fkrebs
ad0fdd2beb
- Move PORTMAP, storage, volumes, docker-networks from stacks/ → infra/ - Remove stacks/todo.md (content migrated to CHANGELOG + ideas) - portmap: add new MCP servers (18005/07/09/10/11), fix s3.nuclide.systems entry, update Daytona OIDC row to DECOMMISSIONED, add Vaultwarden OIDC placeholder, add DevOps table row for MCP server Gitea repos - storage: add Garage S3 buckets subsection (lobe-files + chat-artifacts) - docker-networks: remove daytona-minimal_daytona-network row + daytona from "Stacks Keeping Own Networks" list - ct-inventory: add CT 112 (secrets/Infisical, planned) - CHANGELOG: prepend 2026-05-21 entry (docs, S3, MCP, dev env, Gitea repos, planned) - ideas/stack-ideas: add §11 Renovate Bot, §12 egress firewall, §13 local LLM - mkdocs.yml: replace nav — dissolve Stacks chapter, add infra/ entries
nuclide.systems docs
Single source of truth for the homelab. Git-tracked since 2026-05-20.
Read this first
/CLAUDE.md(host root) — operator doctrine for any AI agent SSHing in. Skim before touching anything.CHANGELOG.md— what changed and when.ct-inventory.md— canonical roster of LXCs / VM, IPs, role, sizing.
Layout
/docs/
├── README.md ← you are here
├── CHANGELOG.md ← dated bullets of every infra change
├── ct-inventory.md ← LXC/VM roster (single source of truth)
│
├── infra/ ← host-level + cross-cutting state
│ └── proxmox-state.md ← the 900-line master state doc (sizing, ZFS, NFS, DNS)
│
├── services/ ← per-service operational docs (current truth)
│ ├── homelab-architecture.md topology + design rationale
│ ├── dev-environment.md Coder + Gitea on CT 111
│ ├── mcp-gateway.md MCP gateway on CT 104
│ ├── comfyui.md
│ ├── zoraxy.md reverse proxy
│ ├── adguard-dns.md DNS + rewrites
│ ├── cloud-gpu.md GPU passthrough + future external GPU
│ └── pocket-id.md [planned] OIDC IdP + client registry
│
├── stacks/ ← CT 104 docker stacks notes
│ ├── PORTMAP.md canonical service → port → public hostname registry
│ ├── CLAUDE.md agent breadcrumbs (CT 104 specific)
│ ├── storage.md [being rewritten] storage class per service
│ ├── volumes.md [being rewritten] volume bindings per stack
│ ├── docker-networks.md
│ └── todo.md
│
├── history/ ← frozen / archived
│ ├── traefik-migration.md ABANDONED 2026-05-16 (Zoraxy chosen)
│ ├── traefik-migration-docker-labels.md ABANDONED 2026-05-16
│ ├── mcp-gateway-requirements.md SUPERSEDED by services/mcp-gateway.md
│ ├── scrubbing-list-2026-05-17.md snapshot of cleanup pass
│ └── case-study.md narrative writeup
│
├── ideas/
│ └── stack-ideas.md
│
└── security/ ← audits + leak analyses
├── data-leak-audit-comparison.md
├── data-leak-audit-2026-05-20-tr004-cloud-sandbox.md
├── data-leak-audit-2026-05-21-tr004-artifacts.md
└── audit-claude-code-meta.md self-audit of the Claude Code session that produced these
Operating principles
See /CLAUDE.md for the full doctrine. Highlights:
- Keep services running; surface synergies and gaps.
- Enforce consistency: Pocket-ID OIDC, Zoraxy + ACME,
<svc>.nuclide.systems, secrets in.env. - Plan rollback at medium+ risk (ZFS snapshots, fresh experimental CTs).
- Every service should be AI-accessible (MCP / Coder workspace CLI / documented API).
- Test end-to-end before declaring done.
- Generate slash commands for recurring maintenance.
Quick links
- Pocket-ID admin:
https://id.nuclide.systems - Gitea:
https://git.nuclide.systems - Coder:
https://dev.nuclide.systems - Nextcloud:
https://nc.nuclide.systems - MCP gateway:
https://mcp.nuclide.systems - Zoraxy admin: CT 108 (operator-only; always confirm before any change — see
[[feedback_zoraxy_confirm]]) - Proxmox PVE:
https://192.168.1.20:8006
Repo + rendered site
- Source:
https://git.nuclide.systems/fkrebs/docs - Rendered (LAN-only, no Zoraxy route):
http://192.168.1.42:13080 - Build: docs-server container on CT 111 polls Gitea every 5 min; rebuilds with mkdocs Material on every push.