fizzlepoof/truenas-stacks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Document LocalSend trusted inbox handoff
Some checks failed
secret-guardrails / artifact-secret-scan (push) Has been cancelled
Details
secret-guardrails / gitleaks (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Fizzlepoof
2026-05-26 03:52:08 +00:00
parent d8bdc36392
commit 386911b70d
3 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/architecture/SERVICES_DIRECTORY.md
View File

@@ -96,7 +96,7 @@ OpenClaw is no longer treated as an active PD service in the operator inventory.
| Service | Host | Port | Status | | Service | Host | Port | Status |
|---------|------|------|--------| |---------|------|------|--------|
| LocalSend Trusted Inbox | N.O.M.A.D. (`10.5.1.16` on Trusted VLAN 51) | 53317/tcp+udp | ✅ Repo-tracked Docker stack at `/opt/localsend-nomad`; writes directly into `/home/fizzlepoof/private/inbox-secrets`; same-host checks from N.O.M.A.D. are unreliable because of macvlan isolation | | LocalSend Trusted Inbox | N.O.M.A.D. (`10.5.1.16` on Trusted VLAN 51) | 53317/tcp+udp | ✅ Repo-tracked Docker stack at `/opt/localsend-nomad`; advertises `Doris Trusted Inbox`; writes directly into `/home/fizzlepoof/private/inbox-secrets`; Minerva auto-sort watches that inbox via `minerva-localsend-autosort.path`; same-host checks from N.O.M.A.D. are unreliable because of macvlan isolation |
## Mapping / Geo (PD) ## Mapping / Geo (PD)

4
docs/servers/NOMAD.md
View File

@@ -217,10 +217,14 @@ These are expected to be managed by Wings/Pelican rather than a local compose fi
- Live stack path: `/opt/localsend-nomad` - Live stack path: `/opt/localsend-nomad`
- Repo source path: `/home/fizzlepoof/repos/truenas-stacks/localsend-nomad` - Repo source path: `/home/fizzlepoof/repos/truenas-stacks/localsend-nomad`
- Trusted bind IP: `10.5.1.16` - Trusted bind IP: `10.5.1.16`
- Advertised device name: `Doris Trusted Inbox`
- Role: headless LocalSend receiver for Trusted-LAN handoff into `/home/fizzlepoof/private/inbox-secrets` - Role: headless LocalSend receiver for Trusted-LAN handoff into `/home/fizzlepoof/private/inbox-secrets`
- Runtime model: standalone Docker Compose stack on a Trusted-LAN macvlan (`enp5s0.51`, VLAN 51) while the host stays on Servers (`10.5.30.7`) - Runtime model: standalone Docker Compose stack on a Trusted-LAN macvlan (`enp5s0.51`, VLAN 51) while the host stays on Servers (`10.5.30.7`)
- LocalSend listener ports: `53317/tcp`, `53317/udp` - LocalSend listener ports: `53317/tcp`, `53317/udp`
- Same-host checks from NOMAD to `10.5.1.16` are unreliable because the receiver sits behind macvlan networking; verify from another Trusted-LAN peer instead - Same-host checks from NOMAD to `10.5.1.16` are unreliable because the receiver sits behind macvlan networking; verify from another Trusted-LAN peer instead
- Inbox watcher for Minerva staging: `minerva-localsend-autosort.path`
- Sorter service: `minerva-localsend-autosort.service`
- Sorter script: `/home/fizzlepoof/.local/bin/minerva-localsend-autosort.py`
### MeshCore to MQTT relay ### MeshCore to MQTT relay
- Install date: 2026-05-18 - Install date: 2026-05-18

10
localsend-nomad/README.md
View File

@@ -53,6 +53,8 @@ From N.O.M.A.D.:
```bash ```bash
docker compose --env-file .env ps docker compose --env-file .env ps
sudo docker logs --tail 50 localsend-trusted sudo docker logs --tail 50 localsend-trusted
systemctl --user status minerva-localsend-autosort.path --no-pager
systemctl --user status minerva-localsend-autosort.service --no-pager
``` ```
From another Trusted-LAN host: From another Trusted-LAN host:
@@ -64,6 +66,14 @@ nc -vz 10.5.1.16 53317
Then confirm `Doris Trusted Inbox` appears as a LocalSend target from a Trusted-LAN device. Then confirm `Doris Trusted Inbox` appears as a LocalSend target from a Trusted-LAN device.
## Shared inbox / Minerva handoff
- The receiver writes into `/home/fizzlepoof/private/inbox-secrets`.
- Minerva's staging flow watches that shared inbox via `minerva-localsend-autosort.path` and runs `/home/fizzlepoof/.local/bin/minerva-localsend-autosort.py`.
- Sender-specific routing lives in `/home/fizzlepoof/private/minerva-dropbox/sender-map.json`.
- Metadata/manifests for staged items land under `/home/fizzlepoof/private/minerva-dropbox/manifests/`.
- If you need to confirm sender attribution, check both `journalctl --user -u doris-localsend.service` and `docker logs localsend-trusted`; the autosort helper reads both so Trusted-LAN receives keep sender-IP-aware routing.
## Notes ## Notes
- The container writes directly into `/home/fizzlepoof/private/inbox-secrets` on the host so the existing autosort / intake flow can keep using the same inbox path. - The container writes directly into `/home/fizzlepoof/private/inbox-secrets` on the host so the existing autosort / intake flow can keep using the same inbox path.