traveler/Netgrimoire
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

New Grimoire

Browse source
This commit is contained in:
traveler 2026-04-12 09:53:51 -05:00
parent 77d589a13d
commit cc574f8aed
157 changed files with 29420 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

64
Pocket-Grimoire/Overview.md Normal file
View file

@ -0,0 +1,64 @@
---
title: Pocket Grimoire
description: Portable travel lab — offline-first, encrypted, self-contained
published: true
date: 2026-04-12T00:00:00.000Z
tags: pocket, portable, travel
editor: markdown
dateCreated: 2026-04-12T00:00:00.000Z
---
# Pocket Grimoire
![pocket-badge](/images/pocket-badge.png)
Pocket Grimoire is a portable, encrypted, offline-first companion to Netgrimoire. It travels. It runs without internet. It tunnels home via WireGuard when connectivity is available. And it doubles as one of the two Vault Grimoire offsite nodes — every time it leaves the house, it takes an encrypted copy of the data with it.
---
## Hardware at a Glance
- **Laptop** — Docker host, ZFS pool `pocket-green` at `/srv/greenpg/`
- **GL.iNet Beryl AX (GL-MT3000)** — travel router, LAN `192.168.8.0/24`, WireGuard peer `PortaPotty`
- **2x Onn 4K streaming boxes** — hotel/TV playback
- **Anker 200W GaN charging station** — one plug for everything
- **SSDs** — Vault (always connected) + Green (personal trips only)
---
## Software Stack
| Service | Purpose | Mode |
|---------|---------|------|
| Jellyfin | Media playback | Read/write |
| Stash (PocketStash, port 9998) | Adult media | Read-only travel mode |
| Wiki.js | Documentation mirror | Pull-only |
| Filebrowser | File access | Read/write |
---
## WireGuard Home Tunnel
WireGuard peer `PortaPotty` (192.168.32.5) connects back to OPNsense on Netgrimoire when internet is available. All management traffic and sync operations use the tunnel.
---
## As a Vault Node
Pocket Grimoire receives a `syncoid` push from `znas` before each trip:
```bash
syncoid znas:vault/Green/Pocket pocket:/srv/greenpg/Green
```
This makes it an offsite encrypted backup node whenever it leaves home. See [Vault Architecture](/Vault-Grimoire/Offsite/Vault-Architecture).
---
## Sections
| | |
|---|---|
| [Hardware](/Pocket-Grimoire/Hardware/Inventory) | Full hardware list, power kit, storage layout |
| [Software](/Pocket-Grimoire/Software/Stack) | Services, Docker config, ZFS pool |
| [Sync & Deployment](/Pocket-Grimoire/Sync/Pre-Travel-Sync) | Pre-travel checklist, syncoid, deployment guide |