diff --git a/my-homelab-setup-2/content/index.md b/my-homelab-setup-2/content/index.md index 4ea5c0b..42e8190 100644 --- a/my-homelab-setup-2/content/index.md +++ b/my-homelab-setup-2/content/index.md @@ -304,7 +304,7 @@ The mount-option gotcha that'll cost you an evening : _netdev

Did I benchmark before and after ? No, of course I didn't, that would have implied I had a real reason to migrate. It feels snappier, the stale-handle weirdness I used to get on SMB is gone, and PBS is happy. For a change made on vibes, that's a clean result.

-

The semi GitOps spine : Gitea + Semaphore + Ansible

+

The semi GitOps spine

This is the brain that keeps the fleet consistent. Gitea is the source of truth, Semaphore is the hands.

Semaphore pulls its Ansible inventory straight out of Gitea, and I keep two inventories : dev and prod. Same playbooks, different targets, so I can break something on dev without explaining to myself later why prod is on fire. Semaphore authenticates to Gitea and to every host with its own dedicated SSH key, scoped for exactly that, which is also why the firewall has those surgical management exceptions I mentioned in #1.

In WIMH #1 I showed the whole playbook tree (the apt / security / utilities / ntp / ssh categories). I won't repeat it. Instead, here's a few of the workhorses that help me to run patch and configure some services :