This week was primarily about making the DMZ cluster more useful without making it less understandable. I added two services to the GitOps graph, SearXNG and an Authentik remote-cluster outpost, then worked through the integration failures that appeared when their manifests met the real environment. …

This week I moved two related pieces of the homelab forward. The larger change was an infrastructure-as-code bootstrap for the DMZ Talos environment and a more explicit Argo CD ownership model for the infrastructure cluster. The smaller change was the public DNS and reverse-proxy path for the …

This week was split between identity work in DurpDeploy and a fairly consequential cleanup of the GitOps repository that describes the homelab. The headline feature is OIDC single sign-on for DurpDeploy, backed by the existing identity provider. I also landed a substantial MFA implementation and its …