Canonical network topology, machine inventory, services, and infrastructure change log for all homelab nodes
- Shell 100%
f08cdf4e07
Codex OAuth → OpenAI-compatible API proxy via codex exec backend. Models: gpt-5.5, 5.4, 5.4-mini, 5.3-codex, 5.2. Updated services, docker-architecture, and backup scope. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .claude/data/sessions | ||
| inventory | ||
| logs | ||
| machines | ||
| scripts | ||
| backups.md | ||
| cc-gateway.md | ||
| changelog.md | ||
| docker-architecture.md | ||
| env-templates.md | ||
| firewall-rules.md | ||
| ops-runbook.md | ||
| PROD_AUDIT_REPORT.md | ||
| README.md | ||
| scheduled-tasks.md | ||
| security-template.md | ||
| security.md | ||
| services.md | ||
| ssh-config.md | ||
| topology.md | ||
| vpn.md | ||
Homelab Network Admin Log
Canonical source of truth for network topology, machine inventory, service maps, SSH config, and infrastructure change history across the homelab.
Purpose: Every Claude Code instance (k11, batkave, agent-sandbox) should reference this repo for accurate, current network state.
Structure
| File | Contents |
|---|---|
topology.md |
Network diagram, IP assignments, Tailscale mesh, Headscale |
machines/ |
Per-machine specs, roles, access methods |
services.md |
All listening ports and services by machine |
ssh-config.md |
SSH host aliases and connection methods |
vpn.md |
Mullvad, Tailscale/Headscale config and coexistence fixes |
docker-architecture.md |
Container inventory, compose stacks, networks |
scheduled-tasks.md |
Cron jobs, init scripts, systemd services |
firewall-rules.md |
UFW, iptables, nftables rules per machine |
env-templates.md |
Environment variable templates (secrets redacted) |
security.md |
Supply chain hardening, package manager lockdown |
security-template.md |
Reusable 15-layer production security template |
ops-runbook.md |
Step-by-step recovery procedures (container restart, DNS, backups, credentials) |
changelog.md |
Chronological infrastructure changes |
Disaster Recovery
This repo contains everything needed to restore the homelab from scratch:
- Network topology — IPs, VPN mesh, DNS
- Docker stacks — Compose file locations, container configs
- Services — systemd/init scripts, cron jobs
- Firewall rules — Per-machine firewall configurations
- Environment templates — Required env vars (populate secrets from Vaultwarden)
Usage from Claude Code
Add this to your project or global CLAUDE.md:
Network reference: http://192.168.183.110:3000/pook/network-admin-log
Clone: ssh://git@192.168.183.110:2222/pook/network-admin-log.git
Updating
When making infrastructure changes, update the relevant file and add an entry to changelog.md. Commit with a descriptive message.