Automating Homelab Administration with OpenCode and LLM Wiki Patterns

Opencode for network systems administration. OMG.

Mike implemented OpenCode as a systems administration tool to manage a Proxmox and OpenWrt homelab environment. The system utilizes a ‘sysops’ user with SSH keys to perform live security audits and generate actionable bash remediation commands.

Why This Matters

Documentation in complex network environments often suffers from documentation drift, where the recorded state fails to match the actual configuration after months of manual changes. While ideal models suggest perfect manual upkeep, the technical reality is that scattered text files and memory are unreliable during 2am outages. Using an AI-driven agent to maintain an LLM Wiki pattern ensures that derived documentation is updated iteratively, transforming documentation from a static chore into a dynamic, accurate reflection of the live infrastructure.

Key Insights

• LLM Wiki Pattern: Mike uses an immutable ‘raw/’ directory for source data and a ‘wiki/’ directory maintained by OpenCode for summaries and indexes.
• Automated Security Audits: OpenCode identifies risks such as exposed MongoDB instances on public VPS or LuCI interfaces on WAN ports using live system probes.
• Live Device Management: Using Chrome DevTools MCP, OpenCode extracts real-time traffic statistics from a NETGEAR GS308Ev4 switch, recording metrics like 333.9 GB received on Port 1.
• Actionable Remediation: Instead of generic advice, the tool provides specific commands like ‘uci delete uhttpd.main.listen_http’ to fix identified vulnerabilities.

Working Examples

LLM Wiki pattern directory structure for knowledge management.

raw/ -- source documents (immutable)
wiki/ -- markdown pages maintained by OpenCode
wiki/index.md -- table of contents
wiki/log.md -- append-only record of changes

Actionable fix commands generated by OpenCode to restrict LuCI admin interface to the local network.

uci delete uhttpd.main.listen_http
uci delete uhttpd.main.listen_https
uci add_list uhttpd.main.listen_http='192.168.1.1:8080'
uci commit uhttpd
/etc/init.d/uhttpd restart

Practical Applications

• Use Case: Proxmox and Docker environment auditing where OpenCode checks for privileged containers and pending security patches. Pitfall: Granting full root access instead of restricted sudo, which increases the blast radius if the AI agent is compromised.
• Use Case: Network topology documentation where raw hardware specs are ingested to update 10-15 linked wiki pages automatically. Pitfall: Treating the AI as a magic fix-everything tool without human verification, which can lead to misconfigured firewall rules.

References:

• https://dev.to/mikecase/opencode-for-network-systems-administration-omg-18g6