mikkel/homelab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
9 commits 1 branch 0 tags 83 KiB
Commit graph

9 commits

This branch
This branch
All branches
Author SHA1 Message Date
Mikkel Georgsen
6fe9fb2297 Update CLAUDE.md with complete security info 
Added firewall rules, Fail2ban on both core and Forgejo,
and NPM update command for quick reference.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 14:15:59 +00:00
Mikkel Georgsen
196531b6bf Add NPM update procedure to documentation 
Documented that NPM runs in Docker at /opt/npm and added
the docker compose commands for updating it.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 14:15:09 +00:00
Mikkel Georgsen
15c9d80952 Harden core.georgsen.dk firewall 
- Whitelist home IP (83.89.248.247) for all traffic
- Block DNS (53), spiceproxy (3128), Proxmox UI (8006, 8008) from internet
- Add Fail2ban for SSH on PVE host
- Home IP whitelisted in Fail2ban

Access Proxmox from home IP directly or via Tailscale when remote.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:59:10 +00:00
Mikkel Georgsen
b335488823 Block portmapper (port 111) from public internet 
Fix for CERT-Bund security notification about exposed rpcbind service.
Added iptables rules to drop port 111 on vmbr0 (public interface).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:54:04 +00:00
Mikkel Georgsen
6c48c71a4f Add security measures: Fail2ban, NPM access lists 
- Fail2ban on Forgejo (5 retries, 24h ban)
- NPM access list 'home_only' restricts admin UIs to 83.89.248.247
- Applied to: dns.georgsen.dk, dockge.georgsen.dk, pbs.georgsen.dk
- Added home IP to documentation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:48:15 +00:00
Mikkel Georgsen
530ef7c6b9 Update docs: configs now in repo with symlinks 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:41:05 +00:00
Mikkel Georgsen
59ee2da552 Add API credentials and configs 
- pve/credentials: Proxmox API token
- dns/credentials: Technitium DNS credentials
- forgejo/credentials: Forgejo API token
- npm/npm-api.conf: NPM API credentials

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:40:26 +00:00
Mikkel Georgsen
45424e0172 Add Forgejo API config, git DNS record 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:39:17 +00:00
Mikkel Georgsen
a6bf1c7706 Initial commit: homelab documentation and management 
- homelab-documentation.md: Complete infrastructure docs
- CLAUDE.md: Claude Code guidance
- README.md: Quick reference

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:38:45 +00:00