Erich Blume
5002987024
Documents the approach for bringing the home WiFi router under IaC control using filipowm/unifi Terraform provider via pulumi package add. Includes network segmentation goals, topology diagram, and prerequisites checklist. Execution deferred until switches arrive and cabling is done. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
82 lines
2.5 KiB
Markdown
82 lines
2.5 KiB
Markdown
---
|
|
title: Reference
|
|
tags:
|
|
- reference
|
|
---
|
|
|
|
# Reference
|
|
|
|
Technical specifications, inventories, and configuration details for BlumeOps infrastructure.
|
|
|
|
## Services
|
|
|
|
Individual service reference cards with URLs and configuration details.
|
|
|
|
| Service | Description | Location |
|
|
|---------|-------------|----------|
|
|
| [[alloy|Alloy]] | Observability collector (metrics & logs) | indri + k8s |
|
|
| [[argocd]] | GitOps continuous delivery | k8s |
|
|
| [[borgmatic]] | Backup system | indri |
|
|
| [[caddy]] | Reverse proxy & TLS termination | indri |
|
|
| [[1password]] | Secrets management | cloud + k8s |
|
|
| [[forgejo]] | Git forge & CI/CD | indri |
|
|
| [[grafana]] | Dashboards & visualization | k8s |
|
|
| [[immich]] | Photo management | k8s |
|
|
| [[jellyfin]] | Media server | indri |
|
|
| [[kiwix]] | Offline Wikipedia & ZIM archives | k8s |
|
|
| [[loki]] | Log aggregation | k8s |
|
|
| [[miniflux]] | RSS feed reader | k8s |
|
|
| [[navidrome]] | Music streaming | k8s |
|
|
| [[postgresql]] | Database cluster | k8s |
|
|
| [[prometheus]] | Metrics collection | k8s |
|
|
| [[teslamate]] | Tesla data logger | k8s |
|
|
| [[transmission]] | BitTorrent daemon | k8s |
|
|
| [[zot]] | Container registry | indri |
|
|
| [[devpi]] | PyPI caching proxy | k8s |
|
|
| [[docs]] | Documentation site (Quartz) | k8s |
|
|
| [[flyio-proxy]] | Public reverse proxy (Fly.io + Tailscale) | Fly.io |
|
|
| [[automounter]] | SMB share automounter | indri |
|
|
|
|
## Infrastructure
|
|
|
|
Host inventory and network configuration.
|
|
|
|
- [[hosts|Hosts]] - Device inventory
|
|
- [[indri]] - Primary server
|
|
- [[gilbert]] - Development workstation
|
|
- [[tailscale]] - ACLs, groups, tags
|
|
- [[gandi]] - DNS hosting for `eblu.me`
|
|
- [[unifi]] - Home WiFi router (UniFi Express 7)
|
|
- [[routing|Routing]] - DNS domains, port mappings
|
|
- [[power]] - Battery-backed power chain
|
|
|
|
## Kubernetes
|
|
|
|
Cluster configuration and application registry.
|
|
|
|
- [[cluster|Cluster]] - Minikube specs, storage, networking
|
|
- [[apps|Apps]] - ArgoCD application registry
|
|
- [[tailscale-operator]] - Tailscale ingress for k8s services
|
|
- [[external-secrets]] - Secrets management
|
|
|
|
## Ansible
|
|
|
|
Configuration management for [[indri]]-hosted services.
|
|
|
|
- [[roles]] - Available ansible roles
|
|
|
|
## Storage
|
|
|
|
Network storage and backup configuration.
|
|
|
|
- [[sifaka|Sifaka]] - Synology NAS configuration
|
|
- [[postgresql-storage]] - Database cluster
|
|
- [[backups|Backups]] - Backup policy and schedule
|
|
|
|
## Operations
|
|
|
|
Operational concerns and their components.
|
|
|
|
- [[observability]] - Metrics, logs, dashboards
|
|
- [[backup]] - Data protection
|
|
- [[disaster-recovery]] - Recovery procedures (TBD)
|