THE VAULT
A curated archive of production infrastructure, AI-powered operations tooling, and platform engineering built on real hardware, not cloud credits.
VMs, LXCs, K8s workloads
Function-isolated state
GitOps-deployed workloads
Core Repositories
The two pillars of the homelab: declarative infrastructure and AI-powered operations.
homelab-iac
arrow_outwardProduction-grade IaC monorepo managing 25+ services across a dual-node Proxmox VE 8.x cluster. 17 function-scoped Terraform workspaces, Ansible configuration management, 4-node Talos Kubernetes cluster with Flux GitOps, Vault-centric secrets, Authentik SSO, split-horizon DNS, and auto-generated MkDocs documentation.
homelab-mcp-app
arrow_outwardModel Context Protocol server that gives AI agents (GitHub Copilot, Claude) live access to infrastructure state. 5 concurrent ingestion workers (Proxmox, Terraform, Ansible, Git, Markdown), semantic search via OpenViking, SSH connection pooling with safety-gated command execution, and HTTP connection reuse for sub-100ms queries.
Specialized Architecture
Vault-Centric Secrets
HashiCorp Vault as the single source of truth for every credential in the infrastructure. CI pipelines authenticate via JWT, Kubernetes workloads use the K8s auth method with External Secrets Operator. No hardcoded credentials anywhere.
Authentik SSO
Centralized OIDC identity provider federating authentication across GitLab, Grafana, Nextcloud, and Jellyfin. Single credential store eliminating per-service password management with full audit trail.