The home server
One machine runs everything I have built, and I treat it as disposable: if it dies, it comes back from GitHub.
Why
One dead disk should cost me nothing
That is the rule I build by. Nothing on the machine is allowed to be the only copy. Code, agent prompts, memory notes, timers, service units and configs all live in private repositories, pushed in the same session they are created.
What runs on it
The services
LauncherA single home dashboard that links every tool.
DNSNetwork-wide ad and tracker blocking.
MediaA personal media server for the family.
DashboardsGit statistics, expense tracking, health data and a gallery for every report the agents publish.
TimersScheduled jobs and units managed by systemd.
Reverse proxyNginx handles routing and certificates.
How it stays safe
Rebuild, do not repair
- A master repository can set the machine up from nothing and clones every other repository.
- Secrets never enter git in plain text. They travel through an encrypted backup.
- A pre-push gate scans every push for keys and tokens.
- Registering a new service is part of building it, so the rebuild plan never goes stale.