Homepage
The front door. A single dashboard linking every other service in the lab.
Services
What's actually running.
Eighteen containers on a single Docker host, plus the platform services
that keep the network working. Filter by category or search — press
/ to jump to the box.
The stack
Every service, grouped
Nginx Proxy Manager
Reverse proxy and certificate handling, so services get clean names instead of ports.
Portainer
Web UI for the Docker host — containers, images, volumes, and logs in one place.
Dockhand
Keeps an eye on container images and flags the ones with updates waiting.
Uptime Kuma
Watches every service and shouts when something stops answering.
Grafana
Dashboards over the metrics — the pretty end of knowing what the lab is doing.
Prometheus
Scrapes and stores the metrics that Grafana draws.
Komga
Comic and manga library, with a reader that works properly on a tablet.
Suwayomi
Manga source manager and reader, feeding the library.
Stash
Organises and tags a media collection so it's actually searchable.
Karakeep
Bookmark and read-later archive that keeps a copy rather than just the link.
Stirling-PDF
Merge, split, sign, and convert PDFs without uploading them to a stranger's server.
Firefly III
Personal finance tracking — accounts, budgets, and where the money actually went.
Mealie
Recipe manager and meal planner, with a shopping list that builds itself.
Ryot
Tracks what's been read, watched, and played in one timeline.
Vaultwarden
Self-hosted password manager, Bitwarden-compatible so the normal apps work with it.
Qdrant
Vector database — the storage layer behind anything doing semantic search.
Obbo Live
A personal project running alongside the rest of the stack.
Pi-hole
DNS for the entire network, with ad and tracker blocking applied everywhere by default.
Home Assistant
Runs the smart home side — automations, sensors, and the devices that talk to them.
Tailscale
Mesh VPN back into the lab, so nothing needs a port opening on the router.
Twingate
Zero-trust remote access as a second route in, with per-resource permissions.
Jellyfin
Media server, reading from the NAS shares rather than local disk.
AMP
Game server hosting and management, kept in its own guest.
Joplin Server
Sync target for notes, so they're not living in someone else's cloud.
InvestHome
Finance tracking in its own container, separate from the main stack.
Odysseus
The lone guest on the second node.
Nothing matches that. Try a different search or clear the filter.
Addresses aren't listed here on purpose.
Which services exist is harmless. Where they live is not — internal IPs
and ports stay behind the login.