# Homelab Services Overview

## Public Domains

### vish.gg (Primary)
| Service | URL | Description | Auth |
|---------|-----|-------------|------|
| Authentik | sso.vish.gg | SSO Identity Provider | Self |
| Actual Budget | actual.vish.gg | Personal Finance | Authentik (planned) |
| Paperless-NGX | docs.vish.gg | Document Management | Authentik (planned) |
| Seafile | sf.vish.gg | File Storage | Built-in + Share Links |
| Seafile WebDAV | dav.vish.gg | WebDAV Access | Seafile Auth |
| Gitea | git.vish.gg | Git Repository | OAuth2 via Authentik |
| Grafana | gf.vish.gg | Monitoring Dashboard | OAuth2 (planned) |
| Rackula | rackula.vish.gg | Rack Visualizer | Authentik (planned) |
| OpenSpeedTest | ost.vish.gg | Network Speed Test | None (public) |
| ntfy | ntfy.vish.gg | Push Notifications | Built-in |
| Retro Site | retro.vish.gg | Personal Website | None (public) |
| Vaultwarden | pw.vish.gg | Password Manager | Built-in |
| Matrix Synapse | mx.vish.gg | Chat Server | Built-in |
| Mastodon | mastodon.vish.gg | Social Media | Built-in |
| Baikal | cal.vish.gg | CalDAV/CardDAV | Built-in |

### thevish.io (Secondary)
| Service | URL | Description |
|---------|-----|-------------|
| Binterest | binterest.thevish.io | Link Bookmarks |
| Hoarder | hoarder.thevish.io | Content Archiver |
| Joplin Sync | joplin.thevish.io | Notes Server |
| Element | matrix.thevish.io | Matrix Web Client |
| Jitsi Meet | meet.thevish.io | Video Conferencing |

## Host Distribution

### Calypso (DS723+) - 192.168.0.250
Primary services, always-on location.

**Stacks**: authentik-sso-stack, seafile-new, paperless-stack, actual-budget-stack, 
rackula-stack, gitea, monitoring-stack, adguard-stack, and more.

### Atlantis (DS920+) - 192.168.0.154
Media and heavy storage, moving to new location.

**Stacks**: immich-stack, plex-stack, arr-stack, jitsi, and more.

## Reverse Proxy

All services use **Synology Reverse Proxy** with **Cloudflare** in front:
- DNS: Cloudflare (proxied)
- SSL: Cloudflare Origin Certificate (*.vish.gg)
- Reverse Proxy: Synology DSM

## Cloudflare Configuration

- Zone: vish.gg
- SSL Mode: Full (Strict) with Origin Certificate
- DNS: Proxied (orange cloud) for all public services