Files

dtoro f127925d5a archive: prune stale dirs, move actual content to docs/

Deleted stale (Python-era artifacts, superseded by DB):
- archive/oikos-cards/ (46 files, predecessor to DB entity graph)
- archive/ledger/ (5-line JSONL fragment, superseded by DB audit log)

Moved to docs/ (actual, current architecture docs):
- docs/infrastructure/ — 12 infrastructure docs (network, DNS, mesh,
  SSH, ingress, media-permissions, backups, homelab-context, auto-deploy,
  VPS-hardening, monitoring, check-lifecycle)
- docs/secrets/ — secrets README and rotation runbook
- docs/GLOSSARY.md — 28-term homelab glossary

Added STALE.md markers to hermes-plans/ and secrets-issuance/.
Added MOVED.md pointers in archive sources.
Updated docs/index.md to include new paths.

2026-08-16 11:26:27 +02:00

2.5 KiB

Raw Blame History

Glossary

Terms and abbreviations used throughout the homelab wiki.

Term	Meaning
Authentik	SSO/identity provider. Core runs on the VPS; forward-auth outpost at LXC 106 on hubris
Caddy	Reverse proxy (LXC 121). Terminates TLS for every `*.hubris.network` hostname
Caveman	Terse communication standard for agent responses — no filler, keep substance
Forward-auth	Caddy snippet that delegates authentication to an Authentik outpost. Protects web UIs like qBit, SABnzbd
Gitea	Git server at `git.hubris.network`. Hosts all tracked config repos
Gluetun	WireGuard VPN sidecar on arriman. All *arr traffic routes through it
HAOS	Home Assistant Operating System. VM 108 on hubris
Hubris	Primary Proxmox VE node (GMKtec NucBox M6 Ultra). PVE hostname, cluster member 1
LXC	Linux Container (Proxmox). VM-like isolation without a full OS kernel
LVM-thin	Thin-provisioned logical volume manager. Used for all container/VM storage
MCP	Model Context Protocol (MCP server at `mcp.hubris.network`). Structured tools for agents to query homelab state
Mesh	Overlay VPN for off-LAN connectivity. Netbird is current; Tailscale is legacy
Netbird	Preferred mesh VPN. VPS hosts the management plane; all homelab nodes are members
OIDC	OpenID Connect. Protocol used by Authentik for SSO login flows
Oikos	Agent operating model (.agents/OIKOS.md). OODA loop, risk classes, policy, ontology
PVE	Proxmox Virtual Environment — the hypervisor on both hubris and strong
SOPS	`sops` — Mozilla SOPS. Encrypts secrets with age keys so they live in the git repo
Strong	Secondary Proxmox VE node. Cluster member 2 (hostname `strong`, nickname ludo/ludo-mini)
Traefik	Reverse proxy on IONOS VPS. Serves `*.hubris.network` to the public internet
VAAPI	Video Acceleration API. Intel/AMD GPU-based hardware transcode for Jellyfin
VPS	Virtual Private Server at IONOS (`82.165.190.79`). Runs Authentik core + Netbird management
\arr*	Media automation suite: Sonarr (TV), Radarr (movies), Lidarr (music), Prowlarr (indexer), Bazarr (subtitles), Readarr (books — not in use)

2.5 KiB Raw Blame History

Glossary

See also

2.5 KiB

Raw Blame History