Sam Rolfe
2ed0ca80ae
- Weblog desktops were unauthenticated and publicly reachable (entry vector) - Caddy basic_auth applied to gimp/lmms/video/audio routes -> 401 verified - Webtop-native CUSTOM_USER/PASSWORD on all four (defence in depth) - GIMP + LMMS rebuilt clean; gimp-config volume deleted, lmms-config quarantined - Removed /home/sam:ro mount from GIMP (was exposing secrets to the container) - Service-controller restarted (was dead, which is why toggles did nothing) - Incident record + captured payload in docs/incident-2026-11-11*
Family Home Lab Technical Documentation
This directory contains architectural specifications, component manuals, integration tables, and network registries for the Family Home Lab ecosystem.
Core Technical Reference Specs
-
DeepSeek Harness (DSH) Architecture: Multi-instance chat engine, per-user container allocation (
sam,jo,harry,finn), ports (3081–3084), JSON session persistence, multi-model routing table (OmniRoute, OpenRouter, Whisper, Jervis Voice Agent), CSP framing, and API endpoints. -
Console Portal Architecture: FastAPI application spec, user database schema, access control entitlement flags (
can_chat,can_image,can_audio,can_docs), tool catalogue structure (tools.py), host-sideservice-controllerbridge, ON/OFF RAM management, and Garage S3 file integration. -
Host Network & Port Registry: Single source of truth network topology and port allocations across hosts
.13(containers/models),.35(Caddy/Gitea/Outline),.27(dev workstation), and.51.
Component Plans & Features
- Audio Plan: MIDI transcription (Basic Pitch) and sheet music generation (MuScriptor).
- DSH Plugins Shortlist: Curated index of DeepSeek Harness extension plugins.
- DSH Plugin Plan: Roadmap for integrating summary and media plugins into DSH.
- Websites & Services Inventory: Catalogue of public domains and upstream destinations.
- Interactive Architecture Map: Visual HTML component map.