Files
oikos/containers/index.md
dtoro ba93c4709b docs(rclone): LXC 132 rclone -> Proton Drive backup; deprecate restic-on-USB
New off-host backup job replacing the disabled restic-on-USB backup: LXC 132
`rclone` mirrors selected /mnt/library folders to Proton Drive (plain rclone
sync, Proton's built-in E2E, no crypt overlay) on a monthly timer, with
rclone's Web GUI for LAN-only browsing/ad-hoc runs and live job status.

- containers/132-rclone.md: full design, Proton auth gotcha (TOTP secret vs
  live code), pct exec PATH gotcha, rc-API job-visibility runner rewrite,
  selected folder set (cloud/documents/repos), deferred tracked-repo note.
- infrastructure/backups.md: restic-on-USB marked DEPRECATED/superseded,
  leads with the new job now.
- containers/index.md, README.md, infrastructure/media-permissions.md:
  register the new container.
2026-07-02 00:37:10 +02:00

5.8 KiB

LXC containers — index

All containers live on hubris. Each row links to the per-container page.

ID Name IP Priv Cores RAM Disk Mounts Public hostname Status
101 jellyfin 192.168.8.206 unpriv (idmap) 2 4 GiB 16 GiB /mnt/library media.hubris.network running
103 paperless 192.168.8.130 priv 2 3 GiB 8 GiB /mnt/library paperless.hubris.network running
104 gitea 192.168.8.121 priv 1 1 GiB 8 GiB /mnt/library git.hubris.network running
105 apps 192.168.8.205 priv 2 4 GiB 30 GiB /mnt/library docker / artifacto / blog running
114 nextcloud 192.168.8.224 priv 4 6 GiB 25 GiB /mnt/library cloud.hubris.network running
118 elementsynapse 192.168.8.239 unpriv 1 2 GiB 8 GiB matrix.hubris.network running
119 sophia 192.168.8.157 priv 2 1 GiB 10 GiB /mnt/library running
120 mule-images 192.168.8.136 priv 6 12 GiB 60 GiB /mnt/library + /dev/dri (iGPU passthrough) photos.hubris.network running
121 caddy 192.168.8.175 unpriv 1 512 MiB 6 GiB (terminates all *.hubris.network) running
122 arriman 192.168.8.132 priv 4 8 GiB 24 GiB /mnt/library jellyseerr / qbit / sab running
124 authentik 192.168.8.180 priv 2 4 GiB 20 GiB auth.hubris.network running
128 trmnl 192.168.8.211 unpriv 1 768 MiB 8 GiB trmnl.hubris.network running
129 house 192.168.8.212 unpriv 1 1344 MiB 8 GiB house.hubris.network running
130 grimmory 192.168.8.213 priv 1 2 GiB 16 GiB /mnt/library books.hubris.network running
132 rclone 192.168.8.214 priv 1 1 GiB 8 GiB /mnt/library (ro) — (LAN-only UI :5572) running

Recently destroyed (kept for archaeology)

ID Name Destroyed Reason
127 mule-photos-new 2026-05-22 PhotoPrism + sidecar + SvelteKit stack promoted to LXC 120 via Mulimage 2.0 merge (70dc1b6); M0 test LXC retired. Caddy + dnsmasq + gitea webhook + NC webhook listeners all cleaned up in the same cutover.
100 arr (yunohost) ~2026-04-28 Migrated to docker stack on arriman; planned retention window expired
106 flaresolverr ~2026-04-28 Folded into the arriman docker compose
116 heaper 2026-05-14 Decommissioned by user; data subtree at /mnt/library/heaper (224 MiB) retained
126 plato 2026-06-28 Notes/discovery workspace decommissioned; data at /mnt/library/documents/plato retained for archaeology
123 claudio-bot 2026-06-04 Replaced by Hermes Agent on mac-mini; monitoring migrated to homelab-health-watchdog cron. See deprecation plan
109 syncthing 2026-05-14 Decommissioned by user; /mnt/library/syncthing was already empty
125 seafile 2026-05-13 Seafile Pro evaluation, user disliked the product; teardown also removed files.hubris.network from caddy + dnsmasq
107 marimo between 2026-04-21 and 2026-04-28 Decommissioned
110 photoprism between 2026-04-21 and 2026-04-28 Replaced by mulita
111 karakeep between 2026-04-21 and 2026-04-28 Decommissioned
112 immich between 2026-04-21 and 2026-04-28 Replaced by mulita
115 reticulum between 2026-04-21 and 2026-04-28 Decommissioned

Several .conf.bak files survive under /etc/pve/lxc/ if you need to recover any of the configs.

Conventions

  • All net0 are bridge=vmbr0, ip=dhcp except 124 (authentik) which is statically 192.168.8.180/24. IPs are stable via the LAN router's DHCP reservations.
  • onboot=1 on every container — the host brings them up after pve-guests.service.
  • Bind mounts are declared as mp0: /mnt/library,mp=/mnt/library. Containers that don't mount /mnt/library don't need it.
  • Most containers are privileged. Unprivileged ones (101, 118, 121) require an idmap block in their conf to participate in the media GID 10000 standard.