diff --git a/plans/homelab-improvements/PLAN-BRIEF.md b/plans/homelab-improvements/PLAN-BRIEF.md index ce35c3c..dcca833 100644 --- a/plans/homelab-improvements/PLAN-BRIEF.md +++ b/plans/homelab-improvements/PLAN-BRIEF.md @@ -18,9 +18,9 @@ Before any phase or task, we should answer: | | | |---|---| -| **Priority theme** | Backups + Obsidian hardening done (TB-001, TB-005 complete) | +| **Priority theme** | Quick wins complete (TB-001–005, TB-002–004, TB-033) — next: TB-006 auth, cleanup, or finish-started | | **Explicitly dropped** | _(none yet)_ | -| **Notes** | _(conversation notes go here)_ | +| **Notes** | Quick wins shipped 2026-06-11 (`51acb44` + follow-ups). Recyclarr `@daily`; infra pinned; jd + LAN lockdown on minio/homarr/docs. | --- @@ -28,15 +28,15 @@ Before any phase or task, we should answer: Each link opens an **interview-first** task brief. The conversation is the task. -### Safety & quick wins +### Safety & quick wins — **complete** (2026-06-11) | Say this… | About | |-----------|--------| | [TB-001](tasks/TB-001-backup-stack.md) | Automated backups — **done** (Kopia + B2) | -| [TB-033](tasks/TB-033-public-surface-audit.md) | What's actually public on the internet? | -| [TB-003](tasks/TB-003-recyclarr.md) | Sync *arr quality settings automatically | -| [TB-004](tasks/TB-004-pin-infra-tags.md) | Stop `:latest` from breaking databases | -| [TB-002](tasks/TB-002-jd-caddy-block.md) | JDownloader web UI on jd.ginnoir.com | +| [TB-033](tasks/TB-033-public-surface-audit.md) | Public surface audit — **done** | +| [TB-003](tasks/TB-003-recyclarr.md) | Recyclarr — **done** (`@daily` sync) | +| [TB-004](tasks/TB-004-pin-infra-tags.md) | Infra image pins — **done** | +| [TB-002](tasks/TB-002-jd-caddy-block.md) | jd.ginnoir.com — **done** | ### Security & cleanup @@ -91,7 +91,7 @@ Each link opens an **interview-first** task brief. The conversation is the task.
Background (optional — skip if overwhelming) -Homelab is ~50 containers, 15 stacks, Caddy ingress, git-push deploys. Main gaps from analysis: Authentik barely used, romhacks pipeline half-done, public-surface audit still open (TB-033). +Homelab is ~50 containers, 15 stacks, Caddy ingress, git-push deploys. **Quick wins (TB-001–005, TB-002–004, TB-033) done 2026-06-11.** Main gaps: TB-006 Authentik rollout, romhacks handoff (TB-007), cleanup items. Repo conventions: `stack.env` secrets, `edge` network, `internal_only` for LAN admin UIs, `./scripts/gen-bookmarks.ps1` after Caddy changes. diff --git a/plans/homelab-improvements/tasks/README.md b/plans/homelab-improvements/tasks/README.md index cd8c76e..6b22338 100644 --- a/plans/homelab-improvements/tasks/README.md +++ b/plans/homelab-improvements/tasks/README.md @@ -35,9 +35,9 @@ Parent: [PLAN-BRIEF.md](../PLAN-BRIEF.md) · Template: [_TEMPLATE.md](_TEMPLATE. | ID | One line | Brief | |----|----------|-------| | TB-001 | Automated backups ✓ | [→](TB-001-backup-stack.md) | -| TB-002 | jd.ginnoir.com | [→](TB-002-jd-caddy-block.md) | -| TB-003 | Recyclarr | [→](TB-003-recyclarr.md) | -| TB-004 | Pin infra tags | [→](TB-004-pin-infra-tags.md) | +| TB-002 | jd.ginnoir.com ✓ | [→](TB-002-jd-caddy-block.md) | +| TB-003 | Recyclarr ✓ | [→](TB-003-recyclarr.md) | +| TB-004 | Pin infra tags ✓ | [→](TB-004-pin-infra-tags.md) | | TB-005 | Obsidian hardening ✓ | [→](TB-005-obsidian-hardening.md) | | TB-006 | Authentik admin login | [→](TB-006-authentik-forward-auth.md) | | TB-007 | Romhacks handoff | [→](TB-007-romhacks-handoff.md) | @@ -66,4 +66,4 @@ Parent: [PLAN-BRIEF.md](../PLAN-BRIEF.md) · Template: [_TEMPLATE.md](_TEMPLATE. | TB-030 | AdGuard Home | [→](TB-030-adguard-home.md) | | TB-031 | Pingvin Share | [→](TB-031-pingvin-share.md) | | TB-032 | Wiki.js | [→](TB-032-wikijs.md) | -| TB-033 | Public audit | [→](TB-033-public-surface-audit.md) | +| TB-033 | Public audit ✓ | [→](TB-033-public-surface-audit.md) | diff --git a/plans/homelab-improvements/tasks/TB-003-recyclarr.md b/plans/homelab-improvements/tasks/TB-003-recyclarr.md index c9df348..d899525 100644 --- a/plans/homelab-improvements/tasks/TB-003-recyclarr.md +++ b/plans/homelab-improvements/tasks/TB-003-recyclarr.md @@ -1,6 +1,6 @@ # TB-003 — Recyclarr -**Status:** done — 2026-06-11 (deploy + first sync pending push) +**Status:** done — 2026-06-11 **Your call:** Do it --- @@ -33,7 +33,7 @@ | | | |---|---| | **Decision** | Do it — WEB-1080p (Sonarr) + HD Bluray+WEB (Radarr) | -| **Notes** | Config in stacks/media/recyclarr/; run `docker exec recyclarr recyclarr sync` after deploy | +| **Notes** | Config in `stacks/media/recyclarr/`; syncs `@daily` via container cron; manual: `docker exec recyclarr recyclarr sync` | | **Date** | 2026-06-11 | --- @@ -53,7 +53,7 @@ stacks/media/ ### Done when -- [ ] Recyclarr syncs without errors -- [ ] Profiles visible in Sonarr or Radarr +- [x] Recyclarr syncs without errors +- [x] Profiles visible in Sonarr or Radarr
diff --git a/plans/homelab-improvements/tasks/TB-004-pin-infra-tags.md b/plans/homelab-improvements/tasks/TB-004-pin-infra-tags.md index 5389937..5d1ab9b 100644 --- a/plans/homelab-improvements/tasks/TB-004-pin-infra-tags.md +++ b/plans/homelab-improvements/tasks/TB-004-pin-infra-tags.md @@ -54,6 +54,6 @@ All compose files ### Done when - [x] No :latest on DB/Caddy/Vault/CouchDB/MinIO -- [ ] Stacks still deploy clean (verify after push) +- [x] Stacks still deploy clean (verified after push + Portainer git repair) diff --git a/plans/homelab-improvements/tasks/TB-033-public-surface-audit.md b/plans/homelab-improvements/tasks/TB-033-public-surface-audit.md index e2cf0fd..67a506b 100644 --- a/plans/homelab-improvements/tasks/TB-033-public-surface-audit.md +++ b/plans/homelab-improvements/tasks/TB-033-public-surface-audit.md @@ -33,7 +33,7 @@ | | | |---|---| | **Decision** | Do it — audit complete; fixes tracked below | -| **Notes** | Obsidian locked down in TB-005. Auth gaps → TB-006 (other session). | +| **Notes** | Obsidian locked down in TB-005. minio/homarr/docs → `internal_only` (2026-06-11). Remaining auth gaps → TB-006. | | **Date** | 2026-06-11 | ---