audit

Run the audit skill, which executes 8 sequential phases over SSH covering system resources, container health, watchdog state, storage, tunnel connectivity, updates, error logs, and monitor coverage. It outputs a structured report with green, yellow, and red status per phase.

The audit checks both the main homelab stack and the homelab-private stack using compose project label filters and make health commands. Any container not running is flagged CRITICAL, and restart counts above 3 trigger a WARN with logs and a restart offer.

Yes, reversible remediations like container restarts, dangling image pruning, and watchdog state resets are applied automatically and reported. Irreversible or outward-facing changes such as volume deletion, disk prune, or tunnel changes require explicit confirmation first.

Yes, phase 8 compares running containers and Cloudflare Tunnel hostnames against the docker_container and HTTP entries in both monitors.yaml files. Missing monitors are flagged, and the repair flow edits the YAML, commits, pushes, and runs make uk-sync.

It requires SSH access to the homelab host and never runs local commands. Sudo operations like watchdog state resets retrieve the server password from the 1Password CLI item Private/homelab-server.

It never reboots the server, runs docker compose down, deletes volumes, or takes any action affecting all services simultaneously without explicit discussion. The LUKS-encrypted HDD mount failure is reported with a recovery hint but never auto-fixed.