infra: join ludo-mini to hubris as Homelab cluster node "strong"

Reformatted the ludo-mini workstation to Proxmox VE 9.2.3 and joined it
to hubris's existing single-node "Homelab" cluster (2 nodes, no QDevice
yet). Added a second NVMe as its own LVM-thin pool (ludo-lvm). Renamed
the wiki/inventory identity from ludo-mini to strong to match the OS/
cluster hostname, since bootstrap's client-enrollment lookup depends on
that match. Also regenerated hosts/grimmory.yaml, which was missing from
git despite being referenced by inventory.yaml.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

hosts/hubris.md

@@ -1,6 +1,9 @@
 # `hubris` — Proxmox host
 
-Single-node Proxmox VE running 1 VM and 13 LXC containers. The whole homelab.
+Proxmox VE host running 1 VM and 13 LXC containers — the whole homelab's
+workloads still live here. As of 2026-07-01, hubris is node 1 of the 2-node
+`Homelab` cluster (see [Cluster](#cluster)); the second node is
+[strong](strong.md), which hosts nothing yet.
 
 ## At a glance
 - **Role:** Proxmox VE 9.1.2 hypervisor (kernel `6.14.11-4-pve`)
@@ -22,6 +25,30 @@ Single-node Proxmox VE running 1 VM and 13 LXC containers. The whole homelab.
 
 `/mnt/library` holds the shared media + data pool: `anime`, `audiobooks`, `books`, `comics`, `documents`, `downloads`, `heaper`, `homecloud`, `images`, `marimo`, `movies`, `music`, `notes`, `podcasts`, `repos`, `roms`, `sophia`. Bind-mounted into every container that needs it. Permissions standard: [media GID 10000](../infrastructure/media-permissions.md).
 
+## Cluster
+
+Member of `Homelab`, a 2-node Proxmox cluster with [strong](strong.md)
+(cluster/OS hostname `strong`), formed 2026-07-01.
+
+- **Corosync ring0:** hubris's internal `192.168.8.77` (the `vmbr0` address).
+  strong reaches it via the existing Fritz!Box static route
+  (`192.168.8.0/24 → 192.168.178.10`) — no dedicated corosync link, just the
+  household LAN. Fine for a home cluster; not latency-isolated.
+- **Quorum:** 2 nodes, 1 vote each, no QDevice tiebreaker. Quorum needs both
+  votes — if either node is down (reboot, maintenance, network hiccup), the
+  survivor's running guests keep working but `/etc/pve` goes read-only:
+  no start/stop/create/edit until quorum returns. Decided to skip a QDevice
+  for now; revisit if hubris's periodic reboots (BIOS/thermal work, see
+  Quirks below) make this painful in practice.
+- **Storage:** `local` / `local-lvm` are the standard per-node default IDs
+  (every node has its own, not actually shared). The `library` lvmthin pool
+  is explicitly restricted to `nodes hubris` in `/etc/pve/storage.cfg` since
+  it's a physical thinpool that only exists on this host's hardware.
+- strong currently hosts no LXCs/VMs — it exists solely as a cluster
+  member so far. See [strong.md](strong.md) and the [library-SSD
+  migration plan](../.hermes/plans/2026-06-03_110000-library-ssd-migration-to-ludo-mini.md)
+  for what comes next (physical drive move, service migration — not started).
+
 ## Tenants
 
 ### VMs
@@ -62,7 +89,7 @@ See [monitoring](../infrastructure/monitoring.md), [backups](../infrastructure/b
 
 ## Quirks
 
-- `/etc/pve` is fuse — normal for the Proxmox cluster filesystem, even on a single-node install.
+- `/etc/pve` is fuse — the Proxmox cluster filesystem, now genuinely cluster-synced (2-node) rather than the single-node-but-still-fuse case this note used to describe.
 - ZFS is **not** in use; storage is LVM-thin + ext4.
 - Two Realtek 8125 NICs use the in-tree `r8169` driver, not the OOT `r8125`.
 - Hardware is thermally marginal. NVMe sensors live near warn temp under load. Thermal pads installed on the SSDs 2026-04-23; host relocated to a better-ventilated spot 2026-04-29.
@@ -73,6 +100,8 @@ See [monitoring](../infrastructure/monitoring.md), [backups](../infrastructure/b
 
 - `root@hubris` (self, RSA) — local
 - `d.toro.v@pm.me` (ed25519) — user's iMac, added 2026-04-22
+- `root@strong` (RSA) — strong's cluster-join key, added 2026-07-01 so
+  `pvecm add` could authenticate without a password prompt
 
 OpenSSH on `0.0.0.0:22`. Netbird's built-in SSH server is on `100.122.38.109:22022` and bypasses `authorized_keys` (OIDC/browser). See [SSH access](../infrastructure/ssh-access.md) for the dual-server gotcha.
 
@@ -86,9 +115,13 @@ OpenSSH on `0.0.0.0:22`. Netbird's built-in SSH server is on `100.122.38.109:220
 - [Backups (disabled)](../infrastructure/backups.md)
 - [Operations cheatsheet](../operations/commands.md)
 - [Investigation: 2026-04-21 crash loop](../investigations/2026-04-21-hubris-crash-loop.md)
+- [strong — Proxmox host](strong.md)
 
 ## Changelog
 
+### 2026-07-01 — strong joined as a 2nd cluster node ("Homelab")
+User reformatted `strong` (formerly a Linux dev workstation, `192.168.178.181`) to Proxmox VE 9.2.3. Cluster/OS hostname on that box is `strong` (left as-is from install). Bootstrapped root SSH on strong from a one-time console password (installed hubris's existing trusted key set: `root@hubris`, `d.toro.v@pm.me`), then generated a keypair on strong and pre-authorized it here (`root@strong`) so `pvecm add 192.168.8.77 --use_ssh 1` (run from strong) could join without an interactive password prompt. No cabling/routing changes needed — strong reaches hubris's corosync address (`192.168.8.77`) via the existing Fritz!Box static route. Cluster now 2 nodes, quorate, **no QDevice** (explicit choice — see [Cluster](#cluster) above for the quorum tradeoff this implies). strong hosts no guests yet; this is Phase 1 of the [library-SSD migration plan](../.hermes/plans/2026-06-03_110000-library-ssd-migration-to-ludo-mini.md), nothing further from that plan has been executed.
+
 ### 2026-06-02 — Slate AX retired; SODOLA switch added; network restructured
 Replaced GL.iNet Slate AX sub-router with SODOLA 5-Port 2.5Gbit managed switch. Fritz!OS 8.x lacks second-IP-network support on LAN ports, so Proxmox now acts as the subnet router: `vmbr1` (eno1 → SODOLA → Fritz!Box) is the uplink at `192.168.178.10/24`; `vmbr0` is a portless internal bridge holding all LXCs/VMs with `192.168.8.1` as an alias (unchanged LXC gateway). Fritz!Box static route `192.168.8.0/24 → 192.168.178.10` enables inbound routing. No LXC configs changed. Eliminated double-NAT. WiFi (`wlp3s0`) also removed — was pointing at the Slate AX SSID, no longer useful. See [network](../infrastructure/network.md) and [migration plan](../plans/2026-06-01-slate-ax-to-sodola-migration.md).