Phase 1 — fix stale state after strong migration (Phase 1+2, 2026-07-05)
- README: corrected IPs (jellyfin 206→246, arriman 132→245, etc.),
added missing containers (128 trmnl, 129 house, 133 seanime, 134 romm,
124 authentik), updated last-refreshed date, added strong host context
- containers/101-jellyfin.md: IP 206→246, host hubris→strong, mount
/mnt/library→/mnt/media_local, GPU 760M→680M+RX7600, privilege→priv
- containers/118-elementsynapse.md: IP 239→242, added Host: strong
- containers/122-arriman.md: IP 132→245, mount→/mnt/media_local, added Host
- containers/129-house.md: IP 212→244, added Host: strong
- containers/130-grimmory.md: IP 213→247, mount→/mnt/media_local, added Host
- containers/121-caddy.md: fixed site list (books→grimmory, removed auth→VPS,
added house, roms, teddy, trmnl)
- hosts/strong.md: updated At-a-glance to reflect 7 LXCs hosted
- containers/123-claudio-bot.md, 127-mule-photos-new.md: archived to
containers/archive/ (were destroyed LXCs with living pages)
- inventory.yaml: verified correct — no changes needed
Phase 2 — structural cleanup
- infrastructure/index.md: one-page overview of all cross-cutting systems
- runbooks/: moved runbook-budget-from-csv.md and runbook-dpkg-interrupted.md
from operations/ with YAML frontmatter added
- plans/done/: moved 4 completed plans out of active view; updated index
- vms/index.md: added VM index page
Phase 3 — navigation & discoverability
- GLOSSARY.md: term definitions (Authentik, Caddy, LXC, VAAPI, etc.)
- README: added table of contents, links to glossary + infrastructure index
- investigations/: archived 2 resolved cases (crash-loop, authentik-migration)
to investigations/archive/; updated index with active vs archived sections
Phase 4 — ongoing discipline
- CONTRIBUTING.md: documented same-session update rule with explicit checklist
- README: replaced full LXC table with summary + link to containers/index.md
(single source of truth; de-duplication)
88 lines
4.8 KiB
Markdown
88 lines
4.8 KiB
Markdown
# Homelab Wiki — `hubris`
|
|
|
|
Living documentation for the **hubris** Proxmox homelab. Every node, every cross-cutting system, and every meaningful incident is its own page; pages are linked so you can start anywhere and walk the graph.
|
|
|
|
> Last refreshed against live state: **2026-07-06**.
|
|
|
|
## Quick navigation
|
|
|
|
- [Proxmox hosts](#proxmox-hosts) — hubris (primary) + strong (cluster member)
|
|
- [VMs](#vms) — ZimaOS, Home Assistant
|
|
- [LXC containers](#lxc-containers) — service fleet (17 containers)
|
|
- [Cross-cutting infrastructure](#cross-cutting-infrastructure) — DNS, ingress, mesh, storage, auth
|
|
- [Investigations](#investigations) — incident timelines
|
|
- [Operations](#operations) — cheatsheet, enrollment, runbooks
|
|
- [Glossary](GLOSSARY.md) — term definitions
|
|
- [Conventions](#conventions) — wiki style, changelog hygiene, same-session update rule
|
|
|
|
## Map
|
|
|
|
### Proxmox hosts
|
|
- [`hubris`](hosts/hubris.md) — PVE node, GMKtec NucBox M6 Ultra, `192.168.8.77` — primary host, runs [8 LXCs](containers/index.md) + 2 VMs
|
|
- [`strong`](hosts/strong.md) — PVE node (cluster hostname `strong`), `192.168.178.181` — 2nd member of `Homelab` cluster. Hosts [7 LXCs](containers/index.md) migrated from hubris (Phase 1+2, 2026-07-05)
|
|
|
|
### VMs
|
|
- [100 — `zimaos`](vms/100-zimaos.md) — ZimaOS 1.6.1, NAS frontend (evaluation)
|
|
- [108 — `haos-16.3`](vms/108-haos.md) — Home Assistant OS
|
|
- See [vms/index.md](vms/index.md) for the full table
|
|
|
|
### LXC containers
|
|
See the full table with IPs, hosts, mounts, and status in
|
|
[`containers/index.md`](containers/index.md). Quick summary:
|
|
|
|
- **hubris** (10 active): 102 nfs-export, 103 paperless, 104 gitea, 105 apps,
|
|
114 nextcloud, 119 sophia, 120 mule-images, 121 caddy, 124 authentik (outpost),
|
|
128 trmnl, 132 rclone
|
|
- **strong** (7 active): 101 jellyfin, 118 elementsynapse, 122 arriman,
|
|
129 house, 130 grimmory, 133 seanime, 134 romm
|
|
- **Destroyed (archaeology)**: 100 arr, 106 flaresolverr, 107 marimo,
|
|
109 syncthing, 110 photoprism, 111 karakeep, 112 immich, 115 reticulum,
|
|
123 claudio-bot, 125 seafile, 126 plato, 127 mule-photos-new — see
|
|
[containers/index.md](containers/index.md#recently-destroyed-kept-for-archaeology)
|
|
|
|
### Cross-cutting infrastructure
|
|
- [Infrastructure index](infrastructure/index.md) — map of every cross-cutting system
|
|
- [Glossary](GLOSSARY.md) — term definitions
|
|
- [DNS — split-horizon](infrastructure/dns.md)
|
|
- [Ingress — Caddy + VPS traefik](infrastructure/ingress.md)
|
|
- [Mesh — Tailscale → Netbird migration](infrastructure/mesh.md)
|
|
- [Monitoring — Hermes health watchdog](infrastructure/monitoring.md)
|
|
- [Media permissions — `media` GID 10000](infrastructure/media-permissions.md)
|
|
- [SSH access](infrastructure/ssh-access.md)
|
|
- [Backups — rclone → Proton Drive (LXC 132); restic-on-USB deprecated](infrastructure/backups.md)
|
|
- [Auto-deploy — gitea-webhook pipelines](infrastructure/auto-deploy.md)
|
|
- [VPS hardening — IONOS / netbird control plane](infrastructure/vps-hardening.md)
|
|
- [Homelab context distribution](infrastructure/homelab-context.md) — cross-client `/opt/homelab-context` + MCP + secrets-issuance
|
|
|
|
### Investigations
|
|
Time-stamped incident notes / experiments in [`investigations/index.md`](investigations/index.md).
|
|
Resolved cases move to [`investigations/archive/`](investigations/archive/).
|
|
|
|
### Operations
|
|
- [Command cheatsheet](operations/commands.md)
|
|
- [Agent enrollment](operations/agent-enrollment.md) — bootstrap a new client (workstation, LXC, VM) into the homelab context system
|
|
|
|
## Conventions
|
|
|
|
- **Each node page** ends with a `## Changelog` section. Reverse-chronological. Entry format:
|
|
```
|
|
### YYYY-MM-DD — short title
|
|
one or two lines on what changed and why.
|
|
```
|
|
- **Cross-linking is mandatory.** If a page references another node or system, link to it. Treat orphans as a bug.
|
|
- **Live state wins.** When something here disagrees with `pct config` / `docker inspect` / running config, fix the wiki *and* note the change in the relevant changelog.
|
|
- **Tracked configs.** A node whose config lives in a Gitea repo (Caddy, Gitea customizations, Artifacto, mule-image) is auto-deployed via webhook — see [auto-deploy](infrastructure/auto-deploy.md). Edits there must be pushed, not left local.
|
|
- **No secrets.** This is a private repo on `git.hubris.network`, but still: paths to secret files are fine, secret values are not.
|
|
|
|
## Maintaining this wiki
|
|
|
|
When you change a node:
|
|
1. Update the relevant page (config snapshot, ports, mounts).
|
|
2. Add a changelog entry at the bottom of that page.
|
|
3. If the change touches a cross-cutting system (DNS, Caddy, Authentik, mesh), update *that* page too and link it from the changelog entry.
|
|
4. If it's an incident, add an entry to [`investigations/`](investigations/index.md).
|
|
|
|
## See also
|
|
|
|
- [`CONTRIBUTING.md`](CONTRIBUTING.md) — page templates and tone
|