docs(public): populate phase 2 content

Full public/ directory — services, network, decisions, security,
inventory, rebuild sequence, and per-LXC setup guides. Sourced from
wiki. No secrets or WAN IPs included.
This commit is contained in:
lerko96
2026-04-17 21:23:59 -04:00
parent b3104df54d
commit cd454b2926
17 changed files with 2053 additions and 20 deletions
+56 -2
View File
@@ -1,3 +1,57 @@
# INVENTORY
# Inventory
_stub_
Hardware inventory — make/model, role, specs. See [README](../README.md) for how everything fits together.
## Active Hardware
| Device | Role | Model | Notes |
|--------|------|-------|-------|
| Proxmox host | Hypervisor | [make/model TBD] | Hosts all LXCs + VMs |
| pfSense router | Firewall / VPN / DHCP / routing | Intel N100 mini PC | ~6W idle, handles 23Gbps routing + 600Mbps WireGuard |
| Managed switch | VLAN switching | TP-Link Omada [model TBD] | All port VLANs managed via Omada Controller |
| Access point (Guest) | Guest + IoT WiFi | TP-Link Omada [model TBD] | Auto-adopted by Omada Controller |
| AT&T Gateway | ISP ONT + IP Passthrough | BGW320-500 | ISP-owned; WiFi disabled; IP Passthrough → pfSense WAN |
## pfSense Box Detail
| Property | Value |
|----------|-------|
| CPU | Intel N100 (4-core, 3.4GHz) |
| Idle power | ~6W |
| Routing throughput | 23Gbps |
| WireGuard throughput | ~600Mbps |
| pfSense version | [TBD] |
## Proxmox Host Detail
| Property | Value |
|----------|-------|
| CPU | [TBD] |
| RAM | [TBD] |
| Boot drive | [TBD] |
| Storage | [TBD] |
| Proxmox version | [TBD] |
| PBS | [TBD — confirm if PBS runs on same host or separate] |
## Licensing / Subscriptions
| Service | Type | Notes |
|---------|------|-------|
| Cloudflare | Free | lerkolabs.com DNS + DNS-01 challenge |
| Let's Encrypt | Free | Via Caddy — auto-renewal |
| AT&T Fiber | Monthly | 1Gbps symmetric |
## Backup (PBS)
All LXCs and VMs are backed up via Proxmox Backup Server. Schedules and retention TBD — fill in when confirmed.
| Container | Schedule | Retention |
|-----------|----------|-----------|
| pihole | TBD | TBD |
| auth | TBD | TBD |
| infra | TBD | TBD |
| monitor | TBD | TBD |
| apps | TBD | TBD |
| vault | TBD | TBD |
| servarr VM | TBD | TBD |
| haos VM | TBD | TBD |