Projects

Silent hard lockup, zero local logs. Crash timeline reconstructed using external InfluxDB telemetry at 10-second resolution. Root cause: PCIe ASPM power state transition under VFIO.

Wazuh SIEM across 10+ agents, n8n enrichment with AbuseIPDB threat intelligence, automated UniFi IP blocking, Discord alerting with MITRE ATT&CK tagging.

On-prem AD forest (alliance.lab) synchronized to Entra ID via Password Hash Sync. GPO cascade testing, domain-joined workstation, hands-on SC-300 prep.

Custom Discord bot powered by Anthropic Claude API with a $10/month budget cap enforced in code. Git-synced knowledge base, Haiku/Sonnet model routing, PM2 process management under a dedicated user. Archived to bd1-archive after 996 PM2 restarts; succeeded by Jocasta.

BD-1's successor on the Hermes Agent framework. Local-first inference (qwen3:14b) with Claude Haiku/Sonnet elevation under a $5/day hard cap, 76 loadable skills including a full Azure cert study track, and a Git-synced Fleet Codex knowledge base.

RTX 4000 Ada passed through via VFIO to a dedicated VM. Ollama at 50+ tokens per second. OpenWebUI, AnythingLLM RAG with 2,385 embedded document vectors, ComfyUI. Zero data egress.

Centralized identity for 15+ services via OIDC, SAML, and Forward Auth. MFA enforced at the flow level, not per-app. Single audit trail forwarded to Wazuh. One login gates everything.

Nightly Proxmox-to-Azure Blob backup via azcopy on the Corvette node. SAS-scoped credentials, 3AM cron, full vzdump set pushed daily. The first piece of the homelab to cross the boundary into Azure.

20+ active workflows following a Detect/Enrich/Decide/Act/Report pattern. Connects SIEM, identity, network, AI inference, and Discord into one operational layer.

Telegraf shipping 10-second metrics to InfluxDB from every host. Grafana dashboards for fleet health and GPU telemetry. The monitoring layer that made the VFIO postmortem possible.

Docs-as-code for the fleet: BookStack authoring (18 shelves, 10 ADRs), nightly n8n export to Gitea, 4am sync into Jocasta's knowledge base. NetBox as IPAM authority. Authentik OIDC across the stack.

Lightweight server monitoring deployed across all cluster nodes. Complements the TIG stack with host-level health checks and real-time resource tracking.

Automated GPU thermal protection for the RTX 4000 Ada. Ollama circuit breaker triggers on temperature thresholds, preventing thermal throttling and hardware damage during sustained inference loads.