Purpose Jellyfin serves media to any device on the network without subscriptions or ads. HandBrake sits alongside it for automated format conversions, using an NVIDIA GPU for fast encoding. Post-p...

Purpose Immich is a self-hosted photo and video management system built as a Google Photos replacement. It runs on the GPU Docker host in a four-container compose stack: uploads, smart search, fac...

Purpose Frigate NVR is a local, private video surveillance system with real-time AI object detection. It ingests camera streams, runs machine learning models to detect people, vehicles, and animal...

Purpose Voice control with zero cloud dependencies. Every step of the pipeline, wake word, speech-to-text, understanding, and text-to-speech, runs locally. No request leaves the LAN, no cloud prov...

Hermes Agent An AI agent with real access to a homelab, limited by the identities and permissions it holds instead of whatever prompt says. You can hand an LLM meaningful operational reach without...

Purpose A central log collector for the whole lab. Graylog ingests every source — Kubernetes and Docker hosts, reverse proxies, media-management tools, GPU workloads — into one searchable store wi...

Kubescape C-0013 Remediation — Tier 1 Follow-up to the baseline scan. C-0013 (“non-root containers”) was the single largest own-app failure category at 47 failed / 14 passed. Before touching any o...

Kubescape Scan Results — 2026-09-24 Initial Kubescape audit of the k3s cluster (see Kubescape for install/usage). This is the baseline scan — first time the cluster’s been run through it — so the ...

Kubescape Open-source Kubernetes security posture scanner from ARMO. Reads workloads, RBAC, and cluster-level objects straight through the current kubeconfig context — no in-cluster agent required...

SQL Server Purpose A standalone Microsoft SQL Server instance, run for MS SQL-specific work alongside the rest of the homelab’s database tooling (PostgreSQL, pgAdmin, DBeaver). Deployment ...