Home Dashboard — gary-smith.net

SSO portal

Authelia — SSO portal

Central sign-in for all gated apps. Users gary + trudy, TOTP/WebAuthn, session cookie on .gary-smith.net (8 h / 4 h idle).

bypass192.168.0.10 · 127.0.0.1:9091

Proxy sites (Caddy, https://<name>.gary-smith.net)

Jellyfin

https://jellyfin.gary-smith.net

Media server — Movies (1,034), TV, music. Own login kept by design (not SSO-gated). Runs on the DS920+ NAS.

bypass — app login192.168.0.80:8096

LibreChat

https://librechat.gary-smith.net

Main AI front end v0.8.9-rc1, with the Household Assistant, agents + KB, and the local Strata model as a custom endpoint. Replaced Open WebUI.

2-factor192.168.0.15:3080

DocDesk

https://docdesk.gary-smith.net

Browser editor for the household KB on the NAS (stuff/AI/kb). GitHub: smithga/docdesk. Has its own login, so behind the gate that's two sign-ins.

2-factor + app login192.168.0.15:3100

Coolify

https://coolify.gary-smith.net

Self-hosting / deploy console for the stack on AI-Worker. Its own OIDC login — the SSO gate must stay off this site or its discovery calls 401.

bypass — app login192.168.0.15:8000 (via Traefik)

Portainer

https://webui.gary-smith.net

Docker container console for AI-Worker's stack. Gated to the admins group only (Trudy blocked). Port needs re-checking: 192.168.0.15:3000 is currently owui-trial, not Portainer.

1-factor (admins group)192.168.0.15:3000 <fill in>

Kanban

https://kanban.gary-smith.net

Kanban board for household / project tasks. <fill in: which app & version>

1-factor192.168.0.15:8086

Qwen Code

https://qwencode.gary-smith.net

Browser front end for the Qwen Code CLI coding agent, pointed at the local Strata model. <fill in: exact tool>

1-factor192.168.0.15:8085

Collectables

https://collectables.gary-smith.net

Collection / inventory tracker. <fill in: app + what it tracks>

1-factor192.168.0.15:8087

Dashboard (this page)

http://192.168.0.15:8081

nginx:alpine container dashboard on AI-Worker; files in the NAS share stuff/AI/dashboard. Edit index.html there and reload — no rebuild.

192.168.0.15:8081 → 80/tcp

Direct host:port (no proxy name)

LibreChat admin panel

http://192.168.0.15:3090

Container admin-panel (3090 → 3000/tcp). Administration UI for LibreChat users/instances. <fill in: exact tool>

AI-Worker192.168.0.15:3090

CryptPad

http://192.168.0.15:3001 (+3002, main + sandbox origins)

Zero-knowledge collaborative documents. Container cryptpad: 3001 → 3000 (main), 3002 → 3001 (sandbox). No proxy name yet.

AI-Worker192.168.0.15:3001 / 3002

AdGuard Home

http://192.168.0.10:3000

Household DNS: ad/tracker blocking, static leases, and the *.gary-smith.net → 192.168.0.10 rewrite that makes the names resolve on the LAN. Web UI.

AI box · systemd service192.168.0.10:3000

Strata (Qwen inference)

http://192.168.0.10:8080

Local LLM server, swift-1.5 IQ3_XXS, on the RTX 5070 Ti 16 GB. OpenAI-compatible endpoint — used by LibreChat, Qwen Code, Claude Code CLI. No web UI.

systemd --user: strata.service192.168.0.10:8080

DSM (Synology DS920+)

http://192.168.0.80:5000

NAS admin console — SMB shares (this dashboard and the KB live in share stuff > folder AI), storage, backups, Jellyfin host. <fill in: 5000 vs 5001 assumed>

NAS · own login192.168.0.80

Open WebUI trial (teardown ~2026-11-12)

http://192.168.0.15:3000 · container owui-trial

v0.12.5 two-week trial (started 2026-10-29). Verdict 2026-11-01: keep LibreChat, tear the trial down ~2026-11-12. Verified 2026-11-06: 3000 = owui-trial (3000 → 8080/tcp).

no proxy name192.168.0.15:3000teardown 2026-11-12

Transmission

http://192.168.0.15:<fill in>

Torrent daemon used by the Torrentleech workflow. Web UI port <fill in — 9091 is the default; not seen listening on AI-Worker in the 2026-11-06 probe>

AI-Worker