Getting in

Everything here lives behind two doors. The first is Anubis, a quiet bot-check: the first time you visit any guarded page in a session you see a short "making sure you're not a bot" screen. It runs once. The second door is Authentik, the family single sign-on: log in once and every guarded service (this homepage, search, chat, media requests, and friends) opens for you without a second password.

• Need an account? Ask Frank. Accounts are issued by hand; there is no signup.
• Your clearance lives in a cookie. Clearing cookies means re-clearing both doors.
• If a page asks you to log in repeatedly, that is a server-side problem — tell Frank, don't brute-force it.

Talking to the AI

The everyday front door is Open WebUI (it has its own login the first time; use the same email you use everywhere). Pick a model in the chat's model selector — the three models the fleet runs are described below. Open WebUI keeps your chat history; the raw model endpoints do not.

Images go to frank-primary or frank-secondary (both see them). Audio (WAV) goes to frank-secondary only.

The running models

Three models serve the family. The homepage status cards show whether each one is up right now.

frank-large — deep reasoning

• Model: Qwen3.8-27B (UD-Q8_K_XL, 31.5 GiB).
• Capacity: 262k-token context, exactly one conversation at a time. Text only.
• Inputs: text.
• Best for: cybersecurity and debugging. Use requires Frank's permission.
• Not for: images. It cannot see them.

frank-primary — the primary model

• Model: Qwen3.8-Flash-Next (Q8_0, 175.3 GiB) with MTP + n-gram speculative drafting on both R9700s.
• Capacity: 262k-token context, exactly one conversation at a time; sees images.
• Inputs: text, image.
• Best for: software engineering, system administration, and instruction tasks.

frank-secondary — the fast utility model

• Model: Gemma4-12B QAT (Balanced, Q4_K_M, 7.4 GiB).
• Capacity: one million tokens of pooled context across four simultaneous conversations (up to 262k each); fastest at images.
• Inputs: text, image, audio.
• Best for: agentic search, RAG, research subagents, translation, roleplay, and summarization — any small task that doesn't need much intelligence, and anything with a picture (screenshots, photos, diagrams).

Which one to pick? Small utility work, RAG, search, and screenshots: frank-secondary. Software engineering, sysadmin, and instruction tasks: frank-primary. Cybersecurity and debugging: frank-large (with Frank's permission).

Media & files

• Movies & TV: request with Seerr; watch with Plex or Jellyfin. Don't ask the *arrs directly — Seerr is the front door, and requests ride the tunnel from there.
• Books: Calibre-Web — the e-book library, with its own login.
• Games: RomM — ROM library and emulator collection.
• Raw files: Copyparty — direct downloads and shares.
• Search: SearXNG — metasearch, VPN-routed, no AI snoop.

When something looks broken

• A status card says DOWN. Reload the page once; the checker re-probes every few minutes. If it stays down, that service really is unhappy — tell Frank.
• "status unavailable" on the homepage. The page couldn't read its status file. Hard-reload (Ctrl/Cmd-Shift-R).
• Connection timeout on a home device. Nine times out of ten the device isn't using the house DNS (Pi-hole at 192.168.0.143) and resolved our names to the public address, which doesn't answer. Point the device's DNS at 192.168.0.143 and retry.
• The bot-check spins forever. Let it finish; heavy JS blocking (privacy extensions) can starve it. Pause the blocker, reload, resume.