services/homelab
2
1
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8bcee5c17ff449d282a3449cf1814f383fa054e7
homelab/active
T
History
ducoterra 8bcee5c17f document ops-user pi install and sudoers escalation policy 
Adds the sysadmin setup recipe to the pi notes: run pi as a dedicated `ops`
user with a tightly controlled sudoers allowlist instead of root, so an agent
can do host work without unbounded privilege.

Includes the AGENTS.md to drop at /home/ops/AGENTS.md. It records that the
allowlist is discovered with `sudo -l` (hostnamectl, reboot, the dnf and
systemctl subcommands, firewall-cmd, the ansible shim, libvirt/virsh and
composer-cli, getfacl/setfacl, osbuild-auto.sh, btrfs scrub) and sets the hard
rule for agents: when a command is not on that list, stop, do not attempt
escalation workarounds, and ask the human to add the exact full-path sudoers
line for review before proceeding.

LLM-Generated: true
2026-10-17 12:26:40 -04:00
..
aws_bedrock
various updates
2026-09-07 11:37:56 -04:00
aws_cli
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
aws_iam
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
aws_route53
checkpoint commit
2026-05-05 06:26:40 -04:00
aws_ses
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
container_bifrost
checkpoint commit
2026-05-05 06:26:40 -04:00
container_bricktracker
update bricktracker to 1.3.1
2026-02-16 11:16:09 -05:00
container_caddy
checkpoint commit
2026-05-05 06:26:40 -04:00
container_certbot
transition to container_ over podman_
2026-02-16 10:44:38 -05:00
container_ddns
checkpoint commit
2026-05-05 06:26:40 -04:00
container_elk
add container_elk notes
2026-02-25 12:16:30 -05:00
container_gitea
various updates
2026-09-07 11:37:56 -04:00
container_gitlab
add gitlab container docs
2026-02-06 20:08:50 -05:00
container_grafana
transition to container_ over podman_
2026-02-16 10:44:38 -05:00
container_graphite
transition to container_ over podman_
2026-02-16 10:44:38 -05:00
container_immich
various updates
2026-09-07 11:37:56 -04:00
container_iperf3
rename podman_ projects to container_
2026-02-11 11:34:02 -05:00
container_jellyfin
transition to container_ over podman_
2026-02-16 10:44:38 -05:00
container_keycloak
various updates
2026-09-07 11:37:56 -04:00
container_langfuse
various updates
2026-09-07 11:37:56 -04:00
container_litellm
various updates
2026-09-07 11:37:56 -04:00
container_localai
rename podman_ projects to container_
2026-02-11 11:34:02 -05:00
container_matrix
transition to container_ over podman_
2026-02-16 10:44:38 -05:00
container_minecraft
transition to container_ over podman_
2026-02-16 10:44:38 -05:00
container_nextcloud
transition to container_ over podman_
2026-02-16 10:44:38 -05:00
container_nginx
remove private nginx.conf
2026-02-25 12:18:44 -05:00
container_ntfy
various updates
2026-09-07 11:37:56 -04:00
container_ollama
rename podman_ projects to container_
2026-02-11 11:34:02 -05:00
container_pihole
rename podman_ projects to container_
2026-02-11 11:34:02 -05:00
container_rabbitmq
add container_rabbitmq
2026-02-25 12:19:06 -05:00
container_speedtest
rename podman_ projects to container_
2026-02-11 11:34:02 -05:00
device_3dserver
add 3dserver device
2025-10-14 12:30:55 -04:00
device_bambu_p1s
add browsing bambu printer with ftps
2026-02-06 20:09:07 -05:00
device_bangle.js
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
device_driveripper
checkpoint commit
2026-05-05 06:26:40 -04:00
device_epson_et_2800
add alicia's printer
2025-10-14 12:31:05 -04:00
device_esphome
various updates
2026-09-07 11:37:56 -04:00
device_framework_16
framework 16 ai updates
2026-02-06 20:10:45 -05:00
device_framework_desktop
move ai notes from framework_desktop to software_ai_stack
2026-02-25 12:20:17 -05:00
device_home_assistant
various updates
2026-09-07 11:37:56 -04:00
device_keychron
add keychron notes
2026-03-16 09:53:54 -04:00
device_raspberry_pi
add README index for the Raspberry Pi systemd runbooks
2026-10-16 09:08:16 -04:00
device_reesework
various updates
2026-09-07 11:37:56 -04:00
device_shelly
add shelly bthome notes and more detailed instructions for existing devices
2025-10-14 12:32:01 -04:00
device_unifi
checkpoint commit
2026-05-05 06:26:40 -04:00
device_yubikey
expand yubikey docs to include gpg
2025-11-13 16:49:39 -05:00
kubernetes
checkpoint commit
2026-05-05 06:26:40 -04:00
kubernetes_bitwarden
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_coredns
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_external-dns
checkpoint commit
2026-05-05 06:26:40 -04:00
kubernetes_gitea
add gitea demo values compatible with metallb
2025-11-03 09:54:40 -05:00
kubernetes_grafana
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_ingress-nginx
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_iperf3
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_jellyfin
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_local-path-provisioner
k0s updates
2025-10-30 22:51:17 -04:00
kubernetes_longhorn
add longhorn demo
2026-04-16 13:11:17 -04:00
kubernetes_metallb
checkpoint commit
2026-05-05 06:26:40 -04:00
kubernetes_minecraft
checkpoint commit
2026-05-05 06:26:40 -04:00
kubernetes_pihole_blocklist
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_snapdrop
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_traefik
checkpoint commit
2026-05-05 06:26:40 -04:00
kubernetes_userspace
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
kubernetes_wordpress
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
notes_freedesktop
overhauls of most service docs
2025-07-22 18:29:07 -04:00
os_arch
update dd command for bootable arch installer
2025-10-23 10:41:11 -04:00
os_debian
overhauls of most service docs
2025-07-22 18:29:07 -04:00
os_eos
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
os_fedora
add sudoers allowlist for ops user automation
2026-10-12 10:31:36 -04:00
os_grapheneos
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
os_ios
overhauls of most service docs
2025-07-22 18:29:07 -04:00
os_manjaro
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
os_proxmox
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
os_rhel
rhel initialization with smart card notes
2025-10-14 12:33:11 -04:00
os_truenas
move truenas
2026-02-06 20:13:33 -05:00
os_ubuntu
add ubuntu 25.10
2026-02-06 20:13:55 -05:00
software_ai_stack
various updates
2026-09-07 11:37:56 -04:00
software_bash
wyoming updates, borg manual, fedora kscreen, bambu wifi, vscode pylance, stable diffusion
2025-05-23 13:49:03 -04:00
software_borg
clean up borg backup notes
2026-02-06 20:20:56 -05:00
software_btrfs
checkpoint commit
2026-05-05 06:26:40 -04:00
software_clamav
clamav don't alert on max size
2025-11-18 10:24:53 -05:00
software_distoolbox
make ollama-* actions user-independent
2025-05-04 23:59:00 -04:00
software_etcd
add podman etc notes
2026-02-06 20:21:33 -05:00
software_ffmpeg
add ffpmeg notes
2025-10-14 12:36:29 -04:00
software_firewalld
add firewalld log following
2026-04-06 11:45:06 -04:00
software_flatpak
Add Flatpak version installation reference
2026-09-21 21:11:09 -04:00
software_freeipa
freeipa install updates
2026-02-06 20:21:55 -05:00
software_gpg
move selinux, firewalld, k3s
2025-11-13 16:51:02 -05:00
software_grayjay
wyoming, borg, grayjay, oh my
2025-05-04 02:34:10 -04:00
software_iscsi
checkpoint commit
2026-05-05 06:26:40 -04:00
software_k0s
add l2advertisement to metallb address pool k0s config
2025-11-03 09:54:21 -05:00
software_k3s
checkpoint commit
2026-05-05 06:26:40 -04:00
software_konsole
various updates
2026-09-07 11:37:56 -04:00
software_luks
never ever ever ever allow force overwrite luks driver
2026-02-06 20:22:47 -05:00
software_magick
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
software_mm2
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
software_opencode
checkpoint commit
2026-05-05 06:26:40 -04:00
software_openstack
add openstack notes
2026-02-06 20:22:58 -05:00
software_osbuild
various updates
2026-09-07 11:37:56 -04:00
software_packer
fedora updates and systemd renames
2025-10-30 22:51:53 -04:00
software_pi
document ops-user pi install and sudoers escalation policy
2026-10-17 12:26:40 -04:00
software_pivpn
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
software_podman
various updates
2026-09-07 11:37:56 -04:00
software_qemu
add notes for resizing a qemu images
2026-02-06 20:23:24 -05:00
software_qmk
overhauls of most service docs
2025-07-22 18:29:07 -04:00
software_selinux
driveripper disk monitor agent deployed
2026-03-23 23:43:28 -04:00
software_smb
various updates
2026-09-07 11:37:56 -04:00
software_snapper
add snapper notes
2026-02-06 20:24:24 -05:00
software_stablediffusion
move systemd prefixes to software prefixes
2025-11-18 10:01:18 -05:00
software_steam
init software_steam
2025-10-23 10:40:56 -04:00
software_system_monitor
add system monitor template backups
2025-10-14 12:36:41 -04:00
software_systemd
add systemd examples
2026-02-06 20:27:19 -05:00
software_tmux
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
software_toolbx
add GUI, screen capture, and audio packages to toolbx image
2026-10-10 18:17:25 -04:00
software_unifi
moving everything to active or retired vs incubating and graduated
2025-04-19 18:52:33 -04:00
software_unifi-server
move systemd prefixes to software prefixes
2025-11-18 10:01:18 -05:00
software_uv
add uv notes
2026-02-06 20:27:27 -05:00
software_virsh
various updates
2026-09-07 11:37:56 -04:00
software_vllm_radiance
add vllm-radiance R9700 deployment and fp8-kv calibration notes
2026-10-12 10:31:43 -04:00
software_wireguard
checkpoint commit
2026-05-05 06:26:40 -04:00
software_wireshark
add bluetooth wireshark notes
2025-10-14 12:36:50 -04:00
software_wyoming
last updates to wyoming before deprecation
2026-04-06 11:46:21 -04:00
software_ytdlp
add yt-dlp notes
2025-10-14 12:36:56 -04:00
vibe_agent
checkpoint commit
2026-05-05 06:26:40 -04:00
vibe_mcp_server
checkpoint commit
2026-05-05 06:26:40 -04:00
vibe_system_report
various updates
2026-09-07 11:37:56 -04:00