# Hosts

| Name | Role | Hardware | NAS |
|------|------|----------|-----|
| Radagon | TP-Link router (WAN) | — | — |
| Marika | OpenWrt router (intranet gateway) | — | — |
| Godfrey | Network switch | — | — |
| Morgott | Caddy + control-plane apps | Intel NUC | yes |
| Melina | Gitea + media stack + apps | Intel NUC, 4c/31G | yes |
| Mohg | apps | Fujitsu Esprimo | yes |
| Malenia | apps | Mac Mini 2012 | — |
| Miquella | NAS, exports `/volume1/ubuntu` → `/mnt/nas` (NFS) | Synology DSM | source |

Bootstrap procedure: [onboarding.md](onboarding.md).

## Age public keys (SOPS)

Public keys are non-secret. Used as recipients in `Charlie/<stack>/.sops.yaml` files. Generated per [onboarding.md → Host age key (SOPS)](onboarding.md#host-age-key-sops). Private keys live at `/etc/charlie/age.key` on each host (`0600`, `root:root`).

| Owner | Public key |
|---|---|
| **admin** | `age19d6mc8arznnwnvtp0xrphlseuwf94p0f3pznszrtmd5wgmjpzqdq9mltvs` |
| morgott | `age1m5ha3fd8psek5pym4spk7encjk4vmsml46eya3eymp7q9d9jre5s7xe84r` |
| melina | `age1xfp878l4ul5zulqqul0u60c44c5wj94cmladgc6jt5jrlmrdrezsd8twh2` |
| mohg | _(generated when first stack on mohg needs SOPS)_ |
| miquella | _(generated when first stack on miquella needs SOPS)_ |
| malenia | _(generated when first stack on malenia needs SOPS)_ |

Backup of admin private key: vaultwarden Secure Note `Charlie SOPS admin age key`.