All my homelab stuff runs on Proxmox LXC container and fully managed via Ansible non-destructive playbooks.

I just setup Semaphore the other night which adds a web UI to manage Ansible playbooks, it works like this:

1. I host my own Forgejo git repos

2. Semaphore is granted access to the Ansible repo

3. FreshRSS notifies me when a service I am running has new release

4. Check the release note, then run Semaphore to run the ansible-playbook

I could fully automate it all but I have the need to read release notes.

As for the OS, they are Debian 13 Netinst and fully local only, I could run them until the services can no longer run, which the ansible-playbook can spin up another LXC container running Debian 14 or whatever.

The goal is to automate everything as much as possible.