Files

dtoro f5cd320433 Bootstrap Homelab-Docs wiki

Initial documentation of the hubris Proxmox homelab as a cross-linked
markdown wiki. Per-node pages, cross-cutting infrastructure pages, an
investigation log, and an operations cheatsheet. Each node and topic
ends with a Changelog section so changes can be tracked in-place going
forward.

Refreshed against live state on 2026-04-28 — 14 active LXCs (109
syncthing currently stopped) + 1 VM (108 haos). Reflects post-A/B-test
state of the 2026-04-21 hubris crash-loop investigation.

2026-04-28 22:53:09 +02:00

1.8 KiB

Raw Blame History

103 — `paperless`

Paperless-ngx for document management. Ingests scans / PDFs from /mnt/library/documents and serves OCR'd indexed copies.

At a glance

Hostname: paperless
IP: 192.168.8.130
Privilege: privileged
Resources: 2 cores / 3 GiB RAM / 8 GiB rootfs
Mounts: /mnt/library ↔ /mnt/library (consumes documents/)
Public hostname: paperless.hubris.network → caddy → :8000

Service / port map

Service	Listen	Notes
paperless-webserver	`:8000`	HTTP
paperless-task-queue, paperless-scheduler, paperless-consumer	—	systemd workers

Auth

Behind Authentik forward-auth. API path /api/* bypasses forward-auth (mobile clients can't follow the browser login redirect; bearer token still enforces auth on /api). Header propagation: PAPERLESS_ENABLE_HTTP_REMOTE_USER=true and PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME=HTTP_X_AUTHENTIK_USERNAME in /opt/paperless/paperless.conf. Django auto-creates matching users on first SSO login.

Storage

Documents at /mnt/library/documents (owner www-data:www-data, mode 750 — not on the media group, by design).

Known issues

Disk usage was 86.9% at last claudio-monitor reading on 2026-04-21. Monitor or grow rootfs.

Changelog

2026-04-28 — wiki entry created

Initial documentation.

2026-04-21 — wired into Authentik forward-auth

Cookie-domain-level proxy provider, embedded outpost binding. /api/* bypass added in Caddy site block to keep mobile clients working.

1.8 KiB Raw Blame History

103 — paperless