Phase 1 — fix stale state after strong migration (Phase 1+2, 2026-07-05)
- README: corrected IPs (jellyfin 206→246, arriman 132→245, etc.),
added missing containers (128 trmnl, 129 house, 133 seanime, 134 romm,
124 authentik), updated last-refreshed date, added strong host context
- containers/101-jellyfin.md: IP 206→246, host hubris→strong, mount
/mnt/library→/mnt/media_local, GPU 760M→680M+RX7600, privilege→priv
- containers/118-elementsynapse.md: IP 239→242, added Host: strong
- containers/122-arriman.md: IP 132→245, mount→/mnt/media_local, added Host
- containers/129-house.md: IP 212→244, added Host: strong
- containers/130-grimmory.md: IP 213→247, mount→/mnt/media_local, added Host
- containers/121-caddy.md: fixed site list (books→grimmory, removed auth→VPS,
added house, roms, teddy, trmnl)
- hosts/strong.md: updated At-a-glance to reflect 7 LXCs hosted
- containers/123-claudio-bot.md, 127-mule-photos-new.md: archived to
containers/archive/ (were destroyed LXCs with living pages)
- inventory.yaml: verified correct — no changes needed
Phase 2 — structural cleanup
- infrastructure/index.md: one-page overview of all cross-cutting systems
- runbooks/: moved runbook-budget-from-csv.md and runbook-dpkg-interrupted.md
from operations/ with YAML frontmatter added
- plans/done/: moved 4 completed plans out of active view; updated index
- vms/index.md: added VM index page
Phase 3 — navigation & discoverability
- GLOSSARY.md: term definitions (Authentik, Caddy, LXC, VAAPI, etc.)
- README: added table of contents, links to glossary + infrastructure index
- investigations/: archived 2 resolved cases (crash-loop, authentik-migration)
to investigations/archive/; updated index with active vs archived sections
Phase 4 — ongoing discipline
- CONTRIBUTING.md: documented same-session update rule with explicit checklist
- README: replaced full LXC table with summary + link to containers/index.md
(single source of truth; de-duplication)
2.4 KiB
2.4 KiB
Glossary
Terms and abbreviations used throughout the homelab wiki.
| Term | Meaning |
|---|---|
| Authentik | SSO/identity provider. Core runs on the VPS; forward-auth outpost at LXC 106 on hubris |
| Caddy | Reverse proxy (LXC 121). Terminates TLS for every *.hubris.network hostname |
| Caveman | Terse communication standard for agent responses — no filler, keep substance |
| Forward-auth | Caddy snippet that delegates authentication to an Authentik outpost. Protects web UIs like qBit, SABnzbd |
| Gitea | Git server at git.hubris.network. Hosts all tracked config repos |
| Gluetun | WireGuard VPN sidecar on arriman. All *arr traffic routes through it |
| HAOS | Home Assistant Operating System. VM 108 on hubris |
| Hubris | Primary Proxmox VE node (GMKtec NucBox M6 Ultra). PVE hostname, cluster member 1 |
| LXC | Linux Container (Proxmox). VM-like isolation without a full OS kernel |
| LVM-thin | Thin-provisioned logical volume manager. Used for all container/VM storage |
| MCP | Model Context Protocol (MCP server at mcp.hubris.network). Structured tools for agents to query homelab state |
| Mesh | Overlay VPN for off-LAN connectivity. Netbird is current; Tailscale is legacy |
| Netbird | Preferred mesh VPN. VPS hosts the management plane; all homelab nodes are members |
| OIDC | OpenID Connect. Protocol used by Authentik for SSO login flows |
| Oikos | Agent operating model (OIKOS.md). OODA loop, risk classes, policy, ontology |
| PVE | Proxmox Virtual Environment — the hypervisor on both hubris and strong |
| SOPS | sops — Mozilla SOPS. Encrypts secrets with age keys so they live in the git repo |
| Strong | Secondary Proxmox VE node. Cluster member 2 (hostname strong, nickname ludo/ludo-mini) |
| Traefik | Reverse proxy on IONOS VPS. Serves *.hubris.network to the public internet |
| VAAPI | Video Acceleration API. Intel/AMD GPU-based hardware transcode for Jellyfin |
| VPS | Virtual Private Server at IONOS (82.165.190.79). Runs Authentik core + Netbird management |
| *\arr | Media automation suite: Sonarr (TV), Radarr (movies), Lidarr (music), Prowlarr (indexer), Bazarr (subtitles), Readarr (books — not in use) |
See also
- Infrastructure index — cross-cutting systems each with their own doc page
- OIKOS operating model — agent policy, risk classes, lifecycle