ecc-homelab-network-readiness

Plans and reviews homelab VLAN, DNS filtering, and VPN changes with staged validation and rollback.

Updated Apr 18, 2025
One-click install
npx skills add https://github.com/adriancodes/dotfiles --skill ecc-homelab-network-readiness-adriancodes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ecc-homelab-network-readiness
Source: https://github.com/adriancodes/dotfiles/tree/main/dot_agents/skills/ecc-homelab-network-readiness
Command: npx skills add https://github.com/adriancodes/dotfiles --skill ecc-homelab-network-readiness-adriancodes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Changing a home or small-lab network that mixes VLANs, Pi-hole DNS filtering, firewall rules, and VPN access can lock the operator out of the gateway, switch, or DNS resolver. This Skill turns an informal network idea into a staged, reversible migration plan with validation evidence and rollback steps. ## Core Features & Use Cases - Readiness Inventory: Collects required facts about the internet edge, gateway, switching, Wi-Fi, addressing, DNS/DHCP, management access, and recovery paths before any change. - Trust-Zone and VLAN Planning: Defines trusted, server, IoT, guest, management, and VPN zones with default-deny firewall policies and named exceptions. - DNS and VPN Readiness: Introduces Pi-hole or another local resolver without creating a single point of failure, and scopes WireGuard-style remote access with narrow routes and revocable keys. - Use Case: Before splitting a flat home network into IoT and trusted VLANs, use this Skill to produce a staged change sequence, per-step validation checks, and a documented rollback path. ## Quick Start Ask the assistant to review your planned homelab network segmentation and produce a staged migration plan with validation and rollback steps.

Frequently Asked Questions about ecc-homelab-network-readiness

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I plan VLAN segmentation for a home network?▼

Start by defining trust zones such as trusted, server, IoT, guest, and management, then confirm the gateway supports inter-VLAN routing, the switch handles tagged ports, and APs map SSIDs to VLANs. Move one test client first and validate DHCP, DNS, and routing before migrating device groups.

How to set up Pi-hole without breaking my network?▼

Give the resolver a reserved address, verify it resolves public and local home.arpa names, and keep a fallback resolver available. Test one client or VLAN before changing every DHCP scope, and check that blocking does not break captive portals, work VPNs, or firmware updates.

Should I use WireGuard, Tailscale, or port forwarding for remote access?▼

Choose based on scope: split tunnel for narrow admin access, full tunnel for untrusted networks, or an overlay VPN like Tailscale for identity-based access. Avoid port forwarding unless the endpoint is patched, the port reaches only the VPN service, and peer keys can be revoked.

Does this Skill provide router or firewall configuration commands?▼

No, it is a planning and review reference that stays read-only until the target platform, current topology, rollback path, console access, and maintenance window are confirmed. Vendor-specific commands are only appropriate after those prerequisites are known.

How do I avoid locking myself out when changing network settings?▼

Require out-of-band or same-room console access before changing management VLANs, trunk ports, firewall defaults, or DHCP/DNS settings. Keep a working internet path, change one element at a time, and document rollback steps in the vocabulary of your platform's UI or CLI.