gitea-private.app.lan)Date: 2026-02-06
After migrating Gitea to Kubernetes, remove the legacy gitea-private.app.lan remnants from kryptovisor so it cannot be started again and the old hostname no longer routes to the service.
This procedure preserves rollback artifacts (compose file + old /data directory) by archiving them instead of deleting.
kryptovisor.auth.home.lan (192.168.1.4)The Gitea compose repo uses /mnt/fastdata/docker/apps/gitea/compose.sh which auto-includes any docker-compose.*.yml files under config/docker/.
Archive the private overlay so compose.sh up cannot recreate the old service:
sudo -n install -d -m 0755 /mnt/fastdata/docker/apps/gitea/backups/disabled-compose/2026-02-06
sudo -n mv /mnt/fastdata/docker/apps/gitea/config/docker/docker-compose.gitea.private.yml \
/mnt/fastdata/docker/apps/gitea/backups/disabled-compose/2026-02-06/docker-compose.gitea.private.yml.$(date -u +%Y%m%dT%H%M%SZ)
/data directorysudo -n install -d -m 0755 /mnt/fastdata/docker/apps/gitea/data/_archived
sudo -n mv /mnt/fastdata/docker/apps/gitea/data/gitea-private \
/mnt/fastdata/docker/apps/gitea/data/_archived/gitea-private-2026-02-06
docker rm gitea-gitea-private-1
gitea-private.app.lan from Traefik routingTraefik file-provider config:
/mnt/fastdata/docker/apps/traefik/config/docker/cert_conf.ymlUpdate the router rule so it only matches gitea.app.lan, then restart Traefik to force reload:
sudo -n cp -a /mnt/fastdata/docker/apps/traefik/config/docker/cert_conf.yml \
/mnt/fastdata/docker/apps/traefik/config/docker/cert_conf.yml.$(date -u +%Y%m%dT%H%M%SZ).bak
sudo -n python3 - <<'PY'
from pathlib import Path
p = Path("/mnt/fastdata/docker/apps/traefik/config/docker/cert_conf.yml")
s = p.read_text(encoding="utf-8")
s = s.replace(
"rule: 'Host(`gitea.app.lan`) || Host(`gitea-private.app.lan`)'",
"rule: 'Host(`gitea.app.lan`)'",
)
p.write_text(s, encoding="utf-8")
PY
docker restart traefik-traefik-1
curl -k -s -o /dev/null -w "%{http_code}\n" https://gitea.app.lan/
curl -k -s -o /dev/null -w "%{http_code}\n" https://gitea-private.app.lan/
Expected:
gitea.app.lan -> 200gitea-private.app.lan -> 404cert_conf.yml.*.bak and restart Traefik./mnt/fastdata/docker/apps/gitea/config/docker/./mnt/fastdata/docker/apps/gitea/data/gitea-private./mnt/fastdata/docker/apps/gitea/compose.sh up -d..env or app.ini contents into documentation).