<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Bryan Dicker: homelab write-ups</title><description>Project write-ups on infrastructure as code, Zero Trust, security monitoring and AI tooling.</description><link>https://bryandicker.com/</link><item><title>Teaching my SIEM to triage itself: AI-assisted alert handling with a council of models</title><link>https://bryandicker.com/blog/ai-alert-triage</link><guid isPermaLink="true">https://bryandicker.com/blog/ai-alert-triage</guid><description>How I am building an alert-handling layer on top of Wazuh: a local LLM writes first-pass summaries, I triage with a written playbook, and a council of models gates any automated patching, failing safe to high risk.</description><pubDate>Fri, 16 Oct 2026 00:00:00 GMT</pubDate><category>wazuh</category><category>ai</category><category>automation</category><category>security</category></item><item><title>Homelab as code: nothing gets applied by hand</title><link>https://bryandicker.com/blog/homelab-as-code</link><guid isPermaLink="true">https://bryandicker.com/blog/homelab-as-code</guid><description>How my four-node Proxmox cluster is described in Terraform and Ansible and driven entirely from GitLab CI, with reviewed plans, a manual approval gate and secrets loaded at run time.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>terraform</category><category>ansible</category><category>proxmox</category><category>gitlab-ci</category></item><item><title>A Zero Trust front door with Cloudflare Tunnel and Access</title><link>https://bryandicker.com/blog/zero-trust-front-door</link><guid isPermaLink="true">https://bryandicker.com/blog/zero-trust-front-door</guid><description>Moving my domain to Cloudflare and publishing homelab services through replicated Tunnel connectors, with Access on every route and JWT validation at the connector.</description><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate><category>cloudflare</category><category>zero-trust</category><category>tailscale</category></item><item><title>Building MCP servers so AI agents can run my homelab, safely</title><link>https://bryandicker.com/blog/mcp-servers-for-the-homelab</link><guid isPermaLink="true">https://bryandicker.com/blog/mcp-servers-for-the-homelab</guid><description>Why I wrote my own Model Context Protocol servers for Proxmox, Wazuh, Tailscale and Jira, and the scoped, read-mostly design that keeps an AI agent useful without handing it the keys.</description><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate><category>mcp</category><category>ai</category><category>automation</category><category>security</category></item><item><title>Security monitoring: Wazuh SIEM and Suricata IDS on a home network</title><link>https://bryandicker.com/blog/home-security-monitoring</link><guid isPermaLink="true">https://bryandicker.com/blog/home-security-monitoring</guid><description>A home security monitoring stack built around two complementary lenses: Wazuh for hosts and as the central log and alert pipeline, Suricata for network traffic, and what I learned about tuning them.</description><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate><category>wazuh</category><category>suricata</category><category>security</category></item></channel></rss>