Beyond ADR-0008's nine.
What and why
Memos MIT Docker/Go — awesome-selfhosted README.md:1616.
Quick markdown notes against a single SQLite file. Deliberately the smallest thing in its category: no sync protocol to run, no plugin ecosystem, no editor to install.
Alternatives, all in the list and all heavier in a different direction:
- SilverBullet (
:1621, MIT) — scriptable, more capable, more to learn.
- TriliumNext Notes (
:1623, AGPL-3.0) — hierarchical knowledge base, the right answer for a large structured corpus and overkill for jotting.
- Joplin (
:1612, MIT) — client-side with a sync target, so it wants Nextcloud or similar behind it, which is a dependency this estate is otherwise avoiding.
A note on scope
This is a notes service, not documentation. Repository documentation stays in docs/ where CI can lint it and git log can explain it — that is a property worth protecting, and #124 (no entry point for a successor operator) is a docs/ problem that a notes app must not be allowed to look like a solution to.
Placement
Sensitive tier, VLAN 99. Personal notes accumulate exactly the kind of incidental detail — addresses, account references, half-copied credentials — that argues for the higher-trust segment even though nothing about the service demands it.
What it needs
Which VLAN this touches
🔴 99 — Winterfell (management)
Security review
Depends on
#102 (the mini PC), #129 (Caddy).
Beyond ADR-0008's nine.
What and why
Memos
MITDocker/Go— awesome-selfhostedREADME.md:1616.Quick markdown notes against a single SQLite file. Deliberately the smallest thing in its category: no sync protocol to run, no plugin ecosystem, no editor to install.
Alternatives, all in the list and all heavier in a different direction:
:1621,MIT) — scriptable, more capable, more to learn.:1623,AGPL-3.0) — hierarchical knowledge base, the right answer for a large structured corpus and overkill for jotting.:1612,MIT) — client-side with a sync target, so it wants Nextcloud or similar behind it, which is a dependency this estate is otherwise avoiding.A note on scope
This is a notes service, not documentation. Repository documentation stays in
docs/where CI can lint it andgit logcan explain it — that is a property worth protecting, and #124 (no entry point for a successor operator) is adocs/problem that a notes app must not be allowed to look like a solution to.Placement
Sensitive tier, VLAN 99. Personal notes accumulate exactly the kind of incidental detail — addresses, account references, half-copied credentials — that argues for the higher-trust segment even though nothing about the service demands it.
What it needs
secrets/*.sops.yaml.Which VLAN this touches
🔴 99 — Winterfell (management)
Security review
secrets/*.sops.yamldocs/network.mdwith an OUI-truncated MAC — n/aDepends on
#102 (the mini PC), #129 (Caddy).