Services

Each service page covers ownership, access paths, checks, and failure modes.

Implementation details stay in conf/services/ and host imports stay under conf/machines/.

Shared baseline

Service area	Baseline
Tailscale	Enabled on every NixOS host with firewall support.
OpenSSH	Enabled on every NixOS host.
PostgreSQL	Local development database baseline.
Redis	Local development cache baseline.
Docker	Local container runtime baseline.

Page	Scope
SearXNG	Local metasearch on Haxorus.
Tailscale	Private network, MagicDNS, Serve, and tailnet policy.
Git Forge	Forgejo on Baxcalibur.
Kavita	Comics, manga, ebooks, and PDFs on Baxcalibur.
Tangled Knot	Tangled knot and SSH guard on Baxcalibur.