homelab-codex-ws/hosts/vps
oskar 89454ea7e1 feat(hosts): reconcile desired state with reality on vps, piha, saturn, lustro
Etap 0 truth cleanup (recon B5/B6/F20), all facts re-verified 2026-07-30 via
read-only ssh (docker ps, world/services.json, events store):

- vps: add stability-agent, npm, outline, joplin-server, umami (all running
  and healthy in world state). joplin keyed joplin-server to match the
  world-state key — an aggregate 'joplin' entry would drift as
  missing_service forever. humanai-mailer/humanai-landing documented as
  unmanaged: true + monitor: false (hand-run, no compose labels — supervisor
  must not queue dead-end redeploys for them). ai-cluster deliberately gets
  NO entry: legacy, retiring — comment points at ai-cluster-LEGACY.md.
- piha: comment block enumerating the ~28 known unmanaged containers plus the
  host systemd mosquitto; bringing them in is a later stage (recon OQ5).
- saturn: create services.yaml with explicit empty list (dev workstation /
  orchestrator, nothing monitored — closes recon F20.4).
- lustro: add node-exporter (hyphenated key = actual container name) and
  piper-tts (runs locally on the Pi, no services/ dir); watchtower noted as
  deliberately unmanaged.

All YAMLs parse (yaml.safe_load); control-plane suite 147 passed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-30 15:36:23 +02:00
..
runtime feat(observer): persist SHADOW_LIVENESS_MISMATCH to mounted file — survives container recreate (cutover evidence) 2026-07-15 15:30:44 +02:00
capabilities.yaml Add node capability model 2026-05-11 20:46:50 +02:00
host.yaml feat(hosts): add os_hostname field to all host.yaml files 2026-06-24 22:24:34 +02:00
README.md Add infrastructure standards and deployment conventions 2026-05-07 21:16:03 +02:00
services.yaml feat(hosts): reconcile desired state with reality on vps, piha, saturn, lustro 2026-07-30 15:36:23 +02:00

VPS - Public Edge + Ingress Node

Role

  • Public-facing reverse proxy.
  • HTTPS termination (Let's Encrypt).
  • Edge security and routing.

Configured Services

  • Nginx Proxy Manager (NPM)
  • Authelia / Authentik (Auth)

Runtime Data

  • /opt/homelab/data/npm