homelab-codex-ws/hosts/vps
Oskar Kapala fbf9e7501d feat(gokapi): config publicznego file-share na VPS (share.okit.pl, E2E, Tailscale-bind za npm@VPS, disk-protection) — do deployu
Nextcloud zostaje prywatny (mesh/kapala.org); Gokapi to osobny publiczny
serwis do wysylania linkow do plikow na zewnatrz (Firefox Send alt).
owner_node=vps, storage lokalny dysk (nie S3), E2E encryption ON, port
53842 bindowany tylko na TAILSCALE_BIND_IP (hairpin NAT przez npm@VPS,
nigdy 0.0.0.0). Cutover checklist w README (DNS, wildcard *.okit.pl na
npm@VPS, setup wizard) — nie zdeployowane w tym commicie.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-09 17:29:28 +02:00
..
runtime feat(observer): shadow-read Prometheus up{} liveness with mismatch logging (cutover etap 1, no switching) 2026-07-09 15:38:20 +02:00
capabilities.yaml Add node capability model 2026-05-11 20:46:50 +02:00
host.yaml feat(hosts): add os_hostname field to all host.yaml files 2026-06-24 22:24:34 +02:00
README.md Add infrastructure standards and deployment conventions 2026-05-07 21:16:03 +02:00
services.yaml feat(gokapi): config publicznego file-share na VPS (share.okit.pl, E2E, Tailscale-bind za npm@VPS, disk-protection) — do deployu 2026-07-09 17:29:28 +02:00

VPS - Public Edge + Ingress Node

Role

  • Public-facing reverse proxy.
  • HTTPS termination (Let's Encrypt).
  • Edge security and routing.

Configured Services

  • Nginx Proxy Manager (NPM)
  • Authelia / Authentik (Auth)

Runtime Data

  • /opt/homelab/data/npm