Skip to content

Service matrix

Every *.saxobroko.com hostname mapped to what runs it, what breaks first, and where to troubleshoot (FAQ + Server doc + Guide).

How to use this page

  1. Find the URL that fails
  2. Check Works on LAN? — splits tunnel vs app vs power issues (outage runbook)
  3. Open the FAQ column for symptom-level fixes
  4. Open Server doc for architecture and one-time setup

Core homelab (tunnel + geo block)

URL App Host Port / path FAQ Server / Guide
dash.saxobroko.com Homepage TrueNAS Docker DSH-*, TUN-* homepage
dsm.saxobroko.com TrueNAS UI TrueNAS 443 NAS-*, TUN-* dsm · truenas
stream.saxobroko.com Jellyfin TrueNAS Docker JFY-*, JFL-* Jellyfin
music.saxobroko.com Navidrome TrueNAS Docker NAV-* Navidrome
photos.saxobroko.com Photos TrueNAS Docker PHO-* photos
auth.saxobroko.com Authentik TrueNAS Docker AUTH-* authentik · Auth stack
vault.saxobroko.com Vaultwarden TrueNAS Docker VLT-* Bitwarden
sonarr.saxobroko.com Sonarr TrueNAS Docker ARR-* arr-stack
radarr.saxobroko.com Radarr TrueNAS Docker ARR-* arr-stack
prowlarr.saxobroko.com Prowlarr TrueNAS Docker PRW-* arr-stack
request.saxobroko.com Overseerr TrueNAS Docker OVR-* Media pipeline
lidarr.saxobroko.com Lidarr TrueNAS Docker ARR-* arr-stack

Tunnel and WAF apply to all rows above: cloudflared · WAF · CFL-* · TUN-*.

Special access patterns

URL Access model FAQ
docs.saxobroko.com Cloudflare Pages + Access + Authentik DOC-*, AUTH-*
saxobroko.com Cloudflare Pages (public) PUB-*
status.saxobroko.com SaxoStatus (public) PUB-* · monitoring
weather.saxobroko.com SaxWeather marketing (public) PUB-* · weather station

LAN-only (no public URL)

What IP / path FAQ
TrueNAS direct https://192.168.2.203 NAS-*
Windows PC 192.168.2.200 WIN-*
Media share A:/Media → SMB on NAS NET-004 · windows-shares
UniFi controller Dream Machine SE @ .1 UNI-* · unifi
qBittorrent WebUI LAN port on NAS QBT-* · qbittorrent

Dependency chain (what kills what)

flowchart TB
  subgraph wan [Internet]
    NBN[NBN / ISP]
  end
  subgraph lan [Home LAN 192.168.2.0/24]
    UDM[UniFi Dream Machine SE]
    NAS[TrueNAS 192.168.2.203]
    PC[Windows PC 192.168.2.200]
  end
  subgraph cf [Cloudflare]
    DNS[DNS + WAF]
    TUN[Tunnel]
    PAGES[Pages - docs only]
  end
  NBN --> UDM
  UDM --> NAS
  UDM --> PC
  DNS --> TUN
  TUN --> NAS
  NAS --> Apps[Jellyfin Sonarr Vaultwarden ...]
  PC -->|SMB A:| NAS

If NBN/UDM fails → everything external and LAN internet dies → NET-001.

If NAS fails → all Docker apps + SMB + tunnel origin die → outage runbook.

If cloudflared fails but LAN works → public URLs fail, LAN IPs still work → TUN-*.

If Authentik fails → SSO apps + docs login break; some apps may still load → auth-stack-troubleshooting.md.