Containers don't inherit the host's /etc/hosts; the LAN resolver returns a dead address (192.168.0.3:443) for the public names, crash-looping the packwiz install on boot. extra_hosts host-gateway routes HTTPS through the host's nginx (valid LE cert) -> caddy -> service. Also add plan/10-uptime-kuma.md (Minecraft monitor: internal + public probes) and document the HTTPS resolution variant in plan/00-overview.md. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2.4 KiB
10 — Uptime Kuma
Status monitoring + public status page. Service uptime-kuma
(louislam/uptime-kuma:1), web UI on :3001, reached only through caddy at
https://status.${BASE_DOMAIN}. Joined to mcnet, so it can probe every other
service by its internal container name.
Add a Minecraft monitor
Uptime Kuma 1.x ships a built-in Minecraft Server monitor type. It uses the
Server List Ping protocol (the same ping the vanilla multiplayer list uses):
unauthenticated, so it works fine with ONLINE_MODE=FALSE /
ENFORCE_SECURE_PROFILE=FALSE. It reports latency, online/max players, and MOTD.
- Open
https://status.${BASE_DOMAIN}and log in (admin account created on first run). - + Add New Monitor.
- Monitor Type:
Minecraft Server. - Fill in one of the two probe targets below.
- Heartbeat Interval:
60s (fine for a friends' server). - Retries:
2, Retry Interval:30s — avoids flapping on a GC pause. - Save.
Two targets — add both
| Monitor | Server | Port | What it proves |
|---|---|---|---|
MC (internal) |
minecraft |
25565 |
The server process is up and accepting pings inside mcnet. |
MC (public) |
mc.${BASE_DOMAIN} |
25565 |
The full path works: DNS → host firewall → docker port publish → server. |
The public monitor is the one that catches "I can't connect" outages — firewall, DNS, or an unpublished port all show red here while the internal monitor stays green. Run both to tell server down apart from path broken.
Internal
minecraftresolves because uptime-kuma is onmcnet(the container name is the hostname). It is not routed through caddy — caddy only fronts HTTP vhosts, and MC is raw TCP. Do not point the monitor atcaddyor anystatus./pack.alias.
Notes
- The Minecraft monitor pings TCP
25565; it does not check Simple Voice Chat (24454/udp). Add a separate TCP Port monitor against UDP if you want voice coverage — but Kuma's TCP monitor is TCP-only, so UDP voice has no clean probe; rely on the player report instead. - Put both MC monitors on the public status page (Settings → Status Pages) so guests can self-check before pinging you.
- Optional companion HTTP monitors for the web stack:
https://auth.${BASE_DOMAIN},https://pack.${BASE_DOMAIN}/pack.toml,https://${BASE_DOMAIN}— a redpack.tomlhere explains client mod-mismatch join failures.