{"id":28941713,"url":"https://github.com/neverpanic/cattle-not-pets","last_synced_at":"2026-02-03T19:01:50.877Z","repository":{"id":292186531,"uuid":"980084686","full_name":"neverpanic/cattle-not-pets","owner":"neverpanic","description":"Example infrastructure to provision Traefik \u0026 Jellyfin in a self-updating manner using Fedora CoreOS","archived":false,"fork":false,"pushed_at":"2025-11-06T13:04:28.000Z","size":14,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-01-20T07:54:55.524Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Makefile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/neverpanic.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-05-08T14:36:22.000Z","updated_at":"2025-11-06T13:04:32.000Z","dependencies_parsed_at":"2025-05-08T15:52:33.889Z","dependency_job_id":null,"html_url":"https://github.com/neverpanic/cattle-not-pets","commit_stats":null,"previous_names":["neverpanic/cattle-not-pets"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/neverpanic/cattle-not-pets","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/neverpanic%2Fcattle-not-pets","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/neverpanic%2Fcattle-not-pets/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/neverpanic%2Fcattle-not-pets/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/neverpanic%2Fcattle-not-pets/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/neverpanic","download_url":"https://codeload.github.com/neverpanic/cattle-not-pets/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/neverpanic%2Fcattle-not-pets/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29054041,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-03T15:43:47.601Z","status":"ssl_error","status_checked_at":"2026-02-03T15:43:46.709Z","response_time":96,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-06-23T02:30:39.539Z","updated_at":"2026-02-03T19:01:50.863Z","avatar_url":"https://github.com/neverpanic.png","language":"Makefile","readme":"# Cattle not Pets\n\nThis repository contains a Makefile and an example `butane.yml` that shows how\nI provision my private infrastructure with Fedora CoreOS. The generated ISO\nfile will automatically install to `/dev/vda` (typically the first disk in\na VM) and will keep itself current with Fedora CoreOS' `zincati` auto-update\nservice.\n\nThis specific example deploys a [Traefik][traefik] reverse proxy in front of\na [Jellyfin][jellyfin] media server. I don't actually use this in production,\nbut it does serve as a good example.\n\nNote that a few features that one might typically want in a production deployment are missing. In no particular order:\n\n - TLS support\n - TLS certificates using ACME, potentially using the DNS.01 challenge\n - proper configuration of the Traefik proxy in front of Jellyfin ([upstream docs][jellyfin-traefik])\n\n## Resources\n\nFurther reading and references that will help you understand how these pieces fit together:\n\n - [Fedora CoreOS Documentation][coreos-docs]\n - [Butane configuration spec][butane-spec]\n - [Podman Quadlet Documentation][podman-quadlets]\n\n## Problems\n\nThis method to set up VMs has a few problems you should be aware of.\n\n### Secrets management\nThere is no secrets management. The generated ISO images contain the secrets in\nplain text and must therefore be kept private. The [upstream\nrecommendation][secrets-mgmt] is to obtain the secrets after the initial boot\nfrom a secret management service, e.g., Hashicorp Vault, or deploy them after\ninitial setup using Ansible.\n\n### Installing additional packages\nInstalling additional packages on Fedora CoreOS is cumbersome. It can be done\nusing a specialized systemd unit that ends with a reboot, and that's what this\n`butane.yml` implements (but doesn't use, because this example does not require\nit). [Fedora's docs][installing-fedora], [coreos/butane#81][installing-butane],\nand [coreos/fedora-coreos-tracker#681][installing-coreos] cover the problem and\ndiscuss potential solution (among them the one I am using here).\n\nUsing [bootable containers][bootc] may solve this, because you can just perform\nthe package installation steps in your `Containerfile`.\n\n[traefik]: https://doc.traefik.io/traefik/\n[jellyfin]: https://jellyfin.org/\n[jellyfin-traefik]: https://jellyfin.org/docs/general/post-install/networking/advanced/traefik/\n[coreos-docs]: https://docs.fedoraproject.org/en-US/fedora-coreos/\n[butane-spec]: https://coreos.github.io/butane/specs/\n[podman-quadlets]: https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html\n[secrets-mgmt]: https://coreos.github.io/ignition/operator-notes/#secrets\n[installing-fedora]: https://docs.fedoraproject.org/en-US/fedora-coreos/os-extensions/#_example_layering_vim_and_setting_it_as_the_default_editor\n[installing-butane]: https://github.com/coreos/butane/issues/81\n[installing-coreos]: https://github.com/coreos/fedora-coreos-tracker/issues/681\n[bootc]: https://docs.fedoraproject.org/en-US/bootc/getting-started/\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fneverpanic%2Fcattle-not-pets","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fneverpanic%2Fcattle-not-pets","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fneverpanic%2Fcattle-not-pets/lists"}