About

Playground for microservices, infrastructure and backup scripts.

Priority

• update naliana.net photo & set base as smac not naliana(person not company)

  • add a sub page to discuss contracting/services offered
  • Get a better headshot
  • talk to a lawyer about creating your contract for per-project/hourly
  • rebrand to a proper name, not naliana
    • specialize in stability audits, ai cleanup and review, resilience testing, chaos engineering, product stability and resilience. Trust, security, and artifact integrity.
    • traefik updates
    • update email
    • update domain registrar

• add freenas key to base image builds (for backup rsync)

  • fix freenas cert / authority (http->https)

• Forgejo actions, single runners

  • how do I put my private key on the runner for terraform copy?
  • stop deploying from the desktop
    • proof of concept is to deploy lab, or ocean via a properly configured runner
  • internal forgejo setup?
    • does source.naliana.net need to be public?
  • if a single runner works well, try to spin up 2 nodes on "large"
    • tf provisioned
    • ansible configured with "golden" runner configuration
  • backup forgejo runner configuration
  • change slogan on forgeo instance

v4

• state in digital ocean ($5/mo for full storage but I can use it for lots of stuff I guess)

• clean up digital ocean images

• automated updates for alpine

  • fetching new versions?

• mealie & forgejo on smtp

  • ticket open @ digital ocean -- done

• make 2 alpine images, one jellyfin(big) , one everything else (smaller).

  • fetch needs to use the base image!

• public immich for family photos?

• setup logging at home for digital ocean

  • too expensive to log on exposed services

• Use ansible to change VM passwords so each vm has a different pw, different root per vm

• forgejo runners for deployments

  • use a different ssh key, and update base images to include custom GHA/forgeo ssh key. Add it to secrets for GHA
  • k8 self hosted runners on nuc (outbound call to github)

Bonus (v4+)

    - 1pass handles env secrets
        - put wireguard keys in 1pass
        - ssh keys stored in 1pass?
    - pve cluster backup
       - sqlite3 /var/lib/pve-cluster/config.db .dump > ~/config.dump.$(date --utc +%Z%Y%m%d%H%M%S).sql
        - https://forum.proxmox.com/threads/backup-cluster-config-pmxcfs-etc-pve.154569/
    - packer builds on all 4 nodes the same image so I dont have to swap vars all the time >:|
    - remote xmr node on home/cloud
    - ldap/ad for different services

---

encrypted folder in dropbox w/ gpg

• encrypt folder in dropbox with gpg
• should be portable across os

env secured

• 1pass autofill & inject env file secrets
• test on servers

Infrastructure

• UPS GRACEFUL shutdown

TP-Link switch

• external firewall
• internal firewall
• segmented network
  • vlan for lab, guest, home iot, child

Services

Kwixi

- integrate into main

Syncthing

Nextcloud

Secondary Seed compose

- Binhex for fetch
- nzb grabber

Jitsi

- selfhostd jitsi meet server
- public digital ocean 

Whole home ad-guard/pihole

• https://www.theobjectivedad.com/pub/20230410-homelab-4/index.html
• reverse proxy pointed at pihole/ad-guard

nextcloud on k8s as POC

- migrate services to k8s w/ helm

Services to try out

• https://pi.dev/
• https://keycloak.com
• https://owncloud.dev/ocis
• https://github.com/slskd/slskd
• https://www.authelia.com/
• https://github.com/k4lipso/gokill
• https://www.sniffnet.net/
• https://www.debontonline.com/2021/11/kubernetes-part-16-deploy-jellyfin.html
• https://github.com/benphelps/homepage
• https://tandoor.dev/
• https://joplinapp.org/
• https://www.netdata.cloud/
• https://github.com/freifunkMUC/wg-access-server
• https://www.kiwix.org/en/cardshop-access/
• https://github.com/redhuntlabs/HTTPLoot
• https://github.com/0xInfection/TIDoS-Framework
• https://www.talos.dev/
• https://mopidy.com/
• https://www.cross-seed.org/docs/tutorials/injection
• https://github.com/Casvt/Kapowarr
• https://shufflecake.net/
• https://gotify.net/
• https://actualbudget.org/
• https://github.com/slskd/slskd/