README: merge bio intro and hero pitch into one bulleted section
Both paragraphs made the same 'this isn't a hobby, it's a platform' point and duplicated tech mentions. Merged into one section: a bulleted list naming the real technology behind every category (Vault for secrets, Kestra for orchestration, Wazuh+Dashy for the SOC, etc.) instead of one dense paragraph or abstract category names.
This commit is contained in:
1 file changed
+10
-3
@@ -11,11 +11,18 @@
|
|||||||
-->
|
-->
|
||||||
|
|
||||||
|
|
||||||
I'm a curious, self-taught technologist who runs a real, multi-host homelab as a production-grade playground: a Proxmox hypervisor cluster hosting a fleet of VMs/LXCs, a two-zone Caddy reverse-proxy design fronted by Authentik SSO, self-hosted Gitea with Ansible-driven scheduled maintenance, and Terraform+Packer provisioning for bootstrapping new hosts from hardened, minimal images. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security.
|
|
||||||
|
|
||||||
# thesabear's Homelab
|
# thesabear's Homelab
|
||||||
|
|
||||||
Most homelabs are a media server with some extra apps bolted on. This one is a platform: the same categories of systems a company's platform/security team owns — secrets management, zero-trust network segmentation, self-hosted CI/CD, human-gated fleet orchestration, a self-built SOC — run at homelab scale, for real, 24/7, by one person.
|
Most homelabs are a media server with some extra apps bolted on. Mine is a platform, entirely self-taught and built from scratch:
|
||||||
|
|
||||||
|
- **Proxmox** — a hypervisor cluster running a fleet of hardened VMs/LXCs, provisioned via Terraform + Packer, configured and continuously re-hardened by Ansible
|
||||||
|
- **HashiCorp Vault** — issuing PKI certs and managing every application secret
|
||||||
|
- **Caddy + Authentik** — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation
|
||||||
|
- **Kestra** — human-gated fleet orchestration across 13 scheduled flows
|
||||||
|
- **Gitea** — a self-hosted registry building and shipping every container image in-fleet
|
||||||
|
- **Wazuh + a custom Dashy dashboard** — a self-built SOC watching all of it
|
||||||
|
|
||||||
|
The same categories of systems a company's platform/security team owns, run at homelab scale, for real, 24/7, by one person. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security.
|
||||||
|
|
||||||
<table>
|
<table>
|
||||||
<tr>
|
<tr>
|
||||||
|
|||||||
Reference in new issue
Block a user