fpallas/lab
Watch
1
0
Fork
You've already forked lab
 0
Code Activity
No description
75 commits 1 branch 0 tags 196 KiB
  • Jinja 100%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Florian Pallas 2136b761d2 forgejo: 15 -> 16
2026-07-17 11:52:20 +02:00
playbooks deploy vigil 2026-06-17 13:43:14 +02:00
roles forgejo: 15 -> 16 2026-07-17 11:52:20 +02:00
.gitignore add inventory 2026-02-02 23:25:54 +01:00
ansible.cfg switch to ansible roles 2026-02-02 23:16:14 +01:00
inventory.ini add inventory 2026-02-02 23:25:54 +01:00
LICENSE add services 2025-12-21 16:29:08 +01:00
README.md add vigil status monitor 2026-06-13 12:46:24 +02:00

README.md

Homelab

Things I need to survive, hosted locally.

Services

  • Traefik
  • AdGuard
  • CrowdSec
  • Forgejo
  • FreshRSS
  • Home Assistant
  • Immich
  • Jellyfin
  • PocketID
  • Portfolio
  • Vaultwarden
  • Vigil
  • Factorio
  • Minecraft

All web services are exposed through Traefik on the relay host via subdomains.

Updates

Services are automatically kept up-to-date using the podman auto update service within their specified tags. This allows for time-critical non-intrusive updates to be applied automatically without user intervention.

Backups

All stateful services are backed up automatically and regularly. By using restic snapshots, it is possible to restore services to a desired point of time, without requiring excessive storage.

Security

Instead of docker, which requires a rootful daemon, podman is used. This allows each service to be run under their own user on the host. Those users do not have root permissions, making it much harder for attackers to access files from other services, even if they can break container isolation.

While this is not as secure as separate VMs or machines, it provides a good balance between practicality and security.