Homelab documentation

These pages describe the homelab and its operating procedures. They can be read independently.

Start with the system

Architecture follows traffic into the network, a media request through the applications, and data into storage and backups.
Storage and backups explains why the server combines independent media disks, a parity disk, and a fast NVMe drive.
Migration from Unraid records the move from Unraid to Debian.
Roadmap lists the current gate and planned work.
Security boundaries explains the public/private configuration split, authentication direction, and remote-access policy.
Identity and single sign-on explains the lldap and Authelia stack that gives the supporting apps one login with MFA.
MTG lobby (phase.rs) explains the self-hosted card-game server, how it shares the Authelia gate, and its trust boundaries.

Host facts records the hardware, disk roles, ownership, GPU, and access assumptions that other configuration depends on.
Debian 13 rebuild guide is the whole-host checklist for rebuilding the server.
Disaster recovery rehearsal proves a clean VM converge and representative offsite appdata restore without touching production.
OPNsense monitoring explains how router and network health reach Prometheus and Grafana.

AI-assisted workflow describes how changes are separated, reviewed, checked in CI, and kept away from secrets.
Ansible behavior contract records what host convergence must preserve.
The Ansible acceptance records keep the detailed proof for Compose deployment, base host setup, storage and monitoring, and Docker and hardening.

The acceptance pages preserve detailed rehearsal and production evidence.

Repository configuration is the source of truth for behavior; these pages add operating context and history.