AKGuidebooks Home Server Admin

Extras

Server notebook (fill in)#

Print this page or copy it into your notes. Fill it in as you go.

No secrets here

Never write passwords, passphrases or private keys on this page. Those go in a password manager. The last column just says which password-manager entry holds each secret.

The machine#

Item Value
Computer model
Installed on (date)
Debian version (cat /etc/os-release)
Server name (hostname)
Username
Home-network address (reserved in router?)
Tailscale name
Tailscale address (100.…)

Secrets: where they're stored#

Secret Password-manager entry name
Server login password (for sudo)
Wi-Fi password
Mac SSH key passphrase
Windows SSH key passphrase
Phone SSH key passphrase
Samba (file sharing) password
Backup (restic) password
Settings backup (gpg) passphrase
Tailscale account login + 2FA

Devices allowed to log in#

Device Key name (end of line in authorized_keys) Added on Tailscale installed?

AI#

Item Value
llama.cpp build number
Model file in use
Other model files
Documents folder searched by Recoll
Copy of aisystem kept at

Drives#

Drive (model, size) Label Mounted at UUID (first 8 characters)
files /srv/files
backup /srv/backup

Progress#

  • 1–5 Linux installed
  • 6–10 SSH with keys, passwords off
  • 11 Automatic updates
  • 12 Firewall
  • 13 Lid setting (laptops)
  • 14 Tailscale, key expiry disabled
  • 15 Drives mounted
  • 16 File sharing
  • 17 Backups + restore tested
  • 19 Heat test passed
  • 20–22 Model installed, running as a service, kept offline
  • 23 Chat through the tunnel works
  • 24 Document search and ask-pages work
  • 25 Agent system (optional)
  • 27 Settings snapshot saved (folder: ______)
  • 28 SSH tightened, tunnels still work
  • 29 Firewall: no "Anywhere" SSH; router checked
  • 30 Clock synchronised
  • 31 Fail2ban running
  • 32 Cockpit on 127.0.0.1 only
  • 33 Encrypted settings backup + restore test, copy on computer
  • 34 Reboot test passed
Made by Anish · 2026