Services¶
Compose stacks and supporting tools live under services/<name>/. Every directory
has an operator README linked below. The Pages guide is the public entry point;
the source README is in the private GitHub repository and requires access.
Lifecycle and deployment are distinct: a Compose definition does not prove a
service is running. Wazuh is retired, the AI evaluation harness is a local tool,
and _template is scaffolding. The evidence bridge is optional; the incident
adapter's committed EVIDENCE_BRIDGE_URL is empty.
| Component | Pages guide | Operator manual | Purpose / status |
|---|---|---|---|
| _template | Guide | README | New-service scaffold; not a deployment |
| adguard | Guide | README | DNS filtering and recursion |
| ara | Guide | README | Ansible run history |
| authentik-outpost | Guide | README | Infra forward authentication |
| firefly | Guide | README | Personal finance |
| gh-pr-dashboard | Guide | README | GitHub pull-request dashboard |
| homepage | Guide | README | Inventory-generated directory |
| komodo | Guide | README | Compose reconciliation |
| litellm | Guide | README | LLM gateway |
| monitoring | Guide | README | Metrics, logs, dashboards and alerts |
| monitoring-canary | Guide | README | Stateless remediation test target |
| nocturne-gallery | Guide | README | Media catalog; incremental sync activation gated |
| oneuptime | Guide | README | Incident platform |
| oneuptime-ai-eval | Guide | README | Local model qualification tool |
| oneuptime-evidence-bridge | Guide | README | Optional read-only evidence collector; enablement gated |
| oneuptime-incident-adapter | Guide | README | Durable alert correlation |
| oneuptime-remediation-broker | Guide | README | Private policy broker; mutation has separate gates |
| orders | Guide | README | Gmail order dashboard and Telegram bot |
| paperless | Guide | README | Document archive and AI companion |
| paperless-stirling-bridge | Guide | README | Guarded document replacement |
| phoenix | Guide | README | LLM trace UI on dedicated LXC |
| reddit-explorer | Guide | README | Trusted-network media review and archive |
| rexit | Guide | README | Scheduled Reddit export and Archive Studio |
| sonarqube | Guide | README | Code quality on dedicated LXC |
| stirling-pdf | Guide | README | PDF processing |
| traefik | Guide | README | Infra HTTPS ingress |
| wazuh | Guide | README | Retired; do not redeploy |
See the project map for roles, workflow entry points and the documentation completeness standard. Service inventory currently covers a subset of these directories; legacy stacks also appear through host inventory.