeederinternetarchive
-      - pcs
-
 networks:
-  metafeederinternetarchive:
-    name: metafeederinternetarchive
-    driver: bridge
   pcs:
     name: ${APP_NET:-pcs}
     external: true
@@ -106,9 +66,6 @@ x-casaos:
   author: Worph Team
   category: Media
   developer: Aptero Team
-  main: metafeederinternetarchive
-  webui_port: 80
-  index: /config
 
   description:
     en_us: |
@@ -153,7 +110,7 @@ x-casaos:
         The gateway restarts itself: feeder discovery is startup-only.
         No API key and no account: the feeder answers as soon as the gateway
         discovers it. Pairs with **MetaListen** for a music client.
-        **Authentication:** the config UI is protected by Yundera's Authelia (OIDC).
+        **No web UI of its own:** configure it from the **MetaGateway** dashboard → this feeder → *configure* (the gateway proxies this feeder's config page, behind the gateway's login).
 
 # Maison (Yundera dashboard) configuration. Read in preference to x-casaos.
 # schema_version 2 is required for `folders`: an older Maison refuses the app
@@ -167,6 +124,3 @@ x-compose-app:
     - path: /DATA/AppData/metafeederinternetarchive/state
       user: $PUID
       group: $PGID
-  # Same string as the caddy_0 label, so the tile link and the route agree.
-  webui-host: metafeederinternetarchive-${domain}
-  webui-path: "/config"