Services
Everything below runs on Lana via Docker Compose,
defined in vps-infra —
one directory per service. See Networking
for what “Access (self-hosted)” / “Access (SSO)” / “Authelia (legacy)”
actually mean.
| Service | Hostname | Role | Auth |
|---|---|---|---|
| Gitea | git.spelvin.dev | Git host — vps-infra itself lives here |
Access (SSO) |
| Outline | outline.spelvin.dev | Team wiki | Access (SSO) |
| LiteLLM | litellm.spelvin.dev | LLM proxy — home Ollama models + Claude | Access (SSO), single user |
| Open WebUI | chat.spelvin.dev | Chat frontend for everything in LiteLLM | Access (SSO) |
| Leantime | roadmap.spelvin.dev | Project management | Access (SSO) |
| Plane | plane.spelvin.dev | Project management (being phased out — see below) | App-native (“Sign in with Gitea”, two-hop via Gitea’s own OIDC — no Access Application on this hostname) |
| Plane portfolio timeline | timeline.mickeystech.com | Custom Gantt view over Plane’s API | Unconfirmed — different zone (mickeystech.com, not spelvin.dev), not checked from this wiki |
| FlowViz | flowviz.spelvin.dev | Attack-flow diagramming | Access (self-hosted), single user |
| Windmill | windmill.spelvin.dev | Workflow automation — replaced n8n | Access (self-hosted), single user |
| Jupyter | jupyter (via Caddy) | Personal notebook server | Authelia (legacy) forward-auth, single user |
Migration status
Section titled “Migration status”Most apps have moved from the old Caddy + Authelia forward-auth/OIDC setup
to Cloudflare Tunnel + Access. As of this page, Jupyter is the known
holdout still behind Caddy/Authelia. The top-level vps-infra README
and its Caddyfile comments are stale on this point — they still describe
the old Authelia-for-everything model, including for apps (FlowViz among
them) that have since moved. Don’t trust either without cross-checking
against this page or the live Cloudflare dashboard.
Plane → Leantime
Section titled “Plane → Leantime”Plane is being retired in favor of Leantime. A one-off migration script
(scripts/migrate-plane-to-leantime.py in vps-infra) moved projects and
modules across; scripts/migration_state.json holds the ID mapping from
that run. Plane itself hasn’t been torn down yet as of this writing.
Not covered above
Section titled “Not covered above”- Caddy — the legacy edge reverse proxy, still fronting whatever hasn’t moved to the Tunnel (currently just Jupyter).
- Authelia — the legacy SSO provider,
auth.spelvin.dev. Being wound down as apps migrate to Access; not gone yet. - n8n — removed. Replaced by Windmill; nothing was migrated over (n8n’s data was wiped on removal, by choice).
- Database/cache sidecars for the above (Postgres, MySQL, Redis) aren’t
listed individually — see each service’s own
docker-compose.yml.