diff --git a/README.md b/README.md
new file mode 100644
index 0000000..f3c12ea
--- /dev/null
+++ b/README.md
@@ -0,0 +1,89 @@
+# Ourpad — Project Directory
+
+A living index of self-hosted projects, tools, and infrastructure powering the Ourpad home lab — 2 Proxmox nodes, 17 LXCs, 30+ services.
+
+## Projects
+
+| Project | Stack | Status |
+|---|---|---|
+| [Pass Vault](https://gitea.ourpad.casa/shawn/pass-vault) | FastAPI, pass, Vanilla JS | 🟢 Active |
+| [Canteen Asset Tracker](https://gitea.ourpad.casa/shawn/canteen-asset-tracker) | FastAPI, SQLite, Vanilla JS | 🟡 In Progress |
+| [Canteen Web App](https://gitea.ourpad.casa/shawn/canteen-web-app) | Frontend | 🟡 In Progress |
+| [Photo Geotagger](https://gitea.ourpad.casa/shawn/photo-geotagger) | Python, FastAPI, Leaflet | 🟢 Active |
+| [Project Directory](https://gitea.ourpad.casa/shawn/project-directory) | HTML/CSS, Static | 🟢 Active |
+| [Hermes Agent](https://github.com/NousResearch/hermes-agent) | Python, AI/ML | 🟢 Active |
+| [Obsidian Vault](https://obsidian.md) | Obsidian, Markdown, Dataview | 🟢 Active |
+
+## Public Services (via `*.ourpad.casa`)
+
+| Service | URL | Description |
+|---|---|---|
+| Gitea | [gitea.ourpad.casa](https://gitea.ourpad.casa) | Self-hosted Git — repos, issues, CI |
+| Pass Vault | [pass.ourpad.casa](https://pass.ourpad.casa) | Web-based secret management |
+| Project Directory | [projects.ourpad.casa](https://projects.ourpad.casa) | This page |
+| Heimdall Dashboard | [dashboard.ourpad.casa](https://dashboard.ourpad.casa) | Service landing page |
+| Sonarr | [sonarr.ourpad.casa](https://sonarr.ourpad.casa) | TV show automation |
+| Radarr | [radarr.ourpad.casa](https://radarr.ourpad.casa) | Movie automation |
+| Jellyseerr | [jellyseerr.ourpad.casa](https://jellyseerr.ourpad.casa) | Media requests |
+| Deluge | [deluge.ourpad.casa](https://deluge.ourpad.casa) | Torrent client |
+| Jellyfin | [jellyfin.ourpad.casa](https://jellyfin.ourpad.casa) | Media streaming |
+| Obsidian LiveSync | [obsidian.ourpad.casa](https://obsidian.ourpad.casa) | CouchDB sync server |
+| Inventree | [inventory.ourpad.casa](https://inventory.ourpad.casa) | Inventory management |
+| NPMplus | [npmplus.ourpad.casa](https://npmplus.ourpad.casa) | Reverse proxy admin |
+| Proxmox Admin | [admin.ourpad.casa](https://admin.ourpad.casa) | VE management UI |
+| Proxmox Media | [media.ourpad.casa](https://media.ourpad.casa) | Secondary VE host |
+| RustDesk | [rustdesk.ourpad.casa](https://rustdesk.ourpad.casa) | Remote desktop relay |
+| Canteen App | [canteen.ourpad.casa](https://canteen.ourpad.casa) | Asset tracker (WIP) |
+| Photo Geotagger | [geotagger.ourpad.casa](https://geotagger.ourpad.casa) | Batch GPS updater |
+
+## Internal Services (Tailscale / internal only)
+
+| Service | Location | Notes |
+|---|---|---|
+| Prowlarr | CT 104 (192.168.0.225) | Indexer aggregator |
+| Readarr | CT 108 (192.168.0.193) | Book management |
+| Configarr | CT 107 (192.168.0.238) | Config sync |
+| Unpackerr | CT 114 (192.168.0.119) | RAR extraction |
+| Element Synapse | CT 112 (192.168.0.220) | Matrix server |
+| Portainer | CT 100:9443 | Docker management |
+| Hermes WebUI | CT 102:8787 | Agent dashboard |
+| Deskbrid | CT 102 (local) | Desktop automation |
+| Cloudflare DDNS | CT 105 (192.168.0.110) | Dynamic DNS updater |
+| Tailscale | Mesh VPN | 2 nodes |
+
+## Infrastructure
+
+| Component | Details |
+|---|---|
+| Primary Proxmox | 192.168.0.144 — VE 8.4, 31GB RAM, 14 LXCs |
+| Secondary Proxmox | 192.168.0.110 — NPMplus, Jellyfin, DDNS |
+| NAS Storage | 3.6TB ext4 at /mnt/nas, bind-mounted into LXCs |
+| Docker LXC | CT 100 (192.168.0.223) — Gitea, Portainer, LiveSync, Nginx |
+| Networking | Cloudflare DNS + proxy (68.202.6.107) → NPMplus (192.168.0.115) |
+| VPN | Tailscale mesh — oplabs + pixel-9a |
+
+## LXC Inventory
+
+| CT ID | Name | Host | IP | Service |
+|---|---|---|---|---|
+| 100 | docker | pve | 192.168.0.223 | Docker — Gitea, Portainer, LiveSync, Nginx |
+| 101 | debian | pve | — | Debian utility |
+| 102 | hermes | pve | 100.89.190.113 | Hermes Agent host |
+| 103 | sonarr | pve | 192.168.0.178 | Sonarr |
+| 104 | prowlarr | pve | 192.168.0.225 | Prowlarr |
+| 105 | radarr | pve | 192.168.0.123 | Radarr |
+| 106 | jellyseerr | pve | 192.168.0.229 | Jellyseerr |
+| 107 | configarr | pve | 192.168.0.238 | Configarr |
+| 108 | readarr | pve | 192.168.0.193 | Readarr |
+| 109 | deluge | pve | 192.168.0.243 | Deluge |
+| 112 | elementsynapse | pve | 192.168.0.220 | Matrix |
+| 114 | unpackerr | pve | 192.168.0.119 | Unpackerr |
+| 115 | heimdall-dashboard | pve | 192.168.0.213 | Dashboard |
+| 116 | inventree | pve | 192.168.0.132 | Inventory |
+| 102 | npmplus | 192.168.0.110 | 192.168.0.115 | Reverse proxy |
+| 104 | jellyfin | 192.168.0.110 | 192.168.0.125 | Media server |
+| 105 | cloudflare-ddns | 192.168.0.110 | — | Dynamic DNS |
+
+---
+
+*Built with [Hermes Agent](https://github.com/NousResearch/hermes-agent) — last updated May 2026*