auto: docs sync 2026-08-24T12:00:05+00:00

Files changed: engine/.embcache.json engine/changelog.md engine/lint-report.md vault/.obsidian/workspace.json vault/docs/services/services.md vault/docs/software/caddy.md vault/docs/software/dns.md vault/runbooks/expose-service-edge2.md vault/runbooks/expose-service-home.md

vault/docs/services/services.md

@@ -7,10 +7,10 @@ aliases: []
 related:
   - [[caddy]]
   - [[ip-allocation]]
-  - [[lxc-service-migration]]
   - [[meshtastic-headscale-runbook]]
-  - [[expose-service-edge2]]
-updated: 2026-08-14
+  - [[lxc-service-migration]]
+  - [[central]]
+updated: 2026-08-24
 ---
 # Current Services Inventory
 
@@ -38,10 +38,10 @@ updated: 2026-08-14
 | Headscale | edge2 (CT 107) | 100.64.0.38:8084 | https://vpn.echo6.co | Tailscale coordination (OIDC enabled) — fronted by edge2 host [[caddy]] — **migrated from Contabo [[2026-06-19]]** |
 | Headplane | edge2 (CT 107) | 100.64.0.38:3100 | https://vpn.echo6.co/admin | Headscale web UI (OIDC via [[authentik]]) — fronted by edge2 host [[caddy]] — **migrated from Contabo [[2026-06-19]]** |
 | Mailcow | **edge1 CT 101** (10.10.10.2) | 5.189.158.149 | https://mail.echo6.co | Email server (privileged LXC on rebuilt Contabo VPS, updated commit 52a41b4d / SOGo 5.12.8) — **rebuilt in-place [[2026-06-19]]** |
-| MeshWars Preview | utility (CT 113) | 192.168.1.113 / 100.64.0.39:8090 | https://mwpreview.k7zvx.com | Public preview of the unreleased `feat/places` MeshWars branch, running a periodically-refreshed read-only copy of production (CT 119) data; /admin and /api/admin/* return 404 on the public host, admin reachable only over the tailnet |
-| Vaultwarden | edge2 (CT 102) | 100.64.0.33:8086 | https://vault.echo6.co | Password manager 1.37.1 (SSO enabled) — fronted by edge2 host Caddy (reverse_proxy 100.64.0.33:8086) |
+| [[meshwars]] Preview | utility (CT 113) | 192.168.1.113 / 100.64.0.39:8090 | https://mwpreview.k7zvx.com | Public preview of the unreleased `feat/places` MeshWars branch, running a periodically-refreshed read-only copy of production (CT 119) data; /admin and /api/admin/* return 404 on the public host, admin reachable only over the tailnet |
+| Vaultwarden | edge2 (CT 102) | 100.64.0.33:8086 | https://vault.echo6.co | Password manager 1.37.1 (SSO enabled) — fronted by edge2 host [[caddy]] (reverse_proxy 100.64.0.33:8086) |
 | Grav | edge2 (CT 101) | 10.10.10.11:80 | https://idahomesh.com (+www) | Flat-file CMS 2.0.11, no database — Admin2 plugin at /admin; Apache 2.4.67 + mod_php + PHP 8.4.21; migrated from WordPress 2026-07-17 (MariaDB purged from the container); hostname still `wordpress` (unchanged) — fronted by edge2 host Caddy via **internal bridge IP** (reverse_proxy 10.10.10.11:80), unlike other edge2 services which proxy over tailnet |
-| Syncthing | cortex | 100.64.0.14:22000 | Internal (Tailscale) | File sync — ~/.claude/, ~/projects/ (Syncthing on Contabo decommissioned 2026-06-19 with edge1 rebuild) |
+| Syncthing | cortex | 100.64.0.14:22000 | Internal (Tailscale) | File sync — ~/.claude/, ~/projects/ (Syncthing on Contabo decommissioned [[2026-06-19]] with edge1 rebuild) |
 | Proxmox VE | data node | 192.168.1.240:8006 | https://proxmox.echo6.co | Cluster web UI (via Caddy+Tailscale) |
 | Immich | cloud (CT 120) | 192.168.1.182:2283 | https://immich.echo6.co | Photo management (Docker, NFS storage on pi-nas) |
 | Nextcloud | cloud (CT 121) | 192.168.1.183:11000 | https://nextcloud.echo6.co | Cloud storage (AIO Docker, NFS on pi-nas, SSO) |
@@ -59,7 +59,7 @@ updated: 2026-08-14
 | navi-config | data (VM 1130) | 192.168.1.130:8422 | Internal | [[recon]] [[navi]] node config API |
 | navi-contacts | data (VM 1130) | 192.168.1.130:8423 | Internal | [[recon]] [[navi]] contact enrichment API |
 | navi-landclass | data (VM 1130) | 192.168.1.130:8424 | Internal | [[recon]] [[navi]] land classification API |
-| navi-places | data (VM 1130) | 192.168.1.130:8425 | Internal | RECON navi OSM place detail/enrichment |
+| navi-places | data (VM 1130) | 192.168.1.130:8425 | Internal | [[recon]] [[navi]] OSM place detail/enrichment |
 | navi-geo | data (VM 1130) | 192.168.1.130:8426 | Internal | RECON navi geocode/reverse geocode API |
 | navi-admin | data (VM 1130) | 192.168.1.130:8427 | Internal | RECON navi fleet admin-info aggregator |
 | navi-offroute | data (VM 1130) | 192.168.1.130:8428 | Internal | RECON navi off-network router + MVUM API |
@@ -149,7 +149,7 @@ updated: 2026-08-14
   - `img/echo6-logo.png` — Echo6 logo (replaces [[searxng]] logo)
   - `img/favicon.png` — Echo6 favicon
 - Config: `/opt/searxng/searxng-config/settings.yml` (instance_name: "Echo6", dark theme, center_alignment: false)
-- [[searxng]] version: 2026.2.6 (Docker image: searxng/searxng:latest)
+- [[searxng]] version: 2026.2.6 (Docker image: [[searxng]]/searxng:latest)
 
 ### utility - CT 104 (192.168.1.104 / Tailscale: 100.64.0.12)
 - [[central]] data-hub spine (3 systemd units: central-supervisor, central-archive, central-gui)
@@ -202,7 +202,7 @@ updated: 2026-08-14
 - Nextcloud AIO (https://nextcloud.echo6.co)
 - Apache port 11000, AIO management on 8080
 - NFS storage from pi-nas (/mnt/nextcloud)
-- SSO via Authentik OIDC
+- SSO via [[authentik]] OIDC
 
 ### media - VM 105 (192.168.1.160 / Tailscale: 100.64.0.18)
 - ARR media automation stack (Docker)
@@ -293,7 +293,7 @@ updated: 2026-08-14
 - Port: 4403 (default), firmware 2.7.19 (PORTDUINO/native)
 - Role: CLIENT_BASE, position: 42.574, -114.607 (manual)
 - MAC source: eth0 (derived MAC `00:bd:27:78:0c:47`)
-- MeshAI bot (CT 108) connects to this node via TCP `localhost:4403` (Docker network)
+- [[meshai]] bot (CT 108) connects to this node via TCP `localhost:4403` (Docker network)
 - Service: `meshtasticd.service` (single instance, runs as user meshtastic)
 - Config: `/etc/meshtasticd/config.yaml` + `/etc/meshtasticd/config.d/ZebraHat_2W.yaml`
 - User: zvx, password auth (`sshpass -p '7redditGold' ssh zvx@aida-nebra`)