Claude-skill-registry home-network-admin
Manage and troubleshoot Tim's home network, SSH into devices, administer the Synology NAS, and work with Tailscale. Use when the user wants to (1) SSH into or run commands on remote machines (synology, dobro), (2) manage the Synology NAS (files, packages, Docker, backups, Surveillance Station), (3) troubleshoot network connectivity or DNS, (4) check Tailscale status or manage the tailnet, (5) transfer files between machines, (6) check device health or disk usage, (7) manage the Caddy reverse proxy on dobro (*.hopperhosted.com), (8) any home server or home network administration task.
git clone https://github.com/majiayu000/claude-skill-registry
T=$(mktemp -d) && git clone --depth=1 https://github.com/majiayu000/claude-skill-registry "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/data/home-network-admin" ~/.claude/skills/majiayu000-claude-skill-registry-home-network-admin && rm -rf "$T"
skills/data/home-network-admin/SKILL.mdHome Network Admin
Administer Tim's home network: devices connected over Tailscale, with a Synology NAS and Macs accessible via SSH.
Read references/network-inventory.md for the full device list, IPs, SSH config, and network topology before performing any task.
SSH Access
SSH configs are defined in
~/.ssh/config. Use the short aliases:
- Synology NAS (custom port, user tdhopper)ssh synology
- Mac (default port, user thopper)ssh dobro
SSH keys are managed via 1Password agent. If SSH fails with auth errors, verify 1Password is unlocked and the SSH agent is running.
Synology NAS Administration
The Synology runs DSM. Common admin tasks via SSH:
- Packages:
(installed),synopkg list
,synopkg status <pkg>synopkg start/stop <pkg> - Docker/Container Manager:
,sudo docker ps
,sudo docker logs <container>
(compose files often insudo docker compose
)/volume1/docker/ - Disk/volume health:
,df -h
,cat /proc/mdstatsynodisk --enum - Shared folders: typically under
/volume1/ - DSM web UI:
orhttps://synology:5001https://100.86.145.18:5001 - Logs:
and DSM log center/var/log/
For destructive operations (deleting files, stopping services, modifying configs), confirm with the user first.
Tailscale
Tailscale connects all devices over a WireGuard mesh. Run
tailscale status to discover the tailnet name and device list.
- On macOS, the
CLI may not be on PATH. Use:tailscale/Applications/Tailscale.app/Contents/MacOS/Tailscale - Check status:
(or the full path above)tailscale status - Verify connectivity:
tailscale ping <hostname> - All devices are reachable via MagicDNS (e.g.,
)synology.<tailnet>.ts.net
Caddy Reverse Proxy (on dobro)
Caddy runs on dobro, providing HTTPS reverse proxy for
*.hopperhosted.com. The Caddyfile is at ~/Caddyfile (tracked in yadm). TLS uses Cloudflare DNS-01 challenge.
See references/network-inventory.md for the full list of proxied subdomains and backends.
- Manage Caddy on dobro:
thenssh dobro
,brew services restart caddycaddy reload --config ~/Caddyfile - Logs:
orjournalctl -u caddy
depending on how it's managedbrew services info caddy - Edit Caddyfile locally: it's tracked in yadm dotfiles at
~/Caddyfile
File Transfer
- Between local and remote hosts:
orscp
using the SSH aliasesrsync - Example:
rsync -avz ~/files/ synology:/volume1/backup/files/ - For large transfers, prefer
withrsync--progress
Troubleshooting
- Can't SSH: Check 1Password is unlocked, verify Tailscale is connected (
), ping the Tailscale IPtailscale status - DNS issues: Check if MagicDNS resolves (
), fall back to Tailscale IPs directlydig @100.100.100.100 synology.<tailnet>.ts.net - NAS unresponsive: Try ping, check DSM web UI, SSH may still work even if DSM is sluggish
- Slow network: Check if traffic is going through Tailscale relay (
shows DERP relay vs direct connection)tailscale status