From 76e2d61fb87a503971681b40c9f1002c2929607b Mon Sep 17 00:00:00 2001 From: thesabear Date: Sun, 23 Aug 2026 11:43:50 +0300 Subject: [PATCH] update teh readme --- README.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index 27d17bf..7b2c7e2 100644 --- a/README.md +++ b/README.md @@ -10,20 +10,18 @@ [![YouTube](https://img.shields.io/badge/YouTube-red?style=for-the-badge&logo=youtube&logoColor=white)](https://www.youtube.com/@nomadianation) --> +I'm a curious, self-taught technologist who runs a real, multi-host homelab as a production-grade playground. -# thesabear's Homelab +Most homelabs are a media server with some extra apps bolted on. This one is a platform: The same categories of systems a company's platform/security team owns, run at homelab scale, for real, 24/7, by one person. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security; -Most homelabs are a media server with some extra apps bolted on. Mine is a platform, entirely self-taught and built from scratch: - -- **Proxmox** — a hypervisor cluster running a fleet of hardened VMs/LXCs, provisioned via Terraform + Packer, configured and continuously re-hardened by Ansible +- **Proxmox** — a hypervisor cluster running a fleet of hardened VMs/LXCs provisioned via Terraform +- **Terraform+Packer**- for bootstrapping new hosts for the fleet, from hardened, minimal images and continuously re-hardened by Ansible - **HashiCorp Vault** — issuing PKI certs and managing every application secret - **Caddy + Authentik** — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation -- **Kestra** — human-gated fleet orchestration across 13 scheduled flows +- **Kestra** — human-gated fleet orchestration across the fleet, scheduled flows backed by Ansible roles and playbooks - **Gitea** — a self-hosted registry building and shipping every container image in-fleet - **Wazuh + a custom Dashy dashboard** — a self-built SOC watching all of it -The same categories of systems a company's platform/security team owns, run at homelab scale, for real, 24/7, by one person. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security. -
11
fleet hosts