control · chrisso.dev

Personal infrastructure launchpad — every management plane, one page.

Access: PUBLIC internet + own login TS Tailscale only SAAS vendor console OOB out-of-band (works if cluster is down) LAN home network

Cloud & Accounts

Oracle Cloud SAAS

OCI Console · 4 tenancies (A1 2/12)

Cloudflare SAAS

DNS · Pages · Tunnels

CF Zero Trust SAAS

Access policies · tunnels

Tailnet · ACLs · DERP

m3dia-stream infra repo

Hosts

oci-1 · Cockpit TS

Control plane (etcd, Traefik)

oci-2 · Cockpit TS

ERPNext · Longhorn

oci-3 · Cockpit TS

jam · Nextcloud · Longhorn

oci-4 · Cockpit TS

Monitoring · SearXNG · Flux

edge-1 · Cockpit TS

Media · Immich · LLM · GPU

edge-1 hardware console

GL-MT6000 (home)

Cluster & Storage

Kubernetes dashboard

Volumes · replicas · snapshots

Ingress routes · health

Cilium network flows

Identity & Monitoring

Authentik PUBLIC

Dashboards · metrics

Metrics · alerts

Apps

Nextcloud PUBLIC

Photos (GPU ML)

Workflow automation

Sounds Bien business

Directus PUBLIC

Media & LLM

Overseerr PUBLIC

Prowlarr PUBLIC

LLM gateway admin

TS links resolve only on the Tailscale tailnet (*.guineafowl-salmon.ts.net / *.m3dia.stream via dnsmasq). OOB stays reachable even if the cluster/ingress is down — Cloud & Hosts planes don't depend on oci-1/Traefik. · Recommend locking this page behind Cloudflare Access.