~/tags $ grep -l '#automation' _posts/*
// #automation
19 posts tagged.
Auditing a Homelab With AI Agents: Personas, Four Waves, and an Adversarial Verifier
The architecture of a security-review system built from AI agent personas: a read-only auditor with a hard constraint list, a four-wave pipeline where each wave answers a question the previous one cannot, a checklist ...
Two PowerShell Scripts for Windows Maintenance: Patch Everything and Scan Every Disk in Parallel
Two small scripts I use to keep a Windows machine patched and scanned. One updates every installed application with winget and prints a verified per-package summary. The other runs a Microsoft Defender full scan acros...
Relaxing an Over-Zealous AI Guard: A Silent Abort, a Three-Character Bypass, and an Empty Rule List
My Cline PreToolUse hook was ending whole conversations with no error message, because a tool_call hook that returns cancel aborts the entire agent run and discards the reason on the way, rather than denying the singl...
Lessons That Arrive On Time: A Scored Corpus, and What Six Phases Actually Cost
Continuing from "When the Output Looks Right": building discernment into a coding agent. A dated lesson in a rules file is useless at the moment it matters, so I moved them into a scored corpus that injects the releva...
From One Agent to a Team: Async Loops, Multi-Agent Personas, and an Autonomy Envelope for Cline
The next step after steering a single coding agent is letting it run unattended and splitting it into specialised personas. Here is the honest, safety-first version: a GREEN/AMBER/RED action envelope that defines what...
Teaching Cline to Learn From My Corrections: Turning Conversation Steering Into Durable Rules
Self-learning AI agents promise to get smarter from every interaction. Here is the honest version for a coding agent like Cline: it does not retrain its own weights from your chats, it consolidates your corrections in...
How I Steer Cline With a Tiered Rules System, a Persona, and a Pre-Commit Hook That Stops Me Leaking My Homelab
A 700-line steering layer for Cline split into always-on rules and on-demand reference docs, a banned-words list that kills the AI smell, opsec rules that keep internal hostnames out of public commits, a single canoni...
I Built a GNOME Shell Extension for Tailscale — Panel Toggle, Peer Browser, and the Signal-Handler Gotcha That Broke It
Why GNOME's built-in VPN panel can't drive Tailscale, how I shipped a small GJS extension to fix that across GNOME Shell 48–50, and the signal-handler re-fire bug that made my toggle behave like a one-shot fuse.
Automating Nextcloud AIO Updates with Bash and Cron
A small bash script that pulls the latest Nextcloud All-in-One image, recreates the child containers, and triggers the update by calling AIO's internal cron PHP directly — turning AIO's manual UI update flow into some...
How I Fixed SSL Certificate Warnings Across My Entire Proxmox Homelab — With Full Auto-Renewal and Email Alerts
A complete guide to issuing a Let's Encrypt wildcard cert via DNS-01, deploying it to all Proxmox VE and PBS nodes, handling the PBS fingerprint gotcha that will break your backups, and wiring up email alerts on every...
Zero-Shot Voice Cloning on AMD — ROCm 7.1 on Windows, F5-TTS, and the ONNX Fallback
How I got zero-shot voice cloning running on a Windows gaming machine with an AMD RX 7900 XTX — using ROCm 7.1 natively on Windows, with an ONNX+DirectML fallback for when you don't want the full SDK.
I Audited Every VM in My Homelab — Here's What I Found (and Fixed)
A comprehensive audit of 27 VMs across 3 Proxmox hosts revealed critical storage issues, broken monitoring, outdated operating systems, and years of accumulated tech debt. Here's how I fixed it all in one session.
Why I Switched From Gmail to Brevo for All My Homelab Email Alerts
How and why I migrated all my homelab email alerts — Proxmox backups, Zabbix monitoring, and even an ESP32 door sensor — from Gmail App Passwords to Brevo's SMTP relay.
How to Update Cloudflare DNS for a Dynamic IP Address via Cloudflare API
This guide will demonstrate how to configure a script that updates your DNS record in a series of straightforward steps. We’ll begin by installing the necessary dependencies, then proceed to gat
Proxmox Templates with Cloud Init
Cloud images are operating system templates and every instance starts out as an identical clone of every other instance. It is the user data that gives every cloud instance its personality and cloud-i
Semaphore: Streamlining Your Homelab Automation
Semaphore a Modern UI for Ansible, Terraform and Bash. Easy to install, easy to setup, easy to use.
Passwordless Automated Endpoint Patching using Ansible
The post details using Ansible and SSH keys for automated server patching, emphasizing enhanced security, improved efficiency, and scalability. It outlines the high-level steps of the deployment, the
Automatically Secure Endpoints Using Fail2Ban and Ansible
Fail2ban is a Linux security tool that prevents unauthorized access by detecting and blocking brute-force attacks. It scans system log files for suspicious activity and automatically creates firewall
Jeff Gerling's Ansible for DevOps: My Plan
Ansible simplifies server management with powerful automation, like a trusty sidekick in DevOps.