Services #

Self-hosted service documentation lives here. Service pages should describe the operating model: ownership, boundaries, access paths, checks, and failure modes.

Implementation details stay in conf/services/ and host imports stay under conf/machines/.

Shared Baseline #

Service area	Baseline
Tailscale	Enabled on every NixOS host with firewall support.
OpenSSH	Enabled on every NixOS host.
PostgreSQL	Local development database baseline.
Redis	Local development cache baseline.
Docker	Local container runtime baseline.

Service Pages #

Page	Scope
SearXNG	Local metasearch on Haxorus.
Tailscale	Private network, MagicDNS, Serve, and tailnet policy.
Git Forge	Forgejo on Baxcalibur.
Kavita	Comics, manga, ebooks, and PDFs on Baxcalibur.
Tangled Knot	Tangled knot and SSH guard on Baxcalibur.