Gatus can't see that mount, so the host tells it
Purpose Gatus polls most of the lab from inside the cluster: ICMP and HTTP status checks, plus a DNS check per service hostname. It has no view of the mount table on the Proxmox host, so it can’t ...
Homelab
Exposing AES-NI to a TrueNAS VM: cpu: host and encrypted ZFS throughput
Purpose My TrueNAS lives in a VM on Proxmox, with its NVMe drives passed straight through so ZFS owns the hardware directly. The pool is encrypted with aes-256-gcm. For a while the encrypted write...
Automated dependency updates with Renovate
Purpose Renovate scans the repositories on the self-hosted Gitea and opens pull requests that bump container image tags, Helm charts, GitHub Actions and similar dependencies. It proposes changes. ...
Grading the Agents: An Eval Harness and a Tool Policy for Hermes
Purpose The Hermes agents run unattended: the daily ops digest, the health board and the doc-writer cards. Until recently nothing measured how well a run went, and the only limits on tools were re...
Moving k3s and core services from epyc to pemba
Purpose The Proxmox host epyc (EPYC 8024P, 8 cores / 16 threads, 64 GiB RAM) ran the k3s cluster, Graylog, Hermes, Gitea and more. It hit host-wide memory exhaustion several times between 2026-10-...
One wildcard certificate for a whole k3s cluster
Purpose The cluster serves its routes over HTTPS with one wildcard certificate. A single Traefik TLSStore named default holds it, and every IngressRoute says tls: {} to use it. The change started...
Docs Drift Detector: Keeping Posts Honest About Versions
Purpose Posts go stale the moment Renovate bumps an image tag. A weekly job checks which versions each post documents against what is actually running, generates a rolling issue with the drift rep...
Config Compliance: Timezones, Logging, Provenance and a Repo Inventory
Purpose Four daily, report-only checks run against every Docker and k3s workload in the lab. Each answers a basic question: is the timezone set correctly, do logs actually reach Graylog, was this ...
The Compliance Fixer: From Finding to Reviewed Pull Request
Finding problems is the easy half. The compliance fixer turns findings into pull requests, and after a human merges, brings the Docker host to exactly the merged state without ever deleting data. I...
The Daily Ops Digest: Twelve Collectors, One Rolling Issue
The ops digest is a daily health check for the entire homelab. It runs without an LLM in the loop, uses twelve independent collectors, and posts results to one rolling issue that only changes when ...