docs: expand README with monitoring links, service index, config repos

Add Homarr/Grafana/Loki/Prometheus quick links, full public service table,
operator-only LAN links, layout additions, and related repos table.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

README.md

@@ -39,6 +39,12 @@ Single source of truth for the homelab. Git-tracked since 2026-05-20.
 ├── stacks/                    ← CT 104 agent notes + legacy stack docs
 │   └── CLAUDE.md              agent breadcrumbs (CT 104 specific)
 │
+├── services/                  (continued)
+│   ├── backrest.md            Backrest backup (CT 103)
+│   ├── secrets-manager.md     Infisical (CT 112)
+│   ├── databases.md           Postgres CT 113 + per-stack DBs
+│   └── doc-ingestion.md       Paperless + Docling
+│
 ├── history/                   ← frozen / archived
 │   ├── traefik-migration.md                  ABANDONED 2026-05-16 (Zoraxy chosen)
 │   ├── traefik-migration-docker-labels.md    ABANDONED 2026-05-16
@@ -66,15 +72,36 @@ See [`/CLAUDE.md`](../CLAUDE.md) for the full doctrine. Highlights:
 6. Generate slash commands for recurring maintenance.
 
 ## Quick links
-- Pocket-ID admin: `https://id.nuclide.systems`
-- Gitea: `https://git.nuclide.systems`
-- Coder: `https://dev.nuclide.systems`
-- Nextcloud: `https://nc.nuclide.systems`
-- MCP gateway: `https://mcp.nuclide.systems`
-- Zoraxy admin: CT 108 (operator-only; **always confirm before any change** — see `[[feedback_zoraxy_confirm]]`)
-- Proxmox PVE: `https://192.168.1.20:8006`
 
-## Repo + rendered site
+### Monitoring (CT 109 · 192.168.1.8)
+| Service | URL | Notes |
+|---|---|---|
+| Homarr | `http://192.168.1.8:7575` | Service dashboard — start here |
+| Grafana | `http://192.168.1.8:3000` | Dashboards (admin/tapirnase) |
+| Prometheus | `http://192.168.1.8:9090` | Metrics — 90d retention |
+| Loki | `http://192.168.1.8:3100` | Logs — 30d retention, 13 hosts |
+| Alloy UI | `http://192.168.1.8:12345` | Log agent pipeline inspector |
+
+### Public services (`*.nuclide.systems`)
+- **AI**: [ai.nuclide.systems](https://ai.nuclide.systems) (LiteLLM) · [chat.nuclide.systems](https://chat.nuclide.systems) (LobeHub) · [mcp.nuclide.systems](https://mcp.nuclide.systems) (MCP Gateway)
+- **Files**: [nc.nuclide.systems](https://nc.nuclide.systems) (Nextcloud) · [paperless.nuclide.systems](https://paperless.nuclide.systems) · [immich.nuclide.systems](https://immich.nuclide.systems)
+- **Dev**: [git.nuclide.systems](https://git.nuclide.systems) (Gitea) · [dev.nuclide.systems](https://dev.nuclide.systems) (Coder)
+- **Home**: [ha.nuclide.systems](https://ha.nuclide.systems) (Home Assistant) · [hoarder.nuclide.systems](https://hoarder.nuclide.systems) (Karakeep) · [memos.nuclide.systems](https://memos.nuclide.systems)
+- **Identity**: [id.nuclide.systems](https://id.nuclide.systems) (Pocket-ID) · [vault.nuclide.systems](https://vault.nuclide.systems) (Vaultwarden)
+
+### Operator-only (LAN)
+- Proxmox PVE: `https://192.168.1.20:8006`
+- Zoraxy admin: `http://192.168.1.4:8000` (**always confirm before any change**)
+- AdGuard: `http://192.168.1.2` · Backrest: `http://192.168.1.3:9898` · Infisical: `http://192.168.1.7:8200`
+
+## Related repos
+| Repo | Content | Auto-sync |
+|---|---|---|
+| [fkrebs/docs](https://git.nuclide.systems/fkrebs/docs) | This doc site | Push after every doc change |
+| [fkrebs/homelab-configs](https://git.nuclide.systems/fkrebs/homelab-configs) | Homarr config, Alloy configs, service compose files | Cron 03:00 on CT 109 |
+| [fkrebs/klipper-config](https://git.nuclide.systems/fkrebs/klipper-config) | Klipper 3D printer config | Daily cron from QNAP |
+
+## Rendered docs site
 - Source: `https://git.nuclide.systems/fkrebs/docs`
-- Rendered (LAN-only, no Zoraxy route): `http://192.168.1.42:13080`
-- Build: docs-server container on CT 111 polls Gitea every 5 min; rebuilds with mkdocs Material on every push.
+- Rendered (LAN-only): `http://192.168.1.42:13080`
+- Build: docs-server on CT 111 polls Gitea every 5 min; rebuilds with mkdocs Material on push.