boo1/infrastructure-documentation
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
21 commits 2 branches 0 tags 165 KiB
Find a file
Exact
Nikolaus Sperat db0c59d4a1 Add status.sper.at (Uptime Kuma), update bastion + README 
New service doc for Uptime Kuma (louislam/uptime-kuma:1) running on
bastion homelab bridge, proxied via Caddy LAN-only. Added to bastion
Core Services and Container Layout tables.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-06 09:18:58 +02:00
plans Document CVE-2026-31431 remediation status across all hosts 2026-05-06 09:03:02 +02:00
AGENTS.md Add AGENTS.md and README with host overview 2026-05-06 09:05:37 +02:00
auth.sper.at.md Restructure README by infra layer, add auth.sper.at.md 2026-05-06 09:11:46 +02:00
bastion.boo1.md Add status.sper.at (Uptime Kuma), update bastion + README 2026-05-06 09:18:58 +02:00
CLAUDE.md Add CLAUDE.md and cloud.boo1 host doc 2026-05-06 09:05:57 +02:00
cloud.boo1.md Update cloud.boo1.md: Nextcloud deployed, operational doc 2026-05-06 09:15:12 +02:00
kodi.boo1.md Remove password from Kodi web UI documentation 2026-04-20 23:56:32 +02:00
pi3.boo1.md Document CVE-2026-31431 remediation status across all hosts 2026-05-06 09:03:02 +02:00
pi4.boo1.md Document CVE-2026-31431 remediation status across all hosts 2026-05-06 09:03:02 +02:00
printer.boo1.md Add infrastructure documentation for printer.boo1 2026-04-21 00:36:25 +02:00
proxmox.boo1.md Add proxmox.boo1.md, link from README 2026-05-06 09:16:55 +02:00
README.md Add status.sper.at (Uptime Kuma), update bastion + README 2026-05-06 09:18:58 +02:00
share.boo1.md Add infrastructure documentation for share.boo1 2026-04-21 08:21:46 +02:00
status.sper.at.md Add status.sper.at (Uptime Kuma), update bastion + README 2026-05-06 09:18:58 +02:00
TODOS.md Document CVE-2026-31431 remediation status across all hosts 2026-05-06 09:03:02 +02:00
vault.sper.at.md Add vaultwarden password manager on bastion.boo1 2026-04-26 21:47:47 +02:00

README.md

Infrastructure Documentation

Homelab infrastructure docs. Organized by layer.

Physical Hosts

Bare metal machines.

Host Hardware Purpose Doc
bastion.boo1 Blackview mini-PC (x86_64) Edge: TLS termination, SSO, IPS bastion.boo1.md
pi3.boo1 Raspberry Pi 3 (armhf) Pi-hole DNS/ad-block, Gitolite, Apache proxy pi3.boo1.md
pi4.boo1 Raspberry Pi 4 (aarch64) Forgejo Git, PostgreSQL 18 pi4.boo1.md
kodi.boo1 Raspberry Pi 5 (aarch64) Kodi media center (LibreELEC) kodi.boo1.md
printer.boo1 Raspberry Pi (armhf) OctoPrint 3D printer + webcam printer.boo1.md
proxmox.boo1 x86_64 server Proxmox VE hypervisor (hosts CT101, CT102) proxmox.boo1.md

LXC Containers

Unprivileged Proxmox LXC containers.

Container CT ID IP Purpose Doc
share.boo1 CT101 192.168.1.225 Samba file shares, Transmission BitTorrent, 9.1T RAID1 share.boo1.md
cloud.boo1 CT102 192.168.1.226 Nextcloud host (Debian 13, Podman rootless) cloud.boo1.md

Podman Services — bastion.boo1

Rootless Podman (Quadlet) on bare metal. All containers on homelab bridge network.

Service Public URL Purpose Doc
Caddy (reverse proxy) TLS termination, DNS-01 via Hetzner, forward-auth gateway bastion.boo1.md § Caddy
Authentik https://auth.sper.at SSO / Identity Provider (OAuth2, OIDC) auth.sper.at.md
Vaultwarden https://vault.sper.at Bitwarden-compatible password manager vault.sper.at.md
CrowdSec (host IPS) IDS/IPS: SSH + HTTP threat detection, nftables bouncer, Caddy bouncer bastion.boo1.md § CrowdSec
Uptime Kuma https://status.sper.at Uptime monitoring dashboard (LAN-only) status.sper.at.md

Podman Services — cloud.boo1

Rootless Podman (Quadlet) inside Proxmox LXC CT102.

Service Public URL Purpose Doc
Nextcloud https://cloud.sper.at Files, calendar, contacts — OIDC SSO via Authentik cloud.boo1.md

Agent/LLM Usage

See AGENTS.md for AI agent conventions. See CLAUDE.md for Claude Code plan structure and execution rules.