# fogserv.cloud - Knowledge Base

This is the machine-readable index of the fogserv.cloud Knowledge Base.
Each entry below links to a full article. For deep scraping, see /llms-full.txt.

Total articles: 249

---

## .templates

[KB Article Template](/.templates/article-template/)

## Enterprise

[Agent Context, Project Architecture, & AI Rules](/Enterprise/ARCHITECTURE/)

## TELOS

[Untitled](/TELOS/)
  title: Telos

## agent

[Agent Reference File](/agent/)

## agentic

[Agentic Workflows (operational patterns)](/agentic/agentic-workflows/)

[AI Server Management (fogserv.cloud)](/agentic/ai-server-management/)

[Failure Recovery Patterns - Retries, Checkpoints, and Resuming Agent Work](/agentic/failure-recovery-patterns/)

[Multi-Agent Communication - Coordination Patterns for Agent Fleets](/agentic/multi-agent-communication/)

## aiml

[Agent Frameworks - Agent Loops, Tool Calling, and When Not To](/aiml/agent-frameworks/)

[Context and Tokens - Context Windows, Cost, and Management](/aiml/context-and-tokens/)

[Document Chunking - Splitting Documents for RAG](/aiml/document-chunking/)

[Embeddings & Vector Databases - Semantic Search with Ollama and Qdrant](/aiml/embeddings-vector-db/)

[LangChain Integration - Ollama + Qdrant With LangChain](/aiml/langchain-integration/)

[LLM Introduction - What Large Language Models Actually Are](/aiml/llm-introduction/)

[Model Quantization - GGUF Quant Levels and Memory Sizing on Ollama](/aiml/model-quantization/)

[Model Selection Guide - Choosing the Right Model for Your Hardware and Task](/aiml/model-selection-guide/)

[Ollama API - Talking to Your Local Models over HTTP](/aiml/ollama-api/)

[Ollama CLI Basics - Command-Line Mastery](/aiml/ollama-cli-basics/)

[Ollama Setup - Run LLMs Locally in Minutes](/aiml/ollama-setup/)

[Prompt Engineering - Practical Prompting for Local Models](/aiml/prompt-engineering/)

[Python LLM Integration - Calling Ollama from Python](/aiml/python-llm-integration/)

[Qdrant Setup - Self-Hosted Vector Database](/aiml/qdrant-setup/)

[RAG Pipeline - Retrieval Augmented Generation with Ollama and Qdrant](/aiml/rag-pipeline/)

## apps

[Apps — fogserv.cloud Projects](/apps/)

## artifacts

[Phase 6 Artifacts — Workflows & Automation](/artifacts/phase6/staging-rollback-backup/)

[Phase 7 Artifact — Settings / Preferences Page Design](/artifacts/phase7/settings-page/)

[Phase 8 Artifacts — Agent Dashboard + Search + Community](/artifacts/phase8/agent-dashboard-search-community/)

## backend

[Authentication Patterns — JWT, Sessions, and OAuth](/backend/authentication-patterns/)

[Bun HTTP — Native HTTP Server with Bun.serve()](/backend/bun-http/)

[Database Integration — Connecting Backends to Databases](/backend/database-integration/)

[Middleware Patterns — Composable Request Handlers](/backend/middleware-patterns/)

[Production Backend — Reliability and Security Patterns](/backend/production-backend/)

[REST API Design — Resources, CRUD, and Conventions](/backend/rest-api-design/)

[Routing Patterns — URL Routing in Backend Services](/backend/routing-patterns/)

[Server Basics — HTTP Servers and Requests](/backend/server-basics/)

## basics

[Bash Scripting Fundamentals](/basics/bash-scripting/)

[Command Line Essentials - Text Processing Power Tools](/basics/command-line-essentials/)

[Day 1: New Developer Onboarding](/basics/day1-new-developer/)

[Git Fundamentals - Version Control for Everyone](/basics/git-fundamentals/)

[Linux Fundamentals - Complete Beginner's Guide](/basics/linux-fundamentals/)

[Package Managers - Installing Software Like a Pro](/basics/package-managers/)

[Programming Fundamentals — Core Concepts Before Languages](/basics/programming-fundamentals/)

[SSH Basics - Secure Shell Complete Guide](/basics/ssh-basics/)

[Text Editors - Your Primary Tool](/basics/text-editors/)

## cicd

[Branch Protection - Forgejo Rules, Required Status Checks, and PR Workflows](/cicd/branch-protection/)

[Caching Strategies - Faster Woodpecker Pipelines with Layer, Dependency, and Volume Caches](/cicd/caching-strategies/)

[CI Monitoring - Pipeline Metrics, Failure Alerts, and Dashboards](/cicd/ci-monitoring/)

[CI Secrets Management - Woodpecker Secrets Done Right](/cicd/ci-secrets-management/)

[CI/CD Concepts - What Is Continuous Integration and Why It Matters](/cicd/cicd-concepts/)

[Deployment Automation - CI-Driven Deploys with SSH, rsync, and Registries](/cicd/deployment-automation/)

[Forgejo Installation - Installing Forgejo with Docker Compose](/cicd/forgejo-installation/)

[Forgejo Introduction - Forgejo as a GitHub Alternative](/cicd/forgejo-introduction/)

[GitOps Pipelines - Push-Based and Pull-Based Delivery from Woodpecker](/cicd/gitops-pipelines/)

[Manual vs Automated - Why Automate Your Workflow](/cicd/manual-vs-automated/)

[Matrix Builds - Testing Across Versions and Architectures](/cicd/matrix-builds/)

[Multi-Stage Builds - Efficient Images in CI Pipelines](/cicd/multi-stage-builds/)

[Repository Setup - Creating, Migrating, and Governing Forgejo Repositories](/cicd/repository-setup/)

[Rollback Procedures - Recovering From Bad Deployments](/cicd/rollback-procedures/)

[Security Scanning - Secrets, Dependencies, and Container Image Scans in Pipelines](/cicd/security-scanning/)

[Self-Hosted vs Cloud CI/CD - Choosing Where Your Pipeline Lives](/cicd/self-hosted-vs-cloud/)

[User Management - Forgejo Users, Orgs, Teams, and Permissions](/cicd/user-management/)

[Webhooks - Forgejo Webhooks for CI Triggers](/cicd/webhooks/)

[Your First Woodpecker Pipeline - Anatomy of .woodpecker.yml](/cicd/woodpecker-first-pipeline/)

[Woodpecker Installation - Self-Hosted CI Wired to Forgejo](/cicd/woodpecker-installation/)

[Testing Woodpecker Pipelines - Lint Locally, Debug on CI](/cicd/woodpecker-pipeline-testing/)

## cloud

[Backup Automation - Systemd Timers, Notifications, and Restore Testing](/cloud/backup-automation/)

[Backing Up to Object Storage - restic with the MinIO S3 Backend](/cloud/backup-to-object-storage/)

[Cloud Storage Concepts - Understanding Cloud Storage Before Building It](/cloud/cloud-storage-concepts/)

[Immich Photo Backup - Self-Hosted Google Photos with Docker Compose](/cloud/immich-photo-backup/)

[Jellyfin Media Server - Docker Deployment and Remote Access](/cloud/jellyfin-media-server/)

[MinIO Setup - Self-Hosted S3-Compatible Object Storage](/cloud/minio-setup/)

[Nextcloud Administration - occ, Users, Apps, Upgrades, and Background Jobs](/cloud/nextcloud-administration/)

[Nextcloud Clients - Desktop and Mobile Sync](/cloud/nextcloud-clients/)

[Nextcloud Collaboration - Office, Talk, Calendar, and Deck](/cloud/nextcloud-collaboration/)

[Nextcloud Setup - Your Personal Cloud in Docker](/cloud/nextcloud-setup/)

[Restic Backups - Encrypted, Deduplicated Backups Done Right](/cloud/restic-backups/)

[S3 API Usage - Working with MinIO via aws CLI and mc](/cloud/s3-api-usage/)

[Storage Backup Strategies - 3-2-1, RPO/RTO, and Backup Tiering](/cloud/storage-backup-strategies/)

[Syncthing Peer-to-Peer Sync - Continuous Replication Without a Server](/cloud/syncthing-peer-to-peer/)

## containers

[Container Best Practices - Production Readiness](/containers/container-best-practices/)

[Container Registry Integration - Harbor Private Registry](/containers/container-registry-integration/)

[Docker Basics - Essential Commands and First Containers](/containers/docker-basics/)

[Docker Compose - Multi-Container Applications Made Easy](/containers/docker-compose-intro/)

[Docker Compose Patterns - Production Best Practices](/containers/docker-compose-patterns/)

[Docker Concepts - Understanding Containers](/containers/docker-concepts/)

[Docker Installation - Getting Started with Containers](/containers/docker-installation/)

[Docker Networking - Container Communication](/containers/docker-networking/)

[Docker Volumes - Persistent Data Management](/containers/docker-volumes/)

[Dockerfile Guide - Building Custom Container Images](/containers/dockerfile-guide/)

[ConfigMaps & Secrets in k0s - Configuration Management](/containers/k0s-configmaps-secrets/)

[Deployments in k0s - Managing Applications at Scale](/containers/k0s-deployments/)

[k0s Helm - Kubernetes Package Manager](/containers/k0s-helm/)

[K0s Ingress - HTTP Routing and Load Balancing](/containers/k0s-ingress/)

[k0s Installation - Production Setup](/containers/k0s-installation/)

[k0s - Lightweight Kubernetes](/containers/k0s-introduction/)

[K0s Monitoring - Prometheus and Grafana](/containers/k0s-monitoring/)

[k0s Multi-Node Clusters - Production Kubernetes](/containers/k0s-multi-node/)

[k0s Networking - CNI and Network Policies](/containers/k0s-networking/)

[Pods & Services in k0s - Core Kubernetes Workloads](/containers/k0s-pods-services/)

[k0s Storage - Persistent Volumes and StatefulSets](/containers/k0s-storage/)

[Kubernetes Concepts - Core Objects and Patterns](/containers/kubernetes-concepts/)

[When Do You Need Container Orchestration?](/containers/orchestration-need/)

[Linkerd Service Mesh - mTLS and Observability](/containers/service-mesh-linkerd/)

## databases

[Backup & Recovery Drill - Recipes and the Quarterly Restore Test](/databases/backup-recovery-drill/)

[CRM/CMS Database Architecture](/databases/crm-cms-architecture/)

[Database Selection - Postgres vs SQLite vs MySQL for Small Services](/databases/database-selection/)

[PostgreSQL Tuning Basics - Memory, Pooling, Indexes, and EXPLAIN](/databases/postgres-tuning-basics/)

[Prisma Connection Management](/databases/prisma-connections/)

[Prisma Migrations Guide - migrate dev/deploy, Shadow DB, and CI](/databases/prisma-migrations-guide/)

[Database Schema Entity Relationship Overview](/databases/schema-overview/)

[SQLite in Production - WAL Mode, Single-Writer Patterns, and Litestream](/databases/sqlite-production-patterns/)

## fogserv

[fogserv.cloud Architecture Overview](/fogserv/architecture-overview/)

[fogserv.cloud Deployment Runbook](/fogserv/deployment-runbook/)

[The /kb/ Browser — Markdown to UI Pipeline](/fogserv/kb-browser/)

## frontend

[Component Library Notes - Conventions, Styling Tokens, and Composition](/frontend/component-library-notes/)

[TanStack Router Routing Patterns - File-Based Routes, Loaders, and Type-Safe Navigation](/frontend/routing-patterns/)

[Tailwind v4 Migration - CSS-First Config, @theme, and Common Breakages](/frontend/tailwind-v4-migration/)

[TanStack Stack (Query + Router + Table)](/frontend/tanstack/)

[Testing Setup - Vitest, Testing Library, and CI Wiring for the Website](/frontend/testing-setup/)

[fogserv.cloud Website Integration Notes](/frontend/website-rebuild/)

## gitops

[Drift Detection Runbook - Detect, Triage, and Reconcile](/gitops/drift-detection-runbook/)

[GitOps (Law of Variation)](/gitops/gitops/)

[Merge Strategies in GitOps Repos - Squash, Rebase, and Main-Branch Discipline](/gitops/merge-strategies/)

[Policy as Code - Admission Policies and CI Manifest Checks](/gitops/policy-as-code/)

## implementations

[Architecture & Implementation Decisions](/implementations/)

## index

[Untitled](/index/)
  title: FogServ Knowledge Base

## infrastructure

[Ansible Basics - Infrastructure Automation Fundamentals](/infrastructure/ansible-basics/)

[Ansible Inventory - Managing Your Infrastructure](/infrastructure/ansible-inventory/)

[Ansible Patterns - Production Best Practices](/infrastructure/ansible-patterns/)

[Ansible Playbooks - Advanced Automation Techniques](/infrastructure/ansible-playbooks/)

[Ansible Roles - Organizing Your Automation](/infrastructure/ansible-roles/)

[Ansible Vault - Securing Your Secrets](/infrastructure/ansible-vault/)

[Bash Provisioning Scripts - Server Setup with Shell](/infrastructure/bash-provisioning-scripts/)

[Cloud-Init Basics - Automated VM Configuration](/infrastructure/cloud-init-basics/)

[Cloud Cost Optimization](/infrastructure/cost-optimization/)

[Disaster Recovery - Plan for the Worst](/infrastructure/disaster-recovery/)

[Documentation as Code - Runbooks That Stay True](/infrastructure/documentation-as-code/)

[Drift Detection - Catch Infrastructure Changes](/infrastructure/drift-detection/)

[GitOps Principles - Git as Source of Truth](/infrastructure/gitops-principles/)

[Immutable Infrastructure - Replace, Don't Modify](/infrastructure/immutable-infrastructure/)

[Infrastructure Testing - Test Your IaC](/infrastructure/infrastructure-testing/)

[Manual Server Setup - Complete Hands-On Provisioning](/infrastructure/manual-server-setup/)

[Packer Introduction - Automated Image Building](/infrastructure/packer-introduction/)

[Secrets Management in Infrastructure as Code](/infrastructure/secrets-in-iac/)

[Infrastructure Security Hardening](/infrastructure/security-hardening/)

[Terraform Basics - Infrastructure as Code](/infrastructure/terraform-basics/)

[Terraform Modules - Reusable Infrastructure](/infrastructure/terraform-modules/)

[Terraform Providers - Multi-Cloud Infrastructure](/infrastructure/terraform-providers/)

[Terraform Proxmox Provider - Self-Hosted Infrastructure](/infrastructure/terraform-proxmox/)

[Terraform State Management](/infrastructure/terraform-state/)

[Terraform Workspaces - Multi-Environment Management](/infrastructure/terraform-workspaces/)

[Why Infrastructure as Code - The Case for Automation](/infrastructure/why-infrastructure-as-code/)

## kb-build-plan

[Knowledge Base Build Plan — Sequential Execution Roadmap](/kb-build-plan/)

## languages

[C++ Basics — Memory, Performance, and Build Systems](/languages/cpp-basics/)

[Go Basics — Concurrent, Compiled, and Clear](/languages/go-basics/)

[PHP Basics — Modern Server-Side Scripting](/languages/php-basics/)

[Python Basics — Python for Scripting and AI](/languages/python-basics/)

[Rust Basics — Safe and Fast Systems Programming](/languages/rust-basics/)

[TypeScript Basics — Type Fundamentals](/languages/typescript-basics/)

## lessons-learned

[Session Learnings & Discoveries](/lessons-learned/)

## migrations

[Docker Hub to Harbor - Container Registry Migration](/migrations/docker-hub-to-harbor/)

[Ghost Content Migration Map](/migrations/ghost-content-migration-map/)

[Migration Planning - Strategic Planning for Your Cloud Exit](/migrations/migration-planning/)

[Migration Risks - Understanding What Can Go Wrong](/migrations/migration-risks/)

[Rollback Strategies - Always Have a Way Back](/migrations/rollback-strategies/)

## networking

[Caddy Reverse Proxy - Caddyfile Patterns and Automatic HTTPS](/networking/caddy-reverse-proxy/)

[Cloudflare DNS - Zone Setup, Proxying, and SSL Modes](/networking/cloudflare-dns/)

[DHCP and Split-Horizon DNS - Local Name Resolution on the LAN](/networking/dhcp-dns-split-horizon/)

[DNS Explained - Resolution, Records, and TTLs End to End](/networking/dns-explained/)

[DNS Fundamentals - The Internet's Phone Book](/networking/dns-fundamentals/)

[DNS Management - Operating the fogserv.cloud Zone](/networking/dns-management/)

[Dynamic DNS - Keeping Records Fresh on a Changing Home IP](/networking/dynamic-dns/)

[Firewalls & nftables - Practical Packet Filtering for Linux Servers](/networking/firewalls-nftables/)

[IP Addressing & Subnets - Understanding CIDR, Masks and Network Math](/networking/ip-addressing-subnets/)

[Load Balancing - Distributing Traffic Across the Fleet](/networking/load-balancing/)

[Monitoring Networks - Watching the Wires](/networking/monitoring-networks/)

[Network Segmentation - Implementing Mgmt, Services and Public Zones](/networking/network-segmentation/)

[Network Topologies - Choosing a Shape for a Small Fleet](/networking/network-topologies/)

[Nginx Configuration - Reverse Proxy for the fogserv Fleet](/networking/nginx-configuration/)

[Reverse Proxy Basics - One Front Door for Every Service](/networking/reverse-proxy-basics/)

[TCP/IP Fundamentals - How the Internet Works](/networking/tcp-ip-fundamentals/)

[Traefik v3 Reverse Proxy - Automatic HTTPS and Label-Based Routing for Docker](/networking/traefik-v3-reverse-proxy/)

[UFW Firewall - Rulesets for the fogserv Fleet](/networking/ufw-firewall/)

[Virtual Networks - VLANs, Bridges and Overlays for the Homelab](/networking/virtual-networks/)

[WireGuard Setup - Road Warrior and Site-to-Site VPN](/networking/wireguard-setup/)

## observability

[Alertmanager Config - Routing, Grouping, Silences, and Escalation](/observability/alertmanager-config/)

[Grafana Dashboards - Visualizing Your Metrics](/observability/grafana-dashboards/)

[Jaeger Tracing - Distributed Tracing with OpenTelemetry](/observability/jaeger-tracing/)

[Loki Logging - Centralized Log Shipping and LogQL](/observability/loki-logging/)

[Metrics vs Logs vs Traces - Choosing the Right Signal for the Job](/observability/metrics-vs-logs/)

[Netdata Basics - Real-Time System Monitoring](/observability/netdata-basics/)

[Node Exporter Setup - Host Metrics for Every Machine](/observability/node-exporter-setup/)

[Prometheus Basics - Pull-Based Metrics Collection](/observability/prometheus-basics/)

[Simple Alerts - Get Notified When Things Break](/observability/simple-alerts/)

[Uptime Kuma Setup - Beautiful Uptime Monitoring](/observability/uptime-kuma-setup/)

[Why Monitor - The Importance of Observability](/observability/why-monitor/)

## phase3-crm-cms-handoff

[Phase 3 CRM/CMS — Endpoint & Workflow Artifacts](/phase3-crm-cms-handoff/)

## phase4-artifacts

[Analytics aggregation](/phase4-artifacts/analytics-aggregation/)

[Bulk send architecture](/phase4-artifacts/bulk-send/)

[Unsubscribe link](/phase4-artifacts/unsubscribe-link/)

[Untitled](/phase4-artifacts/welcome-sequence/)
  // Welcome email sequence: 2-step timing

## problems-solved

[Problems Solved](/problems-solved/)

## research

[AI Server Management](/research/ai-server-management/)

[Dotenvx](/research/dotenvx/)

[GitOps](/research/gitops/)

[Prisma](/research/prisma/)

[Research Synthesis Tools Comparison - Choosing a Knowledge Workflow](/research/synthesis-tools-comparison/)

[Sysadmin](/research/sysadmin/)

[TanStack](/research/tanstack/)

## runtime

[Bun Runtime — Fast All-in-One JavaScript Runtime](/runtime/bun-runtime/)

[Node.js Runtime — V8 and the Server-Side JavaScript Engine](/runtime/nodejs-runtime/)

[Runtime Internals — How Runtimes Work Under the Hood](/runtime/runtime-internals/)

## security

[Certificate Fundamentals - PKI, X.509, and Trust](/security/certificate-fundamentals/)

[Disk Encryption with LUKS - Data at Rest Security](/security/disk-encryption-luks/)

[Fail2ban Setup - Automated Intrusion Prevention](/security/fail2ban-setup/)

[Firewall Basics - iptables and nftables](/security/firewall-basics/)

[Identity Management - Centralized Identity with SSO, Keycloak, LDAP, and OIDC](/security/identity-management/)

[Intrusion Detection Systems (IDS) - Snort and Suricata](/security/intrusion-detection/)

[Let's Encrypt Automation - Free SSL/TLS Certificates](/security/letsencrypt-automation/)

[Network Segmentation - VLANs and Security Zones](/security/network-segmentation/)

[Password Management - Self-Hosted Bitwarden](/security/password-management/)

[RBAC Basics - Role-Based Access Control and Least Privilege](/security/rbac-basics/)

[SSH Security Hardening](/security/ssh-security-hardening/)

[TLS Configuration - Modern Web Server Security](/security/tls-configuration/)

[Two-Factor Authentication - Hardware Keys and TOTP](/security/two-factor-authentication/)

[User Account Security - Least Privilege and Access Control](/security/user-account-security/)

[Vault Authentication - Auth Methods: Token, AppRole, LDAP, Kubernetes](/security/vault-authentication/)

[Vault Introduction - HashiCorp Vault Basics](/security/vault-introduction/)

[Vault Secrets - Storing, Retrieving, and Generating Credentials](/security/vault-secrets/)

[WireGuard VPN - Secure Remote Access](/security/wireguard-vpn/)

## sql

[SQL Aggregation — Summarizing Data with COUNT, SUM, AVG, GROUP BY, and Window Functions](/sql/sql-aggregation/)

[SQL Fundamentals — Your First Queries](/sql/sql-fundamentals/)

[SQL Joins — Relating Tables Together](/sql/sql-joins/)

[SQL Schema — Designing Tables, Constraints, Indexes, and Query Plans](/sql/sql-schema/)

[SQL Transactions — Multi-Statement Operations, ACID Guarantees, and Isolation Levels](/sql/sql-transactions/)

## sysadmin

[Dotenvx — Environment Templating and Secrets Handling](/sysadmin/dotenvx/)

[Log Management - journald, Rotation, and Central Shipping](/sysadmin/log-management/)

[Scheduler Patterns - cron, systemd Timers, and Safe Job Design](/sysadmin/scheduler-patterns/)

[Secrets Management Reference](/sysadmin/secrets/)

[System Administration Basics](/sysadmin/system-admin-basics/)

## tasks

[fogserv.cloud Project Tasks](/tasks/)

## updates

[Updates — Changelog & Release Notes](/updates/)

## web

[Browser JavaScript — DOM, Events, fetch](/web/browser-javascript/)

[CSS Basics — Styling the Web](/web/css-basics/)

[Frontend Tooling — Vite, Tailwind, TanStack Router](/web/frontend-tooling/)

[HTML and the DOM — Page Structure](/web/html-dom/)

[Web Development Basics — How the Web Works](/web/web-basics/)

## wireframes

[fogserv.cloud Wireframes and UX Specifications](/wireframes/)

## workflows

[fogserv.cloud Workflows](/workflows/)