Auto-Homelab

Homelab docker-compose environment defined in code. Using Forgejo Actions and Renovate bot for CI along with n8n automation for CD.

Wiki | How to Setup | Blog | Inspiration

Hypervisor	OS	Tools	VPS (arm)	Firewall

Apps in Repo:

Logo	Name	Description
	AdGuard Home	Network Wide DNS adblock as well as my DNS server (2/2)
	AdGuard Home Sync	Syncs my instances of Adguard
	authentik	Open Source Identity Provider
	Bazarr	Downloads subtitles for Radarr/Sonarr
	Cloudflare Tunnels	How I expose some of these services
	Codeberg Pages	Github Pages for Gitea installs. hosts https://mafyuh.co
	Doplarr	Allows my users to request content through Discord if they choose
	Drone	Selfhosted CI/CD pipeline manager
	FlareSolverr	Proxy server to bypass Cloudflare and DDoS-GUARD protection
	Forgejo	This site
	Forgejo Runner	Runs CI tasks like Yamllint and Renovate, replaced Drone. Hoping to get CD as well
	Gotfiy	Self hosted notification service
	Homarr	Homelab dashboard that integrates with the arr's so I see data in 1 place
	Jellyfin	Open Source Streaming Service for home media like Plex
	Jellyseerr	Request platform for my Jellyfin user's to request content
	jfa-go	Used for some PPV/Live TV automations to create users for certain periods of time
	Kasm	Docker container streaming platform for browser-based access to desktops, applications, and web services
	Lidarr	Music Collection Manager
	LinkStack	Creating a static links page for my Jellyfin users
	MakeMKV	Used to rip Bluray's with my LG BU40N drive
	mindsdb	Connects Ollama models to 100+ different databases, easy to use.
	Netboot.xyz	Network boot instead of using my ventoy USB
	Nginx Proxy Manager	Reverse Proxy used for its simplicity (1/3)
	n8n	Switching from ActivePieces to n8n, more robust
	Ollama	Easiest way to run LLM's on your own hardware
	open-webui	Creates a ChatGPT like web interface for talking to Ollama models
	Portainer	Web-based management for Docker containers
	Prowlarr	Searches indexers for Radarr/Sonarr
	qBittorrent VPN	Modified qBittorrent with VPN killswitch enabled
	Radarr	Movie Collection Manager
	Sabnzbd	Usenet downloader to download content
	Sonarr	Radarr, but for TV Shows
	Sonatype Nexus	Self-hosted Docker registry to help lower Docker pulls
	Syncthing	How I backup all config files, following 3-2-1 backup procedure
	Twingate Connectors	Main VPN between homelab and cloud VPS's
	Uptime Kuma	Self hosted service uptime tracker

Apps not yet in repo:

Logo	Name	Description
	AWX (Ansible Tower)	Used to easily run Ansible playbooks on all my VM's, installed on Minikube
	Grafana	Monitoring for various services
	Wordpress	WooCommerce store setup for JF PPV access
	Guacamole	Remote access in browser via SSH, RDP, VNC, etc
	Home Assistant	Slowly migrating over to Home Assistant from Google Home
	Plausible	Analytics tracker for certain websites (Blog)
	wazuh	Security platform monitoring everything with agents installed on all VM's

Full Workflow Chart

graph TD
  A1((Renovate Bot Scans for Updates)) --> A2{Updates Found?}
  A2 -- Yes --> B[Make PR]
  A2 -- No --> C(End)

  B --> D{PR Merged?}
  D -- No --> E(End)
  
  subgraph Handle Merged PR
    D -- Yes --> F[Extract App Name]
    F --> G[SSH to Host Machine]
    G --> H[Git Pull & Docker Compose Up]
    H --> I{Error?}
    I -- Yes --> J[Send Gotify Notification]
    J --> K(End)
    I -- No --> L[Extract PR Number]
    L --> M[Add PR Number to Forgejo API URL]
    M --> N[Send Review with Logs]
    N --> O(End)
  end
  
  subgraph Notification on PR Creation
    B --> P[Notify via Gotify]
  end
  
  subgraph Release Notes Handling
    Q((PR Webhook Received)) --> R{PR Open?}
    R -- No --> S(End)
    R -- Yes --> T[Hit GitHub API for Release Notes]
    T --> U[Extract PR Number from webhook]
    U --> V[API Call to Foregjo]
    V --> W[Leave Release Notes as Comment]
    W --> S
  end
  
  P --> Q

To-Do

• Get all dependencies configured to pull changelogs on PR
• CI Passing Badge in README cb514e2b09
• Add README to each directory
• Get upstream release notes for linuxserver containers #207 (comment)
• Harden all VM's to be CIS compliant