tommy/homelab-configs: Proxmox and infrastructure configs - homelab-configs - Tommy's Homelab Git

tommy/homelab-configs

T

tommy 0dea324551 traefik: de-secret CrowdSec LAPI key -> crowdsecLapiKeyFile (rotated)

Old bouncer key was committed in cleartext (hist 7fac4fc) and is now rotated
(new traefik-bouncer-v2 + old bouncer deleted, verified 200 on both nodes).
Config now references /plugins-storage/crowdsec_lapi_key (mode-600, gitignored,
lives only on the nodes). Old key in history is inert post-rotation.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-30 22:41:35 -05:00

Add Authelia config

2026-03-12 21:01:04 -05:00

docs: Phase 5 — incident log, maintenance runbook, NUT config archive

2026-05-06 21:25:49 -05:00

Add Compute3 PVE storage config

2026-03-11 22:25:08 -05:00

Add Frigate config files

2026-03-12 21:07:53 -05:00

gluetun-pia: CA-pinned regen + CA-aware region auto-pick (fix legacy-CN break)

2026-06-30 22:01:16 -05:00

ha: add universal media-partition low-space guard for Frigate

2026-06-27 21:33:28 -05:00

homepage: read HA token from env var; stop committing it in plaintext

2026-06-27 22:01:27 -05:00

monitoring: off-host Prometheus dead-man's-switch watchdog (Pi .227)

2026-06-30 21:58:57 -05:00

observability/prometheus

observability: fix container memory alerts to use working set (C-02)

2026-06-07 15:56:07 -05:00

pbs: rewrite zfs-health-check.sh, enable textfile collector

2026-05-05 19:44:36 -05:00

runbooks: RB-002 total Traefik 403 — CrowdSec SQLite journal lock + WAL fix

2026-05-23 22:23:16 -05:00

traefik: de-secret CrowdSec LAPI key -> crowdsecLapiKeyFile (rotated)

2026-06-30 22:41:35 -05:00

.gitignore

traefik: de-secret CrowdSec LAPI key -> crowdsecLapiKeyFile (rotated)

2026-06-30 22:41:35 -05:00

jobs.cfg

Initial commit - PVE storage and backup job configs

2026-03-11 22:10:04 -05:00

storage.cfg

Initial commit - PVE storage and backup job configs

2026-03-11 22:10:04 -05:00