Skip to content
Spelvin Wiki

Pam (NAS)

Synology DS1517+, on the home network at 192.168.1.16 (SSH alias nas) and also on the tailnet as pam (100.109.83.48). 7 TB volume, ~500 GB used.

Docker runs via Synology’s Container Manager (docker lives at /usr/local/bin/docker, not on the default $PATH; the nas SSH user has passwordless sudo scoped to that one binary, not general root).

What’s actually running

Section titled “What’s actually running”

Active — a monitoring stack (Compose project infra, /volume1/docker/monitoring/infra/docker-compose.yml):

  • Grafana, running a custom grafana-lunar-outpost image with GF_USERS_DEFAULT_THEME=lunar-outpost set by default. This predates — and wasn’t cross-referenced by — the Lunar-Outpost design system repo’s own “already shipped” table; worth adding it there as a sixth canonical surface.
  • InfluxDB 2, bucket homeassistant, org home — this is where Home Assistant’s metrics land for long-term storage and the Grafana dashboards read from.

Both on the infra_default Docker network, restart: unless-stopped, exposed on the LAN at :3000 (Grafana) and :8086 (InfluxDB).

Stopped, but present — a second constellation of containers, all exited ~11 days before this was last checked (uniform timing suggests a NAS reboot or mass stop, not per-project retirement), corresponding to repos in ~/dev on the Mac:

  • solar_* (solar_ha_control, solar_decision_engine, solar_modeling, solar_forecast, solar_extractor, solar_dashboard, solar_timescaledb) — the solar-energy-optimizer project. Has its own TimescaleDB, separate from the InfluxDB above.
  • comfort_air_* (comfort_air_ha_runner, comfort_air_engine, comfort_air_extractor) — the comfort-air-controller project.
  • household-ai-scheduler, household-ai-discord, ollama-embeddings — the household-ai-advisor project, including a Discord bot.

Whether these are meant to be running again or were deliberately stopped is unconfirmed from the outside — worth checking before assuming either way.

Role

Section titled “Role”

Pam is home-automation compute and metrics storage, not a general backup/file target — despite being a NAS, nothing here is being used for bulk storage or as a backup destination for Lana or Krieger. Lana currently has no offsite/off-box backup path at all; if one gets built, Pam (already on the tailnet, already reachable from Lana) is the obvious candidate.

Gaps to fill in

Section titled “Gaps to fill in”
  • Whether the stopped solar_*/comfort_air_*/household-ai-* stacks should be running, and if so, why they aren’t.
  • DSM version and what else (if anything) runs outside Docker — file shares, Synology’s own packages, etc.
  • The credentials embedded in the infra stack’s container env (Grafana/InfluxDB admin passwords, an InfluxDB API token) turned up in plain text during this audit — worth rotating regardless of whether they’re otherwise exposed anywhere.