Service Dependency Map

Owner → Hermes → Specialist Agents
DCP READ-ONLY: CONNECTED DEVELOPMENT / UI PREVIEW DCP BATCH 5/6 SOAK IN PROGRESS TELEMETRY: UNKNOWN COMMAND EXECUTION LOCKED

Service Dependency Map

Provenance: REAL MOCK STATIC UNKNOWN· status colour is UNKNOWN (gray) until a real read-only probe supplies it. No health is assumed.
Read-only dependency map built only from documented topology (homelab-infra + DCP checkpoint). Unknown edges are never invented. Blast radius separates SERVICE DOWN from RECOVERY CAPABILITY DEGRADED.
Access path (documented):
  • Internet
  • VPS / NPM
  • Authelia
  • Tailscale
  • DCP
  • PostgreSQL
Layer 0 · Internet
Internet
network · host: public
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
depends on: —
dependents: vps
Layer 1 · Public edge / VPS
VPS / NPM
edge · host: vps
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
depends on: internet, npm
dependents: —
Nginx Proxy Manager
edge · host: vps
UNKNOWNHIGHSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
depends on: authelia, tailscale
dependents: vps
Layer 2 · Access plane
Tailscale
network · host: mesh
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
depends on: —
dependents: authelia, dcp, homeserver, npm
Authelia
service · host: proxy layer
UNKNOWNHIGHSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
depends on: tailscale
dependents: npm
Layer 3 · Services (home server)
AI Company Portal
service · host: home server
UNKNOWNLOWSTATIC
runbook: homelab-infra/host/BASELINE.md
depends on: dcp
dependents: —
DCP
service · host: home server
HEALTHYCRITICALREAL
runbook: docs/PRODUCTION-DEPLOYMENT.md (DCP repo)
depends on: postgres, tailscale
dependents: portal
n8n
service · host: home server
UNKNOWNMEDIUMSTATIC
runbook: homelab-infra/monitoring/README.md
depends on: postgres, redis
dependents: —
Home Server
service · host: home
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/host/BASELINE.md
depends on: seagate, tailscale
dependents: —
Layer 4 · Data / storage
PostgreSQL
service · host: homelab-backend
HEALTHYCRITICALREAL
runbook: homelab-infra/docs/RESTORE-ORDER.md
depends on: —
dependents: dcp, n8n
Redis
service · host: homelab-backend
UNKNOWNHIGHSTATIC
runbook: homelab-infra/docs/RESTORE-ORDER.md
depends on: —
dependents: n8n
Seagate Backup Disk
storage · host: external drive
UNKNOWNMEDIUMSTATIC
runbook: homelab-infra/backup/ARCHITECTURE.md
depends on: —
dependents: homeserver

Blast Radius

Focused on the selected node; otherwise the documented high-impact examples (PostgreSQL, Tailscale, Seagate).

If PostgreSQL fails

SERVICE DOWN

SERVICE DOWN

AI Company Portal DCP n8n

RECONNECTIVITY DEGRADED

none

RECOVERY CAPABILITY DEGRADED

none

Direct dependencies

none documented

Direct dependents

DCP n8n

Never affected (documented)

Authelia Home Server Internet Nginx Proxy Manager Redis Seagate Backup Disk Tailscale VPS / NPM

If Tailscale fails

CONNECTIVITY DEGRADED

SERVICE DOWN

none

RECONNECTIVITY DEGRADED

Authelia DCP Home Server Nginx Proxy Manager

RECOVERY CAPABILITY DEGRADED

none

Direct dependencies

none documented

Direct dependents

Authelia DCP Home Server Nginx Proxy Manager

Never affected (documented)

AI Company Portal Internet PostgreSQL Redis Seagate Backup Disk VPS / NPM n8n

If Seagate Backup Disk fails

RECOVERY CAPABILITY DEGRADED

SERVICE DOWN

none

RECONNECTIVITY DEGRADED

none

RECOVERY CAPABILITY DEGRADED

Home Server

Direct dependencies

none documented

Direct dependents

Home Server

Never affected (documented)

AI Company Portal Authelia DCP Internet Nginx Proxy Manager PostgreSQL Redis Tailscale VPS / NPM n8n

Dependency edges (documented)

  • VPS / NPM → Internet NETWORK The VPS public entry depends on Internet reachability. STATIC
  • Home Server → Tailscale VPN The home server's remote private path runs over the Tailscale mesh. Documented range only; no new access is created. STATIC
  • DCP → Tailscale NETWORK DCP is published on the Tailscale bind only; remote reachability depends on the mesh. STATIC
  • Nginx Proxy Manager → Tailscale NETWORK NPM reaches home services over the private mesh. STATIC
  • Authelia → Tailscale AUTH Auth completes before the private path reaches DCP. STATIC
  • VPS / NPM → Nginx Proxy Manager REVERSE_PROXY NPM provides TLS termination/routing on the VPS. STATIC
  • Nginx Proxy Manager → Authelia AUTH Auth is enforced at the proxy layer (control.temanhub.com). STATIC
  • DCP → PostgreSQL DATABASE DCP requires PostgreSQL for task/policy/audit state. STATIC
  • n8n → PostgreSQL DATABASE n8n stores workflow data in PostgreSQL. STATIC
  • n8n → Redis CACHE n8n uses Redis as cache/broker where configured. STATIC
  • AI Company Portal → DCP API Portal reads the DCP read-only API/dashboard. STATIC
  • Home Server → Seagate Backup Disk STORAGE Home server backs up to the Seagate external drive. STATIC

Direction is "depends on": A → B means A depends on B. Connecting edges are included where documented; the DCP → n8n notification webhook is deliberately not a dependency.