https://bubacoder.github.io/infra/setup/index.htmlFor AWS use Bootstrap on AWS. Both paths provision an Ubuntu guest using a separate administrative host. The templates select a Docker host with Traefik and Homepage; role and service selection also supports hosts without Docker. Proxmox CLI scripts provision the VM; Ansible configures and verifies the guest, never the hypervisor. Prerequisites Prepare the shared Linux controller and Ansible collections, then verify these Proxmox-specific requirements:Hugoen-ushttps://bubacoder.github.io/infra/setup/bootstrap-configuration/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://bubacoder.github.io/infra/setup/bootstrap-configuration/index.htmlBootstrap delegates infrastructure to Terraform, guest configuration to Ansible, and container lifecycle to Compose. A small Python configuration compiler prepares their inputs; Task sequences the native commands. Python does not own infrastructure state, DNS ownership, SSH trust or storage initialization. This guide is the shared reference for operators and agents. For the complete installation and teardown procedures, choose the AWS guide or Proxmox guide. Provider settings and DNS ownership are covered in Bootstrap DNS.https://bubacoder.github.io/infra/setup/manual-setup/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://bubacoder.github.io/infra/setup/manual-setup/index.htmlThis is the advanced, step-by-step installation path. For an automated first-time deployment, choose either the AWS or Proxmox workflow; neither target is selected by default. Before You Start Online Prerequisites Phase 1: Prepare the Admin Environment Phase 2: Provision the Docker Host Phase 3: Configure the Docker Host with Ansible Phase 4: Configure and Deploy Services Phase 5: Configure Networking This guide deploys services to a Debian- or Ubuntu-based Docker host, normally a VM on Proxmox VE. It identifies where each command runs so the same workflow supports a combined Docker and admin host or a separate admin host.https://bubacoder.github.io/infra/setup/authentik/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://bubacoder.github.io/infra/setup/authentik/index.htmlThis guide deploys Authentik as the identity provider for a new homelab. What This Provides Local administrator accounts for break-glass recovery. Google login for approved people. OIDC/OAuth2 for applications with native SSO support. Traefik ForwardAuth for browser applications without native OIDC. TOTP, passkeys, and recovery tokens. Authentik does not replace protocol-specific access methods. Retain SSH keys, API keys, app passwords, database users, SMB credentials, MQTT credentials, and WireGuard keys where those protocols require them.