# Host Network & Port Registry — Family Home Lab

## 1. Multi-Machine Network Topology

| Host Alias | IP Address | Machine Purpose & Role |
| :--- | :--- | :--- |
| **`.13`** (`nixos-desktop`) | `192.168.20.13` | **Primary Application Host**: Docker containers, Webtop applications, DSH instances, AI models, PostgreSQL, Garage S3. |
| **`.35`** (`nixos-server`) | `192.168.20.35` | **Edge & Infrastructure Host**: Caddy reverse proxy, Gitea (`:3001`), Outline Wiki (`:3000`), Vikunja Tasks (`:3456`). |
| **`.27`** | `192.168.20.27` | **Development Workstation**: Local coding, testing, git pushes. |
| **`.51`** | `192.168.20.51` | **Secondary Node**: Configured via Gitea assets. |

---

## 2. Port Registry on Primary Host (`.13`)

### Core Console Stack
| Port | Service Name | Protocol / Interface | Access / Description |
| :--- | :--- | :--- | :--- |
| **8500** | Portal (`family-home-lab-portal-1`) | HTTP (FastAPI) | Main family dashboard (`console.lab...`). |
| **8443** | `service-controller` | HTTP (FastAPI + `X-Controller-Token`) | Host-side systemd user unit on `.13` for container/service toggles. |
| **3900** | Garage S3 API | S3 Protocol | S3 bucket storage endpoint. |
| **3902** | Garage Admin UI | HTTP | Object storage administration interface. |
| **5432** | PostgreSQL (`fhl`) | PostgreSQL | Dedicated container database (`pgvector`). |
| **6379** | Redis | Redis | Cache and broker backend. |
| **5672 / 15672** | RabbitMQ | AMQP / Management | Task queue broker. |

### Per-User DeepSeek Harness (DSH) Instances
| Port | Container Name | Target User | Workspace Path |
| :--- | :--- | :--- | :--- |
| **3081** | `dsh-sam` | Sam | `/mnt/data/family-home-lab/dsh/sam` |
| **3082** | `dsh-jo` | Jo | `/mnt/data/family-home-lab/dsh/jo` |
| **3083** | `dsh-harry` | Harry | `/mnt/data/family-home-lab/dsh/harry` |
| **3084** | `dsh-finn` | Finn | `/mnt/data/family-home-lab/dsh/finn` |

### Media & Webtop GUI Applications
| Port | Application | Technology | Notes |
| :--- | :--- | :--- | :--- |
| **8083** | Video Editor (Kdenlive) | LinuxServer Webtop | Togglable (~237 MB idle). |
| **8084** | Audio Editor (Audacity) | LinuxServer Webtop | Togglable (~201 MB idle). |
| **8085** | GIMP | LinuxServer Webtop | Togglable (~233 MB idle). |
| **8086** | LMMS Music Studio | LinuxServer Webtop | Togglable (~798 MB idle; Xvfb clamped to 2560x1440). |
| **8487** | Photopea | Container (`texasbullphotography`) | In-browser Photoshop alternative. |

### AI, Speech & House Automation Infrastructure
| Port | Service | Description |
| :--- | :--- | :--- |
| **20129** | OmniRoute API Gateway | OpenAI-compatible LLM router (`auto/best-chat`). |
| **5000** | `voice_whisper` | Local `faster-whisper` speech-to-text service. |
| **8501** | Jervis Voice Agent | Voice execution engine with Snapcast audio output. |

---

## 3. Port Registry on Edge Host (`.35`)

| Port | Service | Public Domain |
| :--- | :--- | :--- |
| **80 / 443** | Caddy Reverse Proxy | Handles HTTPS certs for `*.lab.audasmedia.com.au`. |
| **3001** | Gitea Web | `gitea.lab.audasmedia.com.au` |
| **2222** | Gitea SSH | Git SSH remote port. |
| **3000** | Outline Wiki | `outline.lab.audasmedia.com.au` |
| **3456** | Vikunja Tasks | `tasks.lab.audasmedia.com.au` |

---

## 4. Reverse Proxy Mapping (`*.lab.audasmedia.com.au`)

| External Domain | Caddy Upstream Destination |
| :--- | :--- |
| `console.lab.audasmedia.com.au` | `http://192.168.20.13:8500` |
| `dsh-sam.lab.audasmedia.com.au` | `http://192.168.20.13:3081` |
| `dsh-jo.lab.audasmedia.com.au` | `http://192.168.20.13:3082` |
| `dsh-harry.lab.audasmedia.com.au` | `http://192.168.20.13:3083` |
| `dsh-finn.lab.audasmedia.com.au` | `http://192.168.20.13:3084` |
| `gitea.lab.audasmedia.com.au` | `http://192.168.20.35:3001` |
| `outline.lab.audasmedia.com.au` | `http://192.168.20.35:3000` |