99 lines
4.2 KiB
Markdown
99 lines
4.2 KiB
Markdown
# Homelab improvements — plan brief
|
|
|
|
**How to use this:** Don't read everything. Pick something that sounds interesting and say it in chat — e.g. *"let's talk about backups"* or *"TB-003"*. We'll have a short conversation first. You can do, defer, drop, or change any item.
|
|
|
|
**Status:** Draft · **Host:** valhalla
|
|
|
|
---
|
|
|
|
## Talk first — plan level
|
|
|
|
Before any phase or task, we should answer:
|
|
|
|
1. **What feels urgent?** Backup? Security? Finishing romhacks? Something else entirely?
|
|
2. **What can wait or die?** Throwing items out is success — tell me what doesn't interest you.
|
|
3. **How do you want to work?** One item per session, or a theme (e.g. "media day")?
|
|
|
|
### What we decided (plan level)
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Priority theme** | Backups + Obsidian hardening done (TB-001, TB-005 complete) |
|
|
| **Explicitly dropped** | _(none yet)_ |
|
|
| **Notes** | _(conversation notes go here)_ |
|
|
|
|
---
|
|
|
|
## Menu — pick one to talk about
|
|
|
|
Each link opens an **interview-first** task brief. The conversation is the task.
|
|
|
|
### Safety & quick wins
|
|
|
|
| Say this… | About |
|
|
|-----------|--------|
|
|
| [TB-001](tasks/TB-001-backup-stack.md) | Automated backups — **done** (Kopia + B2) |
|
|
| [TB-033](tasks/TB-033-public-surface-audit.md) | What's actually public on the internet? |
|
|
| [TB-003](tasks/TB-003-recyclarr.md) | Sync *arr quality settings automatically |
|
|
| [TB-004](tasks/TB-004-pin-infra-tags.md) | Stop `:latest` from breaking databases |
|
|
| [TB-002](tasks/TB-002-jd-caddy-block.md) | JDownloader web UI on jd.ginnoir.com |
|
|
|
|
### Security & cleanup
|
|
|
|
| Say this… | About |
|
|
|-----------|--------|
|
|
| [TB-005](tasks/TB-005-obsidian-hardening.md) | Obsidian vault hardening — **done** (LAN/tailnet only) |
|
|
| [TB-006](tasks/TB-006-authentik-forward-auth.md) | Login on admin UIs via Authentik |
|
|
| [TB-013](tasks/TB-013-code-server-mount.md) | code-server sees your whole home dir |
|
|
| [TB-014](tasks/TB-014-registry-auth.md) | Docker registry has no password |
|
|
| [TB-008](tasks/TB-008-retire-deluge.md) | Maybe remove Deluge (you have qBit too) |
|
|
| [TB-009](tasks/TB-009-bookstack-decision.md) | BookStack vs Obsidian — pick one? |
|
|
| [TB-010](tasks/TB-010-dev-stack-env-migration.md) | dev stack env file cleanup |
|
|
| [TB-011](tasks/TB-011-reap-orphan-volumes.md) | Delete old Docker volumes |
|
|
|
|
### Finish what's started
|
|
|
|
| Say this… | About |
|
|
|-----------|--------|
|
|
| [TB-007](tasks/TB-007-romhacks-handoff.md) | ROM hacks pipeline → RomM (incomplete) |
|
|
| [TB-012](tasks/TB-012-maintainerr.md) | Clean stale Overseerr requests |
|
|
| [TB-016](tasks/TB-016-document-plex.md) | Write down how Plex fits in |
|
|
|
|
### New services (only if you want them)
|
|
|
|
| Say this… | About |
|
|
|-----------|--------|
|
|
| [TB-019](tasks/TB-019-immich.md) | Family photos |
|
|
| [TB-020](tasks/TB-020-mealie.md) | Recipes |
|
|
| [TB-021](tasks/TB-021-paperless-ngx.md) | Scan/OCR documents |
|
|
| [TB-022](tasks/TB-022-readarr.md) | Automate ebooks |
|
|
| [TB-023](tasks/TB-023-autobrr.md) | Torrent announce automation |
|
|
| [TB-024](tasks/TB-024-syncthing.md) | Device file sync |
|
|
| [TB-025](tasks/TB-025-metrics-beszel.md) | CPU/disk metrics dashboard |
|
|
| [TB-026](tasks/TB-026-igir-container.md) | Automate ROM library cleanup |
|
|
|
|
### Maybe later (low pressure)
|
|
|
|
| Say this… | About |
|
|
|-----------|--------|
|
|
| [TB-015](tasks/TB-015-vault-secrets-integration.md) | Actually use Vault |
|
|
| [TB-017](tasks/TB-017-minio-consolidation.md) | One MinIO instead of three |
|
|
| [TB-018](tasks/TB-018-plane-evaluation.md) | Is Plane worth 7 containers? |
|
|
| [TB-027](tasks/TB-027-jellyfin.md) | Replace Plex with Jellyfin? |
|
|
| [TB-028](tasks/TB-028-home-assistant.md) | Home automation |
|
|
| [TB-029](tasks/TB-029-firefly-iii.md) | Personal finance |
|
|
| [TB-030](tasks/TB-030-adguard-home.md) | Network ad blocking / DNS |
|
|
| [TB-031](tasks/TB-031-pingvin-share.md) | Temporary file share links |
|
|
| [TB-032](tasks/TB-032-wikijs.md) | Wiki.js (only if keeping a wiki) |
|
|
|
|
---
|
|
|
|
<details>
|
|
<summary>Background (optional — skip if overwhelming)</summary>
|
|
|
|
Homelab is ~50 containers, 15 stacks, Caddy ingress, git-push deploys. Main gaps from analysis: Authentik barely used, romhacks pipeline half-done, public-surface audit still open (TB-033).
|
|
|
|
Repo conventions: `stack.env` secrets, `edge` network, `internal_only` for LAN admin UIs, `./scripts/gen-bookmarks.ps1` after Caddy changes.
|
|
|
|
</details>
|