ilia/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ansible/docs/guides/handoff-next-steps.md
ilia 0f34c51fc8
All checks were successful
CI / skip-ci-check (pull_request) Successful in 8s
Details
CI / lint-and-test (pull_request) Successful in 17s
Details
CI / secret-scanning (pull_request) Successful in 8s
Details
CI / dependency-scan (pull_request) Successful in 18s
Details
CI / ansible-validation (pull_request) Successful in 54s
Details
CI / sast-scan (pull_request) Successful in 29s
Details
CI / license-check (pull_request) Successful in 14s
Details
CI / vault-check (pull_request) Successful in 13s
Details
CI / container-scan (pull_request) Successful in 8s
Details
CI / sonar-analysis (pull_request) Successful in 8s
Details
CI / playbook-test (pull_request) Successful in 27s
Details
CI / workflow-summary (pull_request) Successful in 6s
Details
Complete homelab post-sprint: SSO docs, monitoring scripts, phase 0/1 closure. 
Consolidate sprint status into handoff docs, add Listmonk/Mattermost/Mailcow
and Vikunja SSO guides, Beszel alerts script, mattermost inventory, and
mark phases 0–1 complete with phase 2 backlog for edge Caddy and security.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-24 12:13:55 -04:00

2.2 KiB
Raw Blame History

Handoff — next steps (after post-sprint merge)

Merged from: homelab/post-sprint-2026-05-24 → master
Sprint snapshot: handoff-2026-05-24.md
Master plan: levkin-selfhost-plan-2.md

Phases complete

Phase Status
0 Foundation ✅ Static IPs, DNS, UniFi DHCP, Caddy VM .50
1 Identity ✅ Authentik LXC 217, auth.levkin.ca, admin + TOTP
2 Monitoring ✅ (sprint) Kuma, Umami, Beszel, Dockge, status/stats
3 Cal.com ✅ booking live; OIDC deferred (license)
4 SSO ✅ Vikunja, Listmonk, Mattermost, Mailcow — smoke-test in browser

Not Phase 0/1: Caddy → edge LXC .20 moved to Phase 2 backlog (was Phase 1.5).

Immediate (this week)

  1. SSO smoke tests (Playwright MCP or manual) as ilia:
  2. Rotate secrets — Authentik API token, Beszel admin, OIDC client secrets (batch when stable)
  3. Mattermost users — existing accounts: Profile → Switch to GitLab SSO

Phase 2 backlog (infra + ops)

Priority Item Effort
1 Caddy → edge LXC @ 10.0.10.20 ~30 min + 24h watch
2 Security remediation — security-remediation-plan.md ongoing
3 NAS disk W4J0L3PY → Jellyfin VM 101 hardware
4 Cal OIDC blocked on CALCOM_LICENSE_KEY
5 Phases 5–8 — Immich, Crater, Outline, etc. when needed

Useful commands

make vault-export-env
make caddy-monitoring
make beszel-setup-alerts    # BESZEL_EMAIL + BESZEL_PASSWORD
./scripts/kuma-add-monitors.sh
ssh root@10.0.10.237          # Mattermost (root key installed)

Docs added this sprint

2026-05-24