T

il f820e89cf6 refactor(roles): update binary application installation flow

update notes:
- keep set_cli_tools responsible only for console CLI tools
- download and install kopia from the kopia role
- download and install blocky from the blocky role
- download and install alloy from the alloy role
- reduce console artifact staging for service binaries

2026-05-09 10:46:29 +09:00

ansible

refactor(roles): update binary application installation flow

2026-05-09 10:46:29 +09:00

config

fix(crowdsec): optimize whitelist expressions

2026-05-07 10:32:11 +09:00

data

data: set create_all_structure.sh mode 700 to excute

2026-03-15 06:39:33 +09:00

docs

fix(crowdsec): optimize whitelist expressions

2026-05-07 10:32:11 +09:00

.gitignore

git: update .gitignore to add .ansible path

2026-03-15 04:59:15 +09:00

README.md

1.0.0 Release IaaS

2026-03-15 04:41:02 +09:00

README.md

ilnmors homelab README

This homelab project implements single-node On-premise IaaS system. The homelab contains virtual machines which are divided by their roles, such as private firewall, DNS, PKI, LDAP and database, SSO(OIDC). The standard domain is used to implement this system without specific vendors. All components are defined as code and initiated by IaC (Ansible) except hypervisor initial configuration.

RTO times

Feb/25/2026 - Reprovisioning Hypervisor and vms
- RTO: 1 hour 30 min - verified
  - Manual install and set vmm: 20 min
  - Create and reprovision fw including services: 15 min
  - Create and reprovision infra including services: 20 min
  - Create and reprovision auth including services: 10 min
  - Create and reprovision app except services: 10 min
  - Intermediate tasks (ACME issuance, DNS propagation, etc.): 15 min
Mar/5/2026 - Reprovisioning Hardware and Hypervisor and vms
- RTO: 2 hour 20 min
  - console: 15min - verified
  - certificate: 0 min (When it needs to be created, RTO will be 20 min) - not verified
  - wireguard: 0 min (When it needs to be created, RTO will be 1 min) - not verified
  - hypervisor(+fw): 45 min - verified
  - switch: 1 min - verified
  - dsm: 30 min - verified
  - kopia: 0 min (When it needs to be created, RTO will be 10 min) - verified
  - Extra vms: 30 min - verified
  - Etc: 30 min