Siklawi Citadel // Recruiter & Operational Gateway

Recruiter Inspector: Explore the full interactive hierarchical infrastructure tree or dive into individual subsystem cards to inspect real topologies, hardware allocations, and engineering implementations.

🏰

CITADEL HOMELAB // DISTRIBUTED INFRASTRUCTURE FABRIC

Dual-NIC Proxmox VE Bare-Metal + Zero-Trust Tailscale WireGuard + Edge Reverse Proxy

🌐

1. Edge Ingress, Dynamic DNS & Zero-Trust Mesh

Caddy v2.8 ACME + DuckDNS API + Tailscale WireGuard

4 Domains / Ports 80, 443 ▶

All incoming traffic terminates at high-performance Caddy v2 reverse proxy running directly on CT105. ZeroSSL and Let's Encrypt certificates are provisioned and renewed fully automatically. Split-horizon DNS maps external requests through DuckDNS WAN, while internal cluster nodes communicate over encrypted WireGuard mesh interfaces (100.x.x.x) with no open router WAN ports.

Citadel Ingress Gateway & Telemetry Server

siklawi.duckdns.org portal.siklawi.duckdns.org TCP :7500 Python 3.11 aiohttp + systemd

Primary public entrance. Routes to the unified Citadel Portal, providing authenticated recruiter dashboards, live hardware telemetry polling, and persona gateway routing.

Technical Implementation: Built on asynchronous Python aiohttp.web daemon. Actively probes 24+ sockets simultaneously via non-blocking TCP handshakes to compute true round-trip latency in milliseconds. Exposes kernel load averages from /proc/loadavg, memory exhaustion from /proc/meminfo, and uptime without third-party agent overhead.

Homarr Management Dashboard

homarr.siklawi.duckdns.org TCP :7575 Docker Container (CT 105)

Internal homelab dashboard consolidating container health, media release calendars, and direct administrative controls for authorized operators.

🖥️

2. Compute Fabric & Bare-Metal Hypervisor

Proxmox VE 9.1.9 (Kernel 7.0.2-2-pve) on AMD Ryzen 5 2600

16GB RAM / 63+ Days Uptime ▶

Bare-metal Type-1 hypervisor hosting edge networking and application infrastructure. Configured with dual Linux bridges (vmbr0 WAN, vmbr1 LAN) separating untrusted carrier traffic from internal virtual networks. Features NVMe boot/storage pools, SSD high-speed media cache, and bulk HDD backup pools.

OpenWrt Edge Router (VM 125)

192.168.3.50 TCP :80 / :443 KVM VM (Dual NIC Passthrough)

Dedicated virtual router handling NAT routing, DHCP leasing, internal DNS caching, and traffic shaping.

Engineering Architecture: Implements CAKE (Common Applications Kept Enhanced) SQM active queue management to completely eliminate bufferbloat under full saturation. Terminates site-to-site WireGuard tunnels directly at the network edge.

Core Application Host (Debian CT 105)

100.76.195.90 / 192.168.3.217 SSH :22 / Microservices Proxmox LXC Container

High-efficiency Linux container hosting Docker Engine, systemd daemons, Caddy proxy, and local Samba SMB shares. Near-zero virtualization overhead with direct kernel filesystem passthrough.

🧠

3. On-Premise Local AI & LLM Cluster

Mowy 24/7 llama-server + RX 9070 16GB + Laptop 8GB + Triad Swarm

Zero Cloud API Dependency / Fast Flash Attention ▶

Distributed neural compute cluster capable of local inference across multi-tier hardware: 24/7 headless server for continuous automation, heavy desktop GPU for high-parameter coding models, and offline mobile workstation for edge travel. Zero private data ever leaves the local network boundary.

Mowy 24/7 Dedicated llama-server Node

llm.siklawi.duckdns.org 100.77.161.22:8081 Gemma-4-E4B / Qwen 2.5 (Q4_K_M)

Always-on headless inference node exposing high-performance OpenAI-compatible /v1/chat/completions endpoint for smart home triggers, recipe generation, and background agent loops.

Performance Profile: Running optimized C++ llama-server with continuous batching and flash attention enabled. Sustains 45+ tokens/second prompt ingestion with sub-30ms time-to-first-token.

Heavy GPU Inference Rig (AMD RX 9070 16GB VRAM)

ROCm / Vulkan Accelerated Qwen 3.6 29B / Qwen 2.5 Coder 32B DeepSeek-R1-Distill-14B

Primary engineering workstation running 32K context quantized weights with full GPU layer offloading for complex codebase synthesis and deep logical reasoning.

Triad Citadel Autonomous Multi-Agent Swarm

swarm.siklawi.duckdns.org TCP :8888 Atlas + Nexus + Cipher State Machine

Tri-persona autonomous monitoring engine: Atlas (Infrastructure & Kernel), Nexus (Media & Transcoding), and Cipher (IoT Scale & Sensor Mesh) coordinating automated recovery actions.

🍳

4. Smart Kitchen, Hardware Scale & Computer Vision Ingestion

HX711 24-bit ADC + Android CameraX/OpenCV + FastAPI Backend

kitchen.siklawi.duckdns.org / Port 8000 ▶

End-to-end IoT and computer vision pantry management platform. Custom Android app captures physical grocery receipts, cleans and normalizes perspective via OpenCV, extracts line items via offline ML Kit OCR, and commits inventory to FastAPI backend. Hardware scale measures ingredient depletion in real-time.

Smart Kitchen Hub & Inventory API

kitchen.siklawi.duckdns.org scale.siklawi.duckdns.org TCP :8000 FastAPI + SQLite + Tailwind

Core pantry management engine tracking item weights, expiration alerts, dynamic depletion, and triggering local LLM recipe synthesis based on currently available ingredients.

Android CamScanner & Receipt OCR App (com.homarr.scanner)

Native Kotlin + CameraX OpenCV 4 C++ Pipeline Bundled Google ML Kit OCR

Fully offline edge image processing pipeline running directly on Android device.

Computer Vision Pipeline: Image captured at 1080p -> Grayscale conversion -> Bilateral filter noise reduction -> Canny edge detection (75/200 thresholds) -> Morphological dilation -> approxPolyDP quadrilateral contour discovery -> Euclidean distance perspective warp transformation -> Adaptive Gaussian threshold binarization -> ML Kit text recognition with horizontal spatial clustering ($\pm 22\text{px}$) to map store names, item lines, and total costs.

HX711 24-bit ADC Load Cell Hardware Sensor

ESP8266 / ESP32 Firmware GPIO Bit-Bang Clock Calibration & Auto-Tare Loop

Precision kitchen scale sensor streaming continuous weight measurements into the kitchen hub for real-time pantry inventory deduction during cooking.

🛰️

5. Geospatial Intelligence & Situational Awareness

God's Eye 3D Globe + AIS Marine Vessels + SGP4 Orbit Propagation

geo.siklawi.duckdns.org / Port 4173 ▶

Interactive 3D geospatial visualization dashboard tracking global maritime traffic and orbital satellite positions in real time on a hardware-accelerated globe.

God's Eye 3D Globe Platform

geo.siklawi.duckdns.org TCP :4173 CesiumJS / Three.js + WebGL

Renders high-resolution Google Satellite imagery layers, live marine vessel telemetry from international AIS feeds, and orbital TLE ephemeris trajectories calculated via client-side SGP4 mathematical models.

🖨️

6. Additive Manufacturing & Motion Control

Orange Pi Zero 3 + Klipper Firmware + Moonraker API + Dual Web UIs

Mainsail :7126 / Fluidd :7127 ▶

Dedicated ARM Linux controller driving Sovol SV01 3D printer with real-time stepper pulse scheduling on STM32 microcontroller and resonance compensation.

Mainsail & Fluidd Web Consoles

mainsail.siklawi.duckdns.org fluidd.siklawi.duckdns.org 100.104.245.65:7126/7127 Vue.js / Moonraker WebSocket

Remote G-Code execution, real-time bed mesh leveling visualization, toolhead temperature PID tuning, and automated print queue management protected by Caddy HTTP Basic Authentication.

🎬

7. Media Streaming, 24/7 Live TV & IPTV Pipeline

Jellyfin + Dispatcharr + Threadfin + Jellyseerr + Bazarr + Navidrome

Hardware Transcoding / Subsonic FLAC ▶

Enterprise personal streaming suite with hardware transcoding, automated Live TV token refresh loop for uninterrupted 24/7 news broadcasts, user media requests, and multi-room lossless music streaming.

Jellyfin Media Server & 24/7 Live TV Engine

jellyfin.siklawi.duckdns.org TCP :8080 / LiveTV :8888 FFmpeg VAAPI Transcoding

Central 4K video server. Integrated with custom Python token renewal proxy (port 8888) that refreshes dynamic stream session tokens for Sky News Arabia, Al Manar, and international news broadcasts without interrupting active playback.

Jellyseerr Media Discovery & User Requests

requests.siklawi.duckdns.org TCP :5055 Node.js + Overseerr Core

User request portal allowing friends and family to request movies and television series with automated approval triggers into Sonarr and Radarr.

Threadfin & Dispatcharr IPTV Proxies

iptv.siklawi.duckdns.org dispatcharr.siklawi.duckdns.org :34400 / :9191 M3U8 / XMLTV EPG Emulators

Emulates HDHomeRun hardware tuners and filters M3U playlists, transforming online IPTV streams into native Jellyfin Live TV channels with full Electronic Program Guides.

Navidrome & Baby Yoda Hi-Fi Audio

navidrome.siklawi.duckdns.org music.siklawi.duckdns.org :4533 / :8088 Subsonic API + HTML5 Audio

Personal cloud music server streaming bit-perfect FLAC audio to mobile clients (Symfonium, DSub) with on-the-fly MP3 transcoding for low-bandwidth cellular connections.

⚙️

8. Automated Content Ingestion & E-Books (Arr Stack)

Radarr + Sonarr + Prowlarr + qBittorrent + Calibre-Web + Shelfmark

Closed-Loop Automation / NVMe Ingestion ▶

Autonomous digital acquisition loop: Prowlarr proxies indexers with FlareSolverr anti-bot bypass, Radarr and Sonarr monitor release calendars, qBittorrent executes isolated downloads, and Calibre-Web serves EPUB/PDF collections.

The Arr Automation Core

radarr:7878 sonarr:8989 prowlarr:9696 qbittorrent:8085 Docker Compose

Automated media acquisition pipeline operating without manual operator input. Downloads write directly to high-speed NVMe storage before being hardlinked to media storage to minimize write amplification.

Calibre-Web & Shelfmark E-Book Platform

books.siklawi.duckdns.org shelfmark.siklawi.duckdns.org :8083 / :8084 OPDS / Kindle Sync / Python

Comprehensive digital library: Calibre-Web serves browser readers and Kindle e-readers via OPDS feeds, paired with Shelfmark for automated book metadata retrieval and download staging.

💾

9. Multi-Tier Storage Fabric & Private Cloud

Siklawi Cloud Files + WebDAV Drive + Samba SMB Mesh

NVMe + SSD + HDD Pools (916GB Total) ▶

Three distinct physical storage tiers: 375GB NVMe for databases and active container write caches, 246GB SSD for high-bandwidth media streaming, and 295GB HDD for redundant backup archives.

Siklawi Cloud Files & WebDAV Endpoint

files.siklawi.duckdns.org webdav.siklawi.duckdns.org :8086 / :8087 50GB Max Upload Support

Cross-platform file cloud. Files portal offers slick web browsing, previewing, and downloads. WebDAV endpoint allows direct native drive mapping in Windows Explorer and macOS Finder with enterprise authentication.

🖥️

Proxmox VE Hypervisor

Bare-Metal AMD Ryzen 5 2600

Type-1 hypervisor hosting OpenWrt router (VM 125) and core container stack (CT 105) on Linux network bridges vmbr0/vmbr1 with ZFS/thin-LVM storage pools.

Kernel 7.0.2-2-pve 6C / 12T (3.4GHz) 16GB DDR4 Uptime 63+ Days

Click to inspect topology ➔

🌐

Edge Ingress & Reverse Proxy

Caddy v2.8 (CT 105 Host)

Automated ACME TLS termination engine handling all *.siklawi.duckdns.org subdomains with zero-downtime hot reloading, HTTP/2 multiplexing, and reverse proxying to Docker containers.

Let's Encrypt / ZeroSSL 24+ Subdomains DuckDNS API Port 80/443

Click to inspect topology ➔

🛡️

OpenWrt Edge Router (VM 125)

Dedicated PVE VM (192.168.3.50)

Production router VM handling WAN routing, CAKE SQM anti-bufferbloat active queue management, DHCP/DNS, and WireGuard inter-site mesh tunnels.

CAKE SQM Dual NIC Passthrough WireGuard

Click to inspect topology ➔

🧠

Local AI & LLM Cluster

Mowy 24/7 + RX 9070 16GB + Triad Swarm

Distributed neural engine: Dedicated headless llama-server (Gemma-4-E4B / Qwen 2.5), workstation 16GB VRAM ROCm rig (Qwen 3.6 29B / DeepSeek-R1), and multi-agent Triad Swarm.

llm.siklawi.duckdns.org RX 9070 16GB VRAM llama-server :8081 Zero Cloud Leak

Click to inspect topology ➔

🍳

Smart Kitchen & Inventory Scale

Android Kotlin + OpenCV + FastAPI + HX711

Full-stack IoT kitchen platform: Custom Kotlin app runs CameraX, OpenCV Canny/quad warp/binarization, and offline ML Kit OCR, ingesting into FastAPI backend and Qwen AI recipe planner.

kitchen.siklawi.duckdns.org OpenCV 4-Point Warp Offline ML Kit HX711 24-bit ADC

Click to inspect topology ➔

🛰️

Satellite & Geospatial Intelligence

God's Eye CesiumJS 3D Globe (:4173)

Interactive 3D geospatial platform streaming real-time global AIS marine vessel positions, high-resolution orbital satellite tiles, and mathematical SGP4 trajectory propagation.

geo.siklawi.duckdns.org Live AIS Feeds Cesium / WebGL

Click to inspect topology ➔

🖨️

Additive Manufacturing (Klipper SV1)

Orange Pi Zero 3 (100.104.245.65)

Dedicated Linux print controller running Moonraker API daemon, Mainsail and Fluidd frontends, communicating over serial link to Sovol SV01 STM32 MCU.

mainsail.siklawi.duckdns.org fluidd.siklawi.duckdns.org Moonraker :7125

Click to inspect topology ➔

🎬

Media & IPTV Streaming Pipeline

Jellyfin (:8080) & Threadfin (:34400)

Jellyfin server with custom live search injectors, 24/7 token renewal daemon preserving news feeds without drops, Jellyseerr user request portal, and Navidrome FLAC streaming.

jellyfin.siklawi.duckdns.org 24/7 Token Loop Jellyseerr :5055

Click to inspect topology ➔

⚙️

Automated Content Ingestion (Arr Stack)

Radarr, Sonarr, Prowlarr, qBittorrent

Autonomous media fulfillment loop: Prowlarr aggregates trackers, Radarr/Sonarr track releases, qBittorrent executes downloads, and Flaresolverr bypasses anti-bot barriers.

radarr:7878 sonarr:8989 prowlarr:9696 qbittorrent:8085

Click to inspect topology ➔

📚

EBookers Services

Calibre-Web (:8083) & Shelfmark (:8084)

Dual-engine digital reading stack: Calibre-Web OPDS library portal paired with Shelfmark automated multi-source book search, acquisition, and metadata injector.

books.siklawi.duckdns.org shelfmark.siklawi.duckdns.org EPUB/PDF/MOBI

Click to inspect topology ➔

💾

Storage Fabric & Private Cloud

FileBrowser (:8086) & WebDAV (:8087)

Private cloud storage mesh with native Windows Explorer/macOS Finder drive mounting via WebDAV and direct browser uploads supporting 50GB payloads on /mnt/storage.

files.siklawi.duckdns.org webdav.siklawi.duckdns.org Samba SMB Mesh

Click to inspect topology ➔

Siklawi Citadel Gateway

Citadel Gateway Access

Choose Your Operational Gateway

Citadel Gateway Access