From 80f02197162abddba25f721e877b143431d6ce0d Mon Sep 17 00:00:00 2001 From: Julien Lutran Date: Fri, 28 Aug 2026 15:56:44 +0200 Subject: [PATCH] Refactor README.md --- README.md | 34 ++++++++++++---------------------- 1 file changed, 12 insertions(+), 22 deletions(-) diff --git a/README.md b/README.md index 26fecca..912adab 100644 --- a/README.md +++ b/README.md @@ -1,37 +1,29 @@ -# perso +# Personal infrastructure notes -Personal infrastructure notes. - -**Start here**: [backup-strategy.md](backup-strategy.md) — what is +**Start here**: +- [backup-strategy.md](backup-strategy.md) — what is backed up, by which tool, on what schedule, and how to restore. -[new-container.md](new-container.md) — conventions for adding a +- [new-container.md](new-container.md) — conventions for adding a service to ks4 (and getting it backed up automatically). +**Tech notes** - [`nuc/`](nuc/) — home lab on `nuc` (see below) - [`ks4/`](ks4/) — prod server `ks4` at OVH (see below) -- [`ks2/`](ks2/) — legacy backup server being decommissioned - (rental ends Sep 30, 2026): [plan](ks2/plan.md) -- [`archer-c7/`](archer-c7/) — home router (TP-Link Archer C7 v5, - OpenWrt, `192.168.0.2`, WAN = phone USB tether): - [upgrade to 25.12](archer-c7/upgrade-openwrt-25.12.md) +- [`ks2/`](ks2/) — legacy backup server being [decommissioned](ks2/plan.md) +- [`archer-c7/`](archer-c7/) — home router (TP-Link Archer C7 v5 running on OpenWrt) ## Homelab: nuc Incus host on the LAN. -- Host: `nuc` — `192.168.0.3`, Debian 13, Intel Alder Lake-N - (iGPU `i915`, shared by both Jellyfin containers) — +- Debian 13, Intel Alder Lake-N (iGPU `i915`, shared by both Jellyfin containers) — bare-metal reinstall: [nuc/nuc-install.md](nuc/nuc-install.md) -- SSH: `ssh -i id_rsa_claude root@192.168.0.3` (keys at repo root, gitignored) - Instances are bridged onto the LAN (192.168.0.0/24) - USB 4 TB WD Red: ZFS pool `usb4t` — `usb4t/backup` → `/backup` (incus exports, `nuc/` + `ks4/` subdatasets, 1 TB quota) and `usb4t/media` → `/srv/media` (media library, shared into containers via `shift=true` disk devices; works because ZFS ≥ 2.2 supports idmapped mounts) -- NAS: `//192.168.0.10/Shared` (CIFS) — original media source, normally - offline; not mountable into containers (idmapped mounts unsupported - on CIFS) - Backups: all local instances replicated to the USB pool (`/root/scripts/incus-copy.sh -p backup -s nucbackup`; replicas stopped, autostart off) — see @@ -53,8 +45,7 @@ Incus host on the LAN. Incus host at OVH — public-facing self-hosted services. -- Host: `ks4.lutran.fr` — `193.70.35.17`, **SSH on port 2233**, - Debian 13, Xeon D-1521 / 32 GiB, 2× 6 TB (OS on mdraid RAID1, +- Debian 13, Xeon D-1521 / 32 GiB, 2× 6 TB (OS on mdraid RAID1, ZFS pool `data` on `sda5`) — setup & rebuild: [ks4/install.md](ks4/install.md) - SSH: `ssh -i id_rsa_claude -p 2233 julien@193.70.35.17` @@ -75,7 +66,7 @@ Incus host at OVH — public-facing self-hosted services. [ks4/incus-copy.md](ks4/incus-copy.md), [ks4/restic-backup.md](ks4/restic-backup.md)). -## Network flows (nuc <-> ks4) +## Network flows ``` nuc — home LAN 192.168.0.0/24 ks4 — OVH 193.70.35.17 @@ -108,9 +99,8 @@ fixed endpoint; ks4's incus API is never exposed to the internet. ### Conventions -- One markdown file per instance in `nuc/`, containing the full - install script (idempotent-ish, run as root on the host), first-run - configuration, and troubleshooting notes. +- One markdown file per topic in the correct subdir, containing the full + implementation notes, configuration, and troubleshooting notes. - Containers are built from Debian/Ubuntu images and configured exclusively through `incus exec`/`incus config` so the doc is the single source of truth — rebuilding = re-running the script.