thesabear/public
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update teh readme

Browse Source
This commit is contained in:
thesabear committed 2026-08-23 11:43:50 +03:00
1 parent 3df76a51db
commit 76e2d61fb8
1 file changed
+5 -7
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+5 -7
View File
@@ -10,20 +10,18 @@
[![YouTube](https://img.shields.io/badge/YouTube-red?style=for-the-badge&logo=youtube&logoColor=white)](https://www.youtube.com/@nomadianation) [![YouTube](https://img.shields.io/badge/YouTube-red?style=for-the-badge&logo=youtube&logoColor=white)](https://www.youtube.com/@nomadianation)
--> -->
I'm a curious, self-taught technologist who runs a real, multi-host homelab as a production-grade playground.
# thesabear's Homelab Most homelabs are a media server with some extra apps bolted on. This one is a platform: The same categories of systems a company's platform/security team owns, run at homelab scale, for real, 24/7, by one person. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security;
Most homelabs are a media server with some extra apps bolted on. Mine is a platform, entirely self-taught and built from scratch: - **Proxmox** — a hypervisor cluster running a fleet of hardened VMs/LXCs provisioned via Terraform
- **Terraform+Packer**- for bootstrapping new hosts for the fleet, from hardened, minimal images and continuously re-hardened by Ansible
- **Proxmox** — a hypervisor cluster running a fleet of hardened VMs/LXCs, provisioned via Terraform + Packer, configured and continuously re-hardened by Ansible
- **HashiCorp Vault** — issuing PKI certs and managing every application secret - **HashiCorp Vault** — issuing PKI certs and managing every application secret
- **Caddy + Authentik** — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation - **Caddy + Authentik** — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation
- **Kestra** — human-gated fleet orchestration across 13 scheduled flows - **Kestra** — human-gated fleet orchestration across the fleet, scheduled flows backed by Ansible roles and playbooks
- **Gitea** — a self-hosted registry building and shipping every container image in-fleet - **Gitea** — a self-hosted registry building and shipping every container image in-fleet
- **Wazuh + a custom Dashy dashboard** — a self-built SOC watching all of it - **Wazuh + a custom Dashy dashboard** — a self-built SOC watching all of it
The same categories of systems a company's platform/security team owns, run at homelab scale, for real, 24/7, by one person. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security.
<table> <table>
<tr> <tr>
<td align="center"><strong>11</strong><br/>fleet hosts</td> <td align="center"><strong>11</strong><br/>fleet hosts</td>