484b2e6272
DNS topology: AdGuard removed, Technitium authoritative + DoT + ad blocking
...
- Remove AdGuard Home from all service catalogs, deployment phases,
persistence tables, and network architecture docs
- Update Technitium notes: authoritative .ai.home zone, recursive resolver,
DoT forwarder to Cloudflare (tls://1.1.1.1), built-in ad blocking
- Resolve open questions #2 (Technitium upstream) and #3 (AdGuard layout)
- Add dns-topology.md: complete DNS architecture diagram, zone details,
client assignments, Tailscale integration, troubleshooting table,
migration history (AdGuard deployed → paused → removed)
2026-05-29 21:01:24 -04:00
f18b978602
fix(Chunk4): purge all Pi-hole references from split files
...
- 08-deployment-phases: Pi-hole → AdGuard Home in Phase 1 order
- 09-open-questions: blocker replaced, decision marked resolved
- 10-appendix: removed from DockerHub table, count 16→15, dir pihole/→adguard/
- 05-network-architecture: port allocation DNS label updated
- All mirrored to master PRD
2026-05-27 13:10:35 -04:00
b7cc09cca2
fix(Chunk3): complete Pi-hole removal, update ACL policy
...
- Replaced remaining Pi-hole references with AdGuard throughout master PRD
- Constraints, Service Catalog, Data Persistence, Open Questions, Appendix all updated
- ACL policy: fixed placeholder (MK7,MK7,MK7,MK7) to actual worker nodes
- Appendix skeleton: removed pihole/ directory, updated image count 16→15
- Outstanding Decisions: Pi-hole inclusion marked as resolved
2026-05-27 13:08:50 -04:00
a3fc718a34
fix(Chunk2): reconcile PRD with live fleet state
...
- AdGuard Home: Replicated(2) → Replicated(1) (single instance on MK7)
- Portainer: Manager Constraint → Replicated(1) (deployed as replicated, not manager-only)
- Beszel Agent: Global → Pending (not yet deployed across workers)
- DNS Resolution: Added status table — Technitium deployed but *.ai.home zone not yet authoritative
- Swarm service count: 16 → 15 active + 1 pending
All changes mirrored to split files and master PRD.
2026-05-27 12:03:06 -04:00
b873e981c7
Remove Vaultwarden/Nextcloud from swarm catalog — they exist on Neo. Add 'Existing External Services' section.
2026-05-25 18:29:15 -04:00
f0ed97d25a
Fix catalog: Swarm placements (Global, Replicated, Manager Constraint), remove per-node assignments
2026-05-25 18:27:03 -04:00
fea42f892b
Remove Mark5/Bones/Neo/Mark44 — G9 Swarm Cluster is the ONLY deployment target
...
All services reassigned to MK7 (Swarm Manager) or swarm-distributed.
Per Bobby: Mark5, Bones, Neo, Mark44 are NOT part of this homelab services stack.
Phase 1 infra (Traefik, DNS, AdGuard, Portainer, Prometheus, Beszel, Dozzle, Authelia, Homepage) → MK7
Phase 2 media (Jellyfin, Sonarr, Radarr, Prowlarr) → Swarm distributed
Phase 3 dashboards (Grafana, Homepage) → Swarm distributed
Also updates:
- Backup target: MK7 secondary storage (was Bones)
- Network/DNS/Security model: all refs to Bones/Neo/Mark5/Mark44 corrected
2026-05-25 18:24:22 -04:00
4cff1b5e48
Initial: Iron Legion Homelab Services Stack PRD
...
Verifies 16 DockerHub images, assigns target nodes per locked policy,
defines 3-phase deployment order (Infra → Media → Polish).
Domain: *.ai.home
No public internet exposure.
Services: Traefik, Technitium DNS, AdGuard Home, Prometheus, Grafana,
Beszel, Dozzle, Portainer, Homepage, Authelia, Vaultwarden, Jellyfin,
Sonarr, Radarr, Prowlarr, Nextcloud
2026-05-25 17:25:40 -04:00
