docs: correct VPS service recap — drop portainer/syncthing, confirm audiobookshelf

portainer and syncthing were never actually agreed to, and
audiobookshelf-with-remote-home-library access (over NetBird or wg-easy)
was confirmed, not just floated — lyrion remains the only still-open item
from that same idea.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TBtExJcqxnokyZZKmphdug
This commit is contained in:
Claude
2026-08-09 16:57:11 +00:00
parent 0fde1a2542
commit 1b54fdbeb3
+14 -11
View File
@@ -80,10 +80,9 @@ no transcoding/conferencing/heavy-video load in this profile, so CPU has
large margin and RAM sits around 2.0-2.7GB idle with the core stack alone. large margin and RAM sits around 2.0-2.7GB idle with the core stack alone.
**Utility adds, agreed:** **Utility adds, agreed:**
- `ntfy`, `wg-easy`, `portainer`, `syncthing`, `homebox`, `actualbudget`, - `ntfy`, `wg-easy`, `homebox`, `actualbudget`, `mealie`
`mealie`
**Explicitly declined:** `vaultwarden` **Explicitly declined:** `vaultwarden`, `portainer`, `syncthing`
**Remote / cross-VLAN access:** NetBird — hosted control plane (not **Remote / cross-VLAN access:** NetBird — hosted control plane (not
self-hosted), client-only, with its embedded SSH server enabled self-hosted), client-only, with its embedded SSH server enabled
@@ -106,17 +105,21 @@ VPS with no per-pair config) plus a `sync-ssh-aliases.sh` companion script
generates `~/.ssh/config` Host aliases) is already built and pushed generates `~/.ssh/config` Host aliases) is already built and pushed
(`claude/vps-capacity-assessment-r57vw3`, commit `4a0ec63`). (`claude/vps-capacity-assessment-r57vw3`, commit `4a0ec63`).
**Floated, not yet decided:** running `lyrion` (music) and/or **Confirmed:** `audiobookshelf` on the VPS with HTTPS via Caddy, but
`audiobookshelf` on the VPS with HTTPS via Caddy, but pointing them at a pointing it at a home-hosted library over a VPN tunnel (NetBird or wg-easy,
home-hosted library over a VPN tunnel instead of storing media locally — whichever link reaches that box) instead of storing audiobooks locally —
architecturally sound (both services already just bind-mount a host path; `services/audiobookshelf.sh` already just bind-mounts a host path, so this
point it at a network-mounted share instead) and avoids the disk/CPU means mounting a network share from that tunnel at the mount point instead
tradeoffs of a local media library, but real bandwidth depends on home of a local directory. Avoids the disk/CPU tradeoffs of a local media
upload speed, which wasn't checked. library; real bandwidth depends on home upload speed, which wasn't checked.
**Floated, not yet decided:** `lyrion` (music) doing the same
home-library-over-VPN thing — same pattern as `audiobookshelf` above,
architecturally sound, just not explicitly confirmed yet.
**Explicitly out of scope for this box** (wrong fit, not "can't run"): **Explicitly out of scope for this box** (wrong fit, not "can't run"):
- Local media servers storing media on the VPS (`emby`, `jellyfin`, - Local media servers storing media on the VPS (`emby`, `jellyfin`,
`immich`, `audiobookshelf`/`lyrion` *without* the home-library-over-VPN `immich`, and `lyrion`/`audiobookshelf` *without* the home-library-over-VPN
approach above) — disk-hungry, and transcoding CPU load risks contending approach above) — disk-hungry, and transcoding CPU load risks contending
with active calls. with active calls.
- AI stacks (`ai-stack`, `ai-gpu`, `iopaint`, `paintplus`) — need real - AI stacks (`ai-stack`, `ai-gpu`, `iopaint`, `paintplus`) — need real