Proxmox

homelab-journey

Secret Management Part 4: Worst Case Recovery — Rebuilding from First Principles

Losing OpenBao's Raft data is not inherently a data loss event — if every non-regeneratable secret is correctly externalised and maintained. The rebuild, mapped precisely.

homelab-journey

Secret Management Part 3: Auto-Unseal with OpenBao on Proxmox

Auto-unseal via Transit on Proxmox LXC: what worked, what didn't, and the honest trade-off when the Shamir fallback assumption turned out to be wrong.