Sanitized mirror from private repository - 2026-03-30 19:03:43 UTC

2026-03-30 19:03:43 +00:00
commit d14fd7afbd
1282 changed files with 331629 additions and 0 deletions
--- a/docs/hardware/README.md
+++ b/docs/hardware/README.md
@@ -0,0 +1,35 @@
+# 🖥️ Hardware Inventory
+
+Complete hardware specifications, warranty information, and purchase details for all homelab equipment.
+
+## 📁 Index
+
+| Document | Description |
+|----------|-------------|
+| [NAS Systems](nas-systems.md) | Synology NAS units (Atlantis, Calypso, Setillo) |
+| [Network Equipment](network-equipment.md) | Routers, switches, adapters |
+| [Compute Hosts](compute-hosts.md) | Physical servers (Guava, Anubis, NUC) |
+| [Storage Drives](storage-drives.md) | HDDs, SSDs, NVMe details |
+| [Raspberry Pi](raspberry-pi.md) | Pi 5 units |
+| [Mobile Devices](mobile-devices.md) | Phones, tablets, laptops |
+
+## 💰 Cost Summary
+
+| Category | Items | Total Cost | Notes |
+|----------|-------|------------|-------|
+| NAS Units | 3 | ~$3,500 | Atlantis, Calypso, Setillo |
+| Storage Drives | 12+ | ~$4,500 | HDDs + NVMe |
+| Network Equipment | 4 | ~$800 | Router, switch, adapters |
+| Compute Hosts | 3 | ~$2,000 | Guava, Anubis, NUC |
+| Edge Devices | 4 | ~$500 | Raspberry Pis, GL.iNet |
+| **Total** | **26+** | **~$11,300** | Estimated |
+
+## 🔧 Warranty Tracking
+
+| Device | Purchase Date | Warranty Expires | Status |
+|--------|---------------|------------------|--------|
+| Atlantis (DS1823xs+) | TBD | TBD | ⏳ Update needed |
+| Calypso (DS723+) | TBD | TBD | ⏳ Update needed |
+| Seagate 16TB drives | TBD | TBD (5-year) | ⏳ Update needed |
+
+*Please update with actual purchase dates and serial numbers*
--- a/docs/hardware/atlantis-storage.md
+++ b/docs/hardware/atlantis-storage.md
@@ -0,0 +1,111 @@
+# Atlantis (DS1823xs+) Storage Configuration
+
+## Overview
+
+Atlantis is a Synology DS1823xs+ NAS running DSM 7.3.2. This document details the storage configuration and performance characteristics.
+
+## Hardware
+
+- **Model**: Synology DS1823xs+ (8-bay)
+- **CPU**: AMD Ryzen V1780B (4 cores)
+- **RAM**: 32GB ECC
+- **DSM Version**: 7.3.2-86009
+
+## Storage Volumes
+
+### Volume 1 - Main Storage (SATA RAID6)
+| Property | Value |
+|----------|-------|
+| Drives | 8x Seagate 16TB SATA |
+| RAID Level | RAID 6 |
+| Usable Capacity | 84 TB |
+| Filesystem | Btrfs |
+| Encryption | Yes (LUKS) |
+| Write Speed | ~77 MB/s |
+| Read Speed | ~212 MB/s |
+| Mount Point | `/volume1` |
+| Purpose | Primary data storage, media, backups |
+
+### Volume 2 - Fast Metadata (NVMe RAID1)
+| Property | Value |
+|----------|-------|
+| Drives | 2x Crucial CT1000P310SSD8 (1TB each) |
+| RAID Level | RAID 1 |
+| Usable Capacity | 885 GB |
+| Filesystem | Btrfs |
+| Write Speed | ~422 MB/s |
+| Read Speed | ~435 MB/s |
+| Mount Point | `/volume2` |
+| Purpose | Docker configs, databases, metadata |
+
+### Volume 3 - Fast Downloads (NVMe RAID1)
+| Property | Value |
+|----------|-------|
+| Drives | 2x Synology SNV5420-400G (400GB each) |
+| RAID Level | RAID 1 |
+| Usable Capacity | 348 GB |
+| Filesystem | Btrfs |
+| Write Speed | ~621 MB/s |
+| Read Speed | ~706 MB/s |
+| Mount Point | `/volume3` |
+| Purpose | SABnzbd downloads, high-I/O temporary storage |
+| Created | 2026-02-01 |
+
+## NVMe Drive Layout
+
+| Device | Model | Slot | Volume |
+|--------|-------|------|--------|
+| nvme0n1 | Synology SNV5420-400G | M.2 Drive 1-2 (built-in) | Volume 3 |
+| nvme1n1 | Synology SNV5420-400G | M.2 Drive 1-1 (built-in) | Volume 3 |
+| nvme2n1 | Crucial CT1000P310SSD8 | M.2 Drive 1 (adapter) | Volume 2 |
+| nvme3n1 | Crucial CT1000P310SSD8 | M.2 Drive 2 (adapter) | Volume 2 |
+
+## Volume 3 Creation Notes
+
+Volume 3 was created using [007revad's Synology_M2_volume script](https://github.com/007revad/Synology_M2_volume) since DSM's Storage Manager doesn't allow creating M.2 storage pools when another M.2 pool already exists.
+
+### Script used:
+```bash
+sudo ~/syno_create_m2_volume.sh
+```
+
+### Configuration selected:
+- RAID Type: RAID 1
+- Storage Pool Type: Single Volume
+- Drives: nvme0n1 + nvme1n1 (Synology SNV5420)
+- Filesystem: Btrfs
+
+### Important Notes:
+- Since these are **Synology-branded drives** (SNV5420), they should survive DSM updates without needing the Synology_HDD_db script
+- After DSM updates, verify the volume is still accessible. If not, re-run the M2_volume script
+- The SNV5420 drives are enterprise-grade with power loss protection (PLP)
+
+## SSD Cache Limitation
+
+**Warning**: The DS1823xs+ has `support_ssd_cache="no"` as a factory default, which prevents using M.2 drives as SSD cache. This appears to be a Synology policy decision for the xs+ line. Combined with the "M.2 storage pool disables all M.2 cache" limitation, SSD cache is not available on this system.
+
+## Performance Comparison
+
+| Volume | Write Speed | Read Speed | Best For |
+|--------|-------------|------------|----------|
+| Volume 1 (HDD) | 77 MB/s | 212 MB/s | Large file storage |
+| Volume 2 (Crucial NVMe) | 422 MB/s | 435 MB/s | Docker configs, databases |
+| Volume 3 (Synology NVMe) | **621 MB/s** | **706 MB/s** | Downloads, high-I/O temp |
+
+## Docker Volume Mapping Strategy
+
+```
+/volume1/data           → Media files, final storage
+/volume2/metadata/docker2 → Container configs and databases  
+/volume3/usenet         → SABnzbd downloads (fast writes)
+```
+
+The arr-suite containers (Sonarr, Radarr, etc.) are configured to:
+1. Download to `/volume3/usenet` (fast NVMe)
+2. Process/unpack on `/volume3/usenet` (fast NVMe)
+3. Move completed media to `/volume1/data/media` (large HDD storage)
+
+## Related Files
+
+- Arr Suite Compose: `Atlantis/arr-suite/docker-compose.yml`
+- This documentation: `docs/hardware/atlantis-storage.md`
--- a/docs/hardware/compute-hosts.md
+++ b/docs/hardware/compute-hosts.md
@@ -0,0 +1,121 @@
+# 💻 Compute Hosts
+
+*Physical and virtual compute infrastructure for the homelab*
+
+## Overview
+Documentation of all compute hosts providing processing power for containers, VMs, and services.
+
+## Physical Hosts
+
+### Intel NUC Systems
+- **Model**: Intel NUC 11 Pro
+- **CPU**: Intel Core i7-1165G7
+- **RAM**: 32GB DDR4
+- **Storage**: 1TB NVMe SSD
+- **Role**: Container orchestration, development
+
+### Raspberry Pi Cluster
+- **Model**: Raspberry Pi 5 (8GB)
+- **Quantity**: Multiple units
+- **Role**: Edge computing, IoT services, monitoring
+- **OS**: Raspberry Pi OS / Ubuntu Server
+
+### Mini PCs
+- **Various models** for specific workloads
+- **Low power consumption** for 24/7 operation
+- **Specialized roles** (networking, monitoring, etc.)
+
+## Virtual Machines
+
+### Proxmox VE Cluster
+- **Hypervisor**: Proxmox Virtual Environment
+- **High Availability**: Cluster configuration
+- **Live Migration**: VM mobility between hosts
+- **Backup Integration**: Automated VM backups
+
+### VM Categories
+
+#### Production VMs
+- **Web services**: Nginx, application servers
+- **Databases**: PostgreSQL, Redis, MongoDB
+- **Monitoring**: Prometheus, Grafana stack
+- **Communication**: Matrix, Mattermost, email
+
+#### Development VMs
+- **CI/CD**: Gitea runners, build environments
+- **Testing**: Isolated testing environments
+- **Staging**: Pre-production deployments
+
+#### Specialized VMs
+- **Gaming servers**: Minecraft, game hosting
+- **Media processing**: Transcoding, conversion
+- **AI/ML**: Machine learning workloads
+
+## Resource Allocation
+
+### CPU Distribution
+- **Production services**: 60% allocation
+- **Development/testing**: 25% allocation
+- **Monitoring/management**: 15% allocation
+
+### Memory Management
+- **Container workloads**: Dynamic allocation
+- **VM reservations**: Guaranteed minimums
+- **Overcommit ratios**: Optimized for workload
+
+### Storage Tiers
+- **NVMe SSD**: High-performance workloads
+- **SATA SSD**: General purpose storage
+- **HDD**: Bulk storage, backups
+
+## Network Configuration
+
+### Management Networks
+- **IPMI/iLO**: Out-of-band management
+- **Admin VLAN**: Management interfaces
+- **Monitoring**: SNMP, logging
+
+### Service Networks
+- **Production VLAN**: Live services
+- **Development VLAN**: Testing environments
+- **DMZ**: Public-facing services
+
+## High Availability
+
+### Clustering
+- **Container orchestration**: Docker Swarm/K8s
+- **Database clustering**: PostgreSQL HA
+- **Load balancing**: HAProxy, Nginx
+
+### Failover Procedures
+- **Automatic failover**: Critical services
+- **Manual procedures**: Complex applications
+- **Recovery testing**: Regular DR drills
+
+## Monitoring & Alerting
+
+### System Metrics
+- **CPU, memory, disk usage**
+- **Network performance**
+- **Temperature monitoring**
+- **Power consumption**
+
+### Health Checks
+- **Service availability**
+- **Performance thresholds**
+- **Capacity planning**
+
+## Maintenance
+
+### Update Schedules
+- **Security patches**: Weekly
+- **System updates**: Monthly
+- **Firmware updates**: Quarterly
+
+### Hardware Maintenance
+- **Cleaning schedules**
+- **Component replacement**
+- **Capacity upgrades**
+
+---
+**Status**: ✅ All compute hosts operational with monitoring coverage
--- a/docs/hardware/guava.md
+++ b/docs/hardware/guava.md
@@ -0,0 +1,234 @@
+# Guava - TrueNAS Scale Server
+
+**Hostname**: guava  
+**IP Address**: 192.168.0.100  
+**Tailscale IP**: 100.75.252.64  
+**Domain**: guava.crista.home  
+**OS**: TrueNAS Scale 25.04.2.6 (Debian 12 Bookworm)  
+**Kernel**: 6.12.15-production+truenas
+
+---
+
+## Hardware Specifications
+
+| Component | Specification |
+|-----------|---------------|
+| **CPU** | 12 cores |
+| **RAM** | 30 GB |
+| **Storage** | ZFS pools (1.5TB+ available) |
+| **Docker** | 27.5.0 |
+| **Compose** | v2.32.3 |
+
+---
+
+## Storage Layout
+
+### Boot Pool
+- `/` - Root filesystem (433GB available)
+- ZFS dataset: `boot-pool/ROOT/25.04.2.6`
+
+### Data Pool (`/mnt/data/`)
+| Dataset | Size Used | Purpose |
+|---------|-----------|---------|
+| `data/guava_turquoise` | 3.0TB / 4.5TB | Primary storage (67% used) |
+| `data/photos` | 159GB | Photo storage |
+| `data/jellyfin` | 145GB | Media library |
+| `data/llama` | 59GB | LLM models |
+| `data/plane-data` | ~100MB | Plane.so application data |
+| `data/iso` | 556MB | ISO images |
+| `data/cocalc` | 324MB | Computational notebook |
+| `data/website` | 59MB | Web content |
+| `data/openproject` | 13MB | OpenProject (postgres) |
+| `data/fasten` | 5.7MB | Health records |
+| `data/fenrus` | 3.5MB | Dashboard config |
+| `data/medical` | 14MB | Medical records |
+| `data/truenas-exporters` | - | Prometheus exporters |
+
+### TrueNAS Apps (`/mnt/.ix-apps/`)
+- Docker storage: 28GB used
+- App configs and mounts for TrueNAS-managed apps
+
+---
+
+## Network Configuration
+
+| Service | Port | Protocol | URL |
+|---------|------|----------|-----|
+| Portainer | 31015 | HTTPS | https://guava.crista.home:31015 |
+| **Plane.so** | 3080 | HTTP | **http://guava.crista.home:3080** |
+| Plane.so HTTPS | 3443 | HTTPS | https://guava.crista.home:3443 |
+| Jellyfin | 30013 | HTTP | http://guava.crista.home:30013 |
+| Jellyfin HTTPS | 30014 | HTTPS | https://guava.crista.home:30014 |
+| Gitea | 30008-30009 | HTTP | http://guava.crista.home:30008 |
+| WireGuard | 51827 | UDP | - |
+| wg-easy UI | 30058 | HTTP | http://guava.crista.home:30058 |
+| Fenrus | 45678 | HTTP | http://guava.crista.home:45678 |
+| Fasten | 9090 | HTTP | http://guava.crista.home:9090 |
+| Node Exporter | 9100 | HTTP | http://guava.crista.home:9100/metrics |
+| nginx | 28888 | HTTP | http://guava.crista.home:28888 |
+| iperf3 | 5201 | TCP | - |
+| SSH | 22 | TCP | - |
+| SMB | 445 | TCP | - |
+| Pi-hole DNS | 53 | TCP/UDP | - |
+
+---
+
+## Portainer Access
+
+| Setting | Value |
+|---------|-------|
+| **URL** | `https://guava.crista.home:31015` |
+| **API Endpoint** | `https://localhost:31015/api` (from guava) |
+| **Endpoint ID** | 3 (local) |
+| **API Token** | `ptr_REDACTED_PORTAINER_TOKEN` |
+
+### API Examples
+
+```bash
+# List stacks
+curl -sk -H 'X-API-Key: "REDACTED_API_KEY" \
+  'https://localhost:31015/api/stacks'
+
+# List containers
+curl -sk -H 'X-API-Key: "REDACTED_API_KEY" \
+  'https://localhost:31015/api/endpoints/3/docker/containers/json'
+
+# Create stack from compose string
+curl -sk -X POST \
+  -H 'X-API-Key: "REDACTED_API_KEY" \
+  -H 'Content-Type: application/json' \
+  'https://localhost:31015/api/stacks/create/standalone/string?endpointId=3' \
+  -d '{"name": "my-stack", "REDACTED_APP_PASSWORD": "..."}'
+```
+
+---
+
+## Deployed Stacks (Portainer)
+
+| ID | Name | Status | Description |
+|----|------|--------|-------------|
+| 2 | nginx | ✅ Active | Reverse proxy (:28888) |
+| 3 | ddns | ✅ Active | Dynamic DNS updater (crista.love) |
+| 4 | llama | ⏸️ Inactive | LLM server |
+| 5 | fenrus | ✅ Active | Dashboard (:45678) |
+| 8 | fasten | ✅ Active | Health records (:9090) |
+| 17 | node-exporter | ✅ Active | Prometheus metrics (:9100) |
+| 18 | iperf3 | ✅ Active | Network speed testing (:5201) |
+| 25 | cocalc | ⏸️ Inactive | Computational notebook |
+| **26** | **plane-stack** | ✅ Active | **Project management (:3080)** |
+
+### TrueNAS-Managed Apps (ix-apps)
+| App | Container | Port | Description |
+|-----|-----------|------|-------------|
+| Portainer | ix-portainer-portainer-1 | 31015 | Container management |
+| Gitea | ix-gitea-gitea-1 | 30008-30009 | Git server |
+| Gitea DB | ix-gitea-postgres-1 | - | PostgreSQL for Gitea |
+| Jellyfin | ix-jellyfin-jellyfin-1 | 30013, 30014 | Media server |
+| WireGuard | ix-wg-easy-wg-easy-1 | 30058, 51827/udp | VPN server |
+| Tailscale | ix-tailscale-tailscale-1 | - | Mesh VPN |
+| Pi-hole | (configured) | 53 | DNS server |
+
+---
+
+## SSH Access
+
+### Via Cloudflare Tunnel
+
+```bash
+# Install cloudflared
+curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64 -o /tmp/cloudflared
+chmod +x /tmp/cloudflared
+
+# SSH config
+cat >> ~/.ssh/config << 'EOF'
+Host guava
+    HostName ruled-bowl-dos-jews.trycloudflare.com
+    User vish
+    IdentityFile ~/.ssh/id_ed25519
+    ProxyCommand /tmp/cloudflared access ssh --hostname %h
+EOF
+
+# Connect
+ssh guava
+```
+
+### Direct (Local Network)
+
+```bash
+ssh vish@192.168.0.100
+```
+
+**Note**: Docker commands require `sudo` on guava.
+
+---
+
+## Services Documentation
+
+### Plane.so
+
+See [plane.yaml](../../hosts/physical/guava/plane.yaml) for the full stack configuration.
+
+| Component | Container | Port | Purpose |
+|-----------|-----------|------|---------|
+| Frontend | plane-web | 3000 | Web UI |
+| Admin | plane-admin | 3000 | Admin panel |
+| Space | plane-space | 3000 | Public pages |
+| API | plane-api | 8000 | Backend API |
+| Worker | plane-worker | 8000 | Background jobs |
+| Beat | plane-beat | 8000 | Scheduled tasks |
+| Live | plane-live | 3000 | Real-time updates |
+| Database | plane-db | 5432 | PostgreSQL |
+| Cache | plane-redis | 6379 | Valkey/Redis |
+| Queue | plane-mq | 5672 | RabbitMQ |
+| Storage | plane-minio | 9000 | MinIO S3 |
+| Proxy | plane-proxy | 80/443 | Caddy reverse proxy |
+
+**Access URL**: http://guava.crista.home:3080
+
+**Data Location**: `/mnt/data/plane-data/`
+
+---
+
+## Maintenance
+
+### Backup Locations
+
+| Data | Path | Priority |
+|------|------|----------|
+| Plane DB | `/mnt/data/plane-data/postgres/` | High |
+| Plane Files | `/mnt/data/plane-data/minio/` | High |
+| Gitea | `/mnt/.ix-apps/app_mounts/gitea/` | High |
+| Jellyfin Config | `/mnt/.ix-apps/app_mounts/jellyfin/config/` | Medium |
+| Photos | `/mnt/data/photos/` | High |
+
+### Common Commands
+
+```bash
+# Check all containers
+sudo docker ps -a
+
+# View stack logs
+sudo docker compose -f /path/to/stack logs -f
+
+# Restart a stack via Portainer API
+curl -sk -X POST \
+  -H 'X-API-Key: TOKEN' \
+  'https://localhost:31015/api/stacks/STACK_ID/stop?endpointId=3'
+
+curl -sk -X POST \
+  -H 'X-API-Key: TOKEN' \
+  'https://localhost:31015/api/stacks/STACK_ID/start?endpointId=3'
+```
+
+---
+
+## Related Documentation
+
+- [Plane.so Service Docs](../services/individual/plane.md)
+- [TrueNAS Scale Documentation](https://www.truenas.com/docs/scale/)
+- [AGENTS.md](../../AGENTS.md) - Quick reference for all hosts
+
+---
+
+*Last updated: February 4, 2026*  
+*Verified via SSH - all services confirmed running*
--- a/docs/hardware/mobile-devices.md
+++ b/docs/hardware/mobile-devices.md
@@ -0,0 +1,192 @@
+# 📱 Mobile Devices
+
+*Mobile device integration and management in the homelab ecosystem*
+
+## Overview
+Documentation of mobile devices, tablets, and portable systems integrated with the homelab infrastructure.
+
+## Device Categories
+
+### Smartphones
+
+#### Android Devices
+- **Primary phones**: Various Android models
+- **Homelab apps**: Portainer, SSH clients, monitoring apps
+- **VPN access**: Tailscale mesh network connectivity
+- **Remote management**: Full homelab access on-the-go
+
+#### iOS Devices
+- **iPhone integration**: Native iOS apps for homelab services
+- **Shortcuts automation**: iOS Shortcuts for common tasks
+- **VPN profiles**: WireGuard/Tailscale configuration
+
+### Tablets
+
+#### Android Tablets
+- **Dashboard displays**: Wall-mounted control panels
+- **Home Assistant**: Dedicated home automation interface
+- **Monitoring displays**: Grafana dashboards, system status
+
+#### iPad Integration
+- **Remote desktop**: VNC/RDP clients for server access
+- **Documentation**: Markdown editors, note-taking
+- **Media consumption**: Plex, Jellyfin streaming
+
+### Portable Computers
+
+#### Laptops
+- **Development machines**: Remote development environments
+- **Administration**: Full homelab management capability
+- **Travel setup**: Portable homelab access
+
+#### Steam Deck / Gaming Handhelds
+- **Game streaming**: Steam Remote Play, Moonlight
+- **Emulation**: RetroArch, standalone emulators
+- **Linux desktop**: Full desktop environment access
+
+## Network Integration
+
+### VPN Connectivity
+- **Tailscale mesh**: Seamless device integration
+- **WireGuard**: High-performance VPN access
+- **Always-on VPN**: Automatic connection management
+
+### Local Network Access
+- **WiFi profiles**: Automatic network connection
+- **Network discovery**: mDNS/Bonjour service discovery
+- **Local DNS**: Pi-hole integration for ad blocking
+
+## Application Ecosystem
+
+### Homelab Management Apps
+
+#### Portainer Mobile
+- **Container management**: Start/stop containers
+- **Log viewing**: Real-time container logs
+- **Stack deployment**: Deploy new services remotely
+
+#### SSH Clients
+- **Termius**: Professional SSH client
+- **JuiceSSH**: Android SSH client
+- **Blink Shell**: iOS terminal emulator
+
+#### Monitoring Apps
+- **Grafana mobile**: Dashboard viewing
+- **Prometheus alerts**: Alert notifications
+- **Uptime monitoring**: Service availability checks
+
+### Home Automation
+
+#### Home Assistant Companion
+- **Device control**: Smart home device management
+- **Automation triggers**: Location-based automation
+- **Notifications**: Push notifications for events
+
+#### IoT Device Apps
+- **Zigbee2MQTT**: Device management
+- **ESPHome**: ESP device configuration
+- **Tasmota**: Device firmware management
+
+### Media & Entertainment
+
+#### Streaming Apps
+- **Plex**: Media streaming client
+- **Jellyfin**: Open-source media streaming
+- **Navidrome**: Music streaming client
+
+#### File Access
+- **Syncthing**: File synchronization
+- **Nextcloud**: Cloud storage access
+- **SMB clients**: Network file sharing
+
+## Security & Access Control
+
+### Authentication
+- **Biometric authentication**: Fingerprint, face unlock
+- **2FA integration**: TOTP, hardware keys
+- **SSO integration**: Authentik single sign-on
+
+### Device Management
+- **MDM solutions**: Mobile device management
+- **App restrictions**: Controlled app installation
+- **Remote wipe**: Security breach procedures
+
+### Network Security
+- **Certificate management**: SSL/TLS certificates
+- **VPN-only access**: Restrict direct internet access
+- **Network segmentation**: Isolated device networks
+
+## Backup & Synchronization
+
+### Data Backup
+- **Photo backup**: Automatic photo synchronization
+- **Document sync**: Important file backup
+- **App data backup**: Application settings/data
+
+### Configuration Management
+- **VPN profiles**: Backup VPN configurations
+- **App settings**: Export/import app configurations
+- **Network profiles**: WiFi and network settings
+
+## Power Management
+
+### Battery Optimization
+- **Background app limits**: Extend battery life
+- **Power-saving modes**: Optimize for longevity
+- **Charging optimization**: Preserve battery health
+
+### Portable Power
+- **Power banks**: Extended operation capability
+- **Wireless charging**: Convenient charging solutions
+- **Car charging**: Mobile power solutions
+
+## Development & Testing
+
+### Mobile Development
+- **App testing**: Test homelab mobile apps
+- **API testing**: REST API client testing
+- **Debug tools**: Network analysis, logging
+
+### Remote Development
+- **Code editors**: Mobile code editing
+- **Git clients**: Version control access
+- **Terminal access**: Command-line interface
+
+## Monitoring & Analytics
+
+### Device Monitoring
+- **Battery health**: Monitor battery degradation
+- **Storage usage**: Track storage consumption
+- **Network usage**: Monitor data consumption
+
+### Usage Analytics
+- **App usage**: Track homelab app usage
+- **Performance metrics**: Device performance monitoring
+- **Connectivity analysis**: Network performance tracking
+
+## Travel Integration
+
+### Portable Setup
+- **Travel router**: GL.iNet travel networking
+- **Mobile hotspot**: Cellular connectivity
+- **Offline capabilities**: Cached data access
+
+### Remote Access
+- **Cloud tunnels**: Cloudflare tunnel access
+- **VPN fallback**: Multiple VPN options
+- **Offline documentation**: Local documentation cache
+
+## Troubleshooting
+
+### Common Issues
+- **VPN connectivity**: Connection troubleshooting
+- **App crashes**: Application stability issues
+- **Network problems**: WiFi/cellular connectivity
+
+### Recovery Procedures
+- **Factory reset**: Complete device reset
+- **App reinstallation**: Clean app installation
+- **Configuration restore**: Backup restoration
+
+---
+**Status**: ✅ All mobile devices integrated with secure homelab access
--- a/docs/hardware/nas-systems.md
+++ b/docs/hardware/nas-systems.md
@@ -0,0 +1,79 @@
+# 🗄️ NAS Systems
+
+*Network Attached Storage systems in the homelab infrastructure*
+
+## Overview
+Comprehensive documentation of NAS systems providing centralized storage, backup, and media services.
+
+## Primary NAS Systems
+
+### Atlantis (Synology DS1821+)
+- **Model**: Synology DS1821+ 8-bay NAS
+- **Storage**: 8x 14TB WD Red Pro drives (RAID 6)
+- **Total Capacity**: ~84TB usable storage
+- **Role**: Primary storage, media library, backup target
+- **Services**: Docker containers, media streaming, file sharing
+
+**Key Features**:
+- Hardware transcoding support
+- 10GbE networking capability
+- ECC RAM support
+- Hot-swappable drives
+
+### Calypso (Secondary NAS)
+- **Model**: Custom built NAS server
+- **Storage**: Multiple drive configuration
+- **Role**: Secondary storage, development environment
+- **Services**: Development containers, testing environment
+
+## Storage Architecture
+
+### RAID Configuration
+- **RAID 6**: Primary configuration for fault tolerance
+- **Hot Spares**: Available for automatic rebuild
+- **Scrubbing**: Regular data integrity checks
+
+### Network Storage Protocols
+- **SMB/CIFS**: Windows file sharing
+- **NFS**: Unix/Linux file sharing
+- **iSCSI**: Block-level storage
+- **FTP/SFTP**: File transfer protocols
+
+## Backup Strategy
+
+### Local Backups
+- **Snapshot replication** between NAS systems
+- **Incremental backups** for changed data
+- **Version control** for critical files
+
+### Cloud Backups
+- **Encrypted cloud storage** for critical data
+- **Automated sync** for important documents
+- **Disaster recovery** procedures
+
+## Monitoring & Maintenance
+
+### Health Monitoring
+- **SMART data** monitoring for drive health
+- **Temperature monitoring** for thermal management
+- **Performance metrics** for optimization
+
+### Maintenance Schedule
+- **Monthly**: Drive health checks
+- **Quarterly**: Firmware updates
+- **Annually**: Physical cleaning and inspection
+
+## Integration
+
+### Container Orchestration
+- **Portainer stacks** deployed on NAS systems
+- **Docker volumes** for persistent storage
+- **Network shares** for container data
+
+### Media Services
+- **Plex Media Server** for streaming
+- **Arr suite** for media management
+- **Backup services** for data protection
+
+---
+**Status**: ✅ All NAS systems operational with full redundancy
--- a/docs/hardware/network-equipment.md
+++ b/docs/hardware/network-equipment.md
@@ -0,0 +1,127 @@
+# 🌐 Network Equipment
+
+## Router: TP-Link Archer BE800
+
+**WiFi 7 Tri-Band Router**
+
+| Specification | Value |
+|---------------|-------|
+| Model | Archer BE800 |
+| WiFi Standard | WiFi 7 (802.11be) |
+| Speed Class | BE19000 |
+| Bands | Tri-Band (2.4GHz + 5GHz + 6GHz) |
+
+### Ports
+| Port | Type | Speed | Connected To |
+|------|------|-------|--------------|
+| WAN (SFP+) | SFP+ | 10Gbps | ISP Modem (via TP-Link 10G RJ45→SFP+ adapter) |
+| WAN/LAN 1 | RJ45 | 10Gbps | TP-Link TL-SX1008 Switch |
+| LAN 2-5 | RJ45 | 2.5Gbps | Proxmox, Anubis, Pi, etc. |
+
+### Network Diagram
+```
+ISP (25Gbps Fiber)
+        │
+        ▼
+   [ONT/Modem]
+        │
+        │ 10G SFP+ (via adapter)
+        ▼
+┌───────────────────┐
+│  TP-Link BE800    │
+│  ┌─────────────┐  │
+│  │ SFP+ WAN    │◄─┘ 10G to ISP
+│  │ 10G LAN     │───► TL-SX1008 Switch (10G)
+│  │ 2.5G LAN x4 │───► Proxmox, Anubis, etc.
+│  └─────────────┘  │
+└───────────────────┘
+```
+
+---
+
+## Switch: TP-Link TL-SX1008
+
+**8-Port 10GbE Unmanaged Switch**
+
+| Specification | Value |
+|---------------|-------|
+| Model | TL-SX1008 |
+| Ports | 8x 10GBASE-T (RJ45) |
+| Switching Capacity | 160 Gbps |
+| Forwarding Rate | 119.04 Mpps |
+| Cooling | Fanless (silent) |
+| Power | ~15W typical |
+
+### Port Assignments
+| Port | Device | Speed | Cable |
+|------|--------|-------|-------|
+| 1 | TP-Link BE800 (uplink) | 10Gbps | Cat6a |
+| 2 | Atlantis (DS1823xs+) | 10Gbps | Cat6a |
+| 3 | Calypso (DS723+) | 10Gbps | Cat6a |
+| 4 | Guava | 10Gbps | Cat6a |
+| 5 | Desktop (shinku-ryuu) | 10Gbps | Cat6a |
+| 6 | (Available) | - | - |
+| 7 | (Available) | - | - |
+| 8 | (Available) | - | - |
+
+---
+
+## 10G Adapter
+
+**TP-Link 10G RJ45 to SFP+ Module**
+
+| Specification | Value |
+|---------------|-------|
+| Purpose | Connect BE800 SFP+ WAN to ISP modem (RJ45) |
+| Speed | 10Gbps |
+| Type | RJ45 to SFP+ transceiver |
+
+---
+
+## Travel Routers: GL.iNet
+
+### GL-MT3000 (Beryl AX)
+| Specification | Value |
+|---------------|-------|
+| Location | Honolulu, HI |
+| Tailscale IP | 100.126.243.15 |
+| Purpose | Subnet router, travel WiFi |
+| WiFi | WiFi 6 (AX3000) |
+
+### GL-BE3600 (Slate 7)
+| Specification | Value |
+|---------------|-------|
+| Location | Honolulu, HI |
+| Tailscale IP | 100.105.59.123 |
+| Purpose | Backup router |
+| WiFi | WiFi 7 (BE3600) |
+
+---
+
+## Network Topology Summary
+
+```
+                    ┌─────────────────────────────────────┐
+                    │         INTERNET (25Gbps)           │
+                    └─────────────────┬───────────────────┘
+                                      │
+                                      │ 10G SFP+ (via adapter)
+                                      ▼
+                    ┌─────────────────────────────────────┐
+                    │       TP-Link Archer BE800          │
+                    │         (WiFi 7 Router)             │
+                    └───────┬─────────────────┬───────────┘
+                            │                 │
+                    10G RJ45│                 │2.5G x4
+                            ▼                 ▼
+                    ┌───────────────┐   ┌───────────────┐
+                    │  TL-SX1008    │   │ 2.5G Devices  │
+                    │  10G Switch   │   │ • Proxmox     │
+                    └───────┬───────┘   │ • Anubis      │
+                            │           │ • RPi 5       │
+            ┌───────┬───────┼───────┐   └───────────────┘
+            │       │       │       │
+            ▼       ▼       ▼       ▼
+        Atlantis Calypso  Guava  Desktop
+         10GbE    10GbE   10GbE   10GbE
+```
--- a/docs/hardware/nvidia-shield.md
+++ b/docs/hardware/nvidia-shield.md
@@ -0,0 +1,488 @@
+# 🎮 NVIDIA Shield TV Pro 4K - Travel Device Configuration
+
+**🟢 Beginner to Intermediate Guide**
+
+The NVIDIA Shield TV Pro serves as a portable homelab access point, providing secure connectivity to your infrastructure while traveling. This guide covers setup, configuration, and usage scenarios.
+
+## 📱 Device Overview
+
+### **Hardware Specifications**
+- **Model**: NVIDIA Shield TV Pro (2019)
+- **CPU**: NVIDIA Tegra X1+ (8-core, 64-bit ARM)
+- **GPU**: 256-core NVIDIA GPU
+- **RAM**: 3GB LPDDR4
+- **Storage**: 16GB eMMC + microSD expansion
+- **Network**: Gigabit Ethernet + 802.11ac WiFi
+- **Ports**: 2x USB 3.0, HDMI 2.0b, microSD slot
+- **Power**: 20W external adapter
+- **Remote**: Voice remote with backlit buttons
+- **AI Upscaling**: NVIDIA AI upscaling to 4K
+
+### **Travel Use Cases**
+| Scenario | Primary Function | Homelab Integration |
+|----------|------------------|-------------------|
+| **Hotel Room** | Media streaming, secure browsing | Plex/Jellyfin via Tailscale |
+| **Airbnb/Rental** | Personal entertainment system | Full homelab access |
+| **Family Visits** | Share media with family | Stream personal library |
+| **Business Travel** | Secure work environment | VPN gateway to homelab |
+| **Extended Travel** | Portable home setup | Complete service access |
+
+---
+
+## 🔧 Initial Setup & Configuration
+
+### **Step 1: Basic Android TV Setup**
+```bash
+# Initial device setup
+1. Connect to power and HDMI display
+2. Follow Android TV setup wizard
+3. Sign in with Google account
+4. Connect to WiFi network
+5. Complete initial updates
+6. Enable Developer Options:
+   - Settings > Device Preferences > About
+   - Click "Build" 7 times to enable Developer Options
+   - Settings > Device Preferences > Developer Options
+   - Enable "USB Debugging"
+```
+
+### **Step 2: Enable Sideloading**
+```bash
+# Allow installation of non-Play Store apps
+1. Settings > Device Preferences > Security & Restrictions
+2. Enable "Unknown Sources" for apps you trust
+3. Or enable per-app when installing Tailscale
+```
+
+### **Step 3: Install Essential Apps**
+```bash
+# Core applications for homelab integration
+1. Tailscale (sideloaded)
+2. Plex (Play Store)
+3. VLC Media Player (Play Store)
+4. Chrome Browser (Play Store)
+5. Termux (Play Store) - for SSH access
+6. Solid Explorer (Play Store) - file management
+```
+
+---
+
+## 🌐 Tailscale Configuration
+
+### **Installation Process**
+```bash
+# Method 1: Direct APK Installation (Recommended)
+1. Download Tailscale APK from official website
+2. Transfer to Shield via USB drive or network
+3. Install using file manager
+4. Grant necessary permissions
+
+# Method 2: ADB Installation (Advanced)
+# From computer with ADB installed:
+adb connect [shield-ip-address]
+adb install tailscale.apk
+```
+
+### **Tailscale Setup**
+```bash
+# Initial configuration
+1. Open Tailscale app
+2. Sign in with your Tailscale account
+3. Authorize the device in Tailscale admin console
+4. Verify connection to homelab network
+5. Test connectivity to homelab services
+
+# Verify connection
+# From Termux or ADB shell:
+ping atlantis.vish.local
+ping 100.83.230.112  # Atlantis Tailscale IP
+```
+
+### **Advanced Tailscale Configuration**
+```bash
+# Configure as exit node (optional)
+# Allows Shield to route all traffic through homelab
+1. Tailscale admin console > Machines
+2. Find NVIDIA Shield device
+3. Enable "Exit Node" capability
+4. On Shield: Settings > Use as Exit Node
+
+# Subnet routing (if needed)
+# Allow access to local networks at travel location
+tailscale up --advertise-routes=192.168.1.0/24
+```
+
+---
+
+## 📺 Media Streaming Configuration
+
+### **Plex Client Setup**
+```bash
+# Optimal Plex configuration for travel
+1. Install Plex app from Play Store
+2. Sign in with Plex account
+3. Server should auto-discover via Tailscale
+4. If not found manually add:
+   - Server IP: atlantis.vish.local
+   - Port: 32400
+   - Or Tailscale IP: 100.83.230.112:32400
+
+# Quality settings for travel:
+# Settings > Video Quality
+# - Home Streaming: Maximum (if good WiFi)
+# - Remote Streaming: 4 Mbps 720p (for limited bandwidth)
+# - Allow Direct Play: Enabled
+# - Allow Direct Stream: Enabled
+```
+
+### **Alternative Media Apps**
+```bash
+# Jellyfin (if preferred over Plex)
+1. Install Jellyfin app from Play Store
+2. Add server: calypso.vish.local:2283
+3. Or Tailscale IP: 100.103.48.78:2283
+
+# VLC for direct file access
+1. Network streams via SMB/CIFS
+2. Direct file playback from NAS
+3. Supports all media formats
+```
+
+---
+
+## 🔒 Security & VPN Configuration
+
+### **Secure Browsing Setup**
+```bash
+# Use Shield as secure gateway
+1. Configure Tailscale as exit node
+2. All traffic routes through homelab
+3. Benefits from Pi-hole ad blocking
+4. Secure DNS resolution
+
+# Chrome browser configuration:
+# - Set homepage to homelab dashboard
+# - Bookmark frequently used services
+# - Enable sync for consistent experience
+```
+
+### **SSH Access to Homelab**
+```bash
+# Using Termux for SSH connections
+1. Install Termux from Play Store
+2. Update packages: pkg update && pkg upgrade
+3. Install SSH client: pkg install openssh
+4. Generate SSH key: ssh-keygen -t ed25519
+5. Copy public key to homelab hosts
+
+# Connect to homelab:
+ssh admin@atlantis.vish.local
+ssh user@homelab-vm.vish.local
+ssh pi@concord-nuc.vish.local
+```
+
+---
+
+## 🏨 Travel Scenarios & Setup
+
+### **Hotel Room Setup**
+```bash
+# Quick deployment in hotel room
+1. Connect Shield to hotel TV via HDMI
+2. Connect to hotel WiFi
+3. Launch Tailscale (auto-connects)
+4. Access homelab services immediately
+5. Stream personal media library
+
+# Hotel WiFi considerations:
+# - May need to accept terms via browser
+# - Some hotels block VPN traffic
+# - Use mobile hotspot as backup
+```
+
+### **Airbnb/Rental Property**
+```bash
+# Extended stay configuration
+1. Connect to property WiFi
+2. Set up Shield as primary entertainment
+3. Configure TV settings for optimal experience
+4. Share access with travel companions
+5. Use as work environment via homelab
+
+# Family sharing:
+# - Create guest Plex accounts
+# - Share specific libraries
+# - Monitor usage via Tautulli
+```
+
+### **Mobile Hotspot Integration**
+```bash
+# Using phone as internet source
+1. Enable mobile hotspot on phone
+2. Connect Shield to hotspot WiFi
+3. Monitor data usage carefully
+4. Adjust streaming quality accordingly
+
+# Data-conscious settings:
+# - Plex: 2 Mbps 480p for mobile data
+# - Disable automatic updates
+# - Use offline content when possible
+```
+
+---
+
+## 🎮 Gaming & Entertainment Features
+
+### **GeForce Now Integration**
+```bash
+# Cloud gaming via NVIDIA's service
+1. Install GeForce Now app
+2. Sign in with NVIDIA account
+3. Access Steam/Epic games library
+4. Stream games at 4K 60fps (with good connection)
+
+# Optimal settings:
+# - Streaming Quality: Custom
+# - Bitrate: Adjust based on connection
+# - Frame Rate: 60fps preferred
+```
+
+### **Local Game Streaming**
+```bash
+# Stream games from homelab PCs
+1. Install Steam Link app
+2. Discover gaming PCs on network
+3. Pair with gaming systems
+4. Stream games over Tailscale
+
+# Requirements:
+# - Gaming PC with Steam installed
+# - Good network connection (5+ Mbps)
+# - Low latency connection
+```
+
+### **Emulation & Retro Gaming**
+```bash
+# RetroArch for classic games
+1. Install RetroArch from Play Store
+2. Download cores for desired systems
+3. Load ROMs from homelab NAS
+4. Configure controllers
+
+# ROM access via SMB:
+# - Connect to atlantis.vish.local/roms
+# - Browse by system/console
+# - Load directly from network storage
+```
+
+---
+
+## 🔧 Advanced Configuration
+
+### **Custom Launcher (Optional)**
+```bash
+# Replace default Android TV launcher
+1. Install alternative launcher (FLauncher, ATV Launcher)
+2. Set as default home app
+3. Customize with homelab shortcuts
+4. Create quick access to services
+
+# Homelab shortcuts:
+# - Grafana dashboard
+# - Portainer interface
+# - Plex web interface
+# - Router admin panel
+```
+
+### **Automation Integration**
+```bash
+# Home Assistant integration
+1. Install Home Assistant app
+2. Connect to concord-nuc.vish.local:8123
+3. Control smart home devices
+4. Automate Shield behavior
+
+# Example automations:
+# - Turn on Shield when arriving home
+# - Adjust volume based on time of day
+# - Switch inputs automatically
+```
+
+### **File Management**
+```bash
+# Solid Explorer configuration
+1. Add network locations:
+   - SMB: //atlantis.vish.local/media
+   - SMB: //calypso.vish.local/documents
+   - FTP: homelab-vm.vish.local:21
+2. Enable cloud storage integration
+3. Set up automatic sync folders
+
+# Use cases:
+# - Download files to Shield storage
+# - Upload photos/videos to homelab
+# - Access documents remotely
+```
+
+---
+
+## 📊 Monitoring & Management
+
+### **Performance Monitoring**
+```bash
+# Monitor Shield performance
+1. Settings > Device Preferences > About
+2. Check storage usage regularly
+3. Monitor network performance
+4. Clear cache when needed
+
+# Network diagnostics:
+# - WiFi Analyzer app for signal strength
+# - Speedtest app for bandwidth testing
+# - Ping tools for latency checking
+```
+
+### **Remote Management**
+```bash
+# ADB over network (advanced)
+1. Enable ADB over network in Developer Options
+2. Connect from computer: adb connect [shield-ip]:5555
+3. Execute commands remotely
+4. Install/manage apps REDACTED_APP_PASSWORD
+
+# Useful ADB commands:
+adb shell pm list packages  # List installed apps
+adb install app.apk         # Install APK remotely
+adb shell input keyevent 3  # Simulate home button
+adb shell screencap /sdcard/screen.png  # Screenshot
+```
+
+---
+
+## 🚨 Troubleshooting
+
+### **Common Issues & Solutions**
+```bash
+# Tailscale connection problems:
+1. Check internet connectivity
+2. Restart Tailscale app
+3. Re-authenticate if needed
+4. Verify firewall settings
+
+# Plex streaming issues:
+1. Check server status in homelab
+2. Test direct IP connection
+3. Adjust quality settings
+4. Clear Plex app cache
+
+# WiFi connectivity problems:
+1. Forget and reconnect to network
+2. Check for interference
+3. Use 5GHz band if available
+4. Reset network settings if needed
+```
+
+### **Performance Optimization**
+```bash
+# Improve Shield performance:
+1. Clear app caches regularly
+2. Uninstall unused applications
+3. Restart device weekly
+4. Keep storage under 80% full
+
+# Network optimization:
+1. Use wired connection when possible
+2. Position close to WiFi router
+3. Avoid interference sources
+4. Update router firmware
+```
+
+---
+
+## 📋 Travel Checklist
+
+### **Pre-Travel Setup**
+```bash
+☐ Update Shield to latest firmware
+☐ Update all apps
+☐ Verify Tailscale connectivity
+☐ Test Plex streaming
+☐ Download offline content if needed
+☐ Charge remote control
+☐ Pack HDMI cable (if needed)
+☐ Pack power adapter
+☐ Verify homelab services are running
+☐ Set up mobile hotspot backup
+```
+
+### **At Destination**
+```bash
+☐ Connect to local WiFi
+☐ Test internet speed
+☐ Launch Tailscale
+☐ Verify homelab connectivity
+☐ Test media streaming
+☐ Configure TV settings
+☐ Set up any shared access
+☐ Monitor data usage (if on mobile)
+```
+
+### **Departure Cleanup**
+```bash
+☐ Sign out of local accounts
+☐ Clear browser data
+☐ Remove WiFi networks
+☐ Reset any personalized settings
+☐ Verify no personal data left on device
+☐ Pack all accessories
+```
+
+---
+
+## 🔗 Integration with Homelab Services
+
+### **Service Access URLs**
+```bash
+# Via Tailscale (always accessible):
+Plex:           http://100.83.230.112:32400
+Jellyfin:       http://100.103.48.78:2283
+Grafana:        http://100.83.230.112:7099
+Home Assistant: http://100.67.40.126:8123
+Portainer:      http://100.83.230.112:9000
+Router Admin:   http://192.168.1.1
+
+# Via local DNS (when on home network):
+Plex:           http://atlantis.vish.local:32400
+Jellyfin:       http://calypso.vish.local:2283
+Grafana:        http://atlantis.vish.local:7099
+```
+
+### **Backup & Sync**
+```bash
+# Automatic backup of Shield data
+1. Configure Syncthing on Shield (if available)
+2. Sync important folders to homelab
+3. Backup app configurations
+4. Store in homelab for easy restore
+
+# Manual backup process:
+1. Use ADB to pull important data
+2. Store configurations in homelab Git repo
+3. Document custom settings
+4. Create restore procedures
+```
+
+---
+
+## 📚 Related Documentation
+
+- [Tailscale Setup Guide](../infrastructure/tailscale-setup-guide.md)
+- [Travel Networking Guide](../infrastructure/comprehensive-travel-setup.md)
+- [Plex Configuration](../services/individual/plex.md)
+- [Home Assistant Integration](../services/individual/home-assistant.md)
+
+---
+
+**💡 Pro Tip**: The NVIDIA Shield TV Pro is an incredibly versatile travel companion. With proper setup, it provides seamless access to your entire homelab infrastructure from anywhere in the world, making travel feel like home.
+
+**🔄 Maintenance**: Update this configuration monthly and test all functionality before important trips.
--- a/docs/hardware/raspberry-pi.md
+++ b/docs/hardware/raspberry-pi.md
@@ -0,0 +1,174 @@
+# 🥧 Raspberry Pi Systems
+
+*Raspberry Pi devices and edge computing in the homelab*
+
+## Overview
+Documentation of Raspberry Pi systems providing edge computing, IoT services, and specialized workloads.
+
+## Hardware Inventory
+
+### Raspberry Pi 5 (Primary)
+- **Model**: Raspberry Pi 5 8GB
+- **CPU**: Broadcom BCM2712 (Quad-core ARM Cortex-A76)
+- **RAM**: 8GB LPDDR4X
+- **Storage**: 128GB microSD + USB SSD
+- **Connectivity**: Gigabit Ethernet, WiFi 6, Bluetooth 5.0
+- **Ports**: 2x USB 3.0, 2x USB 2.0, 2x micro-HDMI
+
+### Raspberry Pi 4 (Secondary)
+- **Model**: Raspberry Pi 4B 4GB/8GB variants
+- **CPU**: Broadcom BCM2711 (Quad-core ARM Cortex-A72)
+- **Use Cases**: Legacy services, testing, development
+
+### Raspberry Pi Zero 2 W
+- **Model**: Ultra-compact form factor
+- **Use Cases**: IoT sensors, minimal services
+- **Connectivity**: WiFi, Bluetooth
+
+## Deployment Locations
+
+### Edge Computing Nodes
+- **Network monitoring**: Distributed monitoring points
+- **IoT gateways**: Sensor data collection
+- **Local services**: Reduce latency for local users
+
+### Specialized Roles
+- **Pi-hole DNS**: Network-wide ad blocking
+- **VPN endpoints**: Remote access points
+- **Environmental monitoring**: Temperature, humidity sensors
+
+## Operating Systems
+
+### Raspberry Pi OS
+- **Base**: Debian-based official OS
+- **Use Cases**: General purpose, desktop applications
+- **Management**: Standard APT package management
+
+### Ubuntu Server
+- **Version**: Ubuntu Server 22.04 LTS ARM64
+- **Use Cases**: Container workloads, server applications
+- **Benefits**: Long-term support, enterprise features
+
+### Specialized Distributions
+- **DietPi**: Lightweight, optimized for Pi hardware
+- **OpenWrt**: Network appliance functionality
+- **Home Assistant OS**: Dedicated home automation
+
+## Container Orchestration
+
+### Docker Deployment
+- **ARM64 containers**: Native ARM architecture support
+- **Resource constraints**: Memory and CPU optimization
+- **Storage optimization**: Minimize SD card wear
+
+### Service Categories
+
+#### Monitoring Services
+- **Node Exporter**: System metrics collection
+- **Prometheus**: Metrics storage and alerting
+- **Grafana**: Visualization dashboards
+
+#### Network Services
+- **Pi-hole**: DNS filtering and ad blocking
+- **Unbound**: Recursive DNS resolver
+- **Tailscale**: Mesh VPN connectivity
+
+#### IoT Services
+- **Home Assistant**: Home automation platform
+- **Zigbee2MQTT**: Zigbee device integration
+- **InfluxDB**: Time-series data storage
+
+## Performance Optimization
+
+### Storage Optimization
+- **USB SSD boot**: Faster than microSD
+- **Log2RAM**: Reduce SD card writes
+- **Swap optimization**: Minimize swap usage
+
+### Thermal Management
+- **Heatsinks**: Passive cooling solutions
+- **Fan control**: Active cooling when needed
+- **Thermal throttling**: Prevent overheating
+
+### Power Management
+- **Quality power supplies**: Stable 5V/3A supply
+- **UPS integration**: Uninterruptible power supply
+- **Power monitoring**: Track consumption
+
+## Network Configuration
+
+### Ethernet Connectivity
+- **Gigabit Ethernet**: Primary network connection
+- **VLAN support**: Network segmentation
+- **Static IP assignment**: Consistent addressing
+
+### Wireless Configuration
+- **WiFi 6 support**: High-speed wireless (Pi 5)
+- **Multiple SSIDs**: Network isolation
+- **Mesh networking**: Extended coverage
+
+## Monitoring & Management
+
+### System Monitoring
+- **Temperature monitoring**: Prevent thermal issues
+- **CPU/memory usage**: Resource utilization
+- **Storage health**: SD card/SSD monitoring
+
+### Remote Management
+- **SSH access**: Secure remote administration
+- **VNC/RDP**: Graphical remote access
+- **Ansible automation**: Configuration management
+
+### Health Checks
+- **Service availability**: Monitor running services
+- **Network connectivity**: Ensure network access
+- **Storage space**: Prevent disk full issues
+
+## Maintenance Procedures
+
+### Regular Updates
+- **OS updates**: Security patches and improvements
+- **Container updates**: Keep services current
+- **Firmware updates**: EEPROM and bootloader
+
+### Backup Strategies
+- **SD card imaging**: Complete system backups
+- **Configuration backups**: Service configurations
+- **Data synchronization**: Important data backup
+
+### Hardware Maintenance
+- **Cleaning**: Dust removal from heatsinks
+- **Connection checks**: Ensure secure connections
+- **Storage replacement**: SD card/SSD replacement
+
+## Use Cases
+
+### Home Automation
+- **Home Assistant**: Central automation hub
+- **Device integration**: Zigbee, Z-Wave, WiFi devices
+- **Automation rules**: Smart home logic
+
+### Network Infrastructure
+- **DNS services**: Pi-hole ad blocking
+- **VPN services**: Remote access solutions
+- **Network monitoring**: Traffic analysis
+
+### Development & Testing
+- **CI/CD runners**: Lightweight build agents
+- **Testing environments**: Isolated test systems
+- **Prototyping**: Hardware/software development
+
+## Troubleshooting
+
+### Common Issues
+- **SD card corruption**: Use quality cards, minimize writes
+- **Power issues**: Ensure adequate power supply
+- **Thermal throttling**: Improve cooling solutions
+
+### Recovery Procedures
+- **Boot issues**: Recovery mode procedures
+- **Network problems**: Reset network configuration
+- **Service failures**: Container restart procedures
+
+---
+**Status**: ✅ All Raspberry Pi systems operational with monitoring coverage
--- a/docs/hardware/storage-drives.md
+++ b/docs/hardware/storage-drives.md
@@ -0,0 +1,147 @@
+# 💾 Storage Drives
+
+*Physical storage devices and drive management in the homelab*
+
+## Overview
+Comprehensive inventory and management of all storage drives across the homelab infrastructure.
+
+## Drive Categories
+
+### NAS Drives (Primary Storage)
+
+#### WD Red Pro Series
+- **Model**: WD Red Pro 14TB (WD141KFGX)
+- **Quantity**: 8 drives in Atlantis NAS
+- **Technology**: CMR (Conventional Magnetic Recording)
+- **Warranty**: 5 years
+- **MTBF**: 2.5M hours
+- **Workload**: 550TB/year
+
+#### Seagate IronWolf Pro
+- **Model**: Various capacities (8TB-18TB)
+- **Technology**: CMR recording
+- **Features**: AgileArray technology
+- **Health Management**: IronWolf Health Management
+
+### SSD Storage (Performance)
+
+#### NVMe SSDs
+- **Samsung 980 Pro**: 1TB/2TB capacities
+- **WD Black SN850**: High-performance gaming
+- **Crucial P5 Plus**: Cost-effective performance
+- **Use Cases**: OS drives, databases, caching
+
+#### SATA SSDs
+- **Samsung 870 EVO**: General purpose storage
+- **Crucial MX4**: Budget-friendly option
+- **WD Blue**: Reliable everyday storage
+- **Use Cases**: VM storage, application data
+
+### Backup Drives
+
+#### External USB Drives
+- **WD Elements**: 8TB-14TB external drives
+- **Seagate Backup Plus**: Portable backup solutions
+- **Use Cases**: Offline backups, data migration
+
+#### Archive Storage
+- **WD Gold**: Enterprise-grade archival
+- **Seagate Exos**: High-capacity enterprise
+- **Use Cases**: Long-term data retention
+
+## Drive Health Monitoring
+
+### SMART Monitoring
+- **Automated checks**: Daily SMART data collection
+- **Threshold alerts**: Proactive failure detection
+- **Historical tracking**: Performance degradation trends
+
+### Temperature Management
+- **Thermal monitoring**: Continuous temperature tracking
+- **Cooling optimization**: Fan curve adjustments
+- **Alert thresholds**: Overheating prevention
+
+### Performance Metrics
+- **Read/write speeds**: Throughput monitoring
+- **IOPS tracking**: Input/output operations
+- **Latency measurement**: Response time analysis
+
+## Drive Replacement Procedures
+
+### Failure Detection
+1. **SMART alerts** indicate potential failure
+2. **Performance degradation** monitoring
+3. **Error rate increases** in system logs
+
+### Replacement Process
+1. **Order replacement drive** (same model preferred)
+2. **Schedule maintenance window**
+3. **Hot-swap procedure** (if supported)
+4. **RAID rebuild process**
+5. **Verification testing**
+
+### Data Recovery
+- **RAID redundancy** for fault tolerance
+- **Backup restoration** if needed
+- **Professional recovery** for critical data
+
+## Storage Optimization
+
+### RAID Configuration
+- **RAID 6**: Dual parity for fault tolerance
+- **RAID 10**: Performance with redundancy
+- **RAID 1**: Simple mirroring for critical data
+
+### Caching Strategies
+- **SSD caching**: Accelerate HDD performance
+- **Read caching**: Frequently accessed data
+- **Write caching**: Improve write performance
+
+### Tiered Storage
+- **Hot data**: NVMe SSD storage
+- **Warm data**: SATA SSD storage
+- **Cold data**: HDD archival storage
+
+## Capacity Planning
+
+### Growth Projections
+- **Historical usage**: Analyze growth trends
+- **Service expansion**: Plan for new services
+- **Backup requirements**: Account for redundancy
+
+### Procurement Planning
+- **Bulk purchasing**: Cost optimization
+- **Technology refresh**: Upgrade cycles
+- **Compatibility**: Ensure system compatibility
+
+## Drive Inventory Management
+
+### Asset Tracking
+- **Serial numbers**: Complete inventory database
+- **Purchase dates**: Warranty tracking
+- **Installation locations**: Physical mapping
+
+### Warranty Management
+- **Warranty periods**: Track expiration dates
+- **RMA procedures**: Return merchandise authorization
+- **Replacement tracking**: Monitor replacements
+
+## Best Practices
+
+### Installation
+- **Anti-static procedures**: Prevent ESD damage
+- **Proper mounting**: Secure installation
+- **Cable management**: Optimize airflow
+
+### Maintenance
+- **Regular cleaning**: Dust removal
+- **Firmware updates**: Keep drives current
+- **Performance testing**: Periodic benchmarks
+
+### Security
+- **Data encryption**: Protect sensitive data
+- **Secure disposal**: Proper drive wiping
+- **Physical security**: Prevent unauthorized access
+
+---
+**Status**: ✅ All storage drives monitored with proactive health management