Homelab

Hosts DNS, tunnels, Access login gates, Workers, R2 storage and inbound mail routing for every domain.

Holds the code for every project, runs CI and carries the pull-request approvals.

Hosts the Next.js apps and product sites, including the sale webhooks that mint licences.

Provides managed Postgres and sign-in for the hosted DeviceWatch app.

Holds every product inbox in one mailbox, fed by Cloudflare mail routing.

Takes card payments for the products and signals each completed sale.

Second checkout channel for the Mac and Windows apps, reporting each sale by webhook.

Sends transactional mail: licence emails, digests, waitlist notes and printable meal plans.

Holds the offsite copies of NAS backups and the critical Mac backups.

Delivers the phone notifications that get past the notify gateway's filtering.

Hosted Claude models: the destination for mail triage, document extraction and loop judging.

Hosted Codex model that does the work in the adjudicated loop harness.

Task manager that n8n reads and writes action items to.

Gives internal services friendly local names that resolve to the right machine.

Filters ads and trackers for the whole network, with stricter rules for chosen devices.

Stands alone.

VPN endpoint on the router for reaching the home network from outside.

Stands alone.

Runs 146 active workflows: backups, digests, document intake, monitoring, self-healing, alerts and feeds across the estate.

Stores every API key encrypted and hands them to authorised callers over REST, CLI and MCP.

Self-hosted password manager for the household's logins, with sign-ups closed.

Stands alone.

Sign-in provider that lets self-hosted apps authenticate through one identity.

Stands alone.

Budgeting app holding the household budget, categorised overnight by a local model.

Always-on read-only peer keeping a backup copy of the Mac's shared files and vault.

Nightly cron that dumps every database and snapshots Qdrant, keeping two weeks locally.

Weekly job that copies the NAS backup pool offsite to Backblaze.

Self-hosted booking pages for scheduling meetings.

Stands alone.

Plans dinners from the recipe library, calendar and preferences, emails the week and adds groceries to the configured Kroger cart for review.

Scans and files household documents with OCR and AI-assisted tagging.

Sidecar that suggests titles and tags for new Paperless documents using a language model.

Wiki holding the canonical, durable documentation for the whole estate.

Database behind Obsidian LiveSync, keeping the vault in step across machines in real time.

Feed reader that collects news and the generated event feeds for the digests.

Serves offline Wikipedia and other reference archives with no internet needed.

Stands alone.

Photo and video library with face and smart search, using machine learning on the Studio.

Streams the household's films and TV to screens around the house.

Stands alone.

Serves audiobooks and podcasts to phones and browsers.

Stands alone.

Pings every service, pages through the notify gateway when one drops and tracks deadman heartbeats.

Outbound tunnel agent publishing selected services to the internet without opening router ports.

Serves the local chat and embedding models that most of the estate's local AI work calls.

Gateway giving local models stable names, per-client keys, usage logs and fallbacks.

Hosts four stateful memory agents whose core memory blocks other tools read and update.

Vector store holding the digital brain, agent scratch memory and corpus search indexes.

Memory server storing and searching distilled decisions and session notes in the vector store.

Self-hosted LLM tracing: prompts, latency and token counts for instrumented products.

Local speech-to-text and text-to-speech behind an OpenAI-style API, used by voice features.

Translates Home Assistant's voice protocol into speaches' OpenAI-style speech API.

A private chat window over the local models, reached only through the gateway.

Older document-chat app that a few workflows still use for workspace search.

Household image, music, video and 3D generator on the Studio, with a chat page and tool endpoint.

Runs Immich's face and smart-search models on the Studio, with a NAS fallback.

Self-hosted licence server that mints and verifies software licence files for the indie apps.

Polls Stripe and Gumroad every two minutes, mints a licence for each sale and emails it.

Support inbox agent that classifies mail, drafts knowledge-base-grounded replies and auto-sends only when a strict gate passes.

Self-hosted durable job runner for the TypeScript products, such as DeviceWatch's MAUDE ingest.

Self-hosted social post scheduler that publishes the weekly product posts.

Self-hosted CRM holding the outreach target companies and their pipeline.

Self-hosted voice-AI agent platform; its first agent speaks a homelab status line.

Workflow engine backing Dograh's voice-agent runs.

Small Go service giving the voice agent a spoken status and brief.

Brings the day's schedule, open work and household updates into one morning brief.

Self-hosted dashboard with synthesised morning, midday and evening views plus an ops and products overview.

Drafts weekly product content, then publishes blog posts, social posts and email broadcasts on a schedule.

Builds prospect lists into the CRM and files draft outreach emails for a human to send.

Turns Meetup groups, bands and venue pages into feeds and a weekly upcoming-events digest.

Builds RSS feeds for sites that lack them.

AI layer over the household budget: nightly categoriser, weekly digest and spending-trend reports.

Two-agent coding loop where one model implements and another adjudicates against written acceptance criteria.

Bookmark manager that crawls saved pages and auto-tags them with a local model.

Private metasearch engine returning JSON results for tools and agents.

Parses PDFs into structured text and tables, with a router choosing fast or deep parsing.

Turns web pages into clean Markdown for ingestion workflows.

The notes vault: the thinking layer that automation reads, writes and indexes.

The vault's local REST plugin; automation writes notes and digests through it.

Start page listing every service, kept in step with the service catalogue.

Stands alone.

Reverse proxy that terminates TLS and routes the internal hostnames to their services.

Self-hosted privacy-friendly web analytics for the public sites.

Host metrics hub graphing CPU, memory and disk on the Studio and NAS, with threshold alerts.

Live container log viewer for the Studio's Docker containers.

Stands alone.

Watches venue pages that have no feed and alerts on change.

Unified notification command: routes a topic to an immediate push, the incident log or a buffered digest.

Docker stack manager that deploys compose stacks and auto-updates the ones allowed to.

Watches a list of container images and notifies when a newer version is published.

Nightly restic backups of the Studio's data and database dumps to the NAS, with a critical subset offsite.

Launcher that fetches secrets from the gateway and injects them into a child process at start.

A second Mac serving one large open-weight model, used only for inference through the gateway.

Runs the house: lights, scenes, sensors and automations, plus a Claude-backed voice assistant.

Add-on that exposes Home Assistant to Claude as MCP tools for reading and editing.

Wake-word microphone that feeds spoken requests into Home Assistant's voice pipeline.

FDA adverse-event monitoring product; its ingest and extraction run partly on the Studio.

Desktop search palette with a retrieval index in the vector store and an MCP search server.

Transcription product whose analysis workflow calls the local model through n8n.

Development laptop where Claude Code works against the repos.

Receives pushes and Home Assistant alerts and runs Shortcuts that trigger home scripts.

E-ink tablet with separate user profiles, switched by a script the phone triggers.