pez-infra/docs
Rasmus Wejlgaard dfc833efc9 chore: retire readarr service, replaced by bookshelf
Bookshelf (PR #122) is a Readarr revival and now owns port 8787 on
london-b, so the old custom Readarr systemd unit is removed:

- drop readarr from the media_stack role's unit-deploy and enable loops,
  and add an idempotent decommission task (stop, disable, remove unit)
  so the host tears it down via Ansible rather than ad-hoc SSH
- delete services/readarr/readarr.service
- update docs (services, london-b host, service inventory) to describe
  bookshelf as a Docker service instead of a custom systemd unit

The public readarr.pez.sh hostname is kept and now reverse-proxies to
bookshelf on :8787 — DNS, Caddy and Authelia (pez_readarr_users group)
are unchanged.
2026-06-06 15:49:32 +01:00
..
hosts chore: retire readarr service, replaced by bookshelf 2026-06-06 15:49:32 +01:00
architecture.md fix: Documentation overhaul (#112) 2026-05-19 18:49:21 +01:00
getting-started.md fix: Documentation overhaul (#112) 2026-05-19 18:49:21 +01:00
monitoring.md fix: Documentation overhaul (#112) 2026-05-19 18:49:21 +01:00
networking.md fix: Documentation overhaul (#112) 2026-05-19 18:49:21 +01:00
README.md fix: Documentation overhaul (#112) 2026-05-19 18:49:21 +01:00
secrets.md initial commit 2026-03-28 12:39:41 +00:00
services.md chore: retire readarr service, replaced by bookshelf 2026-06-06 15:49:32 +01:00

Documentation

Everything you need to understand how this infrastructure works.

Contents

  • Architecture — High-level overview, network topology, traffic flow diagrams
  • Networking — Tailscale mesh, physical networking, DNS and proxy flow
  • Services — Complete service map: what runs where, ports, auth
  • Monitoring — Grafana Cloud, Alloy, synthetic checks, alerting via PagerDuty
  • Secrets — SOPS + age encryption: setup, usage, CI integration
  • Getting Started — How to work with this repo, deploy changes, add services
  • Hosts — Per-host detail (hardware, services, quirks)

Quick Reference

Host Tailscale IP Location Role
helsinki-a 100.67.6.27 Hetzner Cloud (Helsinki) Reverse proxy, SSO, Bitwarden, Forgejo
london-a 100.122.180.98 London Proxmox VE hypervisor
london-b 100.84.65.101 London Storage, media, Docker services
london-c 100.123.72.87 London Raspberry Pi, Octopus Energy exporter
nuremberg-a 100.70.180.24 Hetzner Cloud (Nuremberg) Mail (poste.io)
copenhagen-a 100.89.206.60 Copenhagen Minecraft, WoW/MaNGOS
copenhagen-c 100.115.45.53 Copenhagen Raspberry Pi, cloudflared, idle