Switch the urbackup service to registry.ginnoir.com/ginnoir/urbackup-server
(built in 3615c9b) and pass /dev/fuse, /dev/kvm and SYS_ADMIN so the server
enables image mounting for single-file restores.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The stock image has no libguestfs, so UrBackup disables image mounting and
single files can't be restored from image backups. Add libguestfs-tools +
kernel/supermin/qemu on top of uroni/urbackup-server:2.5.x, built by Gitea
Actions into registry.ginnoir.com/ginnoir/urbackup-server (Portainer only
pulls). Verified on valhalla: KVM-accelerated appliance, MOUNT TEST OK.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
New devicebackup stack: UrBackup 2.5.x (pinned, watchtower off) in internet
mode on :55415 so laptops back up on the LAN and over the tailnet; web UI
only via Caddy + Authentik forward_auth (provider homelab-urbackup, pk 41).
MacBooks (tm-hub, tm-wif) use Time Machine on the host smbd, which already
owns :445. Shares are staged in /etc/samba/smb.conf.timemachine-pending and
not yet applied; README has the apply command and client setup.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>