homelab-codex-ws/kb/subsystems/access-model.md
oskar 00de8107ea feat(kb): przenosiny type=subsystem do kb/subsystems/ (18 plikow, bez SPLIT)
public (wzorce/schematy, bez IP/portow/sciezek hostow): observer,
capability-model, event-system, standards, agent-operating-procedures,
service-model, action-approval-model.

private: recon-multiagent, fleet-inventory, fleet-inventory-verify,
kb-mail-pillar, kb-documents-pillar, topology, agent-system.

deprecated (martwe stuby z 2026-04-15) — visibility private wg
rozstrzygniecia 6: access-model, core-stack, legacy-services-list, networking.

git mv + frontmatter, tresc nietknieta.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-04 16:58:04 +02:00

1.3 KiB

okf type visibility status updated links superseded_by
0.1 subsystem private deprecated 2026-04-15
kb/subsystems/fleet-inventory.md + hosts/<node>/capabilities.yaml (stub z 2026-04-15, sprzed floty)

Access

Description

This page documents the currently known access methods for the homelab.

Current configuration

  • Public services are accessed through Nginx Proxy Manager.
  • Public HTTPS certificates are issued using Let's Encrypt.
  • Private access is provided through Tailscale.

Known facts

  • Nginx Proxy Manager is the public reverse proxy.
  • HTTPS is used for public services.
  • Let's Encrypt is used for public TLS certificates.
  • Tailscale is used for private access.

Unknown / needs clarification

  • Public domain names and subdomains.
  • Which services are public.
  • Which services are private-only.
  • Nginx Proxy Manager proxy hosts.
  • Nginx Proxy Manager SSL certificate settings.
  • Whether HTTP-to-HTTPS redirection is enabled.
  • Whether Nginx Proxy Manager access lists are used.
  • Tailscale device name for the Raspberry Pi 5.
  • Whether Tailscale SSH is enabled.
  • Whether the Raspberry Pi 5 advertises subnet routes.
  • Whether the Raspberry Pi 5 is an exit node.
  • User accounts or groups with access through Tailscale.
  • Local administrator access method for the Raspberry Pi 5.