The primary relational database — backs Forgejo and anything else that wants real transactions.

Document store for schema-flexible workloads that don't fit neatly into tables.

Full-text search and analytics engine, sitting under anything that needs fast querying at scale.

S3-compatible object storage for files and blobs, self-hosted instead of renting a bucket.

Self-hosted Git service — repos, issues, and pull requests, GitHub-shaped but under my own roof.

Executes Forgejo Actions jobs in an isolated Docker-in-Docker sandbox.

Web UI for managing every container and stack on the box without living in the terminal.

A small monitoring hub I built — collects heartbeats from Watchpost agents across hosts.

Browser-based file manager for poking around the filesystem from anywhere on the tailnet.

The single pane of glass — dashboards over both hosts' logs and metrics, tailnet-only.

Log store — every container on both machines ships its logs here automatically.

Tiny time-series database holding CPU, RAM, and disk history for the fleet.

Watches every service and powers the public status page — outages ping the Hermes agent.

Chat interface for locally-run LLMs — the front door to whatever model is on call that day.

A grab-bag of small dev utilities — encoders, generators, converters — in one page.

A personal-use format/conversion utility, tucked away for one-off jobs.

The front door — reverse proxy and automatic TLS for every public service on this box.

This site. Next.js, rebuilt and redeployed by the pipeline below every time it changes.

A self-hosted Matrix homeserver — private chat, no third party in the middle.

A custom Matrix bot wired to a hosted LLM, with tool-calling for weather, math, and web search.

VS Code in the browser — a full dev environment reachable from any machine, no local setup.

The edge half of Sentinel — reports this host's health back to the homeserver over the tailnet.

Log shipper — tails every container here and streams it to the homeserver's Loki over the tailnet.