Operator user guide

Operator user guide

This guide walks through everyday homelab management with exocomp: managing Git sources, running Ansible playbooks, provisioning OpenTofu workspaces, chaining handoffs, binding sealed secrets, configuring reachability checks, and reacting to alerts.

All execution passes through the single audited job queue and runs under the nono sandbox tier.

Getting started

Guide Covers
Quickstart 15-minute quickstart: image deploy via Quadlet, first-run wizard, and printing the printed recovery card
Sources and inventory Registering Git repositories, local directories, SSH fleet identities, and auto-onboarding hosts

Core workflows

Guide Covers
Ansible automation Running playbooks, ad-hoc commands, host limits, extra vars, tags, and --check drift detection
OpenTofu infrastructure Managing workspaces, SQLite HTTP state backend, plan reviews, CEL plan policies, and state version history
Provision-to-converge handoffs Chaining OpenTofu apply to Ansible playbook execution in a single ledger workflow
Secrets and fleet keys Age envelope encryption, SOPS integration, host identity keys, and sealed run-secret bindings
Health checks and probes Declaring target probes, CIDR network groups, reachability matrix, and check-triggered runs
Reactive automation Webhooks, CEL event rule routing, push alerts, silence windows, and phone approval gates

Surfaces and companions

Guide Covers
Mobile companion QR code pairing, ntfy push notifications, and one-thumb approval decisions on phone
AI agent integration Connecting coding agents (Claude, Cursor, Antigravity) to the /mcp endpoint with scoped bearer tokens