Per-host + per-service LAN-only aliases added 2026-05-24 on CT 102.
Stable names → host IPs; clients use names instead of bare IPs so
service moves only require an AdGuard edit, not N app updates.
Use case driver: Immich Android HTTP/2 Keep-Alive bug — per-SSID
'nuclide' local URL https://immich.nuclide.lan:12000 bypasses Zoraxy.
Lists all containers without LAN-published ports across CT 104/105/109/110/111/112/113.
Recommends keep-internal vs expose for each. Confirms the public/LAN/docker-internal
tiering is clean across the fleet.
Living doc at http://192.168.1.8:13080/services-overview/.
Categorised by AI/files/identity/dev/home/ops/network with external
Zoraxy routes, internal LAN IP:port, host, and doc cross-links.
Covers what Nexa is, which existing services it depends on, what is
genuinely missing (TEI, Qdrant collection, GraphDB), and alternative
tool choices for embeddings, web-search, and the graph pillar.
Repo: https://git.nuclide.systems/fkrebs/nexa
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Client IDs created programmatically via Pocket-ID /api/oidc/clients endpoint.
Env vars injected into both compose files and force-recreated.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- docs-server now runs on ops (192.168.1.8:13080), not dev (192.168.1.42)
- mkdocs.yml: fix site_url (was pointing at .111 instead of .42, now .8)
- mkdocs.yml: add all services added since last nav update (pocket-id,
backrest, databases, arcane, mcp-servers, llm-benchmark, RESUME, connection-hosts)
- portmap.md: move :13080 entry from CT 111 to CT 109 section; add Homarr :7575;
fix stale Promtail note → Alloy add-on
- README.md: update rendered docs URL to 192.168.1.8:13080
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Add Homarr/Grafana/Loki/Prometheus quick links, full public service table,
operator-only LAN links, layout additions, and related repos table.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Proxmox VE metrics via prometheus-pve-exporter on CT 109 :9221.
monitor@pve!prometheus token with Monitor (read-only) role.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Loki (CT 109 :3100, 30d retention) and Grafana Alloy deployed across
all 12 hosts. Portmap updated with new services and agent deployment notes.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
integration_openai points to LiteLLM at ai.nuclide.systems/v1.
Fixed completion=llama-3.3-70b-instruct, T2I=saia-flux (was devstral).
occ snippet for future model changes.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- New /ui/models page (sortable model catalog + service assignments)
- model_assignments.json: 35-model catalog with latency/cost/capability metadata
- API: GET/PATCH /api/model-assignments
- Model evaluator agent added to agents.json
- ui.html: widen max-width to 1600px, 4K breakpoints at 1920/2560/3840px
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- infra/connection-hosts.md: every host, LAN IP, port, and public URL
across all Proxmox guests, Docker services, network infra, and
external hardware; OIDC client registry; SSH cheat-sheet
- services/mcp-servers.md: all 27 MCP servers with full credentials,
upstream URLs, transport, group, gateway management API examples,
and gateway .env token inventory
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Config-to-git crons live on CT 108/102/PVE; HA pending
- Syncstack retired; litellm_sync.py in MCP gateway loop
- Infisical migration phases 2-4 detailed in backlog
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- video-projects-plan has never completed; media-backup-plan last OK 2026-05-21
- Both plans have orphaned runs since 19:10; Backrest restarted at 21:23
- Next runs scheduled 2026-05-25
- Vaultwarden OIDC: no env vars wired in .env as of 2026-05-22
- UNAS off-host: Backrest is the right vehicle; reliability fix is prerequisite
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Add RESUME.md for cross-session continuity (open items, key state, constraints)
- claude-max-bridge: implement /v1/responses (OpenAI Responses API) with
previous_response_id chaining via server-side history injection into system prompt.
Root cause of "session already in use": CLI leaves JSONL in un-resumable
"dequeued" state after each --print run; fix avoids session reuse entirely.
Also fixed: assistant content must be array-of-blocks not plain string (silent
JS crash otherwise).
- LiteLLM: add pass_through_endpoints for /v1/responses → claude-max-bridge
- Storage, volumes, architecture docs reconciled (Vaultwarden → local zfs,
Pocket-ID backup, WAL-G fix, apps/ decommission, Nextcloud CIFS→NFS)
- Add ideas/, proxmox-memory-audit.md, llm-benchmark.md (new docs this session)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
App-password generated via occ for fkrebs@nucli.de. Gateway patched
to persist enabled flag from config.json across restarts.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
fkrebs