# PlausibleDeniability

Primary Docker host running all production workloads.

## Specs
- **OS:** TrueNAS Scale 25.10.2.1
- **CPU:** Ryzen 9 3950X
- **RAM:** 32GB
- **GPU:** Nvidia RTX 2080 Ti (11GB VRAM)
- **UPS:** None

## Storage Tiers

| Tier | Mount | Use for |
|------|-------|---------|
| Local SSD (Crucial MX500 500GB) | `/mnt/docker-ssd` | Docker root, databases, write-heavy appdata, GPU/model caches |
| TrueNAS pool (tank, 2-drive ZFS mirror ~3.5TB) | `/mnt/tank` | General appdata, configs, backups, downloads |
| Unraid NFS | `/mnt/unraid` | Media libraries, Immich media |

## Docker Root
`/mnt/docker-ssd/docker/docker-data`

## Compose Repo
`/mnt/docker-ssd/docker/compose`

## Key Docker Networks
- `ix-databases_shared-databases` — shared DB access network (created by databases stack)
- `pangolin` — reverse proxy exposure network (created by newt)

## GPU Usage
RTX 2080 Ti used by:
- Plex (hardware transcoding)
- immich-ml (CUDA face recognition)
- Whisper (CUDA speech-to-text, port 8786)
- Ollama light-tier inference (qwen2.5:14b and smaller)

Recommended models for 11GB VRAM:
| Model | VRAM | Best for |
|-------|------|---------|
| `qwen2.5:14b` | ~8GB | General use, coding, reasoning |
| `qwen2.5-coder:7b` | ~5GB | Code tasks |
| `deepseek-r1:8b` | ~5GB | Math, logic |
| `phi4` | ~8GB | Analytical tasks |

## Remote Access
- Pangolin VPS + Newt for external services
- SSH from Windows 11

## NFS Mounts (from Serenity)
- Serenity `/mnt/user/data` → `/mnt/unraid/data` (media libraries)
- Serenity `/mnt/user/immich` → `/mnt/unraid/immich` (Immich photo library)

> **Note:** NFS mounts are not automatic at boot. Run after every TrueNAS restart:
> ```bash
> sudo bash /mnt/tank/docker/scripts/mount-unraid-nfs.sh
> ```

## Known Issues
- immich-ml intermittently unhealthy — investigate GPU/CUDA health
- docker-ssd has no redundancy — single point of failure for all appdata
- No off-site backup

## Pending
- Add Pangolin resource + DNS for `ai.paccoco.com`
- Install fresh editor
- Set up private Gitea repo for .env file backups