People keep finding one of my repos and not the others, so here's the lot in one place. Everything below is free and on GitHub, and every one now has a setup guide in docs/SETUP.md that a GitHub job runs on a fresh machine every week. If a guide stops working, the job goes red, so I find out before you do.
Each guide also says what CI can't prove (anything that needs your hardware or accounts). That bit's in there on purpose.
Security
- warden: a homelab security console. Reads the logs your WAF can't see, scans your machines, proposes bans and patches, and waits for your ✅. Detect-only by default. For anyone self-hosting behind a Cloudflare tunnel. setup
- sieve: finds the CVEs that matter on a Linux box and its running containers, using OSV.dev, CISA's known-exploited list and EPSS. No scanner binary, no database, no server. setup
- farrier: owner-approved patching as a standalone CLI. Plan, snapshot, apply (apt, npm, pip), and it always hands you the rollback. setup
Homelab
- zimablade-recipes: running a ZimaBlade like a server. Root through Docker, AppData backups that actually include your certificates, offsite photos, apps CasaOS can't remove, a slimmer Uptime Kuma. setup
- zimablade-gpu-immich: a GPU in a ZimaBlade for Immich. The slot's real limits, the driver trap for older cards, and a watcher that tells you when the card falls off the bus. setup
- garden-room-lights: time-of-day lighting for a room of WLED strips, with brightness that respects each strip's power limit. setup
- WLED_Voron--F1-Lights: Klipper macros that turn a Voron 2's LED strip an F1 colour for each print state. setup
AI agents
- model-radar: finds free models that really make tool calls, and fails your agents over when the paid model or the credit runs out. setup
- toolsmith: a Hermes agent that researches a replacement for one of your tools each week, tests it in a sandbox, and withholds anything it can't back with a measured fact. Needs Hermes and Proxmox. setup
-
ephor: passive, detect-only monitor of what your AI agents connect to, download and can access. Reads
/procand the socket table, so nothing can route around it. setup - proctor: an AI code reviewer you run from a terminal. Point it at a diff, it reports what's wrong and fact-checks every finding against the patch. setup
Music
- setlisted: a headless Spotify CLI for non-repeating discovery mixes, hour-by-hour event sets and playlist flow. setup
- spin-that-dice: a jukebox dice for parties. Tap the die on a tablet, get a random track from one of 43 categories of music, and it plays. setup
Shopping and eBay
- sold-shadow: build your own eBay sold-price data from the official API, and measure whether it can replace the paid data you use. setup
- cex-uk-prices: CeX UK sell, cash and voucher prices and store stock, with the traps measured (£0 means they won't buy it, voucher isn't cash). setup
Writing
- blog-kit: what I publish these posts with. A dev.to publisher with a leak check that refuses private IPs and keys, plus diagrams and covers. setup
Just for fun
- cryptonym-desk: name the films and characters you like and it issues you a spy-style cryptonym. One HTML file. setup
- cryptonym-desk-sanity: the same desk rebuilt on Astro and a public Sanity dataset. setup
If one of these is useful to you, a star on GitHub genuinely helps people find it. Which one should get a proper write-up next?
🤖 Drafted with AI assistance from my own homelab notes, logs and repos, then reviewed and edited before publishing.
Top comments (0)