home-ops

Audit CloudNativePG (CNPG) clusters for backup health, S3 storage bloat, and disk-space risk — schedule misconfiguration, WAL/archive_timeout churn, orphaned backups, compression, and PVC resize status. Use when investigating CNPG backup storage growth, a "storage near empty" alert on the backup target (e.g. QNAP), a crash-looping/"Not enough disk space" CNPG cluster, or doing a periodic CNPG health check.

Push an updated Coder workspace Terraform template and redeploy running workspaces onto it. Use when workspace-template/main.tf changes (resources, volumes, etc.) need to reach live Coder workspaces.

Diagnose and fix ONLYOFFICE Document Server showing "An error has occurred while opening the file" with no failed requests visible in the browser. Root cause is usually an orphaned task_result row in the docserver's Postgres DB, left over from a conversion interrupted by a pod crash/OOM/restart.

Task commands, bootstrap sequence, CI/CD, branch/PR workflow, linting, and devcontainer setup for the home-ops repository.

Use when auditing disk health, filesystem usage, or I/O on cluster nodes — especially when filesystem queries return incomplete results or a node's second drive is missing from metrics.

Use when removing, replacing, or decommissioning a Talos node — covers the correct talosctl reset workflow

Reference for cluster infrastructure components, Talos configuration, network topology, and auto-managed files. Use when querying component roles, versions, IPs, or understanding what files must not be manually edited.

How to edit Talos node configs in this repo: which file for which change, strategic merge patch rules, and how to add new config documents.

EthernetConfig is a separate top-level Talos machine config document, not a nested field under machine.network.interfaces. Use when configuring NIC ring buffers, channels, or features on Talos nodes.

Init container pattern that blocks app startup until a database service accepts connections. Use when an app crash-loops because it runs DB migrations at startup before the database pod is ready.

Use when performing a periodic operational audit of the home Kubernetes cluster — health check, app-by-app resource review, PVC usage, deployment issues, or generating an audit report for history.

Step-by-step workflow for adding a new application to the home-ops cluster. Use when creating a new ArgoCD app, writing app-config.yaml, Chart.yaml, values.yaml, HTTPRoutes, ExternalSecrets, or any cluster/apps/ templates.

Audit Kubernetes container resource requests and limits via kubectl JSON output. Use when checking resource limits, capacity planning, or finding containers without limits set. Avoids broken Prometheus label-join approach.

Pattern for Prometheus point-in-time historical queries using the instant query endpoint with ?time=<epoch>. Use when comparing metrics now vs N days ago, or when avg_over_time / subquery approaches fail.

Protocol for managing kubectl port-forward to Prometheus across multiple Bash tool calls in Claude Code. Use pkill -f instead of kill %1 — job control does not work across separate shell invocations.

Security audit checklist for public GitOps/home-lab repositories. Use when asked to audit a public repo for exposed secrets, assess what is safe to make public, or review a home-lab GitOps setup for information leaks.