[main]: Add server-notes

2026-10-06 16:33:29 +01:00
1 parent 68a3130159
commit 81b43de3f1
@@ -0,0 +1,74 @@
+---
+schema_version: 1
+id: home-server.host
+type: reference
+scope: [jupiter, hardware, operating-system, docker]
+sensitivity: private-infrastructure
+last_reviewed: "2026-10-06"
+sources:
+  - kind: owner-report
+    reference: "Hardware, OS, bare-metal Docker and data-root confirmation, 2026-10-06"
+  - kind: owner-report
+    reference: "hostnamectl, timedatectl, user/group records, Docker info/version and systemd units, 2026-10-06"
+related: [home-server.reference, home-server.storage, home-server.networking, home-server.deployment, home-server.operations]
+update_triggers: [hardware-change, os-upgrade, kernel-upgrade, docker-reconfiguration, account-change, unit-change]
+unknowns:
+  - exact-gpu-model
+  - jupiter-firewall-policy
+  - docker-package-installation-source
+  - backup-puller-account-purpose
+---
+
+# Host
+
+| Component | Configuration |
+| --- | --- |
+| Host | Jupiter; bare metal |
+| OS | Debian GNU/Linux 13 (trixie); x86_64 |
+| Kernel | `6.12.94+deb13-amd64` |
+| CPU | AMD Ryzen 5 5600X; 6 cores / 12 threads; reported 4.65 GHz |
+| RAM | 1 x 16 GB Corsair Vengeance LPX |
+| GPU | AMD Radeon HD 5000/6000/7350/8350 Series; discrete; exact model unresolved |
+| Motherboard | Gigabyte B550M DS3H |
+| Firmware | `FB`; dated `2023-06-08` |
+| PSU | Corsair CV550 |
+| SSD | Samsung 860 EVO; 1 TB; OS and SSD-backed caches |
+| HDD | 2 x Seagate BarraCuda; 2 TB each; RAID 0 |
+| Docker | Native host engine; data root `/var/lib/docker` |
+| LAN | `192.168.1.56` |
+| WireGuard | `10.0.0.2/24`; Mercury peer/server `10.0.0.1/24` |
+| Time | `Europe/London`; RTC UTC; NTP active; clock synchronized at review |
+
+## Docker runtime
+
+| Setting | Observed value |
+| --- | --- |
+| Engine / API | Docker CE `29.8.2` / `1.56` |
+| Compose CLI plugin | `v5.6.0`; not proof of Portainer's Compose implementation |
+| containerd / runc | `v2.3.6` / `1.5.1` |
+| Storage | `overlayfs`; containerd snapshotter |
+| Cgroups | `systemd`; v2 |
+| Logging | `json-file`; default |
+| Firewall backend | `iptables` |
+| Runtime security | AppArmor, seccomp, cgroup namespaces |
+| Swarm / live restore | Inactive / disabled |
+
+Docker/containerd services and `docker.socket` are enabled.
+Docker starts `/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock`.
+Supplied Docker unit has no explicit `/data` mount dependency or ordering against
+`rclone-seedbox.service`.
+
+## Host administration
+
+| Account / group | Identity |
+| --- | --- |
+| `jay` | UID/GID `1000:1000`; `/home/jay`; bash; member of `sudo`, `docker`, `video`, `backups` |
+| `backup-puller` | UID/GID `1001:1001`; `/home/backup-puller`; bash; member of `backups`; purpose unconfirmed |
+| `backups` | Shared group; GID `1002` |
+
+WireGuard and rclone: apt-managed. `wg-quick@wg0.service` is active in the supplied
+snapshot. No host-level nginx on Jupiter; nginx still exists in application
+containers. `unattended-upgrades.service` is enabled; effective update policy
+not supplied.
+
+Hardware/versions are a dated snapshot, not live telemetry.