Initial commit: homelab infrastructure wiki

- Full Obsidian vault content
- Host configs (ice, grizzley, ubuntu, proxmox, truenas, panda, hyte)
- Media stack documentation
- Traefik HA setup
- Automation scripts
- Bachelor party planning

homelab/concepts/subscriptions.md

@@ -0,0 +1,110 @@
+---
+title: Subscriptions & Paid Services
+created: 2026-05-24
+updated: 2026-05-24
+type: concept
+tags: [services, infrastructure, billing]
+confidence: high
+---
+
+# Subscriptions & Paid Services
+
+## Overview
+
+Comprehensive catalog of all paid subscriptions — both self-hosted services (infrastructure Chris pays for) and external SaaS/cloud services.
+
+---
+
+## External Subscriptions (Paid Services)
+
+### Cloud Infrastructure
+
+| Service | Cost | Purpose | Payment Method |
+|---------|------|---------|----------------|
+| **Cloudflare** | ~$20/mo | DNS + proxy + TLS certs for `*.tophermayor.com` | Credit card |
+| **Backblaze B2** | ~$7/mo | Off-site backup storage (Cold tier, ~2TB) | Credit card |
+
+### VPN
+
+| Service | Cost | Purpose | Payment Method |
+|---------|------|---------|----------------|
+| **NordVPN** | ~$12/mo | WireGuard tunnel for media stack downloads | Credit card |
+
+### Development Tools
+
+| Service | Cost | Purpose | Payment Method |
+|---------|------|---------|----------------|
+| **GitHub** | ~$4/mo | Private repos (copilot, actions) | GitHub billing |
+| **Obsidian Sync** | ~$8/mo | Vault sync across devices | Obsidian account |
+
+### Historical / Retired
+
+| Service | Cost | Purpose | Status |
+|---------|------|---------|--------|
+| **Tailnet (Tailscale)** | ~$5/mo/person | VPN mesh for outside players to reach Bedrock servers | Active for Bedrock sharing only |
+| **Backblaze Personal** | — | Decommissioned — B2 replaced this | Retired |
+| **Google Workspace** | — | Decommissioned — moved to self-hosted | Retired |
+
+---
+
+## Self-Hosted Services (Infrastructure You Pay For)
+
+These are services Chris runs on homelab hardware. The "cost" is the hardware + power + internet, not a subscription fee.
+
+### Primary Infrastructure Hosts
+
+| Host | Hardware | Cost Basis | Role |
+|------|----------|-----------|------|
+| **ubuntu** (Proxmox VM) | Intel NUC or similar | Power + hardware amortized | ~70 containers: Traefik, media stack, Gitea, monitoring |
+| **grizzley** | Raspberry Pi 5 | ~$150 one-time + power | Edge ingress, Traefik ACME, Minecraft Bedrock, Hermes |
+| **ice** | Raspberry Pi 4 | ~$100 one-time + power | OpenCode control node, Hermes gateway |
+| **pve** (Proxmox) | Bare metal | ~$800 one-time + power | Hypervisor for ubuntu VM + TrueNAS VM |
+| **truenas** | TrueNAS SCALE VM | Runs on pve | 36TB raw storage (ZFS), NFS exports |
+
+### Self-Hosted Services (No Subscription Fee)
+
+All of these run on homelab hardware — no per-service license fee:
+
+| Service | Host | URL | Purpose |
+|---------|------|-----|---------|
+| **Traefik** | ubuntu + grizzley | `traefik.local.tophermayor.com` | Reverse proxy / ingress |
+| **Authentik** | ubuntu | `auth.tophermayor.com` | SSO identity provider |
+| **Gitea** | ubuntu | `gitea.tophermayor.com` | Private Git server |
+| **Jellyfin** | grizzley | `jellyfin.tophermayor.com` | Media streaming |
+| **Immich** | ubuntu | `immich.tophermayor.com` | Photo/video backup |
+| **Sonarr/Radarr/Lidarr** | ubuntu | `sonarr.local.tophermayor.com` etc. | Media automation |
+| **Prometheus + Grafana** | ubuntu | `grafana.local.tophermayor.com` | Monitoring |
+| **Home Assistant** | panda | `ha.tophermayor.com` | Smart home hub |
+| **Vaultwarden** | grizzley | `vaultwarden.tophermayor.com` | Password manager |
+| **OpenCode** | ice + ubuntu | `opencode.tophermayor.com` | AI coding assistant |
+| **Hermes Agent** | grizzley + ice | Port 8644 | Telegram AI agent |
+| **Navidrome** | ubuntu | — | Music streaming |
+| **Kavita** | ubuntu | — | Ebook/comic reader |
+| **Audiobookshelf** | ubuntu | — | Audiobook/podcast server |
+| **Tdarr** | ubuntu | `tdarr.local.tophermayor.com` | Media transcoding |
+| **Komodo** | grizzley | `komodo.local.tophermayor.com` | Container management |
+| **Uptime Kuma** | grizzley | — | Uptime monitoring |
+| **Minecraft Bedrock** | grizzley | — | Game server |
+
+---
+
+## Cost Summary
+
+| Category | Monthly Cost |
+|----------|-------------|
+| Cloud services (Cloudflare + Backblaze) | ~$27/mo |
+| VPN (NordVPN) | ~$12/mo |
+| Developer tools (GitHub + Obsidian) | ~$12/mo |
+| Hardware (amortized over 3 years) | ~$30/mo |
+| **Total** | **~$81/mo** |
+
+---
+
+## Related
+
+- [[ubuntu]] — primary Docker host running most services
+- [[grizzley]] — edge ingress node
+- [[ice]] — OpenCode control node
+- [[truenas]] — storage with B2 backup tier
+- [[media-stack]] — media automation services
+- [[monitoring-pipeline]] — alerting and observability