📊 Live Status Dashboard (as of July 2025)
🟢 Service Status
- Home Assistant Online
- Plex Online
- Navidrome Online
- SpotSpot Online
- Nextcloud Maintenance
💾 Drive Usage
Sam Storage
2.9TiB / 3.6TiB used (80%)
Games
1.8TiB / 1.9TiB used (96%) – Nearly Full!
Jellyfin Media
7.1TiB / 7.3TiB used (98%) – Nearly Full!
Server Media
7.2TiB / 7.3TiB used (100%) – FULL!
Prod Media
5.4TiB / 7.3TiB used (74%)
⚠️ Issues & Alerts
- • Games, Jellyfin Media, Server Media: Nearly Full
- • Nextcloud: Maintenance
- • Some music downloads not showing progress
- • No RAID yet, still using external disks
SamCloud Infrastructure
Personal cloud empire documentation & operations center
🔎 Live System & Service Status
Services
Drives
✅ Mac Mini Running
🚀 Services Active
📝 Documentation
📚 SamCloud Master Reference (Nov 2024 – Jul 2025)
1. Hardware & Peripherals
Initial Status (Nov 2024):• Mac Mini M4 (16GB RAM, macOS Sonoma), MacBook Pro M1 Pro (32GB RAM), iPhone 15 Pro, iPad
• Storage: 4TB TB SSD, 2TB NVMe SSD, 2x500GB SSDs, 8TB HDD, 6TB Time Capsule, 2TB HDD
• Qgeem TB4 Max Dock, LG UltraFine 5K, Apple Thunderbolt Display
Milestones & Upgrades:
• Dec 2024: Qgeem dock installed, storage organized, RAID/UPS research started
• Jan–Feb 2025: More SSDs, Thunderbolt perf tests, archive workflows, Plex server
• Mar–May 2025: RAID 1 tests, APFS upgrades, cable mgmt, WireGuard VPN
• Jun–Jul 2025: Stable server, all drives mounted, dock smooth, 20TB+ HDDs planned, UPS research
Current State & Open Tasks:
• Mac Mini as stable server, all drives SMB shared
• Finalize RAID, prep for drive failures, improve cable mgmt, label all drives
📋 System Overview
🎯 SamCloud Mission
Build a reliable, self-hosted cloud infrastructure using Mac Mini as the always-on server, with remote access, dynamic DNS, and automated backups. The goal is to replace iCloud/third-party services, enable secure remote workflows, and provide a central hub for all digital life and creative projects.
Project Owner: Jeezy Sam
Start Date: Nov 27, 2024
Vision: Finder-accessible, remote-first, AI-ready, home-and-creative stack.
Key Milestones: VPN, DDNS, music automation, family access, AI agent, robust backup.
Project Owner: Jeezy Sam
Start Date: Nov 27, 2024
Vision: Finder-accessible, remote-first, AI-ready, home-and-creative stack.
Key Milestones: VPN, DDNS, music automation, family access, AI agent, robust backup.
✅ Current Capabilities
• Mac Mini (M4, 16GB RAM) as primary server
• MacBook Pro (M1 Pro, 32GB RAM) for mobile production
• Finder-based SMB network sharing
• Drives: Data Storage (4TB SSD), Games (2TB NVMe), Cloud (2TB HDD), Archive (8TB HDD), Time Capsule (6TB HDD)
• DDNS via Cloudflare + ddclient
• WireGuard VPN for remote access
• Automated monitoring, backup, and status dashboard
• Navidrome + Finamp for music streaming
• SpotSpot for music downloads
Recent Wins: VPN working, music system streamlined, family access via Plex, backup scripts in place.
Pending: RAID/redundancy, AI agent, HomeKit integration, more automation.
• MacBook Pro (M1 Pro, 32GB RAM) for mobile production
• Finder-based SMB network sharing
• Drives: Data Storage (4TB SSD), Games (2TB NVMe), Cloud (2TB HDD), Archive (8TB HDD), Time Capsule (6TB HDD)
• DDNS via Cloudflare + ddclient
• WireGuard VPN for remote access
• Automated monitoring, backup, and status dashboard
• Navidrome + Finamp for music streaming
• SpotSpot for music downloads
Recent Wins: VPN working, music system streamlined, family access via Plex, backup scripts in place.
Pending: RAID/redundancy, AI agent, HomeKit integration, more automation.
✅ Current Status
🟢 Services Running
• Home Assistant: Online
• Plex: Online
• Nextcloud: Maintenance
• Navidrome: Online
• SpotSpot: Online
Notes: Finamp used for music playback; Navidrome for library; SpotSpot for downloads.
Recent Issues: Music download progress not always visible; some services need auto-restart on failure.
• Plex: Online
• Nextcloud: Maintenance
• Navidrome: Online
• SpotSpot: Online
Notes: Finamp used for music playback; Navidrome for library; SpotSpot for downloads.
Recent Issues: Music download progress not always visible; some services need auto-restart on failure.
⚠️ Issues & Alerts
• Some music downloads not showing progress (SpotSpot config, Docker logging)
• Wi-Fi-only access can cause slowdowns for remote editing
• Drive redundancy: No RAID yet, still using external disks
• DaVinci Resolve cacheclip/gallery errors: Check drive mount paths
To Do: Improve error logging, automate service restarts, test backup restores.
• Wi-Fi-only access can cause slowdowns for remote editing
• Drive redundancy: No RAID yet, still using external disks
• DaVinci Resolve cacheclip/gallery errors: Check drive mount paths
To Do: Improve error logging, automate service restarts, test backup restores.
🏗️ Network Architecture
🗺️ Topology Diagram
Mac Mini (server) <-> Router <-> Internet
|
+-- MacBook Pro (remote, via WireGuard VPN)
+-- Other devices (family, friends, via VPN/SMB)
Key Decisions: Use mDNS/Bonjour for .local names, plan for Avahi relay.
Pending: Draw/update diagram, document VLANs if added.
|
+-- MacBook Pro (remote, via WireGuard VPN)
+-- Other devices (family, friends, via VPN/SMB)
Key Decisions: Use mDNS/Bonjour for .local names, plan for Avahi relay.
Pending: Draw/update diagram, document VLANs if added.
🔗 Key Connections
• 192.168.1.0/24 - Main LAN
• 10.0.0.0/24 - VPN
• samcloud.local, samvpn, samlab - host/agent ecosystem
Checklist: Document all static IPs, update as new subnets/services are added.
• 10.0.0.0/24 - VPN
• samcloud.local, samvpn, samlab - host/agent ecosystem
Checklist: Document all static IPs, update as new subnets/services are added.
🌐 DDNS / Domain Management
🔧 ddclient Configuration
Using Cloudflare API token and ddclient to keep wg.yourdomain.com updated with public IP.
Config path: /opt/homebrew/etc/ddclient/ddclient.conf
Guide: See full step-by-step in notes.
Lessons Learned: API token must have DNS edit rights; test with -force and -verbose.
Config path: /opt/homebrew/etc/ddclient/ddclient.conf
Guide: See full step-by-step in notes.
Lessons Learned: API token must have DNS edit rights; test with -force and -verbose.
🔍 DNS Monitoring
Use uptime-kuma or email alerts to monitor DNS status.
Consider adding backup DDNS provider (DuckDNS, Dynu).
Checklist: Confirm DNS updates after IP change, monitor logs weekly.
Consider adding backup DDNS provider (DuckDNS, Dynu).
Checklist: Confirm DNS updates after IP change, monitor logs weekly.
🛠️ Troubleshooting
• Check Cloudflare API token permissions
• Confirm ddclient service is running (brew services list)
• Review ddclient logs for errors
Common Fixes: Restart ddclient, reissue API token, check for typos in config.
• Confirm ddclient service is running (brew services list)
• Review ddclient logs for errors
Common Fixes: Restart ddclient, reissue API token, check for typos in config.
🔐 VPN & Security
🛡️ WireGuard & Network Timeline
Nov 2024: Bell Hub 3000 (Wi-Fi 6), WireGuard on all devices, SMB on port 5800, local DNS (SamCloud/SamVPN/SamHome)
Dec 2024: Remote VPN tests, network diagrams, local DNS for iOS
Jan–Mar 2025: VPN for mobile/MacBook, SMB over VPN, firewall rules, DNS suffixes
Apr–May 2025: WireGuard health scripts, split tunneling, DDNS research
Jun–Jul 2025: Fine-tuned configs, iOS VPN docs, known issues/workarounds
Open Tasks: Automate DDNS, AI key mgmt, monitor/tweak VPN/firewall, consider 5G failover
Dec 2024: Remote VPN tests, network diagrams, local DNS for iOS
Jan–Mar 2025: VPN for mobile/MacBook, SMB over VPN, firewall rules, DNS suffixes
Apr–May 2025: WireGuard health scripts, split tunneling, DDNS research
Jun–Jul 2025: Fine-tuned configs, iOS VPN docs, known issues/workarounds
Open Tasks: Automate DDNS, AI key mgmt, monitor/tweak VPN/firewall, consider 5G failover
🔑 OpenVPN Setup
Not currently in use. Consider as backup or for specific clients.
Note: WireGuard preferred for simplicity and speed.
Note: WireGuard preferred for simplicity and speed.
🔥 Firewall Rules
Use macOS firewall and router rules to restrict access.
Only allow VPN/SMB/SSH from trusted IPs.
Checklist: Review rules after adding new services.
Only allow VPN/SMB/SSH from trusted IPs.
Checklist: Review rules after adding new services.
🕵️ Security Monitoring
Monitor failed login attempts, VPN connections, and system logs.
Consider integrating with Uptime Kuma or similar.
Pending: Add alerting for failed logins and unusual activity.
Consider integrating with Uptime Kuma or similar.
Pending: Add alerting for failed logins and unusual activity.
🔗 Network Ports & DNS
Ports Table:
DNS: Local DNS for SamCloud/SamVPN/SamHome, mobile config for seamless access
| Service | Protocol | Port | Notes |
|---|---|---|---|
| SMB File Share | TCP | 5800 | Custom Finder access |
| WireGuard VPN | UDP | 51820 | Default/custom |
| Plex Server | TCP | 32400 | Media streaming |
| Dynamic DNS | TCP/UDP | Various | Outbound updates |
🌐 Network Interfaces & Subnets (July 2025)
Active Interfaces:
• en15: 192.168.100.22 (2.5GbE)
• en1: 192.168.100.97 (Wi-Fi)
• bridge100: 198.19.249.3
• bridge101: 192.168.215.0
• bridge102: 192.168.165.0
• bridge103: 192.168.97.0
• bridge104: 192.168.107.0
• bridge105: 192.168.163.0
• bridge106: 192.168.156.0
• bridge108: 192.168.164.0
• utun4: 10.8.0.1 (VPN tunnel)
DNS: dnsmasq running on multiple interfaces for local DNS resolution.
• en15: 192.168.100.22 (2.5GbE)
• en1: 192.168.100.97 (Wi-Fi)
• bridge100: 198.19.249.3
• bridge101: 192.168.215.0
• bridge102: 192.168.165.0
• bridge103: 192.168.97.0
• bridge104: 192.168.107.0
• bridge105: 192.168.163.0
• bridge106: 192.168.156.0
• bridge108: 192.168.164.0
• utun4: 10.8.0.1 (VPN tunnel)
DNS: dnsmasq running on multiple interfaces for local DNS resolution.
🔒 Service & Port Map (July 2025)
Key Listening Ports:
• 22 (SSH), 445 (SMB), 5900 (Screen Sharing), 3689 (iTunes/DAAP), 8096 (Jellyfin), 8080/8081/8833/8989/9117/7878/8686/6544/5055/4533/9696/3000/2283/5001/80/81/443 (web/media/automation), 11434 (Ollama/AI), 50055 (AssetCache), 5432 (Postgres), 8021 (local), 53 (DNS)
Services Running:
• smbd (file sharing), jellyfin (media), ollama (AI), dnsmasq (DNS), AssetCache, postgres, mediasharingd, ddclient (DDNS), backupd-helper, cron/launchd, etc.
Action: Review open ports for security, close unused services, document all service endpoints.
• 22 (SSH), 445 (SMB), 5900 (Screen Sharing), 3689 (iTunes/DAAP), 8096 (Jellyfin), 8080/8081/8833/8989/9117/7878/8686/6544/5055/4533/9696/3000/2283/5001/80/81/443 (web/media/automation), 11434 (Ollama/AI), 50055 (AssetCache), 5432 (Postgres), 8021 (local), 53 (DNS)
Services Running:
• smbd (file sharing), jellyfin (media), ollama (AI), dnsmasq (DNS), AssetCache, postgres, mediasharingd, ddclient (DDNS), backupd-helper, cron/launchd, etc.
Action: Review open ports for security, close unused services, document all service endpoints.
🔌 Ports & Services Map
🌐 Main Server Ports
| Service | Protocol | Port | Description |
|---|---|---|---|
| SMB File Share | TCP | 5800 | Finder/Network Share |
| SSH | TCP | 22 | Remote Shell |
| WireGuard VPN | UDP | 51820 | VPN Access |
| Plex Server | TCP | 32400 | Media Streaming |
| Jellyfin | TCP | 8096 | Media Server |
| Navidrome | TCP | 4533 | Music Streaming |
| Ollama (AI) | TCP | 11434 | Local AI Agent |
| DNS (dnsmasq) | UDP | 53 | Local DNS |
🐳 Docker/OrbStack Ports
| Container | Protocol | Port | Description |
|---|---|---|---|
| Nextcloud | TCP | 8080 | Web UI |
| Uptime Kuma | TCP | 3001 | Status Monitoring |
| Jellyfin | TCP | 8096 | Media Server |
| Navidrome | TCP | 4533 | Music Streaming |
| SpotSpot | TCP | 5055 | Music Downloads |
| Other (custom) | TCP/UDP | see config | See docker-compose.yml |
⚙️ Scripts & Automation
🤖 Current Daemons & Automation (July 2025)
Active Daemons:
• ddclient (dynamic DNS updates)
• rsync (scheduled/triggered backups)
• cron/launchd (job scheduling)
• backupd-helper (Time Machine)
• AssetCache (macOS content caching)
• mediasharingd (AirPlay/Media Sharing)
• ollama (local AI agent)
Action: Document all scripts, monitor logs, automate health checks and notifications.
• ddclient (dynamic DNS updates)
• rsync (scheduled/triggered backups)
• cron/launchd (job scheduling)
• backupd-helper (Time Machine)
• AssetCache (macOS content caching)
• mediasharingd (AirPlay/Media Sharing)
• ollama (local AI agent)
Action: Document all scripts, monitor logs, automate health checks and notifications.
📈 Monitoring Scripts
Use scripts to monitor service status, disk space, and network health.
Integrate with dashboard for live updates.
Checklist: Add alerting for low disk space, service failures.
Integrate with dashboard for live updates.
Checklist: Add alerting for low disk space, service failures.
💾 Backup Scripts
Rsync-based scripts for scheduled backups.
Manual triggers for on-demand backups.
Checklist: Test backup/restore, document all scripts.
Manual triggers for on-demand backups.
Checklist: Test backup/restore, document all scripts.
⏰ Cron Jobs
List and schedule all cron jobs for maintenance, monitoring, and cleanup.
Examples: Daily backup, weekly cleanup, monthly SMART check.
Examples: Daily backup, weekly cleanup, monthly SMART check.
🟡 YellowMellow Setup
⚙️ Configuration
Add YellowMellow config details here as the service is developed.
Plan: Document all configs, keep changelog.
Plan: Document all configs, keep changelog.
🛠️ Services
List YellowMellow services and their status as they are added.
Checklist: Add monitoring and status checks.
Checklist: Add monitoring and status checks.
📊 Monitoring
Describe how you monitor YellowMellow (logs, alerts, etc.).
Plan: Integrate with dashboard, add alerting.
Plan: Integrate with dashboard, add alerting.
🧰 Troubleshooting
Add troubleshooting steps for YellowMellow as issues arise.
Checklist: Document all issues and fixes.
Checklist: Document all issues and fixes.
🛠️ Troubleshooting
🚨 Common Issues
• DaVinci Resolve cacheclip/gallery errors: Check drive mount paths
• VPN auto-connect not working: Check launch agent and WireGuard config
• Music downloads not appearing: Check SpotSpot/Jellyfin scan
Checklist: Keep log of all issues and resolutions for future reference.
• VPN auto-connect not working: Check launch agent and WireGuard config
• Music downloads not appearing: Check SpotSpot/Jellyfin scan
Checklist: Keep log of all issues and resolutions for future reference.
🧹 Maintenance
🗓️ Maintenance Tasks
• Regularly check disk health and SMART status
• Update and test backups
• Review service logs and uptime
• Clean up unused files and system clutter
Checklist: Schedule monthly review, automate where possible.
• Update and test backups
• Review service logs and uptime
• Clean up unused files and system clutter
Checklist: Schedule monthly review, automate where possible.
💡 Ideas & Experiments / Creative Workflow
📝 Creative & Business Timeline
Nov 2024: Mirrorless camera, studio setup, initial client work, pricing/marketing challenges
Dec 2024: BTS content workflow, social engagement, monthly client plans
Jan–Mar 2025: Pricing tiers, local network, portfolio/website, social templates
Apr–Jun 2025: Lighting upgrades, storage workflow, collabs, AI for content
Jul 2025: Confident workflow, more clients, prepping for workshops, automating intake
Open Tasks: Pricing calculator, expand social, AI for captions, portfolio update
Dec 2024: BTS content workflow, social engagement, monthly client plans
Jan–Mar 2025: Pricing tiers, local network, portfolio/website, social templates
Apr–Jun 2025: Lighting upgrades, storage workflow, collabs, AI for content
Jul 2025: Confident workflow, more clients, prepping for workshops, automating intake
Open Tasks: Pricing calculator, expand social, AI for captions, portfolio update
📝 Notes & Brainstorms
• Build unified music app (search, download, stream in one interface)
• Integrate Shazam/Apple Music/Spotify lists for auto-download
• Add AI agent for file management and automation
• Expand dashboard to include more live metrics and controls
• Document and share setup for others to replicate
Future: Add changelog, index system, and user reflections for ongoing improvement.
• Integrate Shazam/Apple Music/Spotify lists for auto-download
• Add AI agent for file management and automation
• Expand dashboard to include more live metrics and controls
• Document and share setup for others to replicate
Future: Add changelog, index system, and user reflections for ongoing improvement.
🎥 Media Production
📸 Equipment & Studio
Current Gear:
• Mirrorless camera (main body), 24-70mm & 70-200mm lenses
• LED panels, flash, backdrops, tripods, reflectors
• Studio space with controlled lighting
Audio:
• Lavalier mics, shotgun mic, audio interface
Computing:
• MacBook Pro (M1 Pro, 32GB RAM) for editing
• Mac Mini (M4, 16GB RAM) as server and storage hub
Accessories:
• Portable SSDs for scratch, SD card readers, color calibration tools
• Mirrorless camera (main body), 24-70mm & 70-200mm lenses
• LED panels, flash, backdrops, tripods, reflectors
• Studio space with controlled lighting
Audio:
• Lavalier mics, shotgun mic, audio interface
Computing:
• MacBook Pro (M1 Pro, 32GB RAM) for editing
• Mac Mini (M4, 16GB RAM) as server and storage hub
Accessories:
• Portable SSDs for scratch, SD card readers, color calibration tools
🎬 Workflow & Process
Capture: Shoot RAW/JPEG, dual card backup, organize by project
Ingest: Import to MacBook Pro, backup to server, verify integrity
Edit: DaVinci Resolve, Lightroom, Photoshop
Storage: Active projects on SSD, archive to HDD/server
Delivery: Export to client folder, cloud share, backup final deliverables
Automation: Use scripts for ingest, backup, and archiving. Plan for AI tagging and auto-sorting in future.
Ingest: Import to MacBook Pro, backup to server, verify integrity
Edit: DaVinci Resolve, Lightroom, Photoshop
Storage: Active projects on SSD, archive to HDD/server
Delivery: Export to client folder, cloud share, backup final deliverables
Automation: Use scripts for ingest, backup, and archiving. Plan for AI tagging and auto-sorting in future.
🗂️ Project Management
Organization: Folder structure by year/client/project
Checklists: Pre-shoot gear check, post-shoot backup, edit milestones
Notes: Keep log of client feedback, lessons learned, and creative ideas
Checklists: Pre-shoot gear check, post-shoot backup, edit milestones
Notes: Keep log of client feedback, lessons learned, and creative ideas
💡 Creative Notes & Experiments
• Try new lighting setups and modifiers
• Experiment with AI-powered editing tools
• Develop pricing calculator for shoots
• Plan for BTS content and social media engagement
Future: Automate ingest, AI tagging, and client delivery pipeline
• Experiment with AI-powered editing tools
• Develop pricing calculator for shoots
• Plan for BTS content and social media engagement
Future: Automate ingest, AI tagging, and client delivery pipeline
📲 Install as App
🖥️ Desktop & Mobile
To install this dashboard as a local app:
Tip: For best experience, use the dashboard on your local network.
- Chrome/Edge: Click the Install icon in the address bar or menu.
- Safari (iOS/macOS): Tap Share → Add to Home Screen.
Tip: For best experience, use the dashboard on your local network.