HOMELAB / REFERENCEEdit source

Sources and documentation maintenance

This repository is the maintained, public view of this installation. The source register below explains where its dated baseline came from. Public sources are linked; private repositories and the internal roadmap are named without links, so this site remains useful without a Forgejo account. The old wiki is historical context, not the place for new instance updates.

SourceWhat it establishedAccess / caveat
Homelab/DocumentationPublic architecture, status and procedures for this instancePublic; dated claims still need their own evidence.
Final Architecture, revision viewed 2026-09-24Node and ingress boundaries, DNS decision, VIPs, legacy edgeContains older conceptual and unresolved wording; use later owner evidence where it conflicts.
Owner version confirmation, 2026-10-14Installed Core v1.13.1 and newly installed operator CLI v0.39.0Owner-reported current versions; no fresh health audit or Actions tool upgrade. See platform versions.
UDS Core readinessRKE2/Core/MetalLB/CSI baselineHistorical prerequisite gate, not a current health check.
Homelab Operations StatusActual, GitchAlerts, runner and managed-credential acceptanceDated owner reports and CI runs; individual negative/restore tests remain separate.
Application migration planPlacement, hostnames, TrueNAS-retained services and handoffPlanning inventory is not the live NPM allowlist.
Homelab/platformShared deployable configuration and detailed platform runbooksPrivate; some component docs contain historical preparation sections.
Homelab/workflowsReusable security, artifact and deployment controlsPublic; callers pin releases, which may differ from main.
Homelab/actual-budget, Homelab/GitchAlerts, Homelab/Comfy-UIApp-specific source, runbooks and acceptancePrivate; each app has a separate deployment state.
Homelab/base-imagesOCI base definitions and manual publication flowPrivate; a build/scan result is not a published registry digest.
Homelab RoadmapCross-repository planning viewInternal project board; the owning issue and live verification determine completion.

Publishing and maintenance

  1. Update the relevant page here when instance topology, versions, decisions, operational status or cross-repository procedure changes. Leave the wiki as generic research and historical background. If a detailed component runbook also changes, update its owning repository and link to it when public; otherwise cite its repository and path without a link.
  2. Record the observation date, reporter or CI run, exact state (planned, prepared, tested, deployed), and limits of the evidence. A manifest merge or dry run does not prove a live rollout. Reconcile stale text instead of accumulating contradictory “current” sections. The owner clarified on 2026-10-15 that inaccurate or stale documentation blocks publication in this repository: passing checks and source approval do not establish factual accuracy. Align related present-tense status statements before merging; retain historical records with their original dates and limits.
  3. For service migration or DNS/routing changes, include previous state, intended cutover, internal/external validation and rollback. Do not claim data recovery from a route rollback.
  4. Inspect the public diff for passwords, access tokens, private keys, kubeconfigs, unseal shares, real Secret values, credential-bearing URLs, copied logs and screenshots. A secret name or non-secret contract may be documented, but never its value. Gitignore is not a security boundary.
  5. Run the repository's documentation link/build checks and review the rendered pages. Track implementation in the owning repository issue and keep the Roadmap current when work changes state.

The public roadmap snapshot is a dated summary of the private board. Update its columns, counts and active cards together when publishing a new snapshot; do not present it as a live feed.

When a source is private, give its repository name and issue or run number as a reference, but do not link to a page public readers cannot open. Explain the decision and evidence limit here without copying credentials or operational payloads.