Hardware Inventory

Overview

[Mobile Kit - On Demand]        [Fixed Homelab - 24/7]          [VPS - 24/7]
├── MacBook Air M1             ├── Oga — Proxmox (AOOSTAR)     ├── Headscale
├── Beryl AX Router            │   ├── OPNsense VM             ├── Caddy
└── Samsung A13/A16            │   └── Docker VM (9GB RAM)     ├── headscale-backup
                               ├── NAS (Mini-ITX i3)           ├── Uptime Kuma
                               ├── RPi 5 — OpenClaw            ├── ntfy
                               ├── MokerLink 2.5G Switch       └── ~$6/mo
                               ├── TP-Link PoE Switch
                               ├── TP-Link Archer AX50 AP
                               ├── 3x IP Cameras (deployed)
                               └── Forza UPS

---

Mobile Homelab (On-Demand)

Portable infrastructure. Operates 7AM-7PM or when traveling. Not 24/7.

Device	Specs	Role	Status

| MacBook Air M1 | 16GB RAM, 1TB SSD, macOS Sonoma | Workstation, Docker dev | Active | | Beryl AX | GL-MT3000 | Network gateway, DHCP, VPN, AdGuard DNS | Active | | Samsung A13 | Android | USB tethering for internet (travel) | Active | | Samsung A16 | Android | Daily phone, Tailscale client | Active |

Mobile Network Topology

            [Internet]
                 |
          [Mobile Phone]
           USB Tether
                 |
         [Travel Router]
                 |
          [MacBook Air]
                 |
        [Tailscale Mesh]

Mobile Kit Services

Device	Services

| Beryl AX | AdGuard DNS (mobile ad-blocking) | | MacBook | Docker workloads |

Note: Headscale moved to VPS for 24/7 availability.

---

Fixed Homelab

Always-on infrastructure at home.

Core Devices

Device	Specs	Role	Status

| AOOSTAR Mini PC (Oga) | Intel N150, 12GB RAM, 512GB SSD | Proxmox VE (OPNsense + Docker VM) | Active | | NAS | i3-3220T, 8GB RAM, Mini-ITX | Debian 13 (19 containers) | Active | | Raspberry Pi 5 | 8GB RAM, 32GB SD, Active Cooler | OpenClaw (AI assistant) | Pending (PSU in transit) | | Raspberry Pi 4 | 4GB RAM, 1TB external SSD | Start9 (Bitcoin node) | Pending setup |

Networking

Device	Model	Specs	Role

| Managed Switch | MokerLink 8-Port | 8x 2.5G + 10G SFP+, fanless, metal | Main LAN backbone | | PoE Switch | TP-Link TL-SG1005P | 5x 1G, 4x PoE+ @65W, fanless | Camera power | | Access Point | TP-Link Archer AX50 | WiFi 6, Dual Band, Gigabit | AP mode (stock firmware) |

Cameras

Model	Count	Specs	Status

| Reolink RLC-520A | 2 | 5MP PoE | Deployed — front_door (192.168.0.110), back_yard (192.168.0.111) | | TP-Link Tapo C110 | 1 | 3MP WiFi | Deployed — indoor (192.168.0.101) |

All cameras integrated with Taguato (Frigate NVR) on Docker VM. Zones configured for detection areas. Face recognition enabled.

Power

Device	Model	Specs

| UPS | Forza NT-1012U | 1000VA, 220V |

Cooling

Device	Model	Notes

| USB Fans | AC Infinity MULTIFAN S7 | Dual 120mm, for NAS/switch cooling |

Mini PC Details

Component	Spec	Notes

| Model | AOOSTAR N1 Pro | | | CPU | Intel N150 | VT-x, Intel UHD Graphics (iGPU) | | RAM | 12GB | ~1GB host + 2GB OPNsense + 9GB Docker (current) | | Storage | 512GB SSD | Proxmox + VMs | | NIC | Dual port | WAN bridge (vmbr0) + LAN bridge (vmbr1) | | BIOS | Restore on AC Power Loss | Set to "Power On" for auto-boot |

VMs

VM	ID	vCPU	RAM	Disk	Start Order

| OPNsense | 100 | 2 | 2GB | 20GB | 1 (delay: 0) | | Docker | 101 | 2 | 9GB | 100GB | 2 (delay: 30) |

• OPNsense (VM 100) — Gateway/firewall since 2026-02-21, LAN 192.168.0.1/24
• Docker (VM 101) — 33 containers: Pi-hole, Caddy, Frigate, HA, Vaultwarden, Authelia, Jellyfin, Immich, Paperless-ngx, monitoring (VM+vmagent+vmalert+alertmanager+cAdvisor+Grafana), tools, media, backup sidecars

Network bridges: nic0/vmbr0 = ISP modem (ARRIS bridge mode), nic1/vmbr1 = MokerLink switch. OPNsense has both NICs; Docker VM has vmbr1 only.

iGPU passthrough completed (2026-03-02): OpenVINO GPU inference ~15ms, VA-API hardware decode for all cameras. See docs/plans/igpu-passthrough-plan-2026-02-25.md.

RPi 5 Details

Component	Model	Notes

| Board | Raspberry Pi 5 8GB | OpenClaw AI assistant | | Storage | 32GB SDHC Class 10 | Consider NVMe HAT later | | Cooling | Official Active Cooler | Required for 24/7 operation | | PSU | Official 27W USB-C | In transit (Miami → Asunción) | | Case | TBD | See docs/reference/rpi5-case-research.md |

RPi 4 Details

Component	Spec	Notes

| Board | Raspberry Pi 4 4GB | Bitcoin node | | Storage | 1TB external SSD (USB 3.0) | Blockchain + indexes | | OS | Start9 OS | Sovereign Bitcoin stack | | PSU | Official 3A USB-C | Required for SSD power |

Start9 Services

• Bitcoin Core (~600GB)
• LND (Lightning)
• Electrum Server (~50GB index)

NAS Details

DIY Mini-ITX build from 2013, repurposed for NAS duty.

Component	Model	Notes

| Case | Cooler Master Elite 120 Advanced | Mini-ITX, compact | | Motherboard | ASUS P8H77-I | Intel H77, LGA 1155 | | CPU | Intel Core i3-3220T | Dual-Core 2.8GHz, 35W TDP | | RAM | Kingston HyperX 8GB | 2x4GB DDR3-1600 | | PSU | picoPSU-160-XT + 220W brick | 192W DC-DC, 2013 vintage | | Boot USB | Generic Flash Disk 3.7GB | EFI (512M FAT32) + /boot (3.1G ext4) — must stay plugged in | | OS | Debian 13 (Trixie) | Docker data-root at /data/docker (SSD) |

NAS Containers (19 active)

• Samba (network shares) — justinpatchett/samba
• Syncthing 2.0.14 (file sync)
• Restic REST 0.14.0 (backup target, data at /mnt/purple/backup/restic/)
• Offsite Sync (rclone crypt to Google Drive)
• Forgejo 11 (git server, data at /srv/forgejo)
• Glances (system monitoring)
• Coolify + 6 sub-containers (PaaS, data at /data/coolify/)
• Katupyry (3 containers: app, db, redis — personal finance tool)
• Javya (3 containers: app, db, redis — worship planning tool)

Boot: USB UEFI → GRUB → kernel/initramfs → SSD LVM root. USB only read during first 2s of boot.

NAS Storage Strategy

┌─────────────────────────────────────────────────────────┐
│                    NAS (Primary)                         │
│ SSD 240GB│ Purple 2TB │ Red Plus 8TB                    │
│  OS/Apps │ Frigate    │ Media + Data                    │
└─────────────────────────────────────────────────────────┘
                          │
          ┌───────────────┴───────────────┐
          ▼                               ▼
   [Local Backup]                  [Offsite Backup]
   WD Red 3TB                      Google Drive 1TB
   Sabrent Dock                    (rclone + crypt)

Internal Drives

Drive	Model	Size	Purpose

| SSD | Lexar NQ100 | 240GB | Debian OS, Docker data-root (/data/docker), configs | | HDD | WD Purple | 2TB | Frigate NVR recordings (dedicated) | | HDD | WD Red Plus (WD80EFBX) | 8TB | Media, family backups, service backups |

Backup Targets

Target	Size	Purpose	Notes

| WD Red 3TB | 3TB | Local critical backup | In Sabrent dock, 2013 drive | | Google Drive | 1TB | Offsite critical backup | Via rclone crypt, part of AI Pro sub |

Retired/Spare Drives

Drive	Size	Age	Status

| Crucial MX500 | 1TB | 2021? | Spare - available for future use | | WD Red 3TB (2nd) | 3TB | 2013 | Test with SMART, keep as spare |

Strategy Notes

• No SnapRAID parity initially (would need 8TB+ drive)
• 3-2-1 backup: NAS + local 3TB + Google Drive
• Purple dedicated to Frigate = optimized surveillance writes
• Consider 8TB parity + 8TB external upgrade later

Fixed Network Topology

              [ISP Modem - ARRIS bridge mode]
                           |
                  [Oga — Proxmox (AOOSTAR)]
                      nic0/vmbr0 (WAN)
                           |
                    [OPNsense VM 100]
                      nic1/vmbr1 (LAN 192.168.0.1)
                           |
                  [MokerLink 2.5G Switch]
                           |
     +----------+----------+-----------+-----------+-----------+
     |          |          |           |           |           |
[Docker VM] [NAS]    [RPi 5]    [WiFi AP]   [PoE Switch]  [Proxmox mgmt]
 VM 101    .0.12    .0.20      AX50          .0.237
 .0.10     19 cnt   pending                       |
 20+ cnt                              +-----------+-----------+
                                      |           |           |
                                 [front_door] [back_yard]  [indoor]
                                  .0.110       .0.111     .0.101 (WiFi)

                         [Tailscale Mesh — 8 nodes]

Fixed Homelab Services

Device	Running Containers	Key Services

| Docker VM | 33 | Pi-hole, Caddy, Taguato (Frigate), Jara (HA), Vaultwarden, Okẽ (Authelia), Yrasema (Jellyfin), Mbyja (Homepage), Ysyry (Dozzle), Kuatia (BentoPDF), Papa (VictoriaMetrics+Grafana+vmagent+vmalert+Alertmanager+cAdvisor), Vera (Immich), Aranduka (Paperless-ngx), Mosquitto, Watchtower, media (*arr stack), backup sidecars | | NAS | 19 | Forgejo, Tajy (Coolify + 6 sub-containers), Samba, Syncthing, Restic REST, Offsite Sync, Glances, Katupyry (3), Javya (3) | | RPi 5 | — | OpenClaw (pending PSU) | | RPi 4 | — | Bitcoin Core, LND, Electrum Server (Start9) |

Frigate runs on Docker VM with OpenVINO GPU detector and NFS mount to NAS Purple 2TB for recordings.

---

VPS

Cloud helper node (not critical infrastructure).

Provider	Plan	Specs	Cost

| Vultr | High Frequency | 1 vCPU, 1GB RAM, 32GB NVMe | ~$6/mo |

Services (5 active): Headscale, Caddy, headscale-backup, Uptime Kuma, ntfy

See: docs/architecture/vps-architecture.md

---

Tailscale IP Allocation

Current Nodes (verified 2026-02-09)

Node	Tailscale IP	Type

| vps-vultr | 100.77.172.46 | VPS | | oga | 100.78.12.241 | Proxmox host | | docker | 100.68.63.168 | Docker VM | | opnsense | 100.79.230.235 | Firewall VM | | nas | 100.82.77.97 | NAS | | augustos-macbook-air | 100.86.220.9 | Workstation | | beryl-ax | 100.102.244.131 | Travel router | | mombeu | 100.110.253.126 | Phone |

Managed via self-hosted Headscale on VPS.

Hostname Convention

<device-type>[-owner]

Examples:
- rpi5 (device type only)
- phone-user (device + owner)
- laptop-user (device + owner)

MagicDNS

Tailscale MagicDNS provides automatic DNS:

<hostname>.tail → Tailscale IP

ACL Policy (Headscale)

# Example ACL structure - customize for your needs

groups:
  servers:
    - docker
    - nas
    - vps
    # Add server hostnames

  users:
    - phone-*
    - laptop-*
    # Add user device patterns

acls:
  # Servers can reach each other
  - action: accept
    src: ["group:servers"]
    dst: ["group:servers:*"]

  # Users can reach servers
  - action: accept
    src: ["group:users"]
    dst: ["group:servers:*"]

Adding New Devices

1. Generate auth key in Headscale
2. Install Tailscale on device
3. Connect with: tailscale up --login-server=https://<your-domain> --authkey=<key>
4. Assign IP from appropriate range
5. Update internal documentation

---

Power Considerations

Mobile Kit

Device	Power	Notes

| Beryl AX | 15W USB-C | Can share power bank | | MacBook | Battery | 15+ hours |

Fixed Homelab

All critical devices connected to Forza NT-1012U 1000VA UPS.

Device	Power	UPS Protected

| Mini PC | ~35W | Yes | | RPi 5 | 27W | Yes | | RPi 4 | 15W | Yes | | NAS | ~50W idle | Yes | | MokerLink Switch | ~15W | Yes | | TP-Link PoE Switch | ~65W max | Yes (cameras need graceful stop) |

Total estimated load: ~180W (well under 1000VA capacity)

See: docs/guides/nut-config.md for NUT graceful shutdown configuration

---

Accessories

Item	Model	Purpose

| Keyboard | Keychron K2C3 | 75% mechanical keyboard, home workstation | | Keyboard | Logitech MX Keys for Mac | Full-size, stationary at T&C office | | Mouse | Logitech MX Master 3 | Wireless, portable, mainly with MacBook Air M1 | | Flash Drive | Lexar D40E 128GB | USB-C/USB-A dual, portable transfers | | Card Reader | UGREEN SD/MicroSD | USB-C/USB 3.0, for RPi SD cards | | USB-C Cables | UGREEN 100W 6.6ft (2-pack) | Device charging/data | | HDD Dock | Sabrent EC-DFLT | USB 3.0 SATA dock for backup drives | | YubiKey | 5C NFC | 2FA hardware key (USB-C + NFC) | | E-Reader | Kindle Paperwhite (2018) | Waterproof, 8GB, ad-supported |

---

Purchase History

Item	Date	Status

| RPi 5 8GB + Active Cooler | 2026-01 | Owned | | RPi 5 27W PSU | 2026-01 | In transit | | 32GB SD Card | 2026-01 | Owned | | Mini PC (N150) | ? | Owned | | RPi 4 4GB | ? | Owned | | NAS components | 2013 | Owned | | Kindle Paperwhite (2018) | 2020 | Owned | | YubiKey 5C NFC | 2021 | Owned | | Keychron K2C3 | 2021 | Owned | | Logitech MX Master 3 | 2021 | Owned | | WD Red Plus 8TB | 2021 | Owned | | Sabrent HDD Dock | 2021 | Owned | | TP-Link Archer AX50 AP | 2021 | Owned | | Logitech MX Keys for Mac | 2023 | Owned (at T&C office) | | WD Purple 2TB | 2026 | Owned | | MokerLink 2.5G Switch | 2026 | Owned | | TP-Link PoE Switch | 2026 | Owned | | Forza UPS 1000VA | 2026 | Owned | | Reolink RLC-520A (x2) | 2026 | Deployed (Frigate) | | TP-Link Tapo C110 | 2026 | Deployed (Frigate) | | AC Infinity Fans | 2026 | Owned |

---

Future Hardware

Item	Purpose	Priority

| ~~iGPU passthrough (SR-IOV)~~ | ~~Frigate GPU acceleration on Docker VM~~ | Done (2026-03-02) | | NVMe HAT for RPi 5 | Faster storage | Low | | 8TB HDD (parity) | SnapRAID parity drive | Low | | 8TB HDD (external) | Larger local backup | Low | | 3D printed case | RPi 5 enclosure | Medium | | New NAS PSU | Replace 2013 picoPSU if needed | Medium | | NAS SSD upgrade | Replace Lexar NQ100 (/var only 6.1G) | Medium |

---

References

• Raspberry Pi 5 Specs
• GL-MT3000 (Beryl AX)
• Start9 Hardware Requirements
• Proxmox VE Requirements
• Frigate NVR
• rclone crypt