From bc74ca1b049c2453130a7c9b700a80693359c9b9 Mon Sep 17 00:00:00 2001 From: venus Date: Wed, 12 Aug 2026 22:07:38 -0500 Subject: [PATCH] added more specs and rebuilt for simpler additions --- samples/homelab.html | 869 +++++++++++++++++++++++ samples/index.html | 413 +++++++++-- samples/public-services.html | 901 ++++++++++++++++++++++++ samples/sample-command-center.html | 485 +++++++++++++ samples/sample-dashboard.html | 434 ++++++++++++ samples/sample-dual-pane-explorer.html | 384 ++++++++++ samples/unified-design-specification.md | 86 +++ 7 files changed, 3508 insertions(+), 64 deletions(-) create mode 100644 samples/homelab.html create mode 100644 samples/public-services.html create mode 100644 samples/sample-command-center.html create mode 100644 samples/sample-dashboard.html create mode 100644 samples/sample-dual-pane-explorer.html create mode 100644 samples/unified-design-specification.md diff --git a/samples/homelab.html b/samples/homelab.html new file mode 100644 index 0000000..8041526 --- /dev/null +++ b/samples/homelab.html @@ -0,0 +1,869 @@ + + + + + + River Rooks | Homelab Lander & Infrastructure Catalog + + + + + + +
+
+ $ agy --page=homelab +
+ +
+ + +
+
+ + +
+
+

Homelab Lander & Infrastructure

+
+ + CLUSTER ONLINE | 10GbE BACKBONE | TRAEFIK V3 EDGE PROXY +
+
+
+
SYSTEM UPTIME: 99.98% (42d 14h)
+
LOCATION: ALABAMA DCs / RACK-01
+
+
+ +
+ + +
+
+
+ /var/log/homelab-status.log + STDOUT [TTY1] +
+
+
$ homelab-ctl status --output=summary
+
[OK] Edge Router: OPNsense 24.7 (10GbE SFP+ WAN/LAN) +[OK] Reverse Proxy: Traefik v3.1 (Auto Let's Encrypt TLS Wildcard) +[OK] Virtualization: Proxmox VE 8.2 Cluster (3 Bare-Metal Nodes) +[OK] ZFS Array: TrueNAS SCALE (48TB RaidZ2 Pool, 0 Degradation) +[INFO] Active Wireguard Mesh Peers: 14 Connected +[WARN] Sonarr Queue: 2 downloads pending verification
+
+
+
+ + +
+
+

services_directory

+ 12 Active Micro-services +
+ + +
+ + + + + +
+ + +
+ + +
+
+

Traefik Proxy

+ [#core] +
+

Edge HTTP reverse proxy and load balancer with dynamic Docker provider discovery and ACME TLS certificate management.

+
+ 443/tcp (TLS) + ONLINE +
+
+ + +
+
+

OPNsense Firewall

+ [#core] +
+

Hardened FreeBSD firewall routing 10GbE traffic with VLAN isolation, Suricata IDS/IPS, and Unbound DNS.

+
+ VLAN 10 / Mgmt + ACTIVE +
+
+ + +
+
+

Proxmox VE

+ [#compute] +
+

Enterprise hypervisor cluster hosting Debian LXC containers and KVM virtual machines with Ceph & ZFS backend.

+
+ 8006/tcp + ONLINE +
+
+ + +
+
+

TrueNAS SCALE

+ [#storage] +
+

Primary network attached storage managing 48TB ZFS RaidZ2 array, NFS shares, SMB datasets, and daily scrub jobs.

+
+ NFS / SMB + ONLINE +
+
+ + +
+
+

AdGuard Home

+ [#dns] +
+

Network-wide DNS sinkhole filtering trackers and ad domains across all VLANs with DNS-over-HTTPS upstream resolvers.

+
+ 53/udp, 853/tcp + PROTECTED +
+
+ + +
+
+

WireGuard Mesh

+ [#vpn] +
+

High-performance encrypted point-to-point VPN tunnel connecting remote laptops and mobile endpoints to homelab subnet.

+
+ 51820/udp + 14 PEERS +
+
+ + +
+
+

Jellyfin Media

+ [#media] +
+

FOSS media streaming engine leveraging Intel QuickSync GPU hardware acceleration for 4K HDR transcoding.

+
+ 8096/tcp + READY +
+
+ + +
+
+

Arr Stack (Sonarr/Radarr)

+ [#automation] +
+

Automated content indexing, Prowlarr torrent/Usenet management, and SABnzbd queue downloader pipeline.

+
+ 8989 / 7878 + RUNNING +
+
+ + +
+
+

Grafana & Prometheus

+ [#telemetry] +
+

Time-series metric collection with Node Exporter, Telegraf agents, and live cluster performance dashboards.

+
+ 3000 / 9090 + SCRAPING +
+
+ + +
+
+

Uptime Kuma

+ [#status] +
+

Synthetic HTTP, Ping, and TCP health monitor broadcasting real-time service status alerts to Discord webhooks.

+
+ 3001/tcp + 100% HEALTH +
+
+ + +
+
+

Vaultwarden

+ [#security] +
+

Lightweight Rust implementation of the Bitwarden API hosting encrypted credentials, SSH keys, and TOTP tokens.

+
+ 443/tcp (E2EE) + LOCKED +
+
+ + +
+
+

Forgejo Git Server

+ [#git] +
+

Self-hosted Git forge hosting homelab infrastructure-as-code repos, Ansible playbooks, and Docker compose files.

+
+ 3000/tcp, 2222/ssh + ONLINE +
+
+ +
+
+ +
+ + +
+
+

hardware_nodes

+ 3 Physical Bare-Metal Servers +
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
HostnameRole & OSHardware SpecCPU LoadRAM Util
gw-node01.lanOPNsense 24.7Intel N100 (4C/4T) | 16GB DDR5 | 2.5GbE[██░░░░░░░░] 18%[███░░░░░░░] 32%
pve-node02.lanProxmox VE 8.2AMD Ryzen 9 5900X (12C/24T) | 128GB ECC | NVMe[████░░░░░░] 42%[███████░░░] 68%
nas-node03.lanTrueNAS SCALEIntel Xeon E-2278G (8C/16T) | 64GB ECC | 6x16TB ZFS[██░░░░░░░░] 24%[████████░░] 81%
+
+
+ + +
+
+

network_topology

+ ASCII Architecture Map +
+ +
+
// Network Edge & Traffic Routing Flow
+[ WAN / INTERNET ] + │ + ▼ +┌─────────────────────────┐ +│ OPNsense Edge Gateway │ (10GbE SFP+ / Firewall / IDS) +└───────────┬─────────────┘ + │ + ├───────────────► [ WireGuard Mesh VPN ] (51820/udp Remote Access) + │ + ▼ +┌─────────────────────────┐ +│ Traefik v3 Reverse Proxy│ (Auto TLS Certs / Authelia 2FA) +└───────────┬─────────────┘ + │ + ┌─────────┴───────────────────────┬─────────────────────────┐ + ▼ ▼ ▼ +┌─────────────────────────┐ ┌───────────────────────┐ ┌─────────────────────────┐ +│ VLAN 10: Management │ │ VLAN 20: Services │ │ VLAN 30: Storage Pool │ +│ • Proxmox VE (8006) │ │ • Grafana (3000) │ │ • TrueNAS ZFS (SMB/NFS) │ +│ • AdGuard Home (53) │ │ • Jellyfin Media │ │ • MinIO S3 Bucket │ +└─────────────────────────┘ └───────────────────────┘ └─────────────────────────┘ +
+
+ +
+ + + + +
+
+ + + + + + diff --git a/samples/index.html b/samples/index.html index f2daac0..4af0165 100644 --- a/samples/index.html +++ b/samples/index.html @@ -3,83 +3,368 @@ - Design Spec Samples Catalog + Design Spec Samples Catalog | Dynamic Registry -

Design Spec Samples

- + +
+

+ + DESIGN SPEC SAMPLES CATALOG +

+
+ PATH: /samples/ + SCANNING DIRECTORY... +
+
+ + +
+ +
+ + +
+ +
+ + + + + diff --git a/samples/public-services.html b/samples/public-services.html new file mode 100644 index 0000000..f516165 --- /dev/null +++ b/samples/public-services.html @@ -0,0 +1,901 @@ + + + + + + River Rooks | Public Services & Applications Portal + + + + + + +
+
+ $ agy --page=public-services +
+ +
+ + +
+
+ + +
+

Public Services Portal

+

+ Direct access to public self-hosted web applications, developer utilities, repository mirrors, and interactive tools operated by River Rooks. +

+
+ + +
+
+
+ $ search_services + +
+
+ + + + + +
+
+
+ + +
+
+

featured_flagships

+ Primary Public Endpoints +
+ +
+ + +
+
+ Open Source Git Forge +

Forgejo Repositories

+

+ Self-hosted Git platform hosting public source code for network security scripts, Neovim dotfiles, Ansible playbooks, and Docker compose templates. +

+
+
+ Access: Public Read + Explore Repos ↗ +
+
+ + +
+
+ Security Utility +

CyberChef Workbench

+

+ Web-based data transformation tool for hex decoding, Base64 operations, regex extraction, cryptographic hashing, and CTF payload analysis. +

+
+
+ Access: Open Web + Launch App ↗ +
+
+ + +
+
+ Document Tools +

Stirling PDF Studio

+

+ Locally hosted document processing suite for merging, splitting, OCR extraction, password encryption, and PDF page manipulation. +

+
+
+ Access: Open Web + Launch App ↗ +
+
+ +
+
+ +
+ + +
+
+

services_catalog

+ Showing 9 Services +
+ +
+ + +
+
+
+

Forgejo Git Forge

+ [#dev-git] +
+

Public repository mirror for software projects, dotfiles, and CTF writeups.

+
+
+ PUBLIC + git.rooks.dev ↗ +
+
+ + +
+
+
+

CyberChef Workbench

+ [#security-tool] +
+

Cyber Swiss Army Knife for encoding, decoding, hashing, and data parsing.

+
+
+ PUBLIC + chef.rooks.dev ↗ +
+
+ + +
+
+
+

Stirling PDF Studio

+ [#pdf-tools] +
+

Complete PDF manipulation tool for merging, splitting, and OCR scanning.

+
+
+ PUBLIC + pdf.rooks.dev ↗ +
+
+ + +
+
+
+

HedgeDoc Collaborative

+ [#markdown] +
+

Real-time collaborative Markdown editor for technical specs and meeting notes.

+
+
+ OPEN + pad.rooks.dev ↗ +
+
+ + +
+
+
+

Jellyfin Media Portal

+ [#media-video] +
+

Personal video library with 4K HDR hardware acceleration and mobile streaming.

+
+
+ ACCOUNT REQ + watch.rooks.dev ↗ +
+
+ + +
+
+
+

Audiobookshelf

+ [#media-audio] +
+

Self-hosted audiobook and podcast server with position syncing across devices.

+
+
+ INVITE ONLY + listen.rooks.dev ↗ +
+
+ + +
+
+
+

Calibre-Web Library

+ [#ebooks] +
+

E-book library catalog with e-reader OPDS feed and browser reading support.

+
+
+ PUBLIC READ + read.rooks.dev ↗ +
+
+ + +
+
+
+

Vaultwarden Password Vault

+ [#secrets] +
+

End-to-end encrypted password manager endpoint for authorized client syncing.

+
+
+ 2FA / AUTH + vault.rooks.dev ↗ +
+
+ + +
+
+
+

Matrix Federated Chat

+ [#messaging] +
+

Federated Matrix homeserver for encrypted messaging and public discussion rooms.

+
+
+ FEDERATED + matrix.rooks.dev ↗ +
+
+ +
+
+ +
+ + +
+
+

public_keys_&_verification

+ Cryptographic Identity +
+ +
+
// Public Endpoints & Cryptographic Fingerprints
+ +
+
+ PGP Key Fingerprint:
+ 3F8A B29C 7D1E 4056 9912 A8B0 C4D3 E2F1 8091 22A4 +
+ +
+ +
+
+ Matrix Handle:
+ @river:rooks.dev +
+ +
+ +
+
+ Public SSH Key:
+ ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH8q882a... river@rooks.dev +
+ +
+ +
+
+ +
+ + + + +
+
+ + + + + + diff --git a/samples/sample-command-center.html b/samples/sample-command-center.html new file mode 100644 index 0000000..fd07386 --- /dev/null +++ b/samples/sample-command-center.html @@ -0,0 +1,485 @@ + + + + + + River Rooks | Command Center + + + + + +
+
+ + RIVER ROOKS // COMMAND CENTER +
+ + +
+ + +
+ + +
+
+
+ /etc/services.d/manifest.json + 4 SERVICES OPERATIONAL +
+
+
+ +
+
+ grafana.homelab + ONLINE +
+

Real-time metrics, Prometheus scraping, & homelab telemetry dashboards.

+
+ PING: 4ms + TRAEFIK HTTPS +
+
+ +
+
+ vault.homelab + ONLINE +
+

HashiCorp Vault secret storage, certificate authority, & mTLS renewal.

+
+ PING: 2ms + SEALED: FALSE +
+
+ +
+
+ cloud.homelab + ONLINE +
+

Encrypted private cloud file storage & automated system backup target.

+
+ PING: 6ms + STORAGE: 1.2TB +
+
+ +
+
+ wireguard.homelab + INTERNAL +
+

WireGuard mesh VPN gateway connecting cloud VPS instances to homelab node.

+
+ PING: 12ms + PEERS: 6 ACTIVE +
+
+ +
+
+
+
+ + +
+
+
+ /var/log/articles.index + POST COUNT: 4 +
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
DATETITLETAGSREAD TIME
2026-08-02Hardening Traefik Ingress with HashiCorp Vault mTLS[#homelab] [#traefik]8 min
2026-07-18DEFCON CTF Qualifier: Memory Corruption & Heap Exploitation[#ctf] [#binary]14 min
2026-06-29Custom Linux Kernel Compilation for BPF Network Tracing[#linux] [#ebpf]11 min
2026-05-14Minimalist Dotfiles & Hyprland Keybindings Optimization[#hyprland] [#dots]5 min
+
+
+
+ + +
+
+
+ /etc/river_rooks.conf + POSIX SPECIFICATION +
+
+ +
+ # Identity & System Purpose
+ AUTHOR = "River Rooks"
+ ROLE = "Systems Architect & Cybersecurity Researcher"
+ AFFILIATION = "University of Alabama College of Engineering"

+ + # Active Skillset Matrix
+ DOMAINS = ["Network Forensics", "Self-Hosted Infrastructure", "Linux Kernel Hardening"]
+ LANGUAGES = ["POSIX sh", "Python", "C", "Lua"]
+ TOOLS = ["Docker", "Traefik", "WireGuard", "Neovim", "Arch Linux"] +
+ +

+ Focused on building resilient, zero-trust network architectures and low-noise self-hosted environments. + Proven CTF participant and open-source dotfiles maintainer. +

+ + + +
+
+
+ +
+ + + + + + + + diff --git a/samples/sample-dashboard.html b/samples/sample-dashboard.html new file mode 100644 index 0000000..d857ea4 --- /dev/null +++ b/samples/sample-dashboard.html @@ -0,0 +1,434 @@ + + + + + + River Rooks | Terminal Workspace Dashboard + + + + + +
+
+ NORMAL + /home/river/dashboard.workspace +
+
+ TRAEFIK: MESH_OK + SYS_LOAD: 0.14 + UPTIME: 99.98% +
+
+ + +
+ + +
+
+ /etc/services + [4 ACTIVE] +
+
+ +
+
+ grafana.homelab + [ONLINE] +
+

Telemetry & Prometheus monitoring dashboards.

+
+ PORT: :3000 + HTTPS +
+
+ +
+
+ vault.homelab + [ONLINE] +
+

HashiCorp Vault secret storage & certificates.

+
+ PORT: :8200 + mTLS +
+
+ +
+
+ cloud.homelab + [ONLINE] +
+

Private encrypted document & data storage.

+
+ PORT: :443 + HTTPS +
+
+ +
+
+ vpn.homelab + [INTERNAL] +
+

WireGuard mesh overlay network ingress.

+
+ UDP: :51820 + VPN +
+
+ +
+
+ + +
+
+ ~/whoami.md + RESUME +
+
+

River Rooks

+
SYSTEMS ARCHITECT & CYBERSECURITY RESEARCHER
+ +

+ Computer Science & Cybersecurity student at the University of Alabama College of Engineering. + Specializing in low-level network forensics, self-hosted infrastructure resilience, and hardened Linux kernel configurations. +

+ +

active_stack

+
+ [#network-forensics] + [#docker-traefik] + [#arch-linux] + [#neovim] + [#wireguard] + [#posix-sh] + [#python] + [#hashicorp-vault] +
+ +

featured_projects

+ +
+
mesh-topology-builder
+

+ Automated WireGuard mesh network provisioner written in POSIX shell and Python. Generates deterministic keypairs and Traefik routing rules. +

+
+ +
+
pcap-forensics-parser
+

+ High-throughput PCAP packet analyzer built for CTF competitions to detect anomalous TCP handshake flags and hidden ICMP payloads. +

+
+ +
+
+ + +
+
+ /var/log/articles.log + NOTES +
+
+ +
+
2026-08-02 | #HOMELAB
+ Hardening Traefik Ingress with HashiCorp Vault mTLS +

Zero-trust certificate auto-renewal pipeline configuration.

+
+ +
+
2026-07-18 | #CTF
+ DEFCON CTF Qualifier: Memory Corruption & Heap Exploitation +

Deconstructing glibc malloc chunk metadata manipulation.

+
+ +
+
2026-06-29 | #LINUX
+ Custom Linux Kernel Compilation for BPF Network Tracing +

Configuring eBPF probe hooks for real-time socket inspection.

+
+ +
+
2026-05-14 | #HYPRLAND
+ Minimalist Dotfiles & Hyprland Keybindings Optimization +

Ergonomic modal editing & window tiling configuration setup.

+
+ +
+
+ +
+ + + + + + diff --git a/samples/sample-dual-pane-explorer.html b/samples/sample-dual-pane-explorer.html new file mode 100644 index 0000000..d060c73 --- /dev/null +++ b/samples/sample-dual-pane-explorer.html @@ -0,0 +1,384 @@ + + + + + + River Rooks | Dual Pane Explorer + + + + + +
+
+ + RIVER ROOKS // TREE EXPLORER +
+
+ POSITION: /home/river/services/grafana.md +
+
+ + +
+ + + + + +
+
+ + +
file:///home/river/services/grafana.md
+

Service: grafana.homelab

+ +

+ Primary telemetry and Prometheus monitoring dashboard. Aggregates host node resource usage, Docker container stats, and Traefik router throughput. +

+ +
+
docker-compose.yml
+
+services: + grafana: + image: grafana/grafana-oss:latest + container_name: homelab_grafana + ports: + - "3000:3000" + restart: unless-stopped +
+
+ +
+ [#homelab] + [#prometheus] + [#telemetry] + [STATUS: ONLINE] +
+ +
+
+ +
+ + + + + + + + diff --git a/samples/unified-design-specification.md b/samples/unified-design-specification.md new file mode 100644 index 0000000..030058f --- /dev/null +++ b/samples/unified-design-specification.md @@ -0,0 +1,86 @@ +# Unified Design Specification: Homelab, Blog & Engineering Portfolio + +**Target Platform:** Integrated Personal Site (Public Services Directory, Technical Blog/Notes, Engineering Resume) +**Design Philosophy:** High-signal, low-noise. Developer-centric minimalism, modal text editor & terminal emulator craftsmanship. +**Vibe References:** Zed Editor, Ghostty, Noctalia.dev, Tiling Window Managers (Hyprland/i3). +**Strict Anti-Patterns:** Zero glassmorphism, zero glows/shadows, zero gradients, zero spring animations, zero rounded SaaS "blobs". + +--- + +## 1. Executive Summary & Unified Purpose + +This specification unites the design language across three primary user goals: +1. **Services Directory:** Instant access, routing links, and status visibility for self-hosted homelab services and public utilities. +2. **Technical Notes & Blog:** High-density, comfortable reading experience for deep technical writing (CTF write-ups, architecture specs, config guides, code snippets). +3. **Engineering Resume & Portfolio:** A crisp, high-craft presentation of skills, project archives, and active tech stack designed to impress technical recruiters and engineering leaders. + +--- + +## 2. Unified Design Language & Rules + +### Global Constraints +* **NO Glassmorphism:** Zero `backdrop-filter: blur()`, frosted glass, or translucent overlays. +* **NO Glows or Drop Shadows:** Depth is constructed exclusively via subtle surface color contrast and 1px solid borders. +* **NO Gradients:** Pure, solid color tokens across canvas, surfaces, and accent elements. +* **NO Spring/Float Animations:** Interactions feature instant snapped state transitions (`transition: none;`) or binary 1Hz blinking cursors/indicators. +* **Minimal Radii:** Sharp corners preferred. Border radii capped strictly at `0px` to `4px`. + +### Geometry & Spatial Hierarchy +* **Grid Baseline:** Strict 4pt / 8pt baseline grid for consistent spacing and padding. +* **Reading Density:** Article and prose containers capped at `65ch` max width. +* **Dividers:** Clean 1px solid horizontal lines (`
`) used to delineate major structural sections. + +--- + +## 3. Unified Color Palette + +The color system is dark-mode native, built from muted charcoal slate tones reminiscent of modern terminal emulators and modal text editors. + +| Token Key | Hex Value | Application & Role | +| :--- | :--- | :--- | +| `--bg-canvas` | `#0d0f12` | Main canvas background (deep charcoal slate). | +| `--bg-surface` | `#121417` | Card backgrounds, terminal blocks, sidebars. | +| `--bg-elevated` | `#1c1f26` | Hovered card state, active tab surface. | +| `--border-color` | `#2b303b` | Structural 1px grid lines, card borders, horizontal dividers. | +| `--text-primary` | `#e0e6f0` | Off-white primary text for headings and body prose. | +| `--text-muted` | `#8a95a5` | Monospaced metadata, timestamps, tags, labels, status text. | +| `--accent-cyan` | `#00f0ff` | Primary active accent (terminal prompt, active nav snap, focus outline). | +| `--accent-green` | `#00e676` | Status indicator: Online / Operational / Verified. | +| `--accent-amber` | `#ffb700` | Status indicator: Under Construction / Maintenance / Warning. | + +--- + +## 4. Digital & Typographical Language + +### Dual Typography Hierarchy +* **Monospace Layer (`IBM Plex Mono`, `JetBrains Mono`):** + - **Usage:** Headings (`H1`-`H3`), navigation links, breadcrumbs, tags, terminal code blocks, timestamps, metadata, and keyboard shortcuts (``). + - **Weights:** Medium (500), Bold (700). +* **Prose Layer (`Inter`, `Geist Sans`):** + - **Usage:** Article body prose, project summaries, resume biography. + - **Line Height:** `1.65` to `1.7`. + - **Weight:** Regular (400). + +### Digital Interface Conventions +* **POSIX-Style Path Headers:** Titles and section markers formatted as file paths (e.g., `/var/log/status.txt`, `/etc/services`, `~/notes/ctf-2026.md`). +* **Active Status Dots:** Rigid 8x8px square indicators (`.status-dot`) signaling system state (Cyan/Green for operational, Amber for construction). +* **Metadata Tag Cluster:** Monospaced bracketed tags (e.g., `[#homelab]`, `[#docker-traefik]`, `[#cybersecurity]`). +* **Instantaneous Snap Hover:** Interactive elements transition without delay (`transition: none;`), snapping text to Cyan (`#00f0ff`) or inverting background colors. +* **Keyboard Shortcut Badges (``):** Crisp, 1px bordered boxes depicting keys (e.g., `Ctrl` + `K`, `Tab`). + +--- + +## 5. Functional Layout Modules + +### A. Homelab & Public Services Directory +* Dense tabular grid listing self-hosted apps and public APIs. +* Displays service name, description, status badge (`[ONLINE]`, `[INTERNAL]`, `[PUBLIC]`), and routing link. + +### B. Technical Notes & Blog +* Tabular article archive indexed by date, title, reading duration, and tags. +* Terminal-style code snippets with filename headers (e.g., `traefik.yml`) and copy utility. + +### C. Resume & Portfolio Showcase +* Header identity block with `whoami` summary and active stack cluster. +* Project showcase cards featuring instant snap state. +* Optional integrated ASCII companion daemon (`sys-daemon`) for interactive module inspection.