fkrebs/docs
1
0
Fork 0
Code Issues 14 Pull Requests Actions Packages Projects Releases Wiki Activity
93 Commits 2 Branches 0 Tags
cf2aad887b0b983df2d0eb04ef2e1a81e21cedcb
Commit Graph

93 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
fkrebs cf2aad887b destroy CT 111 (dev) and CT 112 (secrets) 
Both LXCs removed from Proxmox after confirming all services migrated.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 22:14:12 +02:00
fkrebs a2f1d49170 migrate dev→CT104, secrets→CT109; add proton-bridge; sunset CT111/CT112 
- CT 111 (dev): Gitea + Coder + act-runner migrated to CT 104
  - Gitea uses Redis for queue/cache/session (idmapped NFS LevelDB workaround)
  - Zoraxy routes dev/git updated to 192.168.1.40
  - AdGuard dev.nuclide.lan updated to 192.168.1.40
- CT 112 (secrets): Infisical migrated to CT 109
  - DB dump restored; SITE_URL updated to 192.168.1.8:8200
  - AdGuard secrets.nuclide.lan updated to 192.168.1.8
- Proton Mail Bridge deployed on CT 104 (SMTP :1025, IMAP :1143)
- Homepage updated: Dev group → ct104, Infisical → my-local, Background group added
- portmap, ct-inventory, zoraxy, dev-environment, secrets-manager all updated

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 22:08:08 +02:00
fkrebs bcbe9e7a88 portainer: add LXC names to agents table, fix CT 105→CT 110 2026-05-26 21:44:01 +02:00
fkrebs 0b4727ed58 homepage: move to port 10000 2026-05-26 21:39:18 +02:00
fkrebs 4f17d99f55 homepage: use ops.nuclide.lan (host alias) not homepage.nuclide.lan 2026-05-26 21:38:09 +02:00
fkrebs ff7bacdaf9 Homepage replaces Homarr: portmap, inventory, DNS docs updated (2026-05-26) 2026-05-26 21:32:14 +02:00
fkrebs 4429b37c49 zoraxy: remove arcane.nuclide.systems route (decommissioned 2026-05-26) 2026-05-26 21:13:57 +02:00
fkrebs 03fd23b37b Update pocket-id.md: full client table with IDs, API key, remove Arcane/lobehub 2026-05-26 21:08:51 +02:00
fkrebs 8d73ae3e30 portainer.md: add Observability section (Prometheus + Grafana) 
Prometheus scrapes /api/metrics via X-API-Key, alert rules for
environment health, Grafana dashboard at uid=portainer-be.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 17:23:09 +02:00
fkrebs f65ceef90a Add Portainer BE doc; update backup coverage for CT 109 
- New services/portainer.md: BE license key, agent inventory, backup
  setup (Garage S3 + JottaCloud offsite), OIDC pending steps
- backrest.md: add CT 109 Portainer to coverage map, remove stale
  services/arcane path from plan, note Arcane decommission

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 17:12:36 +02:00
fkrebs 07b21a7e2e docs: add SAIA rate limits, Bifrost governance, and admin auth notes to mcp-gateway.md 
- SAIA rate limits: minute=30/1m active at provider level; hour/day rows exist but not linked
- VK governance: allow_all_keys SQL workaround, allowed_models must be non-null JSON text
- Fix stale sk-tapirnase reference in add-MCP-client example (now uses cookie auth)
- Add LLM provider table

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 14:43:50 +02:00
fkrebs dcd8f36331 sunset LiteLLM in portmap.md (2026-05-26) 
- Port 14000 row struck as SUNSET; replaced by Bifrost
- Prometheus scrape target for LiteLLM struck
- e73bb7b9 Pocket-ID client row struck as DELETED
- Removed litellm from "not publicly proxied" list

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 13:57:40 +02:00
fkrebs 6c401f2376 docs: reconcile sunset of LiteLLM external, mcp-gateway, and LobeChat 
- Bifrost replaces LiteLLM at ai.nuclide.systems (CT 104:14003); LiteLLM
  now internal-only backend at :14000
- mcp-gateway (FastAPI/DinD, mcp.nuclide.systems) decommissioned 2026-05-26;
  MCP now served by Bifrost at ai.nuclide.systems/mcp (29 clients, ~760 tools)
- LobeChat decommissioned 2026-05-26; chat.nuclide.systems now Open WebUI
  (CT 104:14002, stack ai/open-webui.yml)
- Update portmap, volumes, services-overview, homelab-architecture, zoraxy,
  mcp-servers, databases, README accordingly

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 13:35:29 +02:00
fkrebs 550b54085c docs: add open-webui VK to mcp-gateway virtual keys table 2026-05-26 13:11:22 +02:00
fkrebs b065c2b849 docs: mark mcp-gateway fully decommissioned 2026-05-26 2026-05-26 13:10:14 +02:00
fkrebs 0600032b75 docs: migrate MCP gateway docs from mcp-gateway to Bifrost 
- mcp-gateway.md: full rewrite for Bifrost at ai.nuclide.systems/mcp;
  29 clients / ~760 tools; VK auth; n8n+shepard blocked on
  streamable-HTTP; legacy gateway decommission checklist added
- connection-hosts.md: Bifrost at port 14003 is now ai.nuclide.systems;
  LiteLLM demoted to internal-only; mcp.nuclide.systems marked pending
  decommission; OIDC client 78c78998 flagged for removal

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 12:55:33 +02:00
fkrebs fbc6469fc4 doc-ingestion: nomic embedding stack, Bifrost semantic cache, GPU passthrough status 2026-05-26 09:49:09 +02:00
fkrebs 14b21199ee docs: ingest-pipeline design doc; update doc-ingestion with nomic service 2026-05-26 09:20:38 +02:00
fkrebs 3d71824295 auto: doc-ingestion: Qdrant+TEI deployed; OWUI RAG config; Bifrost embed models 2026-05-26 08:56:00 +02:00
fkrebs defc788ab5 2026-05-26: LiteLLM decommissioned, consistency sweep complete 
- zoraxy.md: ai.nuclide.systems note updated (LiteLLM decommissioned)
- LiteLLM stopped, commented out of docker-compose.yml
- Paperless-AI, Nextcloud updated to Bifrost VK
- mcp-gateway sync loops disabled
 2026-05-26 08:07:09 +02:00
fkrebs 7e0082379e 2026-05-26: LobeChat→Open WebUI cutover, Bifrost deployed 
- zoraxy.md: chat.nuclide.systems → Open WebUI :14002, ai.nuclide.systems → Bifrost :14003
- config-to-git.md: CT 104 fkrebs/ct104-conf row added
 2026-05-26 07:50:25 +02:00
fkrebs 067e42c25d ops: cut ai.nuclide.systems over to Bifrost (port 14003) 
LiteLLM remains on :14000 for internal services during migration.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 07:29:37 +02:00
fkrebs 3819794812 docs: add CT 104 to config-to-git fleet 
ct104-conf repo tracks /opt/stacks/ compose files and configs daily.
Bifrost and Open WebUI now covered.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-26 07:26:37 +02:00
fkrebs 13bc1ecc12 RESUME + pocket-id: reflect 2026-05-24 → 26 state 
RESUME:
- Backrest 3-for-3 success on 2026-05-26 (video-projects-plan recovered)
- Vault dedup + 234 link rewrites + cleanup
- Plugin audit + Memos Sync + Obsidian Git + streamlined-ui
- Config-to-git fleet now 8 repos
- AdGuard *.nuclide.lan zone (30 A-records)
- 3 new Homarr boards (home/admin/command)
- Pocket-ID LAN callback URLs
- Immich HTTP/2 Keep-Alive diagnosed
- New constraints: use LAN aliases; daily-note merge policy

pocket-id.md: LAN callback URLs added for Homarr/Grafana/Infisical/Proxmox.
Filed earlier as part of 2026-05-24 work, committing now.
 2026-05-26 06:03:28 +02:00
fkrebs 3638e368b1 adguard: document new *.nuclide.lan zone (30 A-records) 
Per-host + per-service LAN-only aliases added 2026-05-24 on CT 102.
Stable names → host IPs; clients use names instead of bare IPs so
service moves only require an AdGuard edit, not N app updates.

Use case driver: Immich Android HTTP/2 Keep-Alive bug — per-SSID
'nuclide' local URL https://immich.nuclide.lan:12000 bypasses Zoraxy.
 2026-05-24 15:42:10 +02:00
fkrebs 3fa4608266 config-to-git: add CT 103/109/113 + obsidian-vault + obsidian-config 
CT 103/109/113-conf were deployed earlier today, table updated.
Add obsidian-vault (CT 103, daily 04:00, rolling 2-commit window) and
obsidian-config (manual zip-drop workflow, see README in repo).
 2026-05-24 10:27:49 +02:00
fkrebs a422bbfb13 obsidian MCP: document vault paths across CT 104/105/UNAS 2026-05-24 08:51:04 +02:00
fkrebs aab7f3a6c6 services-overview: make internal IP:port entries clickable 2026-05-24 08:45:22 +02:00
fkrebs 688f3cac45 docker-internal-inventory: 3-tier model with per-container recommendation 
Lists all containers without LAN-published ports across CT 104/105/109/110/111/112/113.
Recommends keep-internal vs expose for each. Confirms the public/LAN/docker-internal
tiering is clean across the fleet.
 2026-05-24 08:41:46 +02:00
fkrebs d76d766c0a services-overview: full inventory with external + internal URLs 
Living doc at http://192.168.1.8:13080/services-overview/.
Categorised by AI/files/identity/dev/home/ops/network with external
Zoraxy routes, internal LAN IP:port, host, and doc cross-links.
 2026-05-24 08:39:29 +02:00
fkrebs 7af18a82f1 config-to-git: document fleet (PVE, Zoraxy, AdGuard, HAOS) 
Add /docs/infra/config-to-git.md listing all 4 repos, schedules,
script paths, and HAOS-specific addon init_commands pattern.
RESUME updated to reflect HAOS bootstrap done 2026-05-24.
 2026-05-24 08:21:52 +02:00
fkrebs 710c8afe3c RESUME: arcane auto-update notifications done 2026-05-24 08:14:52 +02:00
fkrebs 829dd8f339 homarr OIDC: correct env var to AUTH_PROVIDERS (plural) 
Homarr v1 ignores singular AUTH_PROVIDER; OIDC button only appears
when AUTH_PROVIDERS=credentials,oidc is set. Fixed live on CT 109.
 2026-05-24 07:47:13 +02:00
fkrebs 8aa807bb94 docs: AdGuard split-horizon DNS done 
*.nuclide.systems → 192.168.1.4 rewrite active

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 22:45:25 +02:00
fkrebs e160e3dba8 docs: dozzle is LAN-only, clean up route notes 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 19:10:57 +02:00
fkrebs 895658a115 docs: consistency pass 2026-05-23 (session ×4) 
- zoraxy.md: fix arcane upstream to CT109 (192.168.1.8:10002), add
  SkipWebSocketOriginCheck column, note missing routes (dozzle, etc.)
- arcane.md: reflect CT109 migration complete, expand agent table to
  all 8 environments, fix MANAGER_API_URL and DB paths
- ct-inventory.md: CT103 RAM 512→4096+swap; CT109 footnote complete
- proxmox-memory-audit.md: CT103 bump, add CT109+CT113 rows, fix sum
- portmap.md: add Wetty row, fix arcane backend, WAL-G scrape target,
  homepage decommissioned, dozzle LAN-only note
- mcp-gateway.md: add gitea/paperless/proxmox, count 26→29 servers
- RESUME.md: check off WAL-G, Loki, Zoraxy audit; CT109 in key state
  table; session ×4 completed items block

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 16:42:45 +02:00
fkrebs 14137c32a7 docs(mcp): add gitea, paperless, proxmox MCP servers (2026-05-23) 
Wire three new community MCP servers into the gateway on CT104:
- gitea: official Gitea MCP (53 tools), static upstream gitea-mcp:8000
- paperless: @nloui/paperless-mcp via mcp-proxy (12 tools), static upstream
- proxmox: proxmox-mcp-plus PyPI (39 tools), read-only PVEAuditor token

Total: 27 → 30 servers. Skipped: karakeep (API key unset), audiobookshelf
(Go binary only), vaultwarden (master password exposure risk).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 15:02:26 +02:00
fkrebs 10e138b677 docs: document WAL-G monitoring setup on CT113/CT109 
Add WAL-G monitoring section to databases.md covering the textfile
collector script, walg-metrics.timer, node_exporter config, and
Prometheus alert rules added to prevent silent backup stalls.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 14:50:39 +02:00
fkrebs f8d8ee3ac0 docs: add Nexa service doc — synopsis, nuclide.systems mapping, phased roadmap 
Covers what Nexa is, which existing services it depends on, what is
genuinely missing (TEI, Qdrant collection, GraphDB), and alternative
tool choices for embeddings, web-search, and the graph pillar.

Repo: https://git.nuclide.systems/fkrebs/nexa

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 14:32:02 +02:00
fkrebs 1a68be98e4 docs: session ×3 — Homarr board, Arcane environments, Infisical OIDC 
- Homarr board 'nuclide' deployed (6 sections, 27 apps, correct SQLite schema)
- Arcane 8 environments online with unique agent tokens per host
- Infisical SITE_URL → internal IP; Pocket-ID OIDC client created
- RESUME: Arcane OIDC closed, new open items for Infisical config + Loki + Gotify
- Claude settings: SSH allowlist expanded

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 13:41:48 +02:00
fkrebs f441e8b762 2026-05-23: UNAS SSH key auth, unas-conf repo, NFSv4 status 2026-05-23 11:29:25 +02:00
fkrebs 3de4d5db63 2026-05-23: PVE optimizations, LXC watchdog, KSM, startup order 2026-05-23 11:19:21 +02:00
fkrebs 7927390359 docs: add all config-tracking repos to related repos table 2026-05-23 09:48:22 +02:00
fkrebs c3fd649f68 docs: 2026-05-23 session — CT109 ops, Arcane/Dozzle migration, OIDC wired, OOM fix, n8n tracking 2026-05-23 09:44:15 +02:00
fkrebs 4c97732720 docs: Homarr + Grafana OIDC wired via Pocket-ID API (2026-05-23) 
Client IDs created programmatically via Pocket-ID /api/oidc/clients endpoint.
Env vars injected into both compose files and force-recreated.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 09:14:20 +02:00
fkrebs ff398a592f docs: Arcane + Dozzle migrated to CT 109; agents on all Docker hosts 
- Arcane server moved CT 104 → CT 109:10002; DB migrated; Zoraxy upstream updated
- Dozzle server moved CT 104 → CT 109:10001; remote agents on all 7 Docker hosts
- Headless agents (arcane-headless + dozzle agent) deployed to:
  CT 101, 104, 105, 110, 111, 112 via /opt/stacks/ops-agents/
  CT 113 updated in-place (was pointing at CT 104, now CT 109)
- homelab-configs sync script expanded: ops/{arcane,dozzle,monitoring} + all agent configs
- portmap: updated CT 104 entries as decommissioned, added CT 109 entries
- ct-inventory: CT 109 role description updated

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 08:53:37 +02:00
fkrebs 96df6e7bd0 docs: migrate docs-server CT 111 → CT 109; update nav and URLs 
- docs-server now runs on ops (192.168.1.8:13080), not dev (192.168.1.42)
- mkdocs.yml: fix site_url (was pointing at .111 instead of .42, now .8)
- mkdocs.yml: add all services added since last nav update (pocket-id,
  backrest, databases, arcane, mcp-servers, llm-benchmark, RESUME, connection-hosts)
- portmap.md: move :13080 entry from CT 111 to CT 109 section; add Homarr :7575;
  fix stale Promtail note → Alloy add-on
- README.md: update rendered docs URL to 192.168.1.8:13080

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 08:16:09 +02:00
fkrebs dc7ceab724 docs: correct Zigbee integration — Zigbee2MQTT + Mosquitto, not ZHA 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 08:05:25 +02:00
fkrebs 474af687af docs: 2026-05-23 session — observability stack, Pocket-ID guide, secrets scrub 
- CHANGELOG: full 2026-05-23 backfill (Loki, Alloy×12 hosts, pve-exporter,
  HA prometheus integration, 5 dashboards, 3 alert rules, Homarr, homelab-configs repo)
- services/pocket-id.md: new — OIDC endpoints, client creation walkthrough,
  per-service env var patterns, current client registry, backup notes
- infra/proxmox-state.md: redact D-Link credentials from plaintext (pelican/pinkpanther)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 08:03:01 +02:00
fkrebs 3d114c6873 docs: expand README with monitoring links, service index, config repos 
Add Homarr/Grafana/Loki/Prometheus quick links, full public service table,
operator-only LAN links, layout additions, and related repos table.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-23 07:48:23 +02:00