Service Dependency Map

Owner → Hermes → Specialist Agents
DCP READ-ONLY: CONNECTED DEVELOPMENT / UI PREVIEW DCP BATCH 5/6 SOAK IN PROGRESS TELEMETRY: UNKNOWN COMMAND EXECUTION LOCKED

Service Dependency Map

Provenance: REAL MOCK STATIC UNKNOWN· status colour is UNKNOWN (gray) until a real read-only probe supplies it. No health is assumed.
Read-only dependency map built only from documented topology (homelab-infra + DCP checkpoint). Unknown edges are never invented. Blast radius separates SERVICE DOWN from RECOVERY CAPABILITY DEGRADED.
Access path (documented):
  • Internet
  • VPS / NPM
  • Authelia
  • Tailscale
  • DCP
  • PostgreSQL
Layer 0 · Internet
Internet
network · host: public
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: —
dependents: vps
Layer 1 · Public edge / VPS
VPS / NPM
edge · host: vps
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: internet, npm
dependents: —
Nginx Proxy Manager
edge · host: vps
UNKNOWNHIGHSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: authelia, tailscale
dependents: vps
Layer 2 · Access plane
Tailscale
network · host: mesh
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: —
dependents: authelia, dcp, homeserver, npm
Authelia
service · host: proxy layer
UNKNOWNHIGHSTATIC
runbook: homelab-infra/network/ARCHITECTURE.md
Blast RadiusOwnership
depends on: tailscale
dependents: npm
Layer 3 · Services (home server)
AI Company Portal
service · host: home server
UNKNOWNLOWSTATIC
runbook: homelab-infra/host/BASELINE.md
Blast RadiusOwnership
depends on: dcp
dependents: —
DCP
service · host: home server
HEALTHYCRITICALREAL
runbook: docs/PRODUCTION-DEPLOYMENT.md (DCP repo)
Blast RadiusOwnership
depends on: postgres, tailscale
dependents: portal
n8n
service · host: home server
UNKNOWNMEDIUMSTATIC
runbook: homelab-infra/monitoring/README.md
Blast RadiusOwnership
depends on: postgres, redis
dependents: —
Home Server
service · host: home
UNKNOWNCRITICALSTATIC
runbook: homelab-infra/host/BASELINE.md
Blast RadiusOwnership
depends on: seagate, tailscale
dependents: —
Layer 4 · Data / storage
PostgreSQL
service · host: homelab-backend
HEALTHYCRITICALREAL
runbook: homelab-infra/docs/RESTORE-ORDER.md
Blast RadiusOwnership
depends on: —
dependents: dcp, n8n
Redis
service · host: homelab-backend
UNKNOWNHIGHSTATIC
runbook: homelab-infra/docs/RESTORE-ORDER.md
Blast RadiusOwnership
depends on: —
dependents: n8n
Seagate Backup Disk
storage · host: external drive
UNKNOWNMEDIUMSTATIC
runbook: homelab-infra/backup/ARCHITECTURE.md
Blast RadiusOwnership
depends on: —
dependents: homeserver

Blast Radius

Focused on the selected node; otherwise the documented high-impact examples (PostgreSQL, Tailscale, Seagate).

If AI Company Portal fails

No documented downstream impact (leaf or source node).

SERVICE DOWN

none

RECONNECTIVITY DEGRADED

none

RECOVERY CAPABILITY DEGRADED

none

Direct dependencies

DCP

Direct dependents

none documented

Never affected (documented)

Authelia DCP Home Server Internet Nginx Proxy Manager PostgreSQL Redis Seagate Backup Disk Tailscale VPS / NPM n8n

Dependency edges (documented)

  • VPS / NPM → Internet NETWORK The VPS public entry depends on Internet reachability. STATIC
  • Home Server → Tailscale VPN The home server's remote private path runs over the Tailscale mesh. Documented range only; no new access is created. STATIC
  • DCP → Tailscale NETWORK DCP is published on the Tailscale bind only; remote reachability depends on the mesh. STATIC
  • Nginx Proxy Manager → Tailscale NETWORK NPM reaches home services over the private mesh. STATIC
  • Authelia → Tailscale AUTH Auth completes before the private path reaches DCP. STATIC
  • VPS / NPM → Nginx Proxy Manager REVERSE_PROXY NPM provides TLS termination/routing on the VPS. STATIC
  • Nginx Proxy Manager → Authelia AUTH Auth is enforced at the proxy layer (control.temanhub.com). STATIC
  • DCP → PostgreSQL DATABASE DCP requires PostgreSQL for task/policy/audit state. STATIC
  • n8n → PostgreSQL DATABASE n8n stores workflow data in PostgreSQL. STATIC
  • n8n → Redis CACHE n8n uses Redis as cache/broker where configured. STATIC
  • AI Company Portal → DCP API Portal reads the DCP read-only API/dashboard. STATIC
  • Home Server → Seagate Backup Disk STORAGE Home server backs up to the Seagate external drive. STATIC

Direction is "depends on": A → B means A depends on B. Connecting edges are included where documented; the DCP → n8n notification webhook is deliberately not a dependency.