01Why it exists
Not a rented cloud tier, not a black box
A stack you can open and understand. Storage is one organ among many, routed through a proxy that wires up new services by itself and fronted by a door with no holes punched in the firewall. It's also where the rest of the atlas is meant to live: Weaver and muse are among the first tenants. The Monstrosity console lays the whole thing out, layer by layer.
02Parts list
- The private lineA cheap gigabit switch puts all three machines on one segment. Machine-to-machine traffic never touches the open internet, and static leases keep anything from drifting on reboot.
- Fedora and the source of truthThe Fedora server anchors it, and Samba pulls ten drives and three SSDs, scattered across the boxes, into one shared namespace. The naming is decided before anything mounts.
- Docker, then TraefikEvery service in its own container. Traefik watches the Docker socket and routes a new container the moment its labels appear: no manual proxy edits, ever.
- Cloudflare TunnelThe only front door. cloudflared dials out from the master node, so no inbound port is ever opened on the home firewall. Everything that doesn't need outside reach stays on the LAN.
03Construction
The rule
Isolate the layer before you debug it. Drive, share, container, proxy, tunnel: each keeps its own logs. The console's troubleshooter walks them bottom up, with the real commands (journalctl -k, testparm, docker logs, a curl with a Host header, the tunnel's own log), and stops at the first layer that doesn't look right. It never guesses across layers.
Build log 001
The original entry, with its five phases, the troubleshooting notes and the ignition sequence, is still the source of truth: read build log 001 →
04Tolerances
Pre-ignition: this is the plan, the troubleshooting rules and a working starter stack, not a running cluster. The ignition checklist is still unticked, and the drive-labelling scheme is an open thread. Cloudflare sits in the middle of external traffic, a trade-off the log names out loud and leaves to be revisited. The console's checklist ticks are kept on your device only. First node officially alive: not yet.
what it is not, said plainly
05Inscription
Not a rented cloud tier. Not a black box you trust and forget.
06The same room
- BallastEvery bill on a real calendar, ninety days projected forward, and one honest number: what's safe to spend today
- Sleep CompressionA sleep-restriction protocol turned tracker
- CryptoVaultEncryption you can read to the bottom of: RSA-4096 and AES-256-GCM in one HTML file, with identities, contacts, signatures and files
- Worm EaterAn ingredient scanner for food, cosmetics and personal care that says "I don't know" instead of quietly scoring the unknowns as safe
- DocCrawlerA local document library for the phone
- OmnilogosRead any chapter of the Bible side by side in up to 22 public-domain texts, from the Hebrew, Greek and Latin originals to English and five other languages, and follow shared words and themes through a live graph.