MDR/WesLab

No description

Find a file

wesapone 3c57065bfe Some checks failed Metrics / github-metrics (push) Has been cancelled Details Generate Snake / generate (push) Has been cancelled Details Update README.md		2026-02-27 03:36:53 +00:00
.github	first commit	2026-02-26 19:28:33 -05:00
.vscode	first commit	2026-02-26 19:28:33 -05:00
__pycache__	first commit	2026-02-26 19:28:33 -05:00
data	first commit	2026-02-26 19:28:33 -05:00
data2	first commit	2026-02-26 19:28:33 -05:00
games	first commit	2026-02-26 19:28:33 -05:00
images	first commit	2026-02-26 19:28:33 -05:00
img	first commit	2026-02-26 19:28:33 -05:00
OldReadMe	first commit	2026-02-26 19:28:33 -05:00
servers	first commit	2026-02-26 19:28:33 -05:00
src	first commit	2026-02-26 19:28:33 -05:00
src2	first commit	2026-02-26 19:28:33 -05:00
tests	first commit	2026-02-26 19:28:33 -05:00
.mergify.yml	first commit	2026-02-26 19:28:33 -05:00
connect4.py	first commit	2026-02-26 19:28:33 -05:00
LICENSE.txt	first commit	2026-02-26 19:28:33 -05:00
main.py	first commit	2026-02-26 19:28:33 -05:00
main2.py	first commit	2026-02-26 19:28:33 -05:00
README.md	Update README.md	2026-02-27 03:36:53 +00:00
requirements.txt	first commit	2026-02-26 19:28:33 -05:00
requirements2.txt	first commit	2026-02-26 19:28:33 -05:00
SECURITY.md	first commit	2026-02-26 19:28:33 -05:00

README.md

Welcome2👋WesLab!

🏠 The WesLab

This repository is the Single Source of Truth for the WesLab infrastructure. Managed by Komodo using a GitOps workflow and further documentation using rackpeek and netbox.

🚀 Architecture Overview

Deployment: Komodo (Automatic Webhook Deploys)
Runtime: Docker Engine / Proxmox
Ingress: Traefik Proxy (Automatic SSL via Cloudflare)
Auth: Authentik (Optional)

📁 Repository Structure

/infrastructure: Core services (Networking, Monitoring, Backups)
/apps: User-facing services (Media, Productivity)
/provisioning: System-level automation (Ansible/Terraform)
/documentation: Network maps and hardware specs

🌐 Network Map

Service	URL	Deployment Type	Internal IP
Komodo	`https://komodo.local`	Docker	`192.168.1.5`
Traefik	`https://traefik.example.com`	Docker	`192.168.1.5`
Proxmox	`https://pve.example.com`	Bare Metal	`192.168.1.10`
NAS	`https://nas.example.com`	Bare Metal	`192.168.1.20`

🛠️ Disaster Recovery

Initial Setup

Clone this repo to the Docker host.
Create the external network: docker network create proxy_network.
Set up the acme.json permissions: chmod 600 infrastructure/networking/data/acme.json.
Define secrets in the Komodo Dashboard.

Secrets Management

Secrets are not stored in Git. Reference the .env.example file for required variables such as:

CF_API_KEY
DOMAIN_NAME
MYSQL_PASSWORD

📊 Maintenance

To update a stack, simply push a change to the main branch:

git add .
git commit -m "feat: add jellyfin stack"
git push origin main

```mermaid
graph TD
    %% External Traffic
    Internet((Internet)) -->|Port 80/443| Router[ISP Router / Firewall]
    Router -->|Port Forward| Traefik[Traefik Reverse Proxy]

    subgraph "Docker Host (Komodo Managed)"
        Traefik -->|Internal Proxy| Apps[App Stack]
        Apps --> Jellyfin[Jellyfin]
        Apps --> Vaultwarden[Vaultwarden]
        Apps --> Nextcloud[Nextcloud]
    end

    subgraph "External Nodes"
        Traefik -.->|Dynamic Link| PVE[Proxmox VE]
        Traefik -.->|Dynamic Link| NAS[TrueNAS]
    end

    %% Styles
    style Traefik fill:#f96,stroke:#333,stroke-width:2px
    style Internet fill:#85C1E9
    style Router fill:#D5D8DC

sequenceDiagram
    participant Dev as 💻 Local Workstation
    participant Git as 🐙 GitHub/GitLab
    participant Komodo as 🦎 Komodo Core
    participant Host as 🐋 Docker Host

    Dev->>Git: git push (Update docker-compose.yml)
    Note over Git: Webhook Triggered
    Git-->>Komodo: POST /api/webhook/repo-sync
    
    rect rgb(240, 240, 240)
        Note right of Komodo: Automated Phase
        Komodo->>Git: Pull latest changes
        Komodo->>Komodo: Validate Compose Syntax
        Komodo->>Host: docker compose up -d (Update Container)
    end

    Host-->>Dev: Service updated at https://app.example.com

FUN FACT EVERYDAY🤔 :

❝ClueBot NG, an AI-powered bot on English Wikipedia, uses machine learning (neural networks and Bayesian classifiers) to analyze edits in real-time, detecting and reverting 40-55% of vandalism with over 90% accuracy—often exceeding 99% accuracy at high confidence thresholds.❞