ginnoir
792305e5fa
Close TB-002–004 and TB-033 with done-when checkboxes and update PLAN-BRIEF priority to the next themes.
99 lines
4.4 KiB
Markdown
99 lines
4.4 KiB
Markdown
# Homelab improvements — plan brief
|
||
|
||
**How to use this:** Don't read everything. Pick something that sounds interesting and say it in chat — e.g. *"let's talk about backups"* or *"TB-003"*. We'll have a short conversation first. You can do, defer, drop, or change any item.
|
||
|
||
**Status:** Draft · **Host:** valhalla
|
||
|
||
---
|
||
|
||
## Talk first — plan level
|
||
|
||
Before any phase or task, we should answer:
|
||
|
||
1. **What feels urgent?** Backup? Security? Finishing romhacks? Something else entirely?
|
||
2. **What can wait or die?** Throwing items out is success — tell me what doesn't interest you.
|
||
3. **How do you want to work?** One item per session, or a theme (e.g. "media day")?
|
||
|
||
### What we decided (plan level)
|
||
|
||
| | |
|
||
|---|---|
|
||
| **Priority theme** | Quick wins complete (TB-001–005, TB-002–004, TB-033) — next: TB-006 auth, cleanup, or finish-started |
|
||
| **Explicitly dropped** | _(none yet)_ |
|
||
| **Notes** | Quick wins shipped 2026-06-11 (`51acb44` + follow-ups). Recyclarr `@daily`; infra pinned; jd + LAN lockdown on minio/homarr/docs. |
|
||
|
||
---
|
||
|
||
## Menu — pick one to talk about
|
||
|
||
Each link opens an **interview-first** task brief. The conversation is the task.
|
||
|
||
### Safety & quick wins — **complete** (2026-06-11)
|
||
|
||
| Say this… | About |
|
||
|-----------|--------|
|
||
| [TB-001](tasks/TB-001-backup-stack.md) | Automated backups — **done** (Kopia + B2) |
|
||
| [TB-033](tasks/TB-033-public-surface-audit.md) | Public surface audit — **done** |
|
||
| [TB-003](tasks/TB-003-recyclarr.md) | Recyclarr — **done** (`@daily` sync) |
|
||
| [TB-004](tasks/TB-004-pin-infra-tags.md) | Infra image pins — **done** |
|
||
| [TB-002](tasks/TB-002-jd-caddy-block.md) | jd.ginnoir.com — **done** |
|
||
|
||
### Security & cleanup
|
||
|
||
| Say this… | About |
|
||
|-----------|--------|
|
||
| [TB-005](tasks/TB-005-obsidian-hardening.md) | Obsidian vault hardening — **done** (LAN/tailnet only) |
|
||
| [TB-006](tasks/TB-006-authentik-forward-auth.md) | Login on admin UIs via Authentik |
|
||
| [TB-013](tasks/TB-013-code-server-mount.md) | code-server sees your whole home dir |
|
||
| [TB-014](tasks/TB-014-registry-auth.md) | Docker registry has no password |
|
||
| [TB-008](tasks/TB-008-retire-deluge.md) | Maybe remove Deluge (you have qBit too) |
|
||
| [TB-009](tasks/TB-009-bookstack-decision.md) | BookStack vs Obsidian — pick one? |
|
||
| [TB-010](tasks/TB-010-dev-stack-env-migration.md) | dev stack env file cleanup |
|
||
| [TB-011](tasks/TB-011-reap-orphan-volumes.md) | Delete old Docker volumes |
|
||
|
||
### Finish what's started
|
||
|
||
| Say this… | About |
|
||
|-----------|--------|
|
||
| [TB-007](tasks/TB-007-romhacks-handoff.md) | ROM hacks pipeline → RomM (incomplete) |
|
||
| [TB-012](tasks/TB-012-maintainerr.md) | Clean stale Overseerr requests |
|
||
| [TB-016](tasks/TB-016-document-plex.md) | Write down how Plex fits in |
|
||
|
||
### New services (only if you want them)
|
||
|
||
| Say this… | About |
|
||
|-----------|--------|
|
||
| [TB-019](tasks/TB-019-immich.md) | Family photos |
|
||
| [TB-020](tasks/TB-020-mealie.md) | Recipes |
|
||
| [TB-021](tasks/TB-021-paperless-ngx.md) | Scan/OCR documents |
|
||
| [TB-022](tasks/TB-022-readarr.md) | Automate ebooks |
|
||
| [TB-023](tasks/TB-023-autobrr.md) | Torrent announce automation |
|
||
| [TB-024](tasks/TB-024-syncthing.md) | Device file sync |
|
||
| [TB-025](tasks/TB-025-metrics-beszel.md) | CPU/disk metrics dashboard |
|
||
| [TB-026](tasks/TB-026-igir-container.md) | Automate ROM library cleanup |
|
||
|
||
### Maybe later (low pressure)
|
||
|
||
| Say this… | About |
|
||
|-----------|--------|
|
||
| [TB-015](tasks/TB-015-vault-secrets-integration.md) | Actually use Vault |
|
||
| [TB-017](tasks/TB-017-minio-consolidation.md) | One MinIO instead of three |
|
||
| [TB-018](tasks/TB-018-plane-evaluation.md) | Is Plane worth 7 containers? |
|
||
| [TB-027](tasks/TB-027-jellyfin.md) | Replace Plex with Jellyfin? |
|
||
| [TB-028](tasks/TB-028-home-assistant.md) | Home automation |
|
||
| [TB-029](tasks/TB-029-firefly-iii.md) | Personal finance |
|
||
| [TB-030](tasks/TB-030-adguard-home.md) | Network ad blocking / DNS |
|
||
| [TB-031](tasks/TB-031-pingvin-share.md) | Temporary file share links |
|
||
| [TB-032](tasks/TB-032-wikijs.md) | Wiki.js (only if keeping a wiki) |
|
||
|
||
---
|
||
|
||
<details>
|
||
<summary>Background (optional — skip if overwhelming)</summary>
|
||
|
||
Homelab is ~50 containers, 15 stacks, Caddy ingress, git-push deploys. **Quick wins (TB-001–005, TB-002–004, TB-033) done 2026-06-11.** Main gaps: TB-006 Authentik rollout, romhacks handoff (TB-007), cleanup items.
|
||
|
||
Repo conventions: `stack.env` secrets, `edge` network, `internal_only` for LAN admin UIs, `./scripts/gen-bookmarks.ps1` after Caddy changes.
|
||
|
||
</details>
|