feat(kb): przenosiny type=subsystem do kb/subsystems/ (18 plikow, bez SPLIT)
public (wzorce/schematy, bez IP/portow/sciezek hostow): observer,
capability-model, event-system, standards, agent-operating-procedures,
service-model, action-approval-model.
private: recon-multiagent, fleet-inventory, fleet-inventory-verify,
kb-mail-pillar, kb-documents-pillar, topology, agent-system.
deprecated (martwe stuby z 2026-04-15) — visibility private wg
rozstrzygniecia 6: access-model, core-stack, legacy-services-list, networking.
git mv + frontmatter, tresc nietknieta.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-04 14:59:48 +02:00
|
|
|
---
|
|
|
|
|
okf: "0.1"
|
|
|
|
|
type: subsystem
|
|
|
|
|
visibility: private
|
|
|
|
|
status: deprecated
|
|
|
|
|
updated: 2026-04-15
|
|
|
|
|
links: []
|
|
|
|
|
superseded_by: "kb/subsystems/fleet-inventory.md + hosts/<node>/capabilities.yaml (stub z 2026-04-15, sprzed floty)"
|
|
|
|
|
---
|
|
|
|
|
|
2026-04-15 17:37:25 +02:00
|
|
|
# Access
|
|
|
|
|
|
|
|
|
|
## Description
|
|
|
|
|
|
|
|
|
|
This page documents the currently known access methods for the homelab.
|
|
|
|
|
|
|
|
|
|
## Current configuration
|
|
|
|
|
|
|
|
|
|
- Public services are accessed through Nginx Proxy Manager.
|
|
|
|
|
- Public HTTPS certificates are issued using Let's Encrypt.
|
|
|
|
|
- Private access is provided through Tailscale.
|
|
|
|
|
|
|
|
|
|
## Known facts
|
|
|
|
|
|
|
|
|
|
- Nginx Proxy Manager is the public reverse proxy.
|
|
|
|
|
- HTTPS is used for public services.
|
|
|
|
|
- Let's Encrypt is used for public TLS certificates.
|
|
|
|
|
- Tailscale is used for private access.
|
|
|
|
|
|
|
|
|
|
## Unknown / needs clarification
|
|
|
|
|
|
|
|
|
|
- Public domain names and subdomains.
|
|
|
|
|
- Which services are public.
|
|
|
|
|
- Which services are private-only.
|
|
|
|
|
- Nginx Proxy Manager proxy hosts.
|
|
|
|
|
- Nginx Proxy Manager SSL certificate settings.
|
|
|
|
|
- Whether HTTP-to-HTTPS redirection is enabled.
|
|
|
|
|
- Whether Nginx Proxy Manager access lists are used.
|
|
|
|
|
- Tailscale device name for the Raspberry Pi 5.
|
|
|
|
|
- Whether Tailscale SSH is enabled.
|
|
|
|
|
- Whether the Raspberry Pi 5 advertises subnet routes.
|
|
|
|
|
- Whether the Raspberry Pi 5 is an exit node.
|
|
|
|
|
- User accounts or groups with access through Tailscale.
|
|
|
|
|
- Local administrator access method for the Raspberry Pi 5.
|
