Services
Self-hosted service documentation lives here. Service pages should describe the operating model: ownership, boundaries, access paths, checks, and failure modes.
Implementation details stay in conf/services/ and host imports stay under
conf/machines/.
Shared Baseline
| Service area | Baseline |
|---|---|
| Tailscale | Enabled on every NixOS host with firewall support. |
| OpenSSH | Enabled on every NixOS host. |
| PostgreSQL | Local development database baseline. |
| Redis | Local development cache baseline. |
| Docker | Local container runtime baseline. |
Service Pages
| Page | Scope |
|---|---|
| Tailscale | Private network, MagicDNS, Serve, and tailnet policy. |
| Git Forge | Forgejo on Baxcalibur. |
| Kavita | Comics, manga, ebooks, and PDFs on Baxcalibur. |
| Tangled Knot | Tangled knot and SSH guard on Baxcalibur. |