Protocols
›WireGuard
Full mesh VPN connecting all 7 nodes. Internet → Gematria → WireGuard → Pi fleet. Each node has a 10.x.x.x address. Auto-reconnect on failure.
›NATS
Pub/sub messaging on Octavia. CarPool (forked NATS v2.12.3). 4/5 nodes connected. Used for agent coordination, fleet events, real-time state sync.
›Headscale
Self-hosted coordination server on Aria. Manages WireGuard peer discovery. Replaces Tailscale cloud control plane.
›Tor
Hidden services on Alice, Octavia, Lucidia. .onion addresses for each. Globally reachable without exposing public IPs. Part of BlackBox Protocol.