Roadmap¶

This roadmap tracks completed work and planned changes. Checked items link to what shipped. Unchecked items are roughly ordered by priority within each horizon.

Now (operational gaps)¶

• Automated backups (currently none, details):
  • services.vaultwarden.backupDir for the Vaultwarden SQLite DB
  • Forgejo dump or mirror to an external remote
  • Off-host backup job (restic/borgbackup) for midgard /var/lib
• Alert delivery: Beszel sends email notifications with per-system thresholds, replacing the old unwired Prometheus rules (details)

Next¶

• Run jamye-plz on alfheim to validate the cloud-host pattern
• Serve this documentation publicly: docs.ridewithmin.com is routed through Cloudflare Tunnel and served by Caddy on yggdrasil straight from the Nix store
• Replace the Grafana/Prometheus/Loki/Alloy stack with Beszel + VictoriaLogs: lighter on yggdrasil's 4 GB, simpler UIs, and working alert delivery (details)
• Per-page edit buttons on this site (content.action.edit + Forgejo edit_uri)
• Review whether any tailnet-only surface needs Cloudflare Access as a second factor

Someday / ideas¶

• Declarative Hermes Agent setup on midgard (promote from mutable ~/.hermes once stable)
• Declarative Beszel alert thresholds, if upstream ever supports config outside its database (today they are UI-managed state)