Service directory
Use this directory to move between a service’s three guides. Use explains the workflow, Architecture locates its components and data, and Operate explains deployment and recovery. The sidebar uses these same groups.
These entries describe service definitions in Git. They do not report current deployment health or automatically grant access. Start with accounts and access for sign-in.
Files, notes, and communication
| Service | Purpose | Guides | Official manual |
|---|---|---|---|
| Nextcloud | Files, calendars, collaborative editing, and Talk. | Use · Architecture · Operate Read the manual | |
| Obsidian LiveSync | CouchDB synchronization for local Obsidian vaults. | Use · Architecture · Operate Read the manual | |
| Stalwart Mail | Mailboxes, submission, delivery, and mail clients. | Use · Architecture · Operate Read the manual |
Work and automation
| Service | Purpose | Guides | Official manual |
|---|---|---|---|
| Forgejo | Git repositories, code review, and issue tracking. | Use · Architecture · Operate Read the manual | |
| SuiteCRM | Customer records, sales work, and CRM activities. | Use · Architecture · Operate Read the manual | |
| Zammad | Support tickets and customer conversations. | Use · Architecture · Operate Read the manual | |
| BentoPDF | PDF tools in the browser. | Use · Architecture · Operate Read the manual |
Identity, access, and protection
| Service | Purpose | Guides | Official manual |
|---|---|---|---|
| Authentik | Identity, application access, and SSO. | Use · Architecture · Operate Read the manual | |
| Vaultwarden | Password vaults through Bitwarden-compatible clients. | Use · Architecture · Operate Read the manual | |
| Headscale and Headplane | Private device connectivity and its administration UI. | Use · Architecture · Operate Read the manual | |
| RustDesk | Remote desktop rendezvous and relays. | Use · Architecture · Operate Read the manual | |
| CrowdSec | Traffic decisions, log processing, and application protection. | Use · Architecture · Operate Read the manual |
AI services
| Service | Purpose | Guides | Official manual |
|---|---|---|---|
| Open WebUI | Chat and knowledge workflows using configured models. | Use · Architecture · Operate Read the manual | |
| LiteLLM | Shared model API, virtual keys, and provider discovery. | Use · Architecture · Operate Read the manual |
Delivery, monitoring, and backup
| Service | Purpose | Guides | Official manual |
|---|---|---|---|
| Renovate | Hourly dependency-update pull requests through the antblu-renovate GitHub App. | Use · Architecture · Operate | Read the manual |
| Argo CD | Git reconciliation and application delivery. | Use · Architecture · Operate Read the manual | |
| Rancher | Kubernetes administration UI. | Use · Architecture · Operate Read the manual | |
| Grafana, metrics, and logs | Dashboards, metrics history, and log queries. | Use · Architecture · Operate Read the manual | |
| Uptime Kuma | Endpoint checks and configured status pages. | Use · Architecture · Operate Read the manual | |
| UrBackup | Client file and image backups. | Use · Architecture · Operate Read the manual | |
| Documentation site | This handbook and its container publishing pipeline. | Use · Architecture · Operate Read the manual |
Cluster foundations
| Service | Purpose | Guides | Official manual |
|---|---|---|---|
| Traefik | HTTP routing, TLS entrypoints, and middleware. | Use · Architecture · Operate Read the manual | |
| MetalLB | Local LoadBalancer address allocation and advertisement. | Use · Architecture · Operate Read the manual | |
| cert-manager | Certificate issuance and renewal. | Use · Architecture · Operate Read the manual | |
| Sealed Secrets | Decrypt committed credentials into Kubernetes Secrets. | Use · Architecture · Operate Read the manual | |
| OpenEBS | Node-local persistent volumes. | Use · Architecture · Operate Read the manual | |
| NFS CSI driver | Mount external NFS exports from Kubernetes. | Use · Architecture · Operate Read the manual | |
| CloudNativePG | PostgreSQL cluster lifecycle. | Use · Architecture · Operate Read the manual | |
| MariaDB operator | MariaDB cluster lifecycle. | Use · Architecture · Operate Read the manual | |
| Metrics Server | Current Kubernetes resource measurements. | Use · Architecture · Operate Read the manual |
Services outside the application tree
Debian VMs run llama-swap and Speaches on RTX, plus Talk recording, Immich Machine Learning, Jellyfin, and Docling on Arc. These workloads follow OpenTofu and Ansible, not an Argo CD Application. The Immich server itself is managed elsewhere.
Azure and the home proxies provide another layer outside Kubernetes. NFS and Garage are external data dependencies; their clients in this repository do not define the storage server’s lifecycle.
The apps/homepage/ directory is empty in the current checkout and does not declare an Application. It is not listed as an active service definition. A directory name alone is not evidence that a service is deployed.