40f6c93fd5
LXC 125 stood up as a Seafile CE 13.0 docker-compose deployment, behind files.hubris.network. Authentik OAuth wired up via ak shell. No data migration — exploration alongside Nextcloud (114).
76 lines
4.7 KiB
Markdown
76 lines
4.7 KiB
Markdown
# Homelab Wiki — `hubris`
|
|
|
|
Living documentation for the **hubris** Proxmox homelab. Every node, every cross-cutting system, and every meaningful incident is its own page; pages are linked so you can start anywhere and walk the graph.
|
|
|
|
> Last refreshed against live state: **2026-04-28**.
|
|
|
|
## Map
|
|
|
|
### Hosts
|
|
- [`hubris`](hosts/hubris.md) — single Proxmox VE node, GMKtec NucBox M6 Ultra, `192.168.8.77`
|
|
|
|
### VMs
|
|
- [108 — `haos-16.3`](vms/108-haos.md) — Home Assistant OS
|
|
|
|
### LXC containers
|
|
See the full table in [`containers/index.md`](containers/index.md). Quick links:
|
|
|
|
| ID | Name | IP | Role |
|
|
| --- | ---------------- | --------------- | --------------------------------------------- |
|
|
| 101 | [jellyfin](containers/101-jellyfin.md) | 192.168.8.206 | Media server |
|
|
| 103 | [paperless](containers/103-paperless.md) | 192.168.8.130 | Document mgmt |
|
|
| 104 | [gitea](containers/104-gitea.md) | 192.168.8.121 | Git server |
|
|
| 105 | [apps](containers/105-apps.md) | 192.168.8.205 | Docker host (Artifacto / Booklore / PlantUML / Portainer / WriteFreely) |
|
|
| 109 | [syncthing](containers/109-syncthing.md) | (stopped) | File sync |
|
|
| 114 | [nextcloud](containers/114-nextcloud.md) | 192.168.8.224 | Personal cloud |
|
|
| 116 | [heaper](containers/116-heaper.md) | 192.168.8.116 | Heaper |
|
|
| 118 | [elementsynapse](containers/118-elementsynapse.md) | 192.168.8.239 | Matrix Synapse |
|
|
| 119 | [sophia](containers/119-sophia.md) | 192.168.8.157 | Sophia |
|
|
| 120 | [mule-images](containers/120-mule-images.md) | 192.168.8.136 | Mule-image / mulita photos |
|
|
| 121 | [caddy](containers/121-caddy.md) | 192.168.8.175 | Reverse proxy |
|
|
| 122 | [arriman](containers/122-arriman.md) | 192.168.8.132 | Docker host (\*arr stack) |
|
|
| 123 | [claudio-bot](containers/123-claudio-bot.md) | 192.168.8.230 | Matrix control plane |
|
|
| 124 | [authentik](containers/124-authentik.md) | 192.168.8.180 | SSO + split-horizon DNS |
|
|
| 125 | [seafile](containers/125-seafile.md) | 192.168.8.185 | Seafile CE (Nextcloud-replacement evaluation) |
|
|
|
|
### Cross-cutting infrastructure
|
|
- [DNS — split-horizon](infrastructure/dns.md)
|
|
- [Ingress — Caddy + VPS traefik](infrastructure/ingress.md)
|
|
- [Mesh — Tailscale → Netbird migration](infrastructure/mesh.md)
|
|
- [Monitoring — claudio-monitor](infrastructure/monitoring.md)
|
|
- [Media permissions — `media` GID 10000](infrastructure/media-permissions.md)
|
|
- [SSH access](infrastructure/ssh-access.md)
|
|
- [Backups — restic on external drive (disabled)](infrastructure/backups.md)
|
|
- [Auto-deploy — gitea-webhook pipelines](infrastructure/auto-deploy.md)
|
|
- [VPS hardening — IONOS / netbird control plane](infrastructure/vps-hardening.md)
|
|
|
|
### Investigations
|
|
Time-stamped incident notes / experiments in [`investigations/`](investigations/index.md).
|
|
|
|
### Operations
|
|
- [Command cheatsheet](operations/commands.md)
|
|
|
|
## Conventions
|
|
|
|
- **Each node page** ends with a `## Changelog` section. Reverse-chronological. Entry format:
|
|
```
|
|
### YYYY-MM-DD — short title
|
|
one or two lines on what changed and why.
|
|
```
|
|
- **Cross-linking is mandatory.** If a page references another node or system, link to it. Treat orphans as a bug.
|
|
- **Live state wins.** When something here disagrees with `pct config` / `docker inspect` / running config, fix the wiki *and* note the change in the relevant changelog.
|
|
- **Tracked configs.** A node whose config lives in a Gitea repo (Caddy, Gitea customizations, Artifacto, mule-image, claudio-bot) is auto-deployed via webhook — see [auto-deploy](infrastructure/auto-deploy.md). Edits there must be pushed, not left local.
|
|
- **No secrets.** This is a private repo on `git.hubris.network`, but still: paths to secret files are fine, secret values are not.
|
|
|
|
## Maintaining this wiki
|
|
|
|
When you change a node:
|
|
1. Update the relevant page (config snapshot, ports, mounts).
|
|
2. Add a changelog entry at the bottom of that page.
|
|
3. If the change touches a cross-cutting system (DNS, Caddy, Authentik, mesh), update *that* page too and link it from the changelog entry.
|
|
4. If it's an incident, add an entry to [`investigations/`](investigations/index.md).
|
|
|
|
## See also
|
|
|
|
- [`CONTRIBUTING.md`](CONTRIBUTING.md) — page templates and tone
|