Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -325,15 +325,16 @@ Open work is tracked in
[`docs/roadmap.md`](docs/roadmap.md) is the narrative — what is outstanding and
why it is in that order.

The current top items: rack the shelf switch, and buy the spare ProDesk that
turns the firewall's restore runbook from a hypothesis into something rehearsed.
The current top items: rack the shelf switch, and rehearse the firewall restore
on the spare ProDesk — ordered 2026-09-08 — which turns that runbook from a
hypothesis into something rehearsed.
The UPS is finished — a pack went into `mjolnir` on 2026-08-28, passed its
self-test, and the card is set to test itself every fortnight
([#93](https://github.com/Gerrrt/HomeLab/issues/93)) — but the switch between
the monitoring host and the network still has no battery at all, so both laptops
stay running and go deaf on a mains cut
([#110](https://github.com/Gerrrt/HomeLab/issues/110)); and the config export
itself now leaves the monitoring host nightly, so the spare is what is left
itself now leaves the monitoring host nightly, so the rehearsal is what is left
([#92](https://github.com/Gerrrt/HomeLab/issues/92)).

## License
Expand Down
10 changes: 7 additions & 3 deletions docs/roadmap.md
Original file line number Diff line number Diff line change
Expand Up @@ -318,11 +318,15 @@ what left this one unfireable for months.
converge in one run from any divergence. The far side's login shell is zsh,
where an unmatched glob is fatal rather than literal, so the prune deletes by
explicit basename and sends no pattern over the wire at all.
What remains is the spare — the same ProDesk model, racked on the #110
shelf, powered off — and the rehearsal, which is what turns
What remains is the rehearsal, which is what turns
[`restore-the-firewall.md`](runbooks/restore-the-firewall.md) from a
hypothesis into a runbook; it now carries the bench procedure to follow and
what to record. Writing that procedure found the runbook's own decrypt
what to record. **The spare is ordered**, 2026-09-08: the same ProDesk 600 G4
model with the same i5-8500T and 32 GB, a 512 GB SSD where `morpheus` has
1 TB (a pfSense config is kilobytes, so nothing turns on that), in transit.
It still needs a USB NIC of its own for the switch-management LAN, which the
runbook calls out. When it arrives: bench rehearsal first, then the #110
shelf, powered off. Writing that procedure found the runbook's own decrypt
command had never been run: it passed `--input-type binary`, which sops
rejects on the first byte of a real export, so a restore following the
runbook would have stopped at step one. Fixed, and it is the kind of thing
Expand Down