ginnoir/homelabstack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Mark TB-005 Obsidian hardening complete.

Browse Source 
Record deployed internal_only gate and update plan brief gaps.
This commit is contained in:
ginnoir
2026-06-10 22:47:02 -05:00
parent 80b0fc6904
commit 1253825541
3 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plans/homelab-improvements/PLAN-BRIEF.md
+3 -3
View File
@@ -18,7 +18,7 @@ Before any phase or task, we should answer:
| | |
|---|---|
| **Priority theme** | Backups done (TB-001 complete) |
| **Priority theme** | Backups + Obsidian hardening done (TB-001, TB-005 complete) |
| **Explicitly dropped** | _(none yet)_ |
| **Notes** | _(conversation notes go here)_ |
@@ -42,7 +42,7 @@ Each link opens an **interview-first** task brief. The conversation is the task.
| Say this… | About |
|-----------|--------|
| [TB-005](tasks/TB-005-obsidian-hardening.md) | Your Obsidian vault is public-facing |
| [TB-005](tasks/TB-005-obsidian-hardening.md) | Obsidian vault hardening — **done** (LAN/tailnet only) |
| [TB-006](tasks/TB-006-authentik-forward-auth.md) | Login on admin UIs via Authentik |
| [TB-013](tasks/TB-013-code-server-mount.md) | code-server sees your whole home dir |
| [TB-014](tasks/TB-014-registry-auth.md) | Docker registry has no password |
@@ -91,7 +91,7 @@ Each link opens an **interview-first** task brief. The conversation is the task.
<details>
<summary>Background (optional — skip if overwhelming)</summary>
Homelab is ~50 containers, 15 stacks, Caddy ingress, git-push deploys. Main gaps from analysis: no backups, Obsidian public, Authentik barely used, romhacks pipeline half-done.
Homelab is ~50 containers, 15 stacks, Caddy ingress, git-push deploys. Main gaps from analysis: Authentik barely used, romhacks pipeline half-done, public-surface audit still open (TB-033).
Repo conventions: `stack.env` secrets, `edge` network, `internal_only` for LAN admin UIs, `./scripts/gen-bookmarks.ps1` after Caddy changes.