From eea176c32255438070f66c2e3cd6949a5b896dd5 Mon Sep 17 00:00:00 2001 From: thesabear Date: Sun, 23 Aug 2026 12:20:47 +0300 Subject: [PATCH] README: bump bullet-list app names to font-size 1.4em 1.15em rendered fine (sanitizer allow-list is working, confirmed by the stat-table numbers) but was too subtle a jump to actually look bigger next to body text. 1.4em matches the visual weight of the stat-strip numbers. --- README.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index 87bfeb7..106c875 100644 --- a/README.md +++ b/README.md @@ -22,13 +22,13 @@ I'm a curious, self-taught technologist who runs a real, multi-host homelab as a production-grade playground. Most homelabs are a media server with some extra apps bolted on. This one is a platform: The same categories of systems a company's platform/security team owns, run at homelab scale, for real, 24/7, by one person. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security; -- Proxmox — a hypervisor cluster running a fleet of hardened VMs/LXCs provisioned via Terraform -- Terraform + Packer — for bootstrapping new hosts for the fleet, from hardened, minimal images and continuously re-hardened by Ansible -- HashiCorp Vault — issuing PKI certs and managing every application secret -- Caddy + Authentik — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation -- Kestra — human-gated fleet orchestration across the fleet, scheduled flows backed by Ansible roles and playbooks -- Gitea — a self-hosted registry building and shipping every container image in-fleet -- Wazuh + Dashy — a self-built SOC watching all of it +- Proxmox — a hypervisor cluster running a fleet of hardened VMs/LXCs provisioned via Terraform +- Terraform + Packer — for bootstrapping new hosts for the fleet, from hardened, minimal images and continuously re-hardened by Ansible +- HashiCorp Vault — issuing PKI certs and managing every application secret +- Caddy + Authentik — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation +- Kestra — human-gated fleet orchestration across the fleet, scheduled flows backed by Ansible roles and playbooks +- Gitea — a self-hosted registry building and shipping every container image in-fleet +- Wazuh + Dashy — a self-built SOC watching all of it ## The decision that shows the most