Per request: TNC removed, all stacks back on default bridge with legacy
links for inter-container DNS (default bridge has no embedded DNS —
verified: nameserver passthrough to AdGuard). Kept: traefik router labels
(dnsweaver records), dawarich prod + SECRET_KEY_BASE, teslamate/bookorbit
hostport removals (service DNS now via links), komodo periphery as
separate project with 8120 hostport + server address change.
Region value=EU is not a UN M.49 subregion id (the only real invalid reason)
so rules are omitted entirely, matching how existing resources are configured.
port/ssl/healthcheck as labels arrive as strings and fail Zod (z.int/z.boolean);
drop those, rely on auto-detection (container hostname + exposed port, ssl
default on) and pangolin-side defaults for rules/auth.
Primary pangolin skips legacy proxy-resources labels entirely ('All
resources were invalid and skipped'); secondary ee-1.24 accepted them.
Switch gitea+komodo to current public-resources syntax with mode=http.
Per komodo discussion #223: periphery executes deploys; compose child
recreating its own parent dies mid-deploy. Core stack = mongo+core+mcp;
periphery = separate project on the same external komodo-internal network.
Renovate disabled for komodo-periphery/; update-stacks procedure excludes
both komodo stacks (manual host deploys).
Arnout van Westen