This week I moved two related pieces of the homelab forward. The larger change was an infrastructure-as-code bootstrap for the DMZ Talos environment and a more explicit Argo CD ownership model for the infrastructure cluster. The smaller change was the public DNS and reverse-proxy path for the …

This week was split between identity work in DurpDeploy and a fairly consequential cleanup of the GitOps repository that describes the homelab. The headline feature is OIDC single sign-on for DurpDeploy, backed by the existing identity provider. I also landed a substantial MFA implementation and its …

Another busy week across the homelab stack. The big themes this time around are security hardening in DurpDeploy (a batch of fixes that came through the GitHub-to-GitLab sync pipeline), a major new database backend, mobile browser testing infrastructure, and some overdue resource limit tuning in the …