---
title: Docker Services
area: infrastructure
tags: [infrastructure, homelab, docker]
created: 2026-03-18
updated: 2026-03-27
status: active
related: [[Infrastructure/Architecture]], [[Infrastructure/Automation/n8n Workflows]]
---

# Docker Services

Most service containers run on the LAN host at `192.168.153.113`. Some adjacent AI/runtime services run as host-level user services instead of Docker; those are noted separately below.

## Dockerized services

### SearXNG
- **Container:** `searxng`
- **Image:** `searxng/searxng:latest`
- **Port:** `18803 -> 8080`
- **Role:** preferred local-first web search backend
- **URLs:** `http://192.168.153.113:18803`, `http://192.168.153.117:18803`

### brave-search (MCP)
- **Container:** `brave-search`
- **Image:** `mcp/brave-search:latest`
- **Port:** `18802 -> 8000`
- **Role:** Brave-backed search fallback / second opinion
- **Note:** free-plan rate-limited; avoid parallel bursts

### n8n-agent
- **Container:** `n8n-agent`
- **Image:** `docker.n8n.io/n8nio/n8n:latest`
- **Port:** `18808 -> 5678`
- **Role:** automation workflows and integration runtime
- **Primary URL:** `http://192.168.153.113:18808`
- **Health:** `/healthz` returned `{"status":"ok"}` during live check on 2026-03-27
- **Workflows:** see [[Infrastructure/Automation/n8n Workflows]]

### whisper-server
- **Container:** `whisper-server`
- **Image:** `ghcr.io/ggml-org/whisper.cpp:main`
- **Port:** `18801 -> 8080`
- **Role:** local audio transcription

### kokoro-tts
- **Container:** `kokoro-tts`
- **Port:** `18805`
- **Role:** local CPU TTS service

### LiteLLM proxy + DB
- **Containers:** `litellm`, `litellm-db`
- **Port:** `18804`
- **Role:** OpenAI-compatible model gateway / proxy layer
- **Pinned note:** keep LiteLLM at `<=1.82.6` due the 2026-03-24 supply-chain incident affecting `1.82.7` / `1.82.8`

## Adjacent host services (not Docker)

### llama.cpp
- **Port:** `18806`
- **Model:** `gemma-3-12b-it-q4_0.gguf`
- **Role:** local OpenAI-compatible LLM endpoint for private/offline reasoning and workflow inference
- **Live check:** model endpoint and chat-completion path re-verified on 2026-03-27

### Ollama
- **Port:** `18807`
- **Role:** embeddings runtime for OpenClaw memory search
- **Model:** `nomic-embed-text`

## Adjacent storage / infra

### MinIO
- **Endpoint:** `192.168.153.253:9000`
- **Bucket:** `zap`
- **Role:** object storage for OpenClaw backups

## Operational note

The shared Obsidian vault is not a Docker service, but it is a critical part of this stack. Its Local REST API path was re-verified on 2026-03-27 after fixing cross-user write permissions on the shared `virtiofs` mount.
