Sanitized mirror from private repository - 2026-04-19 09:32:43 UTC

docs/services/README.md

@@ -0,0 +1,57 @@
+# Homelab Services Overview
+
+## Public Domains
+
+### vish.gg (Primary)
+| Service | URL | Description | Auth |
+|---------|-----|-------------|------|
+| Authentik | sso.vish.gg | SSO Identity Provider | Self |
+| Actual Budget | actual.vish.gg | Personal Finance | Authentik (planned) |
+| Paperless-NGX | docs.vish.gg | Document Management | Authentik (planned) |
+| Seafile | sf.vish.gg | File Storage | Built-in + Share Links |
+| Seafile WebDAV | dav.vish.gg | WebDAV Access | Seafile Auth |
+| Gitea | git.vish.gg | Git Repository | OAuth2 via Authentik |
+| Grafana | gf.vish.gg | Monitoring Dashboard | OAuth2 (planned) |
+| Rackula | rackula.vish.gg | Rack Visualizer | Authentik (planned) |
+| OpenSpeedTest | ost.vish.gg | Network Speed Test | None (public) |
+| ntfy | ntfy.vish.gg | Push Notifications | Built-in |
+| Retro Site | retro.vish.gg | Personal Website | None (public) |
+| Vaultwarden | pw.vish.gg | Password Manager | Built-in |
+| Matrix Synapse | mx.vish.gg | Chat Server | Built-in |
+| Mastodon | mastodon.vish.gg | Social Media | Built-in |
+| Baikal | cal.vish.gg | CalDAV/CardDAV | Built-in |
+
+### thevish.io (Secondary)
+| Service | URL | Description |
+|---------|-----|-------------|
+| Binterest | binterest.thevish.io | Link Bookmarks |
+| Hoarder | hoarder.thevish.io | Content Archiver |
+| Joplin Sync | joplin.thevish.io | Notes Server |
+| Element | matrix.thevish.io | Matrix Web Client |
+| Jitsi Meet | meet.thevish.io | Video Conferencing |
+
+## Host Distribution
+
+### Calypso (DS723+) - 192.168.0.250
+Primary services, always-on location.
+
+**Stacks**: authentik-sso-stack, seafile-new, paperless-stack, actual-budget-stack, 
+rackula-stack, gitea, monitoring-stack, adguard-stack, and more.
+
+### Atlantis (DS920+) - 192.168.0.154
+Media and heavy storage, moving to new location.
+
+**Stacks**: immich-stack, plex-stack, arr-stack, jitsi, and more.
+
+## Reverse Proxy
+
+All services use **Synology Reverse Proxy** with **Cloudflare** in front:
+- DNS: Cloudflare (proxied)
+- SSL: Cloudflare Origin Certificate (*.vish.gg)
+- Reverse Proxy: Synology DSM
+
+## Cloudflare Configuration
+
+- Zone: vish.gg
+- SSL Mode: Full (Strict) with Origin Certificate
+- DNS: Proxied (orange cloud) for all public services