Ansible on heezy.blog

The LGTM Stack: Monitoring a Homelab Like It's Production

Sun, 22 Mar 2026 00:00:00 +0000

The monitoring stack runs on a dedicated VM at 10.x.x.x (shared-lgtm), deliberately separate from the Kubernetes cluster it watches. If the cluster goes down, the thing watching it needs to still be running. Seven containers in a single Docker Compose stack handle metrics collection, log aggregation, long-term storage, tracing, and dashboards with alerting. The whole thing is deployed and configured by a single Ansible role (roles/lgtm/) with Jinja2 templates for every config file. Push a change, GitHub Actions runs the playbook, Ansible templates the configs and restarts the stack. This post covers what each component does, what gets scraped, and how alerting works.

Terraform, Ansible, and the Automation That Runs Everything

Sat, 20 Dec 2025 00:00:00 +0000

This is the story of taking a homelab that was 100% manually configured and turning it into something where every change is a git commit, every deployment is a GitHub Actions run, and I never SSH into a box to make a “quick fix” again. It took a lot of hours, a lot of broken credential chains, and one memorable incident where I leaked secrets because of echo output. But it works now, and it works well.

Lab Modernization: From Manual Configs to Full Automation

Thu, 18 Sep 2025 00:00:00 +0000

This is the journal of taking a homelab that was held together with SSH sessions and good intentions and turning it into something that manages itself. It took months of evenings and weekends, a lot of broken things, and more hours than I want to admit. But the lab went from “I hope nobody touches that server” to “push to main and walk away.”