SkillFoxx

HomelabHero CLI

HomelabHero turns a fresh LXC into a homelab command center with Claude Code and a credential broker in one command.

  • 105 ★ on the repository
  • Last commit
CLI

Broad access

Why this level

  • The agent runs commands on real servers and network equipment.
  • The installer runs as root through curl and bash.
All reasons and checks

serversathome/homelabheroAuthor:serversathome

Install

Works in

Manual install

apt update && apt install -y curl && curl -fsSL https://raw.githubusercontent.com/serversathome/homelabhero/main/install.sh | bash

The README command for a fresh Ubuntu 26.04 LXC. The installer asks questions and registers servers.

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • The agent runs commands on real servers and network equipment.
  • The installer runs as root through curl and bash.

This is third-party code. Review the repository files before installing.

What it does

HomelabHero installs Claude Code, the claudecodeui web front end and a set of diagnostic skills on a fresh Ubuntu 26.04 container. The agent reaches TrueNAS, Proxmox, Linux and MikroTik hosts over SSH only through `hh run <alias> "<command>"`. Passwords and keys live in a vault the agent user cannot read. The broker, called through one narrow sudoers rule, looks up the host, fetches the key, opens the connection and returns only the output. `hh overview`, `hh inventory`, `hh scan` and `hh doctor` show host state, running services and discovered hosts. Four integrations (UniFi, Firewalla, NetBird, Cloudflare) use their own APIs, the first two read-only.

Who it is for. Homelab owners on Proxmox, TrueNAS and MikroTik who want an agent to diagnose problems without handing it passwords.

Good fit when

  • An overview of all server states with one command is needed.
  • An agent must reach several machines over SSH without seeing credentials.
  • Running workloads on hosts need to be understood: virtual machines, containers, apps.
  • UniFi or Firewalla clients, access points and alarms need a look without change rights.

Not a fit when

  • The OS is not Ubuntu or Debian: the installer uses `apt`, `systemd` and `visudo`.
  • Organization-level access control with auditing is needed.
  • The agent must not touch network equipment at all.

Example request

Give me an overview of every registered host through `hh overview` and show where disks are more than 80 percent full.

Limitations

Installation runs a `curl | bash` script as root in a new Ubuntu 26.04 LXC: read `install.sh` first. Two integrations, NetBird (with an admin token) and Cloudflare (with an edit token), can change settings, and destructive operations need `--force`. `docs/security.md` lists what the model does not protect, for example commands run via `hh run` execute with the privileges of the configured account. The repository states no license. Auto-update was broken before version 1.6.1, so run `hh update` by hand.

How to disable. Follow the uninstall section in `docs/layout.md`: stop the services, remove the users and vault the installer created, and the LXC itself if it was dedicated to HomelabHero.

FAQ

How do I install it?

In a fresh Ubuntu 26.04 LXC run `apt update && apt install -y curl && curl -fsSL https://raw.githubusercontent.com/serversathome/homelabhero/main/install.sh | bash` and answer the installer prompts.

Does Claude see the passwords?

Not by the authors' design: the agent runs as `hhagent`, while only a separate vault owner can read the store. The protection limits are in `docs/security.md`.

Which port serves the interface?

The installer prints a link on port 3001 when it finishes.

How do I update?

Run `hh update`. For an install older than July 2026 rerunning the installer is better; it keeps users and the server list.

What do the integrations do?

UniFi and Firewalla only read data. NetBird and Cloudflare can change settings through named operations.

Discussion

No questions or reviews yet.

CLI tools
Official

A self-hosted homelab hub with a built-in MCP server: the agent gets 32 tools limited by per-key API scopes

MCP serverBroad access126

A Go CLI that compares a server with its last snapshot, reports only changes that matter and serves them to an agent via MCP

CLIBroad access356

A homelab dashboard with a read-only MCP server: hosts, Docker, GPU, video memory and services

MCP serverExtended access236

Brig runs Claude Code and other coding agents inside an isolated microVM on your machine with access to one project only.

CLIExtended access266

A Docker sandbox for coding agents: a Debian image with Copilot CLI, Codex and Pi, and SSH, RDP and Docker enabled by flags.

CLIExtended access154

A container for Claude Code, Codex, Copilot, OpenCode and Pi: the agent runs without prompts while a gateway limits network.

CLIExtended access80

README in short

The installer builds an LXC with an agent, interface and broker in one command. `hh` commands keep credentials hidden from the model.

README badge

Report a problem