15 KiB
15 KiB
🚨 EMERGENCY ACCESS GUIDE - "In Case I Die"
🔴 CRITICAL DOCUMENT - STORE SECURELY
This document provides emergency access instructions for family members, trusted friends, or IT professionals who need to access the homelab infrastructure in case of emergency, incapacitation, or death. Keep this document in a secure, accessible location.
📞 IMMEDIATE EMERGENCY CONTACTS
Primary Contacts
- Name: [Your Name]
- Phone: [Your Phone Number]
- Email: [Your Email]
- Location: [Your Address]
Secondary Emergency Contacts
- Family Member: [Name, Phone, Relationship]
- Trusted Friend: [Name, Phone, Technical Level]
- IT Professional: [Name, Phone, Company]
Professional Services
- Data Recovery: DriveSavers 1-800-440-1904 (24/7 emergency)
- Synology Support: 1-425-952-7900 (24/7 critical issues)
- Internet Provider: [ISP Name, Phone, Account Number]
- Electricity Provider: [Utility Company, Phone, Account Number]
🔐 CRITICAL ACCESS INFORMATION
Master Password Manager
Service: Vaultwarden (Self-hosted Bitwarden)
URL: https://pw.vish.gg
Backup URL: http://192.168.1.100:4080
Master Account:
- Email: [Your Email Address]
- Master Password: [STORE IN SECURE PHYSICAL LOCATION]
- 2FA Recovery Codes: [STORE IN SECURE PHYSICAL LOCATION]
CRITICAL: This password manager contains ALL passwords for the entire homelab. Without access to this, recovery becomes extremely difficult.
Physical Access
Location: [Your Home Address]
Key Location: [Where physical keys are stored]
Alarm Code: [Home security system code]
Safe Combination: [If applicable]
Network Access
WiFi Network: Vish-Homelab-5G
WiFi Password: [Store in secure location]
Router Admin: http://192.168.1.1
Router Login: admin / [Store password securely]
🏠 HOMELAB INFRASTRUCTURE OVERVIEW
Critical Systems (Priority Order)
- Vaultwarden (Password Manager) - Contains all other passwords
- Atlantis NAS (Primary Storage) - All data and services
- Network Equipment (Router/Switch) - Internet and connectivity
- Monitoring Systems (Grafana) - System health visibility
Physical Hardware Locations
Living Room / Office:
├── Atlantis (DS1823xs+) - Main NAS server
├── TP-Link Router (Archer BE800) - Internet connection
├── 10GbE Switch (TL-SX1008) - High-speed network
└── UPS System - Power backup
Bedroom / Secondary Location:
├── Concord NUC - Home automation hub
├── Raspberry Pi Cluster - Edge computing
└── NVIDIA Shield - Travel/backup device
Basement / Utility Room:
├── Network Equipment Rack
├── Cable Modem
└── Main Electrical Panel
🚨 EMERGENCY PROCEDURES
STEP 1: Assess the Situation (First 30 minutes)
If Systems Are Running
# Check if you can access the password manager
1. Go to https://pw.vish.gg
2. Try to log in with master credentials
3. If successful, you have access to all passwords
4. If not, try backup URL: http://192.168.1.100:4080
If Systems Are Down
# Check physical systems
1. Verify power to all devices (look for LED lights)
2. Check internet connection (try browsing on phone/laptop)
3. Check router status lights (should be solid, not blinking)
4. Check NAS status (should have solid blue power light)
STEP 2: Gain Network Access (Next 30 minutes)
Connect to Home Network
# WiFi Connection
Network: Vish-Homelab-5G
Password: "REDACTED_PASSWORD" secure storage]
# Wired Connection (More Reliable)
1. Connect ethernet cable to router LAN port
2. Should get IP address automatically (192.168.1.x)
Access Router Admin Panel
# Router Management
URL: http://192.168.1.1
Username: admin
Password: "REDACTED_PASSWORD" secure storage or Vaultwarden]
# Check Status:
- Internet connection status
- Connected devices list
- Port forwarding rules
STEP 3: Access Password Manager (Critical)
Primary Access Method
# External Access (if internet working)
URL: https://pw.vish.gg
Email: [Master account email]
Password: "REDACTED_PASSWORD" password from secure storage]
2FA: [Use recovery codes from secure storage]
Local Access Method
# Direct NAS Access (if external access fails)
URL: http://192.168.1.100:4080
Email: [Same master account]
Password: "REDACTED_PASSWORD" master password]
# If NAS is accessible but service is down:
1. SSH to NAS: ssh admin@192.168.1.100
2. Password: "REDACTED_PASSWORD" secure storage]
3. Restart Vaultwarden: docker-compose -f vaultwarden.yaml restart
Emergency Offline Access
# If Vaultwarden is completely inaccessible:
1. Check for printed password backup in safe/secure location
2. Look for encrypted password file on desktop/laptop
3. Check for KeePass backup file (.kdbx)
4. Contact professional data recovery service
💾 DATA RECOVERY PRIORITIES
Critical Data Locations
Tier 1: Absolutely Critical
# Password Database
Location: /volume2/metadata/docker/vaultwarden/
Backup: Multiple encrypted backups in cloud storage
Contains: ALL system passwords and access credentials
# Personal Documents
Location: /volume1/documents/
Backup: Synced to secondary NAS and cloud
Contains: Important personal and financial documents
# Docker Configurations
Location: /volume1/docker/ and /volume2/metadata/docker/
Backup: Daily automated backups
Contains: All service configurations and data
Tier 2: Important
# Media Library
Location: /volume1/data/media/
Size: 100+ TB of movies, TV shows, music, photos
Backup: Partial backup of irreplaceable content
# Development Projects
Location: /volume1/development/
Backup: Git repositories with remote backups
Contains: Code projects and development work
Tier 3: Replaceable
# Downloaded Content
Location: /volume1/downloads/
Note: Can be re-downloaded if needed
# Cache and Temporary Files
Location: Various /tmp and cache directories
Note: Can be regenerated
Backup Locations
# Local Backups
Primary: /volume2/backups/ (on Atlantis)
Secondary: Calypso NAS (if available)
External: USB drives in safe/secure location
# Cloud Backups
Service: [Your cloud backup service]
Account: [Account details in Vaultwarden]
Encryption: All backups are encrypted
# Offsite Backups
Location: [Friend/family member with backup drive]
Contact: [Name and phone number]
🔧 SYSTEM RECOVERY PROCEDURES
Password Manager Recovery
If Vaultwarden Database is Corrupted
# Restore from backup
1. SSH to Atlantis: ssh admin@192.168.1.100
2. Stop Vaultwarden: docker-compose -f vaultwarden.yaml down
3. Restore database backup:
cd /volume2/metadata/docker/vaultwarden/
tar -xzf /volume2/backups/vaultwarden-backup-[date].tar.gz
4. Start Vaultwarden: docker-compose -f vaultwarden.yaml up -d
5. Test access: https://pw.vish.gg
If Entire NAS is Down
# Professional recovery may be needed
1. Contact DriveSavers: 1-800-440-1904
2. Explain: "Synology NAS with RAID array failure"
3. Mention: "Critical encrypted password database"
4. Cost: $500-$5000+ depending on damage
5. Success rate: 85-95% for hardware failures
Complete System Recovery
If Everything is Down
# Follow the Complete Rebuild Guide
Location: docs/getting-started/complete-rebuild-guide.md
Timeline: 7-8 days for complete rebuild
Requirements: All hardware must be functional
# Recovery order:
1. Network infrastructure (router, switch)
2. Primary NAS (Atlantis)
3. Password manager (Vaultwarden)
4. Critical services (Plex, monitoring)
5. Secondary services
📱 REMOTE ACCESS OPTIONS
VPN Access (If Available)
Tailscale Mesh VPN
# Install Tailscale on your device
1. Download from: https://tailscale.com/download
2. Sign in with account: [Account details in Vaultwarden]
3. Connect to homelab network
4. Access services via Tailscale IPs:
- Atlantis: 100.83.230.112
- Vaultwarden: 100.83.230.112:4080
- Grafana: 100.83.230.112:7099
WireGuard VPN (Backup)
# WireGuard configuration files
Location: /volume1/docker/wireguard/
Mobile apps: Available for iOS/Android
Desktop: Available for Windows/Mac/Linux
External Domain Access
# If port forwarding is working
Vaultwarden: https://pw.vish.gg
Main services: https://vishinator.synology.me
# Check port forwarding in router:
- Port 443 → 192.168.1.100:8766 (HTTPS)
- Port 80 → 192.168.1.100:8341 (HTTP)
- Port 51820 → 192.168.1.100:51820 (WireGuard)
🏥 PROFESSIONAL HELP
When to Call Professionals
Immediate Professional Help Needed
- Physical damage to equipment (fire, flood, theft)
- Multiple drive failures in RAID array
- Encrypted data with lost passwords
- Network completely inaccessible
- Suspicious security incidents
Data Recovery Services
# DriveSavers (Recommended)
Phone: 1-800-440-1904
Website: https://www.drivesavers.com
Specialties: RAID arrays, NAS systems, encrypted drives
Cost: $500-$5000+
Success Rate: 85-95%
# Ontrack Data Recovery
Phone: 1-800-872-2599
Website: https://www.ontrack.com
Specialties: Synology NAS, enterprise storage
# Secure Data Recovery
Phone: 1-800-388-1266
Website: https://www.securedatarecovery.com
Specialties: Water damage, physical damage
IT Consulting Services
# Local IT Professionals
[Add local contacts who understand homelab setups]
# Remote IT Support
[Add contacts for remote assistance services]
# Synology Certified Partners
[Find local Synology partners for professional setup]
💰 FINANCIAL INFORMATION
Service Accounts and Subscriptions
# All account details stored in Vaultwarden under "Homelab Services"
# Critical Subscriptions:
- Internet Service: [ISP, Account #, Monthly Cost]
- Domain Registration: [Registrar, Renewal Date]
- Cloud Backup: [Service, Account, Monthly Cost]
- Plex Pass: [Account, Renewal Date]
- Tailscale: [Account, Plan Type]
# Hardware Warranties:
- Synology NAS: [Purchase Date, Warranty End]
- Hard Drives: [Purchase Dates, 5-year warranties]
- Network Equipment: [Purchase Dates, Warranty Info]
Insurance Information
# Homeowner's/Renter's Insurance
Policy: [Policy Number]
Agent: [Name, Phone]
Coverage: [Electronics coverage amount]
# Separate Electronics Insurance (if applicable)
Policy: [Policy Number]
Coverage: [Specific equipment covered]
📋 EMERGENCY CHECKLIST
Immediate Response (First Hour)
☐ Assess physical safety and security
☐ Check power to all equipment
☐ Verify internet connectivity
☐ Access home network (WiFi or ethernet)
☐ Attempt to access Vaultwarden password manager
☐ Document current system status
☐ Contact emergency contacts if needed
System Assessment (Next 2 Hours)
☐ Test access to primary NAS (Atlantis)
☐ Check RAID array status
☐ Verify backup systems are functional
☐ Test VPN access (Tailscale/WireGuard)
☐ Check monitoring systems (Grafana)
☐ Document any failures or issues
☐ Prioritize recovery efforts
Recovery Planning (Next 4 Hours)
☐ Determine scope of failure/damage
☐ Identify critical data that needs immediate recovery
☐ Contact professional services if needed
☐ Gather necessary hardware/software for recovery
☐ Create recovery timeline and priorities
☐ Begin systematic recovery process
📞 EMERGENCY CONTACT TEMPLATE
For Family Members or Friends:
"Hi, this is [Your Name]'s emergency contact. I need help accessing their computer systems. They have a home server setup that contains important documents and photos. Can you help me or recommend someone who can? The systems appear to be [describe status]. I have some passwords and access information."
For IT Professionals:
"I need help recovering a homelab setup. It's a Synology DS1823xs+ NAS with RAID array, running Docker containers including Plex, Vaultwarden password manager, and monitoring stack. The owner has comprehensive documentation at /volume1/homelab/docs/. Current issue: [describe problem]. I have access to the password manager and network."
For Data Recovery Services:
"I need to recover data from a Synology DS1823xs+ NAS with 8x 16TB Seagate IronWolf Pro drives in RAID configuration. The system contains critical encrypted password database and personal documents. The drives may be [describe condition]. How quickly can you assess the situation and what are the costs?"
🔒 SECURITY CONSIDERATIONS
Protecting This Document
- Physical Copy: Store in fireproof safe or safety deposit box
- Digital Copy: Encrypt and store in multiple secure locations
- Access Control: Only share with absolutely trusted individuals
- Regular Updates: Update whenever passwords or systems change
After Emergency Access
# Security steps after emergency access:
1. Change all critical passwords immediately
2. Review access logs for any suspicious activity
3. Update 2FA settings and recovery codes
4. Audit all system access and permissions
5. Update this emergency guide with any changes
Legal Considerations
- Digital Estate Planning: Include homelab in will/estate planning
- Power of Attorney: Ensure digital access is covered
- Family Education: Basic training for family members
- Professional Contacts: Maintain relationships with IT professionals
📚 ADDITIONAL RESOURCES
Documentation Locations
# Primary Documentation
Location: /volume1/homelab/docs/
Key Files:
- complete-rebuild-guide.md (Full system rebuild)
- hardware-inventory.md (All hardware details)
- synology-disaster-recovery.md (NAS-specific recovery)
- DISASTER_RECOVERY_IMPROVEMENTS.md (Recent updates)
# Backup Documentation
Location: /volume2/backups/documentation/
Cloud Backup: [Your cloud storage location]
Learning Resources
# Synology Knowledge Base
URL: https://kb.synology.com/
Search: "Data recovery", "RAID repair", "DSM recovery"
# Docker Documentation
URL: https://docs.docker.com/
Focus: Container recovery and data volumes
# Homelab Communities
Reddit: r/homelab, r/synology
Discord: Homelab communities
Forums: Synology Community Forum
⚠️ FINAL WARNINGS
DO NOT
- Never attempt to repair physical drive damage yourself
- Never run RAID rebuild on multiple failed drives without professional help
- Never delete or format drives without understanding the consequences
- Never share this document or passwords with untrusted individuals
ALWAYS
- Always contact professionals for physical hardware damage
- Always make additional backups before attempting any recovery
- Always document what you're doing during recovery
- Always prioritize data safety over speed of recovery
🚨 REMEMBER: When in doubt, STOP and call a professional. Data recovery is often possible, but wrong actions can make recovery impossible.
📞 24/7 Emergency Data Recovery: DriveSavers 1-800-440-1904
💾 This document last updated: December 9, 2024
🔄 Next review date: [Set quarterly review schedule]