dtoro
b230ab5937
Adds the Oikos agent-OS kernel: oikos/policy.yaml (risk classes + approval rules for every homelab/MCP command), oikos/ontology.yaml (8-domain systems model, typed relationships, node lifecycle), and OIKOS.md (OODA loop operating brief, linked from AGENTS.md). Extends inventory.yaml with a stable service contract (doc_page, config_repo, risk_notes) on all 17 services, and a structured archaeology: section for the 13 destroyed LXCs (was scattered comments + a narrative table). Fixes stale drift found in the process: authentik's backend pointed at a retired LXC (124); core has run on the VPS since 2026-05-31. Adds oikos/gen-topology.py, generating infrastructure/topology.md (Mermaid compute/ingress + storage views) from inventory.yaml. build_host_files.py now carries state/storage/depends_on into generated hosts/*.yaml. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
41 lines
1.0 KiB
YAML
41 lines
1.0 KiB
YAML
# Generated by mcp/build_host_files.py from inventory.yaml.
|
|
# Do NOT edit by hand — your changes will be overwritten.
|
|
# Source of truth: ../inventory.yaml
|
|
name: arriman
|
|
kind: lxc
|
|
os: linux
|
|
role: arr-stack
|
|
state: active
|
|
host: strong
|
|
pve_id: 122
|
|
lan_ip: 192.168.8.245
|
|
mesh:
|
|
tailscale:
|
|
fqdn: arr
|
|
mesh_globals:
|
|
primary: netbird
|
|
accepted:
|
|
- netbird
|
|
- tailscale
|
|
mounts:
|
|
- /mnt/media_local
|
|
public_hosts:
|
|
- jellyseerr.hubris.network
|
|
- qbit.hubris.network
|
|
- sab.hubris.network
|
|
runs:
|
|
- arr_stack
|
|
services_hosted:
|
|
- name: arr_stack
|
|
backend: arriman
|
|
note: jellyseerr / qbit / sab on docker compose
|
|
doc_page: containers/122-arriman.md
|
|
notes:
|
|
- Migrated from hubris to strong 2026-07-05 (Phase 2). Library on ludo-lvm.
|
|
- Contains homarr, radarr, sonarr, lidarr, sabnzbd, qbittorrent, bazarr, flaresolverr, prowlarr, jellyseerr
|
|
- qBittorrent auth subnet whitelist expanded to 192.168.8.0/24 (for seanime + Caddy access)
|
|
see_also:
|
|
- containers/122-arriman.md
|
|
mcp_endpoint: https://mcp.hubris.network/mcp
|
|
secrets_issuance_endpoint: https://secrets.hubris.network/issue
|