╔══════════════════════════════════════════════════════════════════╗
║           vanga homelab — SESSION CONTEXT                       ║
║           paste this at the start of any new session            ║
╚══════════════════════════════════════════════════════════════════╝

HOST: vanga (Proxmox 9.1) — 10.0.99.200
OS:   Debian 13 (trixie)
CPU:  AMD Ryzen 5 5500GT (12 threads)
RAM:  14GB

── USERS & GROUPS ────────────────────────────────────────────────
edemilov   uid=1000  gid=1000  groups: sudo(27) robots(1015) family(1010) familyg(1011) adming(1012)
www-data   uid=33    gid=33    (nginx/Node.js service user in CTs)

adming  gid=1012  → ALL Samba shares (full admin)
familyg gid=1011  → Media + Family shares
robots  gid=1015  → Media-Services (Jellyfin/Immich)

── UNPRIVILEGED CT UID MAPPING ───────────────────────────────────
host_uid = container_uid + 100000
root(0)      → 100000   chown 100000:100000
www-data(33) → 100033   chown 100033:100033   (Node.js / nginx)
git(103)     → 100103   chown 100103:100112   (Gitea CT116)

ALWAYS chown on the HOST side, not inside the CT.

── CONTAINERS ────────────────────────────────────────────────────
CT100  10.0.99.100  samba-server   → all Samba shares
CT101  10.0.99.101  pihole         → DNS
CT102  10.0.99.102  jellyfin       → media streaming
CT103  10.0.99.103  npm            → Nginx Proxy Manager
CT104  10.0.99.104  heimdall       → dashboard
CT106  10.0.99.106  nextcloud      → file sync
CT107  10.0.99.107  tailscale      → VPN
CT108  10.0.99.108  cloudflared    → Cloudflare tunnel
CT110  10.0.99.110  webhost        → root.edemilov.ru (notes app, Node.js)
CT112  10.0.99.112  vaultwarden    → passwords
CT113  10.0.99.113  immich         → photos
CT115  10.0.99.115  db-server      → PostgreSQL + Redis + SQLite
CT116  10.0.99.116  gitea          → git.edemilov.ru

── KEY PATHS ─────────────────────────────────────────────────────
/srv/depo/web/root/www        → notes app (CT110: /var/www/users/root/www)
/srv/depo/web/root/www/uploads→ notes uploads (own: 100033)
/srv/apps/gitea/data          → Gitea data  (own: 100103:100112)
/srv/users/edemilov           → personal drive (Samba: Edemilov)
/srv/shared/documents         → family docs (Samba: Family-Documents)
/srv/media                    → all media (Samba: Movies/TVShows/Music...)
/srv/depo                     → depo/scripts/isos (Samba: Depo)

── SAMBA (CT100 — 10.0.99.100) ───────────────────────────────────
Credentials file: /etc/samba/credentials.emilovi (chmod 600)
Web share: \\10.0.99.100\Web → /srv/depo/web (edemilov + adming only)
Edemilov:  \\10.0.99.100\Edemilov → /srv/users/edemilov

── SERVICES ──────────────────────────────────────────────────────
notes app:  pct exec 110 -- systemctl restart notes
            pct exec 110 -- journalctl -u notes -f
gitea:      pct exec 116 -- systemctl restart gitea
postgres:   pct exec 115 -- su -c 'psql -l' postgres
nginx:      pct exec 110 -- nginx -t && systemctl reload nginx

── NETWORK ───────────────────────────────────────────────────────
LAN:        10.0.99.0/24
Gateway:    10.0.99.1
DNS:        10.0.99.101 (pihole)
Public:     Cloudflare tunnel → CT108 → CT103 NPM → CT
root.edemilov.ru  → CT110:80  → Node:3000
git.edemilov.ru   → CT116:3000

── SCRIPTS REPO ──────────────────────────────────────────────────
https://git.edemilov.ru/edemilov/scripts (public)
curl -s https://git.edemilov.ru/edemilov/scripts/raw/branch/master/apps.sh | sudo bash
bash <(curl -s https://git.edemilov.ru/edemilov/scripts/raw/branch/master/netdrivelink.sh)

╔══════════════════════════════════════════════════════════════════╗
║  paste above block at session start so Claude knows your setup  ║
╚══════════════════════════════════════════════════════════════════╝