🌐 Internet

nginx edge :443 · certbot · security headers

Authelia gate

code-server

Browser-accessible VS Code workspace running upstream code-server for remote editing.

Key	Value
Source dir	`/home/loca/dev/code-server`
Runs as	`cdsr.service`
Restart command	`sudo systemctl restart cdsr.service`
Logs command	`sudo journalctl -u cdsr.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://cdsr.loca.zone/` (expected: 302)
Edge gate detail	`cdsr.loca.zone:6,10 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/cdsr.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/cdsr.loca.zone:6,10,11,22
/etc/systemd/system/cdsr.service:1-15

deek

DeepSeek Harness

Isolated execution harness and web UI running DeepSeek models under dedicated deek user.

Key	Value
Source dir	`/opt/deek/app`
Runs as	`deek.service`
Restart command	`sudo systemctl restart deek.service`
Logs command	`sudo journalctl -u deek.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://deek.loca.zone/` (expected: 302)
Edge gate detail	`deek.loca.zone:14,33 authelia internal authz + authrequest`
Cert lineage	`/etc/letsencrypt/live/deek.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/deek.loca.zone:14,33,37,53
/etc/systemd/system/deek.service:1-20

hyperframes-opmo

HyperFrames Studio

Preview studio satellite for OpenMontage HyperFrames rendering pipelines.

Key	Value
Source dir	`/home/loca/dev/OpenMontage/projects/studio-hyperframes-demo`
Runs as	`opmo-hyperframes-studio.service`
Restart command	`systemctl --user restart opmo-hyperframes-studio.service`
Logs command	`journalctl --user -u opmo-hyperframes-studio.service -n 50 --no-pager`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://hyperframes.opmo.loca.zone/` (expected: 302)
Edge gate detail	`snippets/authelia-location.conf` and `snippets/authelia-authrequest.conf`
Cert lineage	`/etc/letsencrypt/live/opmo-studios.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/opmo-studios.loca.zone:30-55
/home/loca/.config/systemd/user/opmo-hyperframes-studio.service:1-24

icon

Iconloom Foundry

Read-only React cockpit serving candidate icon sets and validating loom snapshots.

Key	Value
Source dir	`/home/loca/dev/iconmania`
Runs as	`iconmania.service`
Restart command	`sudo systemctl restart iconmania.service`
Logs command	`sudo journalctl -u iconmania.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://icon.loca.zone/` (expected: 302)
Edge gate detail	`icon.loca.zone:6,10 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/icon.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/icon.loca.zone:6,10,17,30
/etc/systemd/system/iconmania.service:1-15

klbz

Kobez Gallery

Media gallery review interface for curated artistic collections and asset inspection.

Key	Value
Source dir	`/home/loca/dev/kobez/app`
Runs as	`klbz.service`
Restart command	`sudo systemctl restart klbz.service`
Logs command	`sudo journalctl -u klbz.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://klbz.loca.zone/` (expected: 302)
Edge gate detail	`klbz.loca.zone:6,10,23 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/klbz.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/klbz.loca.zone:6,10,11,23,35
/etc/systemd/system/klbz.service:1-15

less

Paperless

Self-hosted document indexing and archiving system with full-text search.

Key	Value
Source dir	`/home/loca/dev/services/less`
Runs as	`paperless-less-webserver-1`
Restart command	`cd /home/loca/dev/services/less && sudo docker compose restart webserver`
Logs command	`sudo docker logs --tail 50 paperless-less-webserver-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://less.loca.zone/` (expected: 401)
Edge gate detail	`less.loca.zone:20-21 auth_basic with /etc/nginx/.htpasswd_q5vault`
Cert lineage	`/etc/letsencrypt/live/less.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/less.loca.zone:14,20-24
/home/loca/dev/services/less/docker-compose.yml:1-35

lllm

LiteLLM

AI model gateway routing API calls with an edge-gated administrative dashboard.

Key	Value
Source dir	`/home/loca/dev/lllm`
Runs as	`lllm-proxy`
Restart command	`cd /home/loca/dev/lllm && sudo docker compose restart proxy`
Logs command	`sudo docker logs --tail 50 lllm-proxy`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://lllm.loca.zone/` (expected: 302)
Edge gate detail	`lllm.loca.zone:4,10,25,42,57 authelia-location + authrequest on UI routes`
Cert lineage	`/etc/letsencrypt/live/lllm.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/lllm.loca.zone:4,10,11,87
/home/loca/dev/lllm/docker-compose.yml:1-35

midi

Web MIDI

Static browser-based audio synthesizer instrument protected by Authelia forward authentication.

Key	Value
Source dir	`/home/loca/dev/midi`
Runs as	static vhost serving `/home/loca/dev/midi/dist`
Restart command	`cd /home/loca/dev/midi && npm run build`
Logs command	`sudo journalctl -u nginx -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://midi.loca.zone/` (expected: 302)
Edge gate detail	`midi.loca.zone:6,10,16,22,30 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/midi.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/midi.loca.zone:3,6,10,35
/home/loca/dev/midi/package.json:1-30

mxbx

MixBox

Timeline audio review server providing session management and handoff endpoints.

Key	Value
Source dir	`/home/loca/dev/mixbox`
Runs as	`mxbx.service`
Restart command	`sudo systemctl restart mxbx.service`
Logs command	`sudo journalctl -u mxbx.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://mxbx.loca.zone/` (expected: 302)
Edge gate detail	`mxbx.loca.zone:4,7 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/mxbx.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/mxbx.loca.zone:4,7,8,20
/etc/systemd/system/mxbx.service:1-15

odaw

openDAW Studio

Static digital audio workstation interface proxying studio handoff requests to MixBox.

Key	Value
Source dir	`/home/loca/dev/openDAW/packages/app/studio`
Runs as	static vhost serving `/home/loca/dev/openDAW/packages/app/studio/dist`
Restart command	`cd /home/loca/dev/openDAW && npm run build`
Logs command	`sudo journalctl -u nginx -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://odaw.loca.zone/` (expected: 302)
Edge gate detail	`odaw.loca.zone:8,11,24 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/odaw.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/odaw.loca.zone:3,8,11,12,54
/home/loca/dev/openDAW/packages/app/studio/package.json:1-30

omp

OhMyPi

Harness dashboard providing telemetry and session statistics behind Authelia authentication.

Key	Value
Source dir	`/home/loca`
Runs as	`omp-dashboard.service`
Restart command	`systemctl --user restart omp-dashboard.service`
Logs command	`journalctl --user -u omp-dashboard.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://omp.loca.zone/` (expected: 302)
Edge gate detail	`omp.loca.zone:4,7 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/omp.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/omp.loca.zone:4,7,8,17
/home/loca/.config/systemd/user/omp-dashboard.service:1-15

opmo

OpenMontage

Backlot storyboard service managing media project scenes, SSE feeds, and video timelines.

Key	Value
Source dir	`/home/loca/dev/OpenMontage`
Runs as	`opmo.service`
Restart command	`sudo systemctl restart opmo.service`
Logs command	`sudo journalctl -u opmo.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://opmo.loca.zone/` (expected: 302)
Edge gate detail	`opmo.loca.zone:13,23,43,56 authelia-location + authrequest`
Cert lineage	`/etc/letsencrypt/live/opmo.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/opmo.loca.zone:13,23,24,68
/etc/systemd/system/opmo.service:1-15

remotion-opmo

Remotion Studio

Video composition and rendering studio satellite for OpenMontage media.

Key	Value
Source dir	`/home/loca/dev/OpenMontage/remotion-composer`
Runs as	`opmo-remotion-studio.service`
Restart command	`systemctl --user restart opmo-remotion-studio.service`
Logs command	`journalctl --user -u opmo-remotion-studio.service -n 50 --no-pager`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://remotion.opmo.loca.zone/` (expected: 302)
Edge gate detail	`snippets/authelia-location.conf` and `snippets/authelia-authrequest.conf`
Cert lineage	`/etc/letsencrypt/live/opmo-studios.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/opmo-studios.loca.zone:3-28
/home/loca/.config/systemd/user/opmo-remotion-studio.service:1-20

tndm

Tandem Audit

Tandem review interface parsing markdown frame decks over SSE event streams.

Key	Value
Source dir	`/home/loca/dev/tandem-audit`
Runs as	`tndm.service`
Restart command	`sudo systemctl restart tndm.service`
Logs command	`sudo journalctl -u tndm.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://tndm.loca.zone/` (expected: 302)
Edge gate detail	`tndm.loca.zone:6,15,44 authelia-location + authrequest (bearer bypass on /api/)`
Cert lineage	`/etc/letsencrypt/live/tndm.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/tndm.loca.zone:6,15,16,56
/etc/systemd/system/tndm.service:1-15

trlm

Trilium

Hierarchical personal knowledge base container with route-scoped edge auth on password setup.

Key	Value
Source dir	`/home/loca/dev/services/trlm`
Runs as	`trlm-trilium-1`
Restart command	`cd /home/loca/dev/services/trlm && sudo docker compose restart trilium`
Logs command	`sudo docker logs --tail 50 trlm-trilium-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://trlm.loca.zone/` (expected: 302)
Edge gate detail	`trlm.loca.zone:4,6 authelia-location + authrequest on /set-password only`
Cert lineage	`/etc/letsencrypt/live/trlm.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/trlm.loca.zone:4,6,7,32
/home/loca/dev/services/trlm/docker-compose.yml:1-25

App login

code

Coder

Self-hosted cloud development environment provisioning developer workspaces.

Key	Value
Source dir	`/home/loca/dev/coder`
Runs as	`coder`
Restart command	`cd /home/loca/dev/coder && sudo docker compose restart coder`
Logs command	`sudo docker logs --tail 50 coder`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://code.loca.zone/` (expected: 200)
Edge gate detail	None; native application authentication at `/login`
Cert lineage	`/etc/letsencrypt/live/code.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/code.loca.zone:12,24,32,48
/home/loca/dev/coder/docker-compose.yml:1-30

elv3

Eleven3

Voice generation and audio synthesis interface powered by ElevenLabs APIs.

Key	Value
Source dir	`/home/loca/dev/elv3`
Runs as	`elv3.service`
Restart command	`systemctl --user restart elv3`
Logs command	`journalctl --user -u elv3 -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://elv3.loca.zone/` (expected: 303)
Edge gate detail	None; native application authentication redirect to `/auth`
Cert lineage	`/etc/letsencrypt/live/elv3.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/elv3.loca.zone:13,26
/home/loca/.config/systemd/user/elv3.service:1-16

flxr

Fluxer

Self-hosted real-time community messaging platform with media and voice support.

Key	Value
Source dir	`/home/loca/dev/services/flxr/docker`
Runs as	`fluxer-caddy-1`
Restart command	`cd /home/loca/dev/services/flxr/docker && sudo docker compose restart`
Logs command	`sudo docker logs --tail 50 fluxer-caddy-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://flxr.loca.zone/` (expected: 200)
Edge gate detail	None; native application authentication at `/login`
Cert lineage	`/etc/letsencrypt/live/flxr.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/flxr.loca.zone:5,16
/home/loca/dev/services/flxr/docker/docker-compose.yml:1-40

lobe

LobeHub

Multi-model conversational AI workspace connecting to self-hosted LLM endpoints.

Key	Value
Source dir	`/home/loca/dev/lobe`
Runs as	`lobe`
Restart command	`cd /home/loca/dev/lobe && sudo docker compose restart lobe`
Logs command	`sudo docker logs --tail 50 lobe`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://lobe.loca.zone/` (expected: 302)
Edge gate detail	None; application-level Better Auth OIDC integration with Authelia
Cert lineage	`/etc/letsencrypt/live/lobe.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/lobe.loca.zone:16,31,46,59,67,83
/home/loca/dev/lobe/docker-compose.yml:1-45

most

Mattermost

Enterprise collaboration platform providing channel-based messaging and file sharing.

Key	Value
Source dir	`/home/loca/dev/services/most/docker`
Runs as	`docker-mattermost-1`
Restart command	`cd /home/loca/dev/services/most/docker && sudo docker compose restart mattermost`
Logs command	`sudo docker logs --tail 50 docker-mattermost-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://most.loca.zone/` (expected: 200)
Edge gate detail	None; native application authentication at `/login`
Cert lineage	`/etc/letsencrypt/live/most.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/most.loca.zone:5,19
/home/loca/dev/services/most/docker/docker-compose.yml:1-35

opno

OpenNotebook

Research notebook and document exploration tool backed by SurrealDB.

Key	Value
Source dir	`/home/loca/dev/services/opno`
Runs as	`opno-open_notebook-1`
Restart command	`cd /home/loca/dev/services/opno && sudo docker compose restart open_notebook`
Logs command	`sudo docker logs --tail 50 opno-open_notebook-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://opno.loca.zone/` (expected: 307)
Edge gate detail	None; native application authentication redirect to `/login`
Cert lineage	`/etc/letsencrypt/live/opno.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/opno.loca.zone:5,16,30
/home/loca/dev/services/opno/docker-compose.yml:1-30

team

Zulip

Thread-based real-time messaging server organizing topics within team streams.

Key	Value
Source dir	`/home/loca/dev/team`
Runs as	`team-zulip-1`
Restart command	`cd /home/loca/dev/team && sudo docker compose restart zulip`
Logs command	`sudo docker logs --tail 50 team-zulip-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://team.loca.zone/` (expected: 302)
Edge gate detail	None; native application authentication redirect to `/login/`
Cert lineage	`/etc/letsencrypt/live/team.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/team.loca.zone:7,19,27,39
/home/loca/dev/team/compose.yaml:1-40

yuan

SiYuan

Local-first structured note-taking system and personal knowledge repository.

Key	Value
Source dir	`/home/loca/dev/services/yuan`
Runs as	`yuan-siyuan-1`
Restart command	`cd /home/loca/dev/services/yuan && sudo docker compose restart siyuan`
Logs command	`sudo docker logs --tail 50 yuan-siyuan-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://yuan.loca.zone/` (expected: 401)
Edge gate detail	None; native application authentication token challenge
Cert lineage	`/etc/letsencrypt/live/yuan.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/yuan.loca.zone:5,19
/home/loca/dev/services/yuan/docker-compose.yml:1-25

Open

allm

AnythingLLM

Document retrieval-augmented generation chat environment and model orchestrator.

Key	Value
Source dir	`/home/loca/dev/services/allm`
Runs as	`anythingllm`
Restart command	`cd /home/loca/dev/services/allm && sudo docker compose restart anythingllm`
Logs command	`sudo docker logs --tail 50 anythingllm`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://allm.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access without edge gate
Cert lineage	`/etc/letsencrypt/live/allm.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/allm.loca.zone:5,18
/home/loca/dev/services/allm/docker-compose.yml:1-30

b3tl

Beetle

SvelteKit SSR music streaming library and audio player client.

Key	Value
Source dir	`/home/loca/dev/beetle`
Runs as	`b3tl.service`
Restart command	`sudo systemctl restart b3tl.service`
Logs command	`journalctl -u b3tl.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://b3tl.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access without edge gate
Cert lineage	`/etc/letsencrypt/live/b3tl.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/b3tl.loca.zone:5,13
/etc/systemd/system/b3tl.service:10,13,15

bits

Bits

Interactive UI component showcase and generative agent interface.

Key	Value
Source dir	`/home/loca/dev/bits`
Runs as	`bits.service`
Restart command	`sudo systemctl restart bits.service`
Logs command	`journalctl -u bits.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://bits.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access with `snippets/security-headers-app.conf`
Cert lineage	`/etc/letsencrypt/live/bits.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/bits.loca.zone:18,21,32
/etc/systemd/system/bits.service:10,14,17

blld

BLLD

Static e-commerce landing page and product catalogue with rate limiting.

Key	Value
Source dir	`/home/loca/dev/blld.loca.zone`
Runs as	nginx static vhost
Restart command	`sudo systemctl reload nginx`
Logs command	`sudo tail -n 50 /var/log/nginx/error.log`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://blld.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access with `snippets/security-headers.conf`
Cert lineage	`/etc/letsencrypt/live/blld.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/blld.loca.zone:3,5,19,59
/home/loca/dev/blld.loca.zone/index.html:1-30

chat

Chat

Real-time room chat workspace featuring server-sent events.

Key	Value
Source dir	`/home/loca/dev/svelte-chat`
Runs as	`chat.service`
Restart command	`sudo systemctl restart chat.service`
Logs command	`journalctl -u chat.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://chat.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access with `snippets/security-headers-app.conf`
Cert lineage	`/etc/letsencrypt/live/chat.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/chat.loca.zone:8,19,32
/etc/systemd/system/chat.service:10,13,19

comi

CodeMirror

Browser-based rich code editor workspace powered by CodeMirror 6 and Vite.

Key	Value
Source dir	`/home/loca/dev/comi`
Runs as	nginx static vhost
Restart command	`cd /home/loca/dev/comi && npm run build`
Logs command	`sudo tail -n 50 /var/log/nginx/error.log`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://comi.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access with `snippets/security-headers.conf`
Cert lineage	`/etc/letsencrypt/live/comi.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/comi.loca.zone:4,6,15
/home/loca/dev/comi/package.json:6-12

khoj

Khoj

Autonomous personal AI agent providing local desktop and web search over documents.

Key	Value
Source dir	`/home/loca/dev/services/khoj`
Runs as	`khoj-server-1`
Restart command	`cd /home/loca/dev/services/khoj && sudo docker compose restart server`
Logs command	`sudo docker logs --tail 50 khoj-server-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://khoj.loca.zone/` (expected: 200)
Edge gate detail	None; open public search interface
Cert lineage	`/etc/letsencrypt/live/khoj.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/khoj.loca.zone:5,18
/home/loca/dev/services/khoj/docker-compose.yml:1-35

pwiz

Prompt Wizard

Prompt engineering workspace running under Bun with an injected public identity header.

Key	Value
Source dir	`/home/loca/dev/pwiz`
Runs as	`pwiz.service`
Restart command	`sudo systemctl restart pwiz.service`
Logs command	`sudo journalctl -u pwiz.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://pwiz.loca.zone/` (expected: 200)
Edge gate detail	`pwiz.loca.zone:9,27,44 open access with pinned Remote-User: public`
Cert lineage	`/etc/letsencrypt/live/pwiz.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/pwiz.loca.zone:9,27,44,51,61
/etc/systemd/system/pwiz.service:1-15

rckt

RocketChat

Real-time collaboration platform supporting enterprise chat channels and integrations.

Key	Value
Source dir	`/home/loca/dev/services/rckt/docker`
Runs as	`docker-rocketchat-1`
Restart command	`cd /home/loca/dev/services/rckt/docker && sudo docker compose restart rocketchat`
Logs command	`sudo docker logs --tail 50 docker-rocketchat-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://rckt.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access without edge gate
Cert lineage	`/etc/letsencrypt/live/rckt.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/rckt.loca.zone:5,16
/home/loca/dev/services/rckt/docker/compose.yml:1-40

stmx

StoryMatrix

Video script generation and storyboard orchestration studio.

Key	Value
Source dir	`/home/loca/dev/storymatrix`
Runs as	`stmx.service` + `stmx-web.service`
Restart command	`sudo systemctl restart stmx stmx-web`
Logs command	`journalctl -u stmx -u stmx-web -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://stmx.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access proxying web (`:51778`) and API (`:51777`)
Cert lineage	`/etc/letsencrypt/live/stmx.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/stmx.loca.zone:5,14,25
/etc/systemd/system/stmx.service:10,16
/etc/systemd/system/stmx-web.service:10,15,17

surf

SurfSense

Web indexing and retrieval engine synthesizing research snippets from browser history.

Key	Value
Source dir	`/home/loca/dev/services/surf`
Runs as	`surfsense-proxy-1`
Restart command	`cd /home/loca/dev/services/surf && sudo docker compose restart proxy`
Logs command	`sudo docker logs --tail 50 surfsense-proxy-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://surf.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access
Cert lineage	`/etc/letsencrypt/live/surf.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/surf.loca.zone:18,28
/home/loca/dev/services/surf/docker-compose.yml:1-40

svnm

Svnm

SVG animation canvas studio paired with Python audio synthesis sidecar.

Key	Value
Source dir	`/home/loca/dev/svnm`
Runs as	nginx static vhost + `svnm-audio.service`
Restart command	`sudo systemctl restart svnm-audio.service`
Logs command	`journalctl -u svnm-audio.service -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://svnm.loca.zone/` (expected: 200)
Edge gate detail	None; open access with audio API proxy via `snippets/svnm-audio.conf`
Cert lineage	`/etc/letsencrypt/live/svnm.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/svnm.loca.zone:5,12,15
/etc/nginx/snippets/svnm-audio.conf:3
/etc/systemd/system/svnm-audio.service:9,11

tree

KnowledgeTree

Structured graph explorer and document hierarchy indexing service.

Key	Value
Source dir	`/home/loca/dev/knowledge-tree`
Runs as	`knowledge-tree.service`
Restart command	`systemctl --user restart knowledge-tree`
Logs command	`journalctl --user -u knowledge-tree -n 50`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://tree.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access with `snippets/security-headers.conf`
Cert lineage	`/etc/letsencrypt/live/tree.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/tree.loca.zone:4,6,19
/home/loca/.config/systemd/user/knowledge-tree.service:7-9

triv

Trivia Atlas

Geographic and topical trivia game interface generated via static SvelteKit.

Key	Value
Source dir	`/home/loca/dev/triv`
Runs as	nginx static vhost
Restart command	`cd /home/loca/dev/triv && npm run build`
Logs command	`sudo tail -n 50 /var/log/nginx/error.log`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://triv.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access with `snippets/security-headers.conf`
Cert lineage	`/etc/letsencrypt/live/triv.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/triv.loca.zone:3,6,16
/home/loca/dev/triv/package.json:6-14

udyt

Udytor

Visual workspace for interactive diagramming, markdown, and graph drafting.

Key	Value
Source dir	`/home/loca/dev/udytor`
Runs as	nginx static vhost
Restart command	`cd /home/loca/dev/udytor && npm run build`
Logs command	`sudo tail -n 50 /var/log/nginx/error.log`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://udyt.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access with `snippets/security-headers.conf`
Cert lineage	`/etc/letsencrypt/live/udyt.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/udyt.loca.zone:3,4,15
/home/loca/dev/udytor/package.json:6-11

wpqp

WP Quiz Showcase

Containerized WordPress environment hosting comparative quiz plugin benchmarks.

Key	Value
Source dir	`/home/loca/dev/wpqp`
Runs as	`wpqp-wordpress-1`
Restart command	`cd /home/loca/dev/wpqp && sudo docker compose restart wordpress`
Logs command	`cd /home/loca/dev/wpqp && sudo docker compose logs --tail 50 wordpress`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://wpqp.loca.zone/` (expected: 200)
Edge gate detail	None; open guest access without edge gate
Cert lineage	`/etc/letsencrypt/live/wpqp.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/wpqp.loca.zone:6,17
/home/loca/dev/wpqp/docker-compose.yml:1-35

wrdp

WRDP Bench

Benchmark instance for performance profiling and plugin lifecycle testing.

Key	Value
Source dir	`/home/loca/dev/wrdp`
Runs as	`wrdp-wordpress-1`
Restart command	`cd /home/loca/dev/wrdp && sudo docker compose restart wordpress`
Logs command	`cd /home/loca/dev/wrdp && sudo docker compose logs --tail 50 wordpress`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://wrdp.loca.zone/` (expected: 200)
Edge gate detail	None; open access with `snippets/security-headers-app.conf` and `snippets/wrdp-proxy.conf`
Cert lineage	`/etc/letsencrypt/live/wrdp.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/wrdp.loca.zone:6,31,43,47
/etc/nginx/snippets/wrdp-proxy.conf:1
/home/loca/dev/wrdp/docker-compose.yml:1-40

Puter cluster

private page (sign-in required)

Infra

wild.loca.zone

Open wild.loca.zone in new tab

auth

Authelia

Identity provider endpoint serving single sign-on authentication and edge gating.

Key	Value
Source dir	`/home/loca/dev/services/authelia`
Runs as	`authelia` (docker container)
Restart command	`cd /home/loca/dev/services/authelia && sudo docker compose restart authelia`
Logs command	`sudo docker logs --tail 50 authelia`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://auth.loca.zone/` (expected: 200)
Edge gate detail	None; SSO portal endpoint with injected custom styling
Cert lineage	`/etc/letsencrypt/live/auth.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/auth.loca.zone:14-50
/home/loca/dev/services/authelia/docker-compose.yml:1-30

git-omp

Gitea OMP

Git repository hosting satellite attached to the OhMyPi workspace ecosystem.

Key	Value
Source dir	`/home/loca/dev/services/gitea`
Runs as	`gitea-gitea-1` (docker container)
Restart command	`cd /home/loca/dev/services/gitea && sudo docker compose restart gitea`
Logs command	`sudo docker logs --tail 50 gitea-gitea-1`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://git.omp.loca.zone/` (expected: 200)
Edge gate detail	None; application login with anonymous HTTPS clone support
Cert lineage	`/etc/letsencrypt/live/git.omp.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/git.omp.loca.zone:1-24
/home/loca/dev/services/gitea/docker-compose.yml:1-30

loca-portal

Loca Portal

Static landing page and discovery dashboard for all loca.zone vhosts.

Key	Value
Source dir	`/opt/loca-zone`
Runs as	`nginx-reload-hook.path` and `/opt/loca-zone/generate_portal.py`
Restart command	`sudo systemctl start nginx-reload-hook.service`
Logs command	`journalctl -u nginx-reload-hook.service -n 50 --no-pager`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://loca.zone/` (expected: 200)
Edge gate detail	None; static site served directly from `/var/www/loca-zone-root`
Cert lineage	`/etc/letsencrypt/live/loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/loca.zone:1-20
/opt/loca-zone/generate_portal.py

quartz

Quartz Documentation

Upstream framework documentation reference for Quartz static site gardens.

Key	Value
Source dir	`/var/www/quartz-loca/current`
Runs as	`nginx` static root (`quartz-deployer.service` and `quartz-tinker.service` active)
Restart command	`sudo systemctl reload nginx`
Logs command	`sudo tail -n 50 /var/log/nginx/error.log`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://quartz.loca.zone/` (expected: 200)
Edge gate detail	None; public documentation with `wiki_limit` rate limiting
Cert lineage	`/etc/letsencrypt/live/quartz.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/quartz.loca.zone:1-13
/var/www/quartz-loca/current/index.html

wild

Wild Topology

Host-wide discovery engine and live topology verification dashboard.

Key	Value
Source dir	`/home/loca/dev/wild`
Runs as	`zonescope.timer` triggering `zonescope.service`
Restart command	`systemctl --user start zonescope.service`
Logs command	`journalctl --user -u zonescope.service -n 50 --no-pager`
Health probe	`curl -s -o /dev/null -w '%{http_code}' https://wild.loca.zone/` (expected: 200)
Edge gate detail	None; public topology dashboard with no-cache static assets
Cert lineage	`/etc/letsencrypt/live/wild.loca.zone/fullchain.pem`

Sources

/etc/nginx/sites-enabled/wild.loca.zone:1-26
~/.config/systemd/user/zonescope.service:1-9
~/.config/systemd/user/zonescope.timer:1-10
/home/loca/dev/wild/scripts/publish.sh:21,35-38

Tenant

private page (sign-in required)