MetaPlugin/MetaFeeder/MetaTransport apps: headless services (no AppShield, no Caddy route, no webui); drop parent; MetaFeederUsenet tile → nntmux

Apps/MetaFeederTMDB/docker-compose.yml

@@ -39,8 +39,8 @@ services:
   # ---------------------------------------------------------------------------
   # metafeedertmdb-feeder — the feeder (meta-feeder-tmdb) hosting the `tmdb`
   # upstream. The gateway core reaches it directly on `pcs` for
-  # discovery/query/compute; the human configures it through the AppShield gate
-  # below.
+  # discovery/query/compute; the human configures it
+  # from the MetaGateway dashboard (configure panel).
   # ---------------------------------------------------------------------------
   metafeedertmdb-feeder:
     image: ghcr.io/worph/meta-feeder-tmdb:1.0.3
@@ -59,8 +59,8 @@ services:
     environment:
       # INFRA-ONLY env (the "config: no env if in webui" rule). Operator config —
       # TMDB token, rate/burst, cards-per-search — is read from the persisted
-      # config.json written by this feeder's config page (behind the AppShield
-      # gate below). TMDB_TOKEN / TMDB_RATE_PER_SEC / TMDB_BURST / CARD_TOP_N
+      # config.json written by this feeder's config page (opened from
+      # the MetaGateway dashboard (configure panel)). TMDB_TOKEN / TMDB_RATE_PER_SEC / TMDB_BURST / CARD_TOP_N
       # exist only as deprecated first-boot seeds; don't set them here.
       # META_FEEDER_STATE_DIR is left at its default (/data/meta-feeder), which
       # is what the volume below mounts.
@@ -78,49 +78,8 @@ services:
       retries: 10
       start_period: 5s
     networks:
-      - metafeedertmdb
       - pcs
-
-  # ---------------------------------------------------------------------------
-  # AppShield gate — the feeder's config UI (set the TMDB token, tune the rate
-  # and cards-per-search) behind Yundera OIDC SSO. container_name == subdomain
-  # prefix. The gateway still reaches the feeder directly on `pcs` (this gate is
-  # for the human only); index → /config.
-  # ---------------------------------------------------------------------------
-  metafeedertmdb:
-    image: ghcr.io/yundera/appshield:2.0.9
-    cpu_shares: 80
-    container_name: metafeedertmdb
-    hostname: metafeedertmdb
-    restart: unless-stopped
-    user: "0:0"
-    expose:
-      - 80
-    environment:
-      OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
-      REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.nip.io,${APP_PUBLIC_IP_DASH}.sslip.io"
-      BACKEND_HOST: "metafeedertmdb-feeder"
-      BACKEND_PORT: "8080"
-      LISTEN_PORT: "80"
-    labels:
-      caddy_0: metafeedertmdb-${APP_DOMAIN}
-      caddy_0.import: gateway_tls
-      caddy_0.reverse_proxy: "{{upstreams 80}}"
-      caddy_1: metafeedertmdb-${APP_PUBLIC_IP_DASH}.nip.io
-      caddy_1.import: gateway_tls
-      caddy_1.reverse_proxy: "{{upstreams 80}}"
-      caddy_2: metafeedertmdb-${APP_PUBLIC_IP_DASH}.sslip.io
-      caddy_2.reverse_proxy: "{{upstreams 80}}"
-    depends_on:
-      - metafeedertmdb-feeder
-    networks:
-      - metafeedertmdb
-      - pcs
-
 networks:
-  metafeedertmdb:
-    name: metafeedertmdb
-    driver: bridge
   pcs:
     name: ${APP_NET:-pcs}
     external: true
@@ -132,9 +91,6 @@ x-casaos:
   author: Worph Team
   category: Media
   developer: Aptero Team
-  main: metafeedertmdb
-  webui_port: 80
-  index: /config
 
   description:
     en_us: |
@@ -225,7 +181,7 @@ x-casaos:
         **After installing this app:**
         1. Get a free **TMDB v4 read access token** — themoviedb.org →
            Settings → API. (The v4 "Read Access Token", not the v3 API key.)
-        2. Open this app's config UI (the dashboard link) and paste it into
+        2. Open its config panel (the **MetaGateway** dashboard → this feeder → *configure*) and paste it into
            **TMDB v4 token**. Leave the rate, burst and cards-per-search fields
            blank unless you have a reason — the defaults (20 req/s, burst 20,
            10 cards per search) are sane. Save, then restart this app: the
@@ -244,7 +200,7 @@ x-casaos:
         retrieval feeder — **MetaFeeder · Prowlarr**, **· Usenet** or
         **· Tribler**.
 
-        **Authentication:** the config UI is protected by Yundera's Authelia (OIDC).
+        **No web UI of its own:** configure it from the **MetaGateway** dashboard → this feeder → *configure* (the gateway proxies this feeder's config page, behind the gateway's login).
 
 # Maison (Yundera dashboard) configuration. Read in preference to x-casaos.
 # schema_version 2 is required for `folders`: an older Maison refuses the app
@@ -258,6 +214,3 @@ x-compose-app:
     - path: /DATA/AppData/metafeedertmdb/state
       user: $PUID
       group: $PGID
-  # Same string as the caddy_0 label, so the tile link and the route agree.
-  webui-host: metafeedertmdb-${domain}
-  webui-path: "/config"