TB-021 dropped — user wanted Google Docs replacement, not document OCR. Migrated ownCloud → Nextcloud 34 + OnlyOffice (files.ginnoir.com). Authentik OIDC configured via user_oidc app; office.ginnoir.com internal. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
4.5 KiB
4.5 KiB
Homelab improvements — plan brief
How to use this: Don't read everything. Pick something that sounds interesting and say it in chat — e.g. "let's talk about backups" or "TB-003". We'll have a short conversation first. You can do, defer, drop, or change any item.
Status: Draft · Host: valhalla
Talk first — plan level
Before any phase or task, we should answer:
- What feels urgent? Backup? Security? Finishing romhacks? Something else entirely?
- What can wait or die? Throwing items out is success — tell me what doesn't interest you.
- How do you want to work? One item per session, or a theme (e.g. "media day")?
What we decided (plan level)
| Priority theme | Quick wins complete (TB-001–005, TB-002–004, TB-033) — new services underway (Immich done, ownCloud→Nextcloud+OnlyOffice done) |
| Explicitly dropped | TB-017 (MinIO consolidation), TB-018 (Plane), TB-029 (Firefly), TB-030 (AdGuard — at router), TB-032 (Wiki.js — using BookStack) |
| Notes | Quick wins shipped 2026-06-11 (51acb44 + follow-ups). Recyclarr @daily; infra pinned; jd + LAN lockdown on minio/homarr/docs. |
Menu — pick one to talk about
Each link opens an interview-first task brief. The conversation is the task.
Safety & quick wins — complete (2026-06-11)
| Say this… | About |
|---|---|
| TB-001 | Automated backups — done (Kopia + B2) |
| TB-033 | Public surface audit — done |
| TB-003 | Recyclarr — done (@daily sync) |
| TB-004 | Infra image pins — done |
| TB-002 | jd.ginnoir.com — done |
Security & cleanup
| Say this… | About |
|---|---|
| TB-005 | Obsidian vault hardening — done (LAN/tailnet only) |
| TB-006 | Login on admin UIs via Authentik |
| TB-013 | code-server sees your whole home dir |
| TB-014 | Docker registry has no password |
| TB-008 | Maybe remove Deluge (you have qBit too) |
| TB-009 | BookStack vs Obsidian — pick one? |
| TB-010 | dev stack env file cleanup |
| TB-011 | Delete old Docker volumes |
Finish what's started
| Say this… | About |
|---|---|
| TB-007 | ROM hacks pipeline → RomM (incomplete) |
| TB-012 | Clean stale Overseerr requests |
| TB-016 | Write down how Plex fits in |
New services
| Say this… | About |
|---|---|
| TB-019 | Family photos — done (photos.ginnoir.com) |
| TB-021 | Scan/OCR documents — dropped (became Nextcloud migration) |
| TB-022 | Automate ebooks |
| TB-023 | Torrent announce automation |
| TB-024 | Device file sync |
| TB-025 | CPU/disk metrics dashboard |
| TB-026 | Automate ROM library cleanup |
| TB-020 | Recipes — deferred to famapp |
Active interest
| Say this… | About |
|---|---|
| TB-015 | Move credentials into Vault |
| TB-027 | Replace Plex with Jellyfin? |
| TB-028 | Home automation |
| TB-031 | Temporary file share links |
Dropped
| TB-017 | MinIO consolidation — don't want it |
| TB-018 | Plane — removing it |
| TB-029 | Firefly III — no interest |
| TB-030 | AdGuard Home — handled at router |
| TB-032 | Wiki.js — using BookStack |
Background (optional — skip if overwhelming)
Homelab is ~50 containers, 15 stacks, Caddy ingress, git-push deploys. Quick wins (TB-001–005, TB-002–004, TB-033) done 2026-06-11. Main gaps: TB-006 Authentik rollout, romhacks handoff (TB-007), cleanup items.
Repo conventions: stack.env secrets, edge network, internal_only for LAN admin UIs, ./scripts/gen-bookmarks.ps1 after Caddy changes.