Files

dtoro fd35b48c8d Phase 1-4: full doc reorg

Phase 1 — fix stale state after strong migration (Phase 1+2, 2026-07-05)
  - README: corrected IPs (jellyfin 206→246, arriman 132→245, etc.),
    added missing containers (128 trmnl, 129 house, 133 seanime, 134 romm,
    124 authentik), updated last-refreshed date, added strong host context
  - containers/101-jellyfin.md: IP 206→246, host hubris→strong, mount
    /mnt/library→/mnt/media_local, GPU 760M→680M+RX7600, privilege→priv
  - containers/118-elementsynapse.md: IP 239→242, added Host: strong
  - containers/122-arriman.md: IP 132→245, mount→/mnt/media_local, added Host
  - containers/129-house.md: IP 212→244, added Host: strong
  - containers/130-grimmory.md: IP 213→247, mount→/mnt/media_local, added Host
  - containers/121-caddy.md: fixed site list (books→grimmory, removed auth→VPS,
    added house, roms, teddy, trmnl)
  - hosts/strong.md: updated At-a-glance to reflect 7 LXCs hosted
  - containers/123-claudio-bot.md, 127-mule-photos-new.md: archived to
    containers/archive/ (were destroyed LXCs with living pages)
  - inventory.yaml: verified correct — no changes needed

Phase 2 — structural cleanup
  - infrastructure/index.md: one-page overview of all cross-cutting systems
  - runbooks/: moved runbook-budget-from-csv.md and runbook-dpkg-interrupted.md
    from operations/ with YAML frontmatter added
  - plans/done/: moved 4 completed plans out of active view; updated index
  - vms/index.md: added VM index page

Phase 3 — navigation & discoverability
  - GLOSSARY.md: term definitions (Authentik, Caddy, LXC, VAAPI, etc.)
  - README: added table of contents, links to glossary + infrastructure index
  - investigations/: archived 2 resolved cases (crash-loop, authentik-migration)
    to investigations/archive/; updated index with active vs archived sections

Phase 4 — ongoing discipline
  - CONTRIBUTING.md: documented same-session update rule with explicit checklist
  - README: replaced full LXC table with summary + link to containers/index.md
    (single source of truth; de-duplication)

2026-07-06 00:46:27 +02:00

2.9 KiB

Raw Blame History

129 — `house`

Yuvomi family planner (formerly Oikos). Self-hosted family planner with 14 modules: calendar, tasks, meals, groceries, budget, documents, notes, contacts, birthdays, housekeeping, recipes, reminders.

At a glance

Hostname: house
IP: 192.168.8.244
Host: strong (migrated from hubris 2026-07-05)
Privilege: unprivileged
Resources: 1 core / 1344 MiB RAM / 8 GiB rootfs (Debian 13)
Mounts: none
Public hostname: house.hubris.network → VPS traefik → Caddy

Service / port map

Service	Listen	Notes
`oikos` (Yuvomi)	`0.0.0.0:3000`	Docker Compose at `/opt/yuvomi/`, image `ghcr.io/ulsklyc/yuvomi`

Integrations

Authentik SSO (OIDC): Provider Provider for Yuvomi (PK 31) in Authentik on VPS. Env vars in /opt/yuvomi/.env: OIDC_ISSUER, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET. Redirect URI: https://house.hubris.network/auth/oidc/callback.
Paperless DMS connector (native): Yuvomi connects directly to Paperless-ngx API at http://192.168.8.130:8000/. API token stored in SQLite dms_accounts table. Search, link, and upload documents from Yuvomi to Paperless via Settings → Documents → DMS.
Weather widget: Open-Meteo (free, no API key). Munich coordinates set.
Google Calendar: OAuth configured via env vars (GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_REDIRECT_URI). Redirect URI: https://house.hubris.network/api/v1/calendar/google/callback. Authorize in Settings → Calendar → Connect Google Calendar.

Config paths

/opt/yuvomi/docker-compose.yml — downloaded from upstream
/opt/yuvomi/.env — config including secrets (untracked)
/opt/yuvomi/data/ — SQLCipher SQLite DB (oikos.db)
/opt/yuvomi/backups/ — auto backups
/opt/yuvomi/modules/ — Yuvomi modules (empty for now)

Caddy (121) — LAN reverse proxy (house.hubris.network → 192.168.8.212:3000)
VPS ingress — public edge (cert mirror + traefik router)
DNS (107) — Technitium A record house → 192.168.8.175 (LAN path via Caddy)
Paperless (103) — native DMS connector (API at :8000)
TRMNL (128) — Google Calendar tokens source
Deployment plan

Changelog

2026-06-27 — Google Calendar OAuth env vars configured

GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_REDIRECT_URI set in .env. New OAuth client ID (-bho4iq..).

2026-06-26 — provisioned

LXC 129 created (Debian 13, unprivileged, 192.168.8.212). Docker installed. Yuvomi container running on :3000 from ghcr.io/ulsklyc/yuvomi:latest. Caddy block + DNS A record + VPS traefik router house-public for public access. Authentik OIDC provider created (PK 31). WebDAV document bridge on paperless LXC (103) at :8088 for Paperless auto-import.

2.9 KiB Raw Blame History

129 — house