mikkel/homelab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
15 commits 1 branch 0 tags 101 KiB
Commit graph

8 commits

Author SHA1 Message Date
Mikkel Georgsen
1b57dab4da Add TODO.md and document ping fix for unprivileged containers 
- Created TODO.md with pending task to fix ping on all containers
- Added setcap command to standard container setup in documentation
- Added detailed explanation in CLAUDE.md for future reference
- Unprivileged containers need cap_net_raw on /bin/ping

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 20:28:25 +00:00
Mikkel Georgsen
196531b6bf Add NPM update procedure to documentation 
Documented that NPM runs in Docker at /opt/npm and added
the docker compose commands for updating it.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 14:15:09 +00:00
Mikkel Georgsen
15c9d80952 Harden core.georgsen.dk firewall 
- Whitelist home IP (83.89.248.247) for all traffic
- Block DNS (53), spiceproxy (3128), Proxmox UI (8006, 8008) from internet
- Add Fail2ban for SSH on PVE host
- Home IP whitelisted in Fail2ban

Access Proxmox from home IP directly or via Tailscale when remote.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:59:10 +00:00
Mikkel Georgsen
b335488823 Block portmapper (port 111) from public internet 
Fix for CERT-Bund security notification about exposed rpcbind service.
Added iptables rules to drop port 111 on vmbr0 (public interface).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:54:04 +00:00
Mikkel Georgsen
6c48c71a4f Add security measures: Fail2ban, NPM access lists 
- Fail2ban on Forgejo (5 retries, 24h ban)
- NPM access list 'home_only' restricts admin UIs to 83.89.248.247
- Applied to: dns.georgsen.dk, dockge.georgsen.dk, pbs.georgsen.dk
- Added home IP to documentation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:48:15 +00:00
Mikkel Georgsen
530ef7c6b9 Update docs: configs now in repo with symlinks 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:41:05 +00:00
Mikkel Georgsen
45424e0172 Add Forgejo API config, git DNS record 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:39:17 +00:00
Mikkel Georgsen
a6bf1c7706 Initial commit: homelab documentation and management 
- homelab-documentation.md: Complete infrastructure docs
- CLAUDE.md: Claude Code guidance
- README.md: Quick reference

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-14 12:38:45 +00:00