dtoro
ba93c4709b
New off-host backup job replacing the disabled restic-on-USB backup: LXC 132 `rclone` mirrors selected /mnt/library folders to Proton Drive (plain rclone sync, Proton's built-in E2E, no crypt overlay) on a monthly timer, with rclone's Web GUI for LAN-only browsing/ad-hoc runs and live job status. - containers/132-rclone.md: full design, Proton auth gotcha (TOTP secret vs live code), pct exec PATH gotcha, rc-API job-visibility runner rewrite, selected folder set (cloud/documents/repos), deferred tracked-repo note. - infrastructure/backups.md: restic-on-USB marked DEPRECATED/superseded, leads with the new job now. - containers/index.md, README.md, infrastructure/media-permissions.md: register the new container.
55 lines
5.8 KiB
Markdown
55 lines
5.8 KiB
Markdown
# LXC containers — index
|
|
|
|
All containers live on [`hubris`](../hosts/hubris.md). Each row links to the per-container page.
|
|
|
|
| ID | Name | IP | Priv | Cores | RAM | Disk | Mounts | Public hostname | Status |
|
|
| --- | ---------------- | --------------- | ---- | ----- | ----- | ----- | --------------------- | ------------------------------------- | -------- |
|
|
| 101 | [jellyfin](101-jellyfin.md) | 192.168.8.206 | unpriv (idmap) | 2 | 4 GiB | 16 GiB | `/mnt/library` | `media.hubris.network` | running |
|
|
| 103 | [paperless](103-paperless.md) | 192.168.8.130 | priv | 2 | 3 GiB | 8 GiB | `/mnt/library` | `paperless.hubris.network` | running |
|
|
| 104 | [gitea](104-gitea.md) | 192.168.8.121 | priv | 1 | 1 GiB | 8 GiB | `/mnt/library` | `git.hubris.network` | running |
|
|
| 105 | [apps](105-apps.md) | 192.168.8.205 | priv | 2 | 4 GiB | 30 GiB | `/mnt/library` | `docker` / `artifacto` / `blog` | running |
|
|
| 114 | [nextcloud](114-nextcloud.md) | 192.168.8.224 | priv | 4 | 6 GiB | 25 GiB | `/mnt/library` | `cloud.hubris.network` | running |
|
|
| 118 | [elementsynapse](118-elementsynapse.md) | 192.168.8.239 | unpriv | 1 | 2 GiB | 8 GiB | — | `matrix.hubris.network` | running |
|
|
| 119 | [sophia](119-sophia.md) | 192.168.8.157 | priv | 2 | 1 GiB | 10 GiB | `/mnt/library` | — | running |
|
|
| 120 | [mule-images](120-mule-images.md) | 192.168.8.136 | priv | 6 | 12 GiB | 60 GiB | `/mnt/library` + `/dev/dri` (iGPU passthrough) | `photos.hubris.network` | running |
|
|
| 121 | [caddy](121-caddy.md) | 192.168.8.175 | unpriv | 1 | 512 MiB | 6 GiB | — | (terminates all `*.hubris.network`) | running |
|
|
| 122 | [arriman](122-arriman.md) | 192.168.8.132 | priv | 4 | 8 GiB | 24 GiB | `/mnt/library` | `jellyseerr` / `qbit` / `sab` | running |
|
|
| 124 | [authentik](124-authentik.md) | 192.168.8.180 | priv | 2 | 4 GiB | 20 GiB | — | `auth.hubris.network` | running |
|
|
| 128 | [trmnl](128-trmnl.md) | 192.168.8.211 | unpriv | 1 | 768 MiB | 8 GiB | — | `trmnl.hubris.network` | running |
|
|
| 129 | [house](129-house.md) | 192.168.8.212 | unpriv | 1 | 1344 MiB | 8 GiB | — | `house.hubris.network` | running |
|
|
| 130 | [grimmory](130-grimmory.md) | 192.168.8.213 | priv | 1 | 2 GiB | 16 GiB | `/mnt/library` | `books.hubris.network` | running |
|
|
| 132 | [rclone](132-rclone.md) | 192.168.8.214 | priv | 1 | 1 GiB | 8 GiB | `/mnt/library` (**ro**) | — (LAN-only UI `:5572`) | running |
|
|
|
|
## Recently destroyed (kept for archaeology)
|
|
|
|
| ID | Name | Destroyed | Reason |
|
|
| --- | ---------------- | --------------- | --------------------------------------------- |
|
|
| 127 | mule-photos-new | 2026-05-22 | PhotoPrism + sidecar + SvelteKit stack promoted to LXC 120 via Mulimage 2.0 merge (`70dc1b6`); M0 test LXC retired. Caddy + dnsmasq + gitea webhook + NC webhook listeners all cleaned up in the same cutover. |
|
|
| 100 | arr (yunohost) | ~2026-04-28 | Migrated to docker stack on [arriman](122-arriman.md); planned retention window expired |
|
|
| 106 | flaresolverr | ~2026-04-28 | Folded into the arriman docker compose |
|
|
| 116 | heaper | 2026-05-14 | Decommissioned by user; data subtree at `/mnt/library/heaper` (224 MiB) retained |
|
|
| 126 | plato | 2026-06-28 | Notes/discovery workspace decommissioned; data at `/mnt/library/documents/plato` retained for archaeology |
|
|
| 123 | claudio-bot | 2026-06-04 | Replaced by Hermes Agent on mac-mini; monitoring migrated to `homelab-health-watchdog` cron. See [deprecation plan](../plans/2026-06-04_130000-deprecate-claudio-bot.md) |
|
|
| 109 | syncthing | 2026-05-14 | Decommissioned by user; `/mnt/library/syncthing` was already empty |
|
|
| 125 | seafile | 2026-05-13 | Seafile Pro evaluation, user disliked the product; teardown also removed `files.hubris.network` from caddy + dnsmasq |
|
|
| 107 | marimo | between 2026-04-21 and 2026-04-28 | Decommissioned |
|
|
| 110 | photoprism | between 2026-04-21 and 2026-04-28 | Replaced by [mulita](120-mule-images.md) |
|
|
| 111 | karakeep | between 2026-04-21 and 2026-04-28 | Decommissioned |
|
|
| 112 | immich | between 2026-04-21 and 2026-04-28 | Replaced by [mulita](120-mule-images.md) |
|
|
| 115 | reticulum | between 2026-04-21 and 2026-04-28 | Decommissioned |
|
|
|
|
> Several `.conf.bak` files survive under `/etc/pve/lxc/` if you need to recover any of the configs.
|
|
|
|
## Conventions
|
|
|
|
- All net0 are `bridge=vmbr0`, `ip=dhcp` except [124 (authentik)](124-authentik.md) which is statically `192.168.8.180/24`. IPs are stable via the LAN router's DHCP reservations.
|
|
- `onboot=1` on every container — the host brings them up after `pve-guests.service`.
|
|
- Bind mounts are declared as `mp0: /mnt/library,mp=/mnt/library`. Containers that don't mount `/mnt/library` don't need it.
|
|
- Most containers are privileged. Unprivileged ones (`101`, `118`, `121`) require an idmap block in their conf to participate in the [media GID 10000](../infrastructure/media-permissions.md) standard.
|
|
|
|
## Related
|
|
- [Hubris host](../hosts/hubris.md)
|
|
- [Media permissions](../infrastructure/media-permissions.md)
|
|
- [Caddy](121-caddy.md) — terminates every public hostname
|
|
- [DNS](../infrastructure/dns.md) — split-horizon entries for each subdomain
|