Homelab

Backup and reference for Bluelynx homelab configuration. Komodo is the source of truth — changes made in the UI are automatically committed to resource.toml via Managed Mode.

Infrastructure

• Hardware: M4 Mac Mini (Bluelynx)
• Orchestration: Komodo (standalone, manages all containers except itself and the tunnel)
• Auth: Cloudflare Zero Trust + Pocket ID (OIDC)
• Networking: Cloudflare Tunnel for external access, nginx reverse proxy for local HTTPS
• DNS: Namecheap registrar, Cloudflare DNS

Repository Layout

bootstrap/         Compose files for services that must exist before Komodo (run manually)
  komodo/          Komodo itself
  tunnel/          Cloudflare Tunnel
resource.toml      All Komodo-managed resources; auto-committed by Komodo via Managed Mode
docs/              Runbooks and setup guides

Rebuilding from Scratch

See docs/setup.md for the full runbook. Short version:

1. Run bootstrap/komodo to bring up Komodo
2. Run bootstrap/tunnel to bring up the Cloudflare Tunnel
3. Configure Komodo ResourceSync pointing at this repo with Managed Mode enabled
4. Sync — all other services restore automatically from resource.toml

Notes

• .env files are not committed; required variables documented in each compose file
• FoundryVTT is the only service not behind Zero Trust (publicly accessible)
• Forgejo is the primary remote for this repo