Problem: node and cross-cutting narratives lived at the repo root
(containers/, vms/, infrastructure/, host .md files), interleaved with the
machine-readable substrate.
Change:
- Move containers/ -> knowledge/wiki/containers/, vms/ -> knowledge/wiki/vms/,
infrastructure/ -> knowledge/wiki/infrastructure/, hosts/{hubris,strong}.md ->
knowledge/wiki/hosts/, infrastructure/references/ -> knowledge/sources/references/,
GLOSSARY.md -> knowledge/GLOSSARY.md.
- Add knowledge/{index.md,log.md,sources/index.md} scaffolding.
- Rewrite all relative links repo-wide via a path-resolving mapper (inbound +
outbound + between-moved-files), including .hermes/, runbooks, operations,
investigations, plans, README, AGENTS.
- Repoint inventory.yaml doc_page fields and regenerate hosts/*.yaml (which
embed doc_page); update oikos/gen-topology.py output path, candidate doc
paths, and footer links; update code-comment doc paths.
Substrate untouched in place: inventory.yaml, hosts/*.yaml (regenerated,
idempotent), oikos/ code, mcp/, secrets/, bin/.
Verification:
- Logical broken-link set identical to pre-move baseline (net 128 -> 127; the
topology regen fixed one, introduced none). Remaining are pre-existing refs
to destroyed/archived nodes, out of scope for this move.
- gen-topology.py --check exit 0 (in sync); cards carry knowledge/wiki/ doc paths.
- build_host_files.py idempotent; all inventory doc_page targets resolve.
- MCP contract verified: get_page/search_docs/get_changelog resolve moved pages.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2.5 KiB
2.5 KiB
Glossary
Terms and abbreviations used throughout the homelab wiki.
| Term | Meaning |
|---|---|
| Authentik | SSO/identity provider. Core runs on the VPS; forward-auth outpost at LXC 106 on hubris |
| Caddy | Reverse proxy (LXC 121). Terminates TLS for every *.hubris.network hostname |
| Caveman | Terse communication standard for agent responses — no filler, keep substance |
| Forward-auth | Caddy snippet that delegates authentication to an Authentik outpost. Protects web UIs like qBit, SABnzbd |
| Gitea | Git server at git.hubris.network. Hosts all tracked config repos |
| Gluetun | WireGuard VPN sidecar on arriman. All *arr traffic routes through it |
| HAOS | Home Assistant Operating System. VM 108 on hubris |
| Hubris | Primary Proxmox VE node (GMKtec NucBox M6 Ultra). PVE hostname, cluster member 1 |
| LXC | Linux Container (Proxmox). VM-like isolation without a full OS kernel |
| LVM-thin | Thin-provisioned logical volume manager. Used for all container/VM storage |
| MCP | Model Context Protocol (MCP server at mcp.hubris.network). Structured tools for agents to query homelab state |
| Mesh | Overlay VPN for off-LAN connectivity. Netbird is current; Tailscale is legacy |
| Netbird | Preferred mesh VPN. VPS hosts the management plane; all homelab nodes are members |
| OIDC | OpenID Connect. Protocol used by Authentik for SSO login flows |
| Oikos | Agent operating model (.agents/OIKOS.md). OODA loop, risk classes, policy, ontology |
| PVE | Proxmox Virtual Environment — the hypervisor on both hubris and strong |
| SOPS | sops — Mozilla SOPS. Encrypts secrets with age keys so they live in the git repo |
| Strong | Secondary Proxmox VE node. Cluster member 2 (hostname strong, nickname ludo/ludo-mini) |
| Traefik | Reverse proxy on IONOS VPS. Serves *.hubris.network to the public internet |
| VAAPI | Video Acceleration API. Intel/AMD GPU-based hardware transcode for Jellyfin |
| VPS | Virtual Private Server at IONOS (82.165.190.79). Runs Authentik core + Netbird management |
| *\arr | Media automation suite: Sonarr (TV), Radarr (movies), Lidarr (music), Prowlarr (indexer), Bazarr (subtitles), Readarr (books — not in use) |
See also
- Infrastructure index — cross-cutting systems each with their own doc page
- OIKOS operating model — agent policy, risk classes, lifecycle