🏗️ Infra · jimmygan.com

Last updated: July 15, 2026 · nas-tools repo

🖥️ Machines

DS224plus NAS

Synology NAS — primary compute & storage

📍 192.168.31.222 🔗 100.78.131.124
Runs: Caddy, Authelia, Gitea, Docker (26 containers)

free-amd-caddy VPS

Public-facing Caddy reverse proxy

📍 161.33.182.109 🔗 100.109.198.126
Ports: 80/443 → Caddy · 8443 → xray

oracle-tokyo VPS

GFW bypass relay + webdav

📍 158.101.140.85
Runs: xray(VLESS), nginx(webdav), CI builds

macbook-pro Local

Daily driver — Hermes Agent, reasonix

🔗 100.120.243.51
Runs: reasonix, Hermes, dev environment

🌐 Traffic Flow

Browser → code.jimmygan.com
  → Cloudflare DNS → caddy-vps (161.33.182.109:443)
  → Authelia auth → NAS (Tailscale:100.78.131.124)
  → SSH tunnel port 18387 → Mac reasonix :8787
Browser → *.jimmygan.com
  → Cloudflare DNS → caddy-vps (161.33.182.109:443)
  → Authelia auth → NAS (Tailscale:100.78.131.124)
  → Docker container :port

🔗 Services

DomainBackendPortAuth
auth.jimmygan.comAuthelia9092—
nas.jimmygan.comnas-dashboard (Python)40002FA
code.jimmygan.comreasonix (Mac via SSH tunnel)18387→87872FA
git.jimmygan.comGitea33002FA
photos.jimmygan.comImmich22831FA
music.jimmygan.comNavidrome45331FA
media.jimmygan.comJellyfin80961FA
books.jimmygan.comAudiobookshelf133781FA
cortex.jimmygan.comCortex (FastAPI)80061FA
yt.jimmygan.comt-youtube80011FA
vault.jimmygan.comVaultwarden82222FA
n8n.jimmygan.comn8n56782FA
speed.jimmygan.comSpeedtest8080None
infra.jimmygan.comStatic HTML—None

🐳 NAS Docker Stack

ContainerPortStatus
caddy8443/8880 up
authelia9092 up
gitea / gitea-db / gitea-runner3300 up
immich-server / ml / db / redis2283 up
jellyfin8096 up
navidrome4533 up
vaultwarden8222 up
n8n5678 up
nas-dashboard / nas-dashboard-dev4000/4001 up
cortex8006 up
t-youtube8001 up
reasonix (NAS — deprecated)— stopped (moved to Mac)
openconnector3002 up
lldap3890 up
paperless8010 up
pixman / pixman-nginx5050 up
stirling-pdf8030 up
watchtower— up
dnsmasq53 up

🔐 Authentication

Authelia (auth.jimmygan.com) on NAS with LLDAP backend.

GroupAccess2FA
lldap_adminAll admin servicesRequired
dashboard_memberDashboard, ytRequired
familyMusic, media, books, photos, pdf1FA only
publicspeed, infraNone

🛣️ Routing

LayerWhatWhere
DNSCloudflare (proxied)→ caddy-vps (161.33.182.109:443)
Public TLScaddy-vps Caddy→ Tailscale 100.78.131.124:port
Internal TLSNAS Caddy (8443)→ localhost:port
GFW bypassoracle-tokyo xray (443)→ VLESS → NAS
reasonix (Mac)SSH tunnel (Mac→NAS:18387)→ Mac reasonix :8787

📦 Repos

RepoGiteaDescription
nas-toolsgit.jimmygan.com/jimmy/nas-toolsNAS tooling, infra docs, CI pipeline
cortexgit.jimmygan.com/jimmy/cortexAI agent task system (FastAPI + Svelte)
reasonixgit.jimmygan.com/jimmy/reasonixCustom Reasonix fork (light mode)
t-youtubegit.jimmygan.com/jimmy/t-youtubeText-based YouTube digest
openconnectorgit.jimmygan.com/jimmy/openconnectorCredential gateway fork
infra.jimmygan.com · Source in nas-tools/docs/infra/