A week of infrastructure triage
No new features shipped this week — three services just got more stable, one fix at a time.
Homelab & AI-agent orchestration
GrapeApe Dot Cloud
A personal homelab and AI-agent orchestration practice. The lab runs a Proxmox-based virtualization cluster (mixed VMs and LXCs), self-hosted Forgejo git hosting for every project's source, and a private certificate authority that issues internal HTTPS certificates across lab services — because internal HTTPS shouldn't mean clicking through browser warnings.
An IDS/IPS security dashboard visualizes live network threat data. KDE Plasma 6 widgets surface homelab status at a glance — a bird-feeder camera feed, token-usage stats. And a multi-agent orchestration pipeline delegates real infrastructure work to Claude Code, Codex, and other coding agents, with independent review gates before anything ships.
Project portfolio
Public projects, self-hosted on the lab's own infrastructure.
Wiki
The canonical homelab operations knowledge base — network, virtualization, CA, NAS, and AI-agent bridges. Public docs repo.
Read the write-up →grapeape-ca
Self-hosted certificate authority for internal services: a daily self-renewing root, automated leaf certificate issuance, and a status/download site with per-platform trust instructions.
Read the write-up →ids-ips-dashboard
A security dashboard for real-time intrusion detection alerts — dark-themed map UI, an offline explanation knowledge base, and a live event feed.
Read the write-up →kde-birdfeeder-widget
A Plasma 6 widget surfacing the latest photo from a backyard bird-feeder camera pipeline.
Read the write-up →kde-rtk-gain-widget
A Plasma 6 widget visualizing token-usage savings from a CLI tool that compresses AI coding-agent output.
Read the write-up →Latest from the lab notebook
Short, real, engineering-notebook style entries.
Two small Plasma widgets, for two very different signals
One widget shows the latest bird-feeder photo, the other tracks token-usage savings. Same instinct: surface a number you'd otherwise dig for.
A dashboard for watching the network defend itself
Turning raw intrusion-detection alerts into a live, readable dashboard — with a built-in knowledge base for 'what does this alert mean'.
Standing up a local certificate authority
Internal HTTPS shouldn't mean clicking through browser warnings — so I built a self-renewing root CA for the lab.