Comment on My Homelab Got Hacked - A Postmortem – Phunky Cafe
tofu@lemmy.nocturnal.garden 4 days ago
Good write up! Since you’re using Komodo already, are your compose stacks in git? Because if they are, check the renovate bot. It will read your files with their pinned image tags, check upstream for newer tags, and creates MRs (can also be set to auto merge) to update. Can be configured per stack.
ExperimentalGuy@programming.dev 4 days ago
What’s komodo? I’m thinking of starting a home server so learning how to harden/automate updates (which is what it sounds like you’re saying) is what I want to learn.
tofu@lemmy.nocturnal.garden 3 days ago
It’s a tool to manage docker stacks, e.g. by reading them from git repos. You can configure your git forge in a way to ping Komodo when something in a repo changed, Komodo then deploys the new version. You’d need your own git forge, e.g. forgejo. This is a good guide:
nickcunningh.am/…/how-to-automate-version-updates…
You can start without Renovate to get going, but you’ll want it sooner or later to automate checks for updates.