Infrastructure¶
Find network designs, compute and storage plans, platform architecture, and operator tooling. For step-by-step changes or incident response, use Runbooks.
Captures and audits below are dated evidence, not a live view of the lab. Check their dates and verify the relevant state before acting. For the broader historical record, see History.
Network¶
Use these references to understand connectivity, place devices, or plan a firewall change.
- Network architecture — intended VLANs, WiFi, DNS, and Tailscale overlay
- Network diagram — diagram generated from inventory
- Firewall policy — inter-VLAN default-deny design (SEC-002)
- Device-to-VLAN mapping — device placement reference
- AdGuard Home — authoritative DNS and the Tailscale same-subnet caveat
Dated network evidence¶
- Network capture (2026-08-09) — as-built topology and DNS posture at capture time
- Firewall capture (2026-08-09) — ZBF zones and policy matrix at capture time
- Network observations (2026-06-03) — pre-cutover anomalies
Compute and storage¶
Review recorded guest decisions and storage risks before planning capacity changes.
- Compute disposition review — owner keep/consolidate/retire decisions from 2026-06-23, reconciled 2026-06-25
- Prox storage remediation proposal — partially executed owner decisions dated 2026-06-24 for VMID 114, saltierpoop, and Whrrr upstream storage
- Proxmox consolidation — execution plan recorded complete on 2026-06-25; destroy queue empty
Dated compute evidence¶
- Compute scan archive — Proxmox/VMM scans and guest JSON artifacts; includes the 2026-08-09 Prox scan and June 2026 captures
- Prox storage snapshot (2026-06-24) — point-in-time disk and NAS audit
- Lab audit (2026-05-11) — Phase 0.5 entity dispositions, reconciled 2026-06-25
Platform¶
Understand the intended operating model before changing observability or host maintenance.
- Operations and incident platform — target observability and response architecture
- Operational alert schema — labels, annotations, fingerprints, and correlation
- Saltbox monitoring migration — observability consolidation policy
- Coordinated OS patching — Phase 8 push-mode updates from infra-services
Dated deployment evidence¶
- Komodo capability and efficiency audit (2026-10-25) — live v2.3.4 evidence, native deployment opportunities, ownership boundaries and acceptance gates
Dated CI evidence¶
- CI hosted-runner audit (2026-08-09) — org-wide GitHub-hosted runner usage compared with the self-hosted pattern; audit findings, not proof of migration completion
Decisions¶
Read the rationale and boundaries behind the platform choices.
- ADR-001: Two independent Traefik instances — reverse proxy decision
- ADR-002: Authentik universal SSO — Authentik on all hosts; Plex exempt
- ADR-003: OneUptime incident state — incident ownership and platform decision
Operator tooling¶
Set up or maintain the tools used to operate the lab.
- Operator shell inventory — zsh/p10k/Atuin golden profile baseline
- Operator Codex — Codex CLI and
~/.agents/skillsfleet management - Operator devtools — uv / mise / fvm and Tier-1 CLIs with central pins