System Setup

System Change log

2026-10-19 Monday Complete 30-Service / 40-Container Rootless Podman Cutover & Docker Decommissio...

NSS + GDM Issue

1. GDM Requests a Dynamic User When GDM starts up it attempts to launch the graphical login scree...

Web-based Shell

Web based SSH Instant Access

This is a browser-based SSH terminal service ( webshell.drheck.dev) authenticated via Authentik S...

Customization

Webshell Configuration Guide Per-user web terminal preferences are stored in ~/.config/webshell/...

KASM Container Build

Archived / Decommissioned (2026-10-19): Kasm Workspaces on ul has been decommissioned. This page...

GPG Keys

Current Luke https://keys.openpgp.org/search?q=lukeisgreat@gmail.com pub rsa4096 2019-11-30 [SC...

CrowdSec & OpenBSD PF Perimeter Security Setup

1. Overview & Architectural Concept This document outlines the distributed intrusion detection an...

Service List

Runtime Architecture Note: All 30 containerized applications on ul run under rootless Podman Qua...

SSH Command Tracking Guide

Detail of command execution auditing and tracking across human SSH sessions and AI agent sessions...

Agent's Guide to Wiki

Agent Guide: Updating BookStack Wiki Pages This guide outlines how AI agents can directly query, ...

Backup Process

1. Overview & Architecture This server ( ul) implements an automated, multi-tiered backup system ...

Studio PIKVM

This document details the network architecture, perimeter/host firewall projections, Authentik Si...

Service Update Process

This document outlines the standard operational procedures for updating all containerized and nat...

NextCloud OCC

occ (ownCloud/Nextcloud Console) is Nextcloud's command-line interface for configuration, mainten...

sunshine remote setup

This guide documents the complete, native, headless gaming and remote streaming stack on Arch Lin...

Local models

System Overview & Hardware Architecture The local AI inference stack on ul leverages dedicated A...

Local Grill Monitoring Setup

System Overview: The Local Grill Monitoring Setup provides a 100% self-hosted, cloud-free telemet...

VPN

Overview & Architecture This document describes the modern, high-performance WireGuard VPN servic...

Minecraft Worlds

Quickstart: Bring a World Up Create via Web Control Plane ( https://mc.drheck.dev) or CLI ( ipctl...

amux - Agent modified tmux

Overview amux (Agent-Modified tmux) is a custom build of tmux designed to provide clean, robust b...

subocr service

Service Overview: SubOCR (https://subocr.drheck.dev/) is an end-to-end Japanese burned-in video s...

ip cameras

Service Summary: The DrHeck Camera Hub ( https://cam.drheck.dev) provides automatic LAN discovery...

podman

Overview: All 30 containerized services (41 containers total) on ul run exclusively under rootle...