Moving Homelab SSH and SOPS keys onto a YubiKey
Moving SSH, Git, and local SOPS access onto YubiKey backed keys.
More issues
NVMe Partitions for ZFS SLOG and L2ARC on TrueNAS
Two NVMe drives partitioned for SLOG and L2ARC on TrueNAS. I also tried a special metadata vdev but ended up dropping it.
MikroTik VLANs are Six commands from the CLI
Replaced two daisy-chained 1G Netgear switches with a MikroTik CRS309 for 10G. The CLI made the entire VLAN setup six commands.
A Year of Homelabbing
This is a year of building, breaking, and rebuilding my homelab.
Before the homelab
I never liked minikube. A potentially bold statement to make, but something about it felt too abstracted.
I remember installing it, running minikube addons enable ingress, and honestly feeling like something was off. What's
Closing the 100 Days
Hey folks, it's been a while since I've written anything here.
I started the 100 Days of Homelab challenge back in January 2025. Made it to Day 39, then stopped.
Now it's 2026 and I figured I should close this out properly before moving
Joining a non-Talos node to a Talos cluster (Day 39)
How to add non-Talos nodes to a Talos cluster with HAProxy for KubePrism compatibility.
Tailscale on Talos (Day 38)
Getting Tailscale running on Talos nodes.
Terraform Provider in Rust (Day 36-37)
From terragrunt hooks to a Rust Terraform provider to replace hacky workarounds for OIDC realm configuration in Proxmox.
Proxmox OIDC integration and terragrunt hooks (Day 36)
Turns out the Telmate Proxmox provider doesn't have resource support for creating authentication realms or configuring OIDC.
But since Proxmox has a REST API, I could work around the provider limitations, and so I ended up with:
terraform {
source = "."
after_hook "create_realm" {
commands
Authentik OAuth2 with Terraform (Day 35)
I recently started using Authentik to provide auth for my services and applications in the homelab.
Authentik is an open-source identity provider that supports OAuth2, SAML, and more, and comes with a Terraform provider, so naturally, I defaulted to managing everything that way.
This means I no longer need to