Gread The Docs
Notes Projects Docs About
Notes Projects Docs About
All docs

architecture

  • Overview
  • Network
  • Observability

runbooks

  • Daily Operations
  • Authentik
  • CrowdSec
  • DSM Update
  • Immich
  • Loki
  • Pi-hole
  • Traefik
  • VPS
  • WireGuard
  • Useful Commands
  • Sites

security

  • Security
  • Secrets

recovery

  • Backups
  • Rebuild

Docs

SSO-protected

Homelab documentation. Architecture, runbooks, security, and recovery procedures.

architecture

Overview

Hardware, services, and architecture at a glance.

Network

DNS, routing, and external access configuration.

Observability

Prometheus, Grafana, Loki, and Promtail configuration.

runbooks

Daily Operations

Common deployment and update workflows.

Authentik

SSO management, restart, OIDC, upgrades.

CrowdSec

IP unblock, decision listing, alerts.

DSM Update

Post-update nginx port fixing.

Immich

Photo server maintenance.

Loki

Log querying and retention.

Pi-hole

DNS operations and cache management.

Traefik

Reverse proxy debugging, certificates, routing.

VPS

WireGuard traffic control, nginx proxy operations.

WireGuard

Tunnel status and troubleshooting.

Useful Commands

General Docker and NAS commands.

Sites

Static site hosting.

security

Security

Firewall rules, authentication, and CrowdSec configuration.

Secrets

Credential tiers, threat model, and rotation procedures.

recovery

Backups

Backup strategy across Home Assistant, VM snapshots, and Hyper Backup.

Rebuild

Full disaster recovery procedure.

© 2026 Gary Read
LinkedIn GitHub