Purpose Voice control with zero cloud dependencies. Every step of the pipeline, wake word, speech-to-text, understanding, and text-to-speech, runs locally. No request leaves the LAN, no cloud prov...

Hermes Agent An AI agent with real access to a homelab, limited by the identities and permissions it holds instead of whatever prompt says. You can hand an LLM meaningful operational reach without...

Purpose A central log collector for the whole lab. Graylog ingests every source — Kubernetes and Docker hosts, reverse proxies, media-management tools, GPU workloads — into one searchable store wi...

Kubescape C-0013 Remediation — Tier 1 Follow-up to the baseline scan. C-0013 (“non-root containers”) was the single largest own-app failure category at 47 failed / 14 passed. Before touching any o...

Kubescape Scan Results — 2026-09-24 Initial Kubescape audit of the k3s cluster (see Kubescape for install/usage). This is the baseline scan — first time the cluster’s been run through it — so the ...

Kubescape Open-source Kubernetes security posture scanner from ARMO. Reads workloads, RBAC, and cluster-level objects straight through the current kubeconfig context — no in-cluster agent required...

SQL Server Purpose A standalone Microsoft SQL Server instance, run for MS SQL-specific work alongside the rest of the homelab’s database tooling (PostgreSQL, pgAdmin, DBeaver). Deployment ...

Homelab Infra Purpose Terraform + Ansible + Gitea Actions pipeline meant to spin up an ephemeral, disposable k3s test cluster (Proxmox LXC) on push to an app repo’s test branch, and tear it back ...

CDS Data Pipeline Purpose A scheduled ETL pipeline that moves data between an object store, a message queue, and downstream delivery endpoints — pulling from S3-compatible object storage and Kafk...

Tailscale Tailscale deployed as an exit node and subnet router inside the k3s cluster, giving tailnet devices a path onto the home LAN and out to the internet through the cluster. Runs in its own ...