Service Dependency Map

Owner → Hermes → Specialist Agents
DCP READ-ONLY: CONNECTED DEVELOPMENT / UI PREVIEW DCP BATCH 5/6 SOAK IN PROGRESS TELEMETRY: UNKNOWN COMMAND EXECUTION LOCKED

Service Dependency Map

Provenance: REAL MOCK STATIC UNKNOWN· status colour is UNKNOWN (gray) until a real read-only probe supplies it. No health is assumed.
Read-only dependency map built only from documented topology (homelab-infra + DCP checkpoint). Unknown edges are never invented. Blast radius separates SERVICE DOWN from RECOVERY CAPABILITY DEGRADED.
Access path (documented):
  • Internet
  • VPS / NPM
  • Authelia
  • Tailscale
  • DCP
  • PostgreSQL
Layer 0 · Internet
Internet
network · host: public
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: —
dependents: vps
Layer 1 · Public edge / VPS
VPS / NPM
edge · host: vps
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: internet, npm
dependents: —
Nginx Proxy Manager
edge · host: vps
UNKNOWNHIGHSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: authelia, tailscale
dependents: vps
Layer 2 · Access plane
Tailscale
network · host: mesh
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: —
dependents: authelia, dcp, homeserver, npm
Authelia
service · host: proxy layer
UNKNOWNHIGHSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: tailscale
dependents: npm
Layer 3 · Services (home server)
AI Company Portal
service · host: home server
UNKNOWNLOWSTATIC
runbook: homelab-infra/host/BASELINE.md
Blast RadiusOwnership
depends on: dcp
dependents: —
DCP
service · host: home server
HEALTHYCRITICALREAL
runbook: docs/PRODUCTION-DEPLOYMENT.md (DCP repo)
Blast RadiusOwnership
depends on: postgres, tailscale
dependents: portal
n8n
service · host: home server
UNKNOWNMEDIUMSTATIC
runbook: homelab-infra/monitoring/README.md
Blast RadiusOwnership
depends on: postgres, redis
dependents: —
Home Server
service · host: home
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/host/BASELINE.md
Blast RadiusOwnership
depends on: seagate, tailscale
dependents: —
Layer 4 · Data / storage
PostgreSQL
service · host: homelab-backend
HEALTHYCRITICALREAL
runbook: homelab-infra/docs/RESTORE-ORDER.md
Blast RadiusOwnership
depends on: —
dependents: dcp, n8n
Redis
service · host: homelab-backend
UNKNOWNHIGHSTATIC
runbook: homelab-infra/docs/RESTORE-ORDER.md
Blast RadiusOwnership
depends on: —
dependents: n8n
Seagate Backup Disk
storage · host: external drive
UNKNOWNMEDIUMSTATIC
runbook: homelab-infra/backup/ARCHITECTURE.md
Blast RadiusOwnership
depends on: —
dependents: homeserver

Blast Radius

Focused on the selected node; otherwise the documented high-impact examples (PostgreSQL, Tailscale, Seagate).

If Nginx Proxy Manager fails

CONNECTIVITY DEGRADED

SERVICE DOWN

none

RECONNECTIVITY DEGRADED

VPS / NPM

RECOVERY CAPABILITY DEGRADED

none

Direct dependencies

Authelia Tailscale

Direct dependents

VPS / NPM

Never affected (documented)

AI Company Portal Authelia DCP Home Server Internet PostgreSQL Redis Seagate Backup Disk Tailscale n8n

Dependency edges (documented)

  • VPS / NPM → Internet NETWORK The VPS public entry depends on Internet reachability. STATIC
  • Home Server → Tailscale VPN The home server's remote private path runs over the Tailscale mesh. Documented range only; no new access is created. STATIC
  • DCP → Tailscale NETWORK DCP is published on the Tailscale bind only; remote reachability depends on the mesh. STATIC
  • Nginx Proxy Manager → Tailscale NETWORK NPM reaches home services over the private mesh. STATIC
  • Authelia → Tailscale AUTH Auth completes before the private path reaches DCP. STATIC
  • VPS / NPM → Nginx Proxy Manager REVERSE_PROXY NPM provides TLS termination/routing on the VPS. STATIC
  • Nginx Proxy Manager → Authelia AUTH Auth is enforced at the proxy layer (control.temanhub.com). STATIC
  • DCP → PostgreSQL DATABASE DCP requires PostgreSQL for task/policy/audit state. STATIC
  • n8n → PostgreSQL DATABASE n8n stores workflow data in PostgreSQL. STATIC
  • n8n → Redis CACHE n8n uses Redis as cache/broker where configured. STATIC
  • AI Company Portal → DCP API Portal reads the DCP read-only API/dashboard. STATIC
  • Home Server → Seagate Backup Disk STORAGE Home server backs up to the Seagate external drive. STATIC

Direction is "depends on": A → B means A depends on B. Connecting edges are included where documented; the DCP → n8n notification webhook is deliberately not a dependency.