Point one read-only container at Docker and your reverse proxy (Traefik, Caddy, or NPM) and it writes the docs for you: every service with its host, image and ports, a routes view that joins domain to proxy to container and flags broken ones, a ports matrix with a next-free-port helper, cert and domain expiry with ntfy/Discord reminders, and a change feed of what appeared or vanished each scan. There is also a “Copy my lab” button that exports a redacted markdown snapshot to paste into an AI chat when troubleshooting.

It is a ledger, not a monitor or a map: it never gets write access to anything and container env vars are never read. No telemetry, works air-gapped. Screenshots at the top of the README.

Being fully transparent: AI generated most of the code, with me directing and reviewing. The guardrails are real: CI runs 43 frontend tests, 16 Go test packages and browser e2e, plus mandatory redaction tests on exports, and the default compose is hardened (socket proxy, distroless, read-only rootfs). Weekly releases planned. Top voted connector request gets built next, Proxmox VE is my default.

Deployment: docker compose up -d --build, then a 1 minute setup wizard. Multi-arch images on ghcr (amd64, arm64, armv7).