Hardware Inventory¶

Overview¶

[Mobile Kit - On Demand]        [Fixed Homelab - 24/7]          [VPS - 24/7]
├── MacBook Air M1             ├── Oga — Proxmox (AOOSTAR)     ├── Headscale
├── Beryl AX Router            │   ├── OPNsense VM             ├── Caddy
└── Samsung A13/A16            │   └── Docker VM (9GB RAM)     ├── headscale-backup
                               ├── NAS (Mini-ITX i3)           ├── Uptime Kuma
                               ├── RPi 5 — OpenClaw            ├── ntfy
                               ├── MokerLink 2.5G Switch       └── ~$6/mo
                               ├── TP-Link PoE Switch
                               ├── TP-Link Archer AX50 AP
                               ├── 3x IP Cameras (deployed)
                               └── Forza UPS

Mobile Homelab (On-Demand)¶

Portable infrastructure. Operates 7AM-7PM or when traveling. Not 24/7.

Device	Specs	Role	Status
MacBook Air M1	16GB RAM, 1TB SSD, macOS Sonoma	Workstation, Docker dev	Active
Beryl AX	GL-MT3000	Network gateway, DHCP, VPN, AdGuard DNS	Active
Samsung A13	Android	USB tethering for internet (travel)	Active
Samsung A16	Android	Daily phone, Tailscale client	Active

Mobile Network Topology¶

            [Internet]
                 |
          [Mobile Phone]
           USB Tether
                 |
         [Travel Router]
                 |
          [MacBook Air]
                 |
        [Tailscale Mesh]

Mobile Kit Services¶

Device	Services
Beryl AX	AdGuard DNS (mobile ad-blocking)
MacBook	Docker workloads

Note: Headscale moved to VPS for 24/7 availability.

Fixed Homelab¶

Always-on infrastructure at home.

Core Devices¶

Device	Specs	Role	Status
AOOSTAR Mini PC (Oga)	Intel N150, 12GB RAM, 512GB SSD	Proxmox VE (OPNsense + Docker VM)	Active
NAS	i3-3220T, 8GB RAM, Mini-ITX	Debian 13 (19 containers)	Active
Raspberry Pi 5	8GB RAM, 32GB SD, Active Cooler	OpenClaw (AI assistant)	Pending (case)
Raspberry Pi 4	4GB RAM, 1TB external SSD	Start9 (Bitcoin node)	Pending setup

Networking¶

Device	Model	Specs	Role
Managed Switch	MokerLink 8-Port	8x 2.5G + 10G SFP+, fanless, metal	Main LAN backbone
PoE Switch	TP-Link TL-SG1005P	5x 1G, 4x PoE+ @65W, fanless	Camera power
Access Point	TP-Link Archer AX50	WiFi 6, Dual Band, Gigabit	AP mode (stock firmware)

Cameras¶

Model	Count	Specs	Status
Reolink RLC-520A	2	5MP PoE	Deployed — front_door (192.168.0.110), back_yard (192.168.0.111)
TP-Link Tapo C110	1	3MP WiFi	Deployed — indoor (192.168.0.101)

All cameras integrated with Taguato (Frigate NVR) on Docker VM. Zones configured for detection areas. Face recognition enabled.

Power¶

Device	Model	Specs
UPS	Forza NT-1012U	1000VA, 220V

Cooling¶

Device	Model	Notes
USB Fans	AC Infinity MULTIFAN S7	Dual 120mm, for NAS/switch cooling

Mini PC Details¶

Component	Spec	Notes
Model	AOOSTAR N1 Pro
CPU	Intel N150	VT-x, Intel UHD Graphics (iGPU)
RAM	12GB	~1GB host + 2GB OPNsense + 9GB Docker (current)
Storage	512GB SSD	Proxmox + VMs
NIC	Dual port	WAN bridge (vmbr0) + LAN bridge (vmbr1)
BIOS	Restore on AC Power Loss	Set to "Power On" for auto-boot

VMs¶

VM	ID	vCPU	RAM	Disk	Start Order
OPNsense	100	2	2GB	20GB	1 (delay: 0)
Docker	101	2	9GB	100GB	2 (delay: 30)

OPNsense (VM 100) — Gateway/firewall since 2026-02-21, LAN 192.168.0.1/24
Docker (VM 101) — 36 containers: Pi-hole, Caddy, Frigate, HA, Vaultwarden, Authelia, Jellyfin, Immich, Paperless-ngx, monitoring (VM+vmagent+vmalert+alertmanager+cAdvisor+Grafana), tools, media, backup sidecars

Network bridges: nic0/vmbr0 = ISP modem (ARRIS bridge mode), nic1/vmbr1 = MokerLink switch. OPNsense has both NICs; Docker VM has vmbr1 only.

iGPU passthrough completed (2026-03-02): OpenVINO GPU inference ~15ms, VA-API hardware decode for all cameras. See docs/plans/igpu-passthrough-plan-2026-02-25.md.

RPi 5 Details¶

Component	Model	Notes
Board	Raspberry Pi 5 8GB	OpenClaw AI assistant
Storage	32GB SDHC Class 10	Consider NVMe HAT later
Cooling	Official Active Cooler	Required for 24/7 operation
PSU	Official 27W USB-C	Purchased (Amazon B0D3MFLNC1)
Case	TBD	Pending 3D print with friend

RPi 4 Details¶

Component	Spec	Notes
Board	Raspberry Pi 4 4GB	Bitcoin node
Storage	1TB external SSD (USB 3.0)	Blockchain + indexes
OS	Start9 OS	Sovereign Bitcoin stack
PSU	Official 3A USB-C	Required for SSD power

Start9 Services¶

Bitcoin Core (~600GB)
LND (Lightning)
Electrum Server (~50GB index)

NAS Details¶

DIY Mini-ITX build from 2013, repurposed for NAS duty.

Component	Model	Notes
Case	Cooler Master Elite 120 Advanced	Mini-ITX, compact
Motherboard	ASUS P8H77-I	Intel H77, LGA 1155
CPU	Intel Core i3-3220T	Dual-Core 2.8GHz, 35W TDP
RAM	Kingston HyperX 8GB	2x4GB DDR3-1600
PSU	picoPSU-160-XT + 220W brick	192W DC-DC, 2013 vintage
Boot USB	Generic Flash Disk 3.7GB	EFI (512M FAT32) + /boot (3.1G ext4) — must stay plugged in
OS	Debian 13 (Trixie)	Docker data-root at /data/docker (SSD)

NAS Containers (19 active)¶

Samba (network shares) — justinpatchett/samba
Syncthing 2.0.14 (file sync)
Restic REST 0.14.0 (backup target, data at /mnt/purple/backup/restic/)
Offsite Sync (rclone crypt to Google Drive)
Forgejo 11 (git server, data at /srv/forgejo)
Glances (system monitoring)
Coolify + 6 sub-containers (PaaS, data at /data/coolify/)
Katupyry (3 containers: app, db, redis — personal finance tool)
Javya (3 containers: app, db, redis — worship planning tool)

Boot: USB UEFI → GRUB → kernel/initramfs → SSD LVM root. USB only read during first 2s of boot.

NAS Storage Strategy¶

┌─────────────────────────────────────────────────────────┐
│                    NAS (Primary)                         │
│ SSD 240GB│ Purple 2TB │ Red Plus 8TB                    │
│  OS/Apps │ Frigate    │ Media + Data                    │
└─────────────────────────────────────────────────────────┘
                          │
          ┌───────────────┴───────────────┐
          ▼                               ▼
   [Local Backup]                  [Offsite Backup]
   WD Red 3TB                      Google Drive 1TB
   Sabrent Dock                    (rclone + crypt)

Internal Drives¶

Drive	Model	Size	Purpose
SSD	Lexar NQ100	240GB	Debian OS, Docker data-root (/data/docker), configs
HDD	WD Purple	2TB	Frigate NVR recordings (dedicated)
HDD	WD Red Plus (WD80EFBX)	8TB	Media, family backups, service backups

Backup Targets¶

Target	Size	Purpose	Notes
WD Red 3TB	3TB	Local critical backup	In Sabrent dock, 2013 drive
Google Drive	1TB	Offsite critical backup	Via rclone crypt, part of AI Pro sub

Retired/Spare Drives¶

Drive	Size	Age	Status
Crucial MX500	1TB	2021?	Spare - available for future use
WD Red 3TB (2nd)	3TB	2013	Test with SMART, keep as spare

Strategy Notes¶

No SnapRAID parity initially (would need 8TB+ drive)
3-2-1 backup: NAS + local 3TB + Google Drive
Purple dedicated to Frigate = optimized surveillance writes
Consider 8TB parity + 8TB external upgrade later

Fixed Network Topology¶

              [ISP Modem - ARRIS bridge mode]
                           |
                  [Oga — Proxmox (AOOSTAR)]
                      nic0/vmbr0 (WAN)
                           |
                    [OPNsense VM 100]
                      nic1/vmbr1 (LAN 192.168.0.1)
                           |
                  [MokerLink 2.5G Switch]
                           |
     +----------+----------+-----------+-----------+-----------+
     |          |          |           |           |           |
[Docker VM] [NAS]    [RPi 5]    [WiFi AP]   [PoE Switch]  [Proxmox mgmt]
 VM 101    .0.12    .0.20      AX50          .0.237
 .0.10     19 cnt   pending                       |
 20+ cnt                              +-----------+-----------+
                                      |           |           |
                                 [front_door] [back_yard]  [indoor]
                                  .0.110       .0.111     .0.101 (WiFi)

                         [Tailscale Mesh — 8 nodes]

Fixed Homelab Services¶

Device	Running Containers	Key Services
Docker VM	36	Pi-hole, Caddy, Taguato (Frigate), Jara (HA), Vaultwarden, Okẽ (Authelia), Yrasema (Jellyfin), Mbyja (Homepage), Ysyry (Dozzle), Kuatia (BentoPDF), Papa (VictoriaMetrics+Grafana+vmagent+vmalert+Alertmanager+cAdvisor), Vera (Immich), Aranduka (Paperless-ngx), Mosquitto, Watchtower, media (*arr stack), backup sidecars
NAS	19	Forgejo, Tajy (Coolify + 6 sub-containers), Samba, Syncthing, Restic REST, Offsite Sync, Glances, Katupyry (3), Javya (3)
RPi 5	—	OpenClaw (pending case)
RPi 4	—	Bitcoin Core, LND, Electrum Server (Start9)

Frigate runs on Docker VM with OpenVINO GPU detector and NFS mount to NAS Purple 2TB for recordings.

VPS¶

Cloud helper node (not critical infrastructure).

Provider	Plan	Specs	Cost
Vultr	High Frequency	1 vCPU, 1GB RAM, 32GB NVMe	~$6/mo

Services (12 active): Headscale, Caddy, headscale-backup, Uptime Kuma, ntfy, AdGuard Home (Yvága), Unbound (Yvága), DERP Relay, Pi-hole (VPS), changedetection, Playwright, Restic REST

See: docs/architecture/vps-architecture.md

Tailscale IP Allocation¶

Current Nodes (verified 2026-02-09)¶

Node	Tailscale IP	Type
vps-vultr	100.77.172.46	VPS
oga	100.78.12.241	Proxmox host
docker	100.68.63.168	Docker VM
opnsense	100.79.230.235	Firewall VM
nas	100.82.77.97	NAS
augustos-macbook-air	100.86.220.9	Workstation
beryl-ax	100.102.244.131	Travel router
mombeu	100.110.253.126	Phone

Managed via self-hosted Headscale on VPS.

Hostname Convention¶

<device-type>[-owner]

Examples:
- rpi5 (device type only)
- phone-user (device + owner)
- laptop-user (device + owner)

MagicDNS¶

Tailscale MagicDNS provides automatic DNS:

<hostname>.tail → Tailscale IP

ACL Policy (Headscale)¶

# Example ACL structure - customize for your needs

groups:
  servers:
    - docker
    - nas
    - vps
    # Add server hostnames

  users:
    - phone-*
    - laptop-*
    # Add user device patterns

acls:
  # Servers can reach each other
  - action: accept
    src: ["group:servers"]
    dst: ["group:servers:*"]

  # Users can reach servers
  - action: accept
    src: ["group:users"]
    dst: ["group:servers:*"]

Adding New Devices¶

Generate auth key in Headscale
Install Tailscale on device
Connect with: tailscale up --login-server=https://<your-domain> --authkey=<key>
Assign IP from appropriate range
Update internal documentation

Power Considerations¶

Mobile Kit¶

Device	Power	Notes
Beryl AX	15W USB-C	Can share power bank
MacBook	Battery	15+ hours

Fixed Homelab¶

All critical devices connected to Forza NT-1012U 1000VA UPS.

Device	Power	UPS Protected
Mini PC	~35W	Yes
RPi 5	27W	Yes
RPi 4	15W	Yes
NAS	~50W idle	Yes
MokerLink Switch	~15W	Yes
TP-Link PoE Switch	~65W max	Yes (cameras need graceful stop)

Total estimated load: ~180W (well under 1000VA capacity)

See: docs/guides/nut-config.md for NUT graceful shutdown configuration

Accessories¶

Item	Model	Purpose
Keyboard	Keychron K2C3	75% mechanical keyboard, home workstation
Keyboard	Logitech MX Keys for Mac	Full-size, stationary at T&C office
Mouse	Logitech MX Master 3	Wireless, portable, mainly with MacBook Air M1
Flash Drive	Lexar D40E 128GB	USB-C/USB-A dual, portable transfers
Card Reader	UGREEN SD/MicroSD	USB-C/USB 3.0, for RPi SD cards
USB-C Cables	UGREEN 100W 6.6ft (2-pack)	Device charging/data
HDD Dock	Sabrent EC-DFLT	USB 3.0 SATA dock for backup drives
YubiKey	5C NFC	2FA hardware key (USB-C + NFC)
E-Reader	Kindle Paperwhite (2018)	Waterproof, 8GB, ad-supported

Purchase History¶

Item	Date	Status
RPi 5 8GB + Active Cooler	2026-01	Owned
RPi 5 27W PSU	2026-01	Owned
32GB SD Card	2026-01	Owned
Mini PC (N150)	?	Owned
RPi 4 4GB	?	Owned
NAS components	2013	Owned
Kindle Paperwhite (2018)	2020	Owned
YubiKey 5C NFC	2021	Owned
Keychron K2C3	2021	Owned
Logitech MX Master 3	2021	Owned
WD Red Plus 8TB	2021	Owned
Sabrent HDD Dock	2021	Owned
TP-Link Archer AX50 AP	2021	Owned
Logitech MX Keys for Mac	2023	Owned (at T&C office)
WD Purple 2TB	2026	Owned
MokerLink 2.5G Switch	2026	Owned
TP-Link PoE Switch	2026	Owned
Forza UPS 1000VA	2026	Owned
Reolink RLC-520A (x2)	2026	Deployed (Frigate)
TP-Link Tapo C110	2026	Deployed (Frigate)
AC Infinity Fans	2026	Owned

Future Hardware¶

Item	Purpose	Priority
~~iGPU passthrough (SR-IOV)~~	~~Frigate GPU acceleration on Docker VM~~	Done (2026-03-02)
NVMe HAT for RPi 5	Faster storage	Low
8TB HDD (parity)	SnapRAID parity drive	Low
8TB HDD (external)	Larger local backup	Low
3D printed case	RPi 5 enclosure	Medium
New NAS PSU	Replace 2013 picoPSU if needed	Medium
NAS SSD upgrade	Replace Lexar NQ100 (/var only 6.1G)	Medium

Hardware Inventory¶

Overview¶

Mobile Homelab (On-Demand)¶

Mobile Network Topology¶

Mobile Kit Services¶

Fixed Homelab¶

Core Devices¶

Networking¶

Cameras¶

Power¶

Cooling¶

Mini PC Details¶

VMs¶

RPi 5 Details¶

RPi 4 Details¶

Start9 Services¶

NAS Details¶

NAS Containers (19 active)¶

NAS Storage Strategy¶

Internal Drives¶

Backup Targets¶

Retired/Spare Drives¶

Strategy Notes¶

Fixed Network Topology¶

Fixed Homelab Services¶

VPS¶

Tailscale IP Allocation¶

Current Nodes (verified 2026-02-09)¶

Hostname Convention¶

MagicDNS¶

ACL Policy (Headscale)¶

Adding New Devices¶

Power Considerations¶

Mobile Kit¶

Fixed Homelab¶

Accessories¶

Purchase History¶

Future Hardware¶

References¶