---
type: topic-landing
path: Sources/Homelab
tags:
  - landing
updated: 2026-05-24
---

# Homelab — Sources

Project plans and session notes for infrastructure, networking, hardware, and deployments.

## Active Projects

- [[Sources/Homelab/postgres-consolidation-ob1-reflection-layer|postgres-consolidation-ob1-reflection-layer]] — consolidate wiki/ob1/trellis into `petalbrain` (3 schemas, 4 service users) + OB1 reflection layer
- [[Sources/Homelab/postgres-consolidation-followups|postgres-consolidation-followups]] — close-out tasks from the consolidation: reflector activation, verification, cleanup
- [[Sources/Homelab/trellis-mcp|trellis-mcp]] — MCP server for resumable threads of work across conversation boundaries
- [[Sources/Homelab/trellis-mcp-tool-surface-followups|trellis-mcp-tool-surface-followups]] — `pause_thread`→`checkpoint_thread` rename + optional `id` addressing
- [[Sources/Homelab/vault-semantic-search|vault-semantic-search]] — `vault:search` MCP tool over `public.embeddings` (wiki schema)
- [[Sources/Homelab/ob1-jsonl-watcher|ob1-jsonl-watcher]] — ambient capture of Claude Code/Cowork sessions into OB1 via JSONL tailing
- [[Sources/Homelab/herbylab-project-management|herbylab-project-management]] — projects/notes as Postgres-backed artifacts; Trello projection via NOTIFY→n8n
- [[Sources/Homelab/gitea-migration-to-pve|gitea-migration-to-pve]] — relocate Gitea to PVE LXC; two-instance cross-mirror with PBS
- [[Sources/Homelab/homelab-mcp-server|homelab-mcp-server]] — MCP server (FastMCP + Authentik + Cloudflare Tunnel); Phase 1 tools
- [[Sources/Homelab/ob1-main-deployment|ob1-main-deployment]] — OB1 AI memory system (Supabase + pgvector); Phases 0–6
- [[Sources/Homelab/ob1-deployment|ob1-deployment]] — OB1 addendum: Tailscale-only, parallel n8n write, Phase 7 Dispatch hook
- [[Sources/Homelab/traefik-deployment|traefik-deployment]] — full Traefik ingress stack; Knot DNS; wildcard TLS; Cloudflare Tunnel
- [[Sources/Homelab/pbs-infrastructure-intelligence|pbs-infrastructure-intelligence]] — PBSII: Go collector + Python log parser + n8n monitor + Claude API healer
- [[Sources/Homelab/ssh-ca-with-step-ca-authentik|ssh-ca-with-step-ca-authentik]] — step-ca + Authentik OIDC for short-lived SSH certs
- [[Sources/Homelab/pbs-security-hardening|pbs-security-hardening]] — Crowdsec + Authelia layered security for PBS
- [[Sources/Homelab/hunyuan3d-sunnie-pipeline|hunyuan3d-sunnie-pipeline]] — Hunyuan3D-2 on RTX 3080; Blender + Mixamo for Sunnie 3D
- [[Sources/Homelab/instantmesh-docker|instantmesh-docker]] — InstantMesh Docker on Manjaro tower
- [[Sources/Homelab/cli-standardization|cli-standardization]] — Fish + Starship + Chezmoi dotfiles via Ansible
- [[Sources/Homelab/editor-stack-upgrade|editor-stack-upgrade]] — Zed + Neovim/LazyVim + Zellij
- [[Sources/Homelab/env-file-hardening|env-file-hardening]] — root:root 0600 .env files
- [[Sources/Homelab/sshkm-local-ssh-key-manager|sshkm-local-ssh-key-manager]] — Python CLI for SSH key lifecycle
- [[Sources/Homelab/ssh-login-alerting|ssh-login-alerting]] — journald tailer → n8n → Google Chat alerts

## Recent Sessions

- [[Sources/Homelab/2026-05-24-davinci-resolve-studio-install|2026-05-24-davinci-resolve-studio-install]] — Resolve Studio 20.3.3 on `herbyeos` via sheridans PKGBUILD
- [[Sources/Homelab/2026-05-22-pbs-nas-off-site-backup-via-rsync|2026-05-22-pbs-nas-off-site-backup-via-rsync]] — PVE→PBS LXC→NAS rsync off-site backup; day-1 restore validated
- [[Sources/Homelab/2026-05-21-traefik-routes-for-pihole-openwrt-us-test-authy-static-ip-cutove|2026-05-21-traefik-routes-for-pihole-openwrt...]] — pihole/openwrt behind Traefik; us-test-authy static-IP recovery
- [[Sources/Homelab/2026-05-18-claude-desktop-subprocess-leak-memory-management|2026-05-18-claude-desktop-subprocess-leak-memory-management]] — Dispatch subprocess zombies eating ~10.6GB RAM
- [[Sources/Homelab/2026-05-18-acl-shared-repo-permissions|2026-05-18-acl-shared-repo-permissions]] — POSIX default ACLs for herbyadmin/travadmin shared git tree
- [[Sources/Homelab/2026-05-15-postgres-consolidation-phase2a-result|2026-05-15-postgres-consolidation-phase2a-result]] — schemas + service users + `public.embeddings` landed disruption-free
- [[Sources/Homelab/2026-05-15-postgres-consolidation-phase0-recon|2026-05-15-postgres-consolidation-phase0-recon]] — pre-consolidation instance snapshot; OB1 is pg17/Ollama, not Supabase
- [[Sources/Homelab/2026-05-11-traefik-phase1-phase2-wildcard-canary|2026-05-11-traefik-phase1-phase2-wildcard-canary]] — Traefik Phase 1.6 wildcard + Phase 2 canary complete
- [[Sources/Homelab/2026-05-06-homelab-mcp-server-stand-up|2026-05-06-homelab-mcp-server-stand-up]] — first MCP server deployment; `mcp.herbylab.dev`

## Completed Projects

- [[Sources/Homelab/davinci-resolve-studio-install|davinci-resolve-studio-install]] — Resolve Studio 20.3.3 install on Endeavour tower ✓
- [[Sources/Homelab/ufw-docker-outage-fix|ufw-docker-outage-fix]] — UFW after.rules DOCKER-USER outbound rules fix ✓
- [[Sources/Homelab/wp-cron-supercronic-deploy|wp-cron-supercronic-deploy]] — WP-Cron disabled; Supercronic sidecar; Traefik block-wpcron ✓
- [[Sources/Homelab/2026-05-08-homelab-vlan-renumber-switch-chip-to-bridge-alignment|2026-05-08-homelab-vlan-renumber-switch-chip-to-bridge-alignment]] — VLAN renumber ✓