Update .gitignore

Reorder homepage sections (journey above projects), refine component
styles, update copy and data across projects, timeline, and homelab.

src/app/archive/page.tsx

@@ -1,24 +1,68 @@
-"use client";
+import type { Metadata } from "next";
+import Widget from "@/components/Widget";
+import { archiveProjects } from "@/data/projects";
 
-import { useEffect } from "react";
-
-export default function ArchiveRedirect() {
-  useEffect(() => {
-    window.location.replace("/projects/");
-  }, []);
+export const metadata: Metadata = {
+  title: "Archive | Tyler Koenig",
+  description: "Earlier projects and experiments — browser extensions, canvas apps, and bootcamp work.",
+};
 
+export default function ArchivePage() {
   return (
     <>
-      <meta httpEquiv="refresh" content="0; url=/projects/" />
-      <p className="font-mono text-sm text-[var(--color-text)]">
-        This page moved.{" "}
-        <a
-          href="/projects/"
-          className="text-[var(--color-accent-green)] underline"
-        >
-          /projects/
-        </a>
+      <div className="mb-4lh">
+        <p className="font-mono text-sm font-bold text-[var(--color-text)] mb-1lh">
+          <span className="text-[var(--color-accent-green)] select-none mr-1ch" aria-hidden="true">❯</span>
+          tyler/projects/archive
         </p>
+        <p className="font-mono text-sm text-[var(--color-text)] leading-relaxed max-w-xl opacity-80">
+          Experiments, browser extensions, and bootcamp projects. Kept here for context — not
+          representative of current work.
+        </p>
+      </div>
+
+      <Widget title="tyler/projects/archive" badge={archiveProjects.length} as="section">
+        <div className="flex flex-col gap-px bg-[var(--color-border)]">
+          {archiveProjects.map((project) => (
+            <a
+              key={project.slug}
+              href={project.githubUrl}
+              target="_blank"
+              rel="noopener noreferrer"
+              className="bg-[var(--color-surface)] hover:bg-[var(--color-surface-raised)] flex items-start justify-between gap-2ch px-2ch py-1lh group"
+            >
+              <div className="flex flex-col gap-1ch flex-1 min-w-0">
+                <div className="flex items-center gap-1ch">
+                  {project.year && (
+                    <span className="font-mono text-sm text-[var(--color-text-dim)] shrink-0">
+                      {project.year}
+                    </span>
+                  )}
+                  <span className="font-mono text-sm text-[var(--color-text)] group-hover:text-[var(--color-accent-green)] truncate">
+                    {project.title}
+                  </span>
+                </div>
+                <p className="font-mono text-sm text-[var(--color-text)] leading-relaxed opacity-75">
+                  {project.description}
+                </p>
+                <div className="flex flex-wrap gap-x-1ch gap-y-0.5">
+                  {project.tags.map((tag) => (
+                    <span key={tag} className="font-mono text-sm text-[var(--color-text-dim)]">
+                      {tag}
+                    </span>
+                  ))}
+                </div>
+              </div>
+              <span
+                className="font-mono text-sm text-[var(--color-text-label)] group-hover:text-[var(--color-text)] shrink-0 mt-0.5"
+                aria-hidden="true"
+              >
+                ↗
+              </span>
+            </a>
+          ))}
+        </div>
+      </Widget>
     </>
   );
 }

src/app/homelab/page.tsx

@@ -22,90 +22,98 @@ const glanceStats = [
 
 const vlans = [
   {
-    id: "MGMT",
+    id: "1000",
     name: "MGMT",
+    subnet: "10.0.0.0/24",
     purpose: "Network equipment only",
   },
   {
-    id: "LAN",
+    id: "1010",
     name: "LAN",
+    subnet: "10.1.0.0/24",
     purpose: "Trusted personal devices",
   },
   {
-    id: "Lab",
+    id: "1020",
     name: "Homelab",
+    subnet: "10.2.0.0/24",
     purpose: "All self-hosted services",
   },
   {
-    id: "Guest",
+    id: "1030",
     name: "Guests",
+    subnet: "10.3.0.0/24",
     purpose: "Internet only, RFC1918 blocked",
   },
   {
-    id: "IoT",
+    id: "1040",
     name: "IoT",
+    subnet: "10.4.0.0/24",
     purpose: "Smart home, isolated",
   },
   {
-    id: "WFH",
+    id: "1050",
     name: "WFH",
+    subnet: "10.5.0.0/24",
     purpose: "Work devices, no personal access",
   },
   {
-    id: "DMZ",
+    id: "1099",
     name: "DMZ",
+    subnet: "10.99.0.0/24",
     purpose: "Public-facing, hard-blocked internally",
   },
   {
     id: "VPN",
     name: "VPN",
-    purpose: "WireGuard clients, LAN-equivalent access",
+    subnet: "10.200.0.0/24",
+    purpose: "WireGuard clients = LAN access",
   },
 ];
 
 const adrs = [
   {
-    title: "ISP gateway: passthrough mode",
+    title: "AT&T Gateway: IP Passthrough over EAP bypass",
     decision:
-      "ISP gateway stays in-line in passthrough mode, pfSense gets the public IP directly. Gateway WiFi disabled.",
-    why: "Carrier locks 802.1X auth to their own gateway hardware, and bypassing it is brittle — breaks on firmware updates and only saves a millisecond or two. True bridge mode isn't supported. Passthrough is the cleanest option that keeps pfSense as the actual perimeter.",
+      "BGW320 stays in-line with IP Passthrough mode. pfSense gets the public IP directly. Gateway WiFi disabled.",
+    why: "AT&T locks 802.1X auth to their gateway hardware. EAP proxy bypass is brittle — breaks on firmware updates and only saves 1–2ms. True bridge mode isn't supported.",
   },
   {
     title: "Caddy over NGINX Proxy Manager",
     decision:
-      "Caddy with DNS-01 challenge via Cloudflare API. All subdomains resolve to Caddy internally via Pi-hole. Caddy terminates TLS and proxies to backends.",
-    why: "Single Caddyfile, automatic certs without ever needing to expose internal services to the internet for an HTTP-01 challenge. NPM has more UI overhead for the same outcome. Traefik is more complex for no benefit at this scale.",
+      "Caddy with DNS-01 challenge via Cloudflare API. All subdomains resolve to Caddy internally via Pi-hole. Caddy terminates SSL and proxies to backends.",
+    why: "Single Caddyfile, auto-cert without exposing port 80/443 to the internet. NPM has more UI overhead for the same outcome. Traefik is more complex for no benefit here.",
   },
   {
     title: "WireGuard over OpenVPN",
     decision:
-      "WireGuard on pfSense as the only remote-access path. Clients get the access tier documented in the access model — same as LAN, plus the admin surfaces that aren't reachable any other way.",
-    why: "Faster, simpler config, better battery life on mobile. Throughput on the firewall hardware comfortably exceeds the WAN link. OpenVPN has no advantage here. Tailscale would add an external relay dependency for a problem WireGuard already solves.",
+      "WireGuard on pfSense, UDP 51820, VPN subnet 10.200.0.0/24. Clients get LAN + MGMT access, blocked from Guest/IoT/WFH.",
+    why: "Faster, simpler config, better battery life on mobile. ~600–900 Mbps on an N100. OpenVPN has no advantage here. Tailscale adds an external relay dependency.",
   },
   {
     title: "Pi-hole in Homelab VLAN, not MGMT",
     decision:
-      "Pi-hole runs in the Homelab VLAN. Firewall allows port 53 inbound from VLANs that need local resolution. MGMT uses pfSense Unbound as its primary resolver instead.",
-    why: "Putting Pi-hole in MGMT would mean opening MGMT to all the VLANs that need DNS — much bigger attack surface for the most sensitive tier. DNS traffic crossing into the Homelab VLAN is the lesser risk, and Homelab is already where service traffic terminates anyway.",
+      "Pi-hole at 10.2.0.11 (VLAN 1020). Firewall allows port 53 inbound from all VLANs. MGMT uses pfSense Unbound as its primary DNS.",
+    why: "Putting Pi-hole in MGMT would require opening MGMT to all VLANs — a larger attack surface. DNS traffic crossing into Homelab VLAN is the lesser risk.",
   },
   {
-    title: "Mini-PC for pfSense",
+    title: "N100 for pfSense",
     decision:
-      "Intel N100 mini-PC as the firewall host. ~6W idle, handles multi-Gbps routing, saturates the WAN link with WireGuard headroom to spare.",
-    why: "Right-sized for 1 Gbps fiber. A Raspberry Pi can't handle 1 Gbps plus VPN. A full rack server wastes power for this role and adds noise to a room I sit in.",
+      "Intel N100 mini PC: 4-core 3.4 GHz, ~6W idle. Handles 2–3 Gbps routing and 600–900 Mbps WireGuard.",
+    why: "Right-sized for 1 Gbps fiber with headroom. Raspberry Pi can't handle 1 Gbps + VPN. A full rack server wastes power for this role.",
   },
   {
     title: "Shared Postgres + Redis in apps LXC",
     decision:
-      "One Postgres instance hosting multiple databases. One Redis instance. A single init script provisions schemas on first run.",
-    why: "Avoids ~15 separate DB containers. Big RAM savings. Productivity apps colocate in one LXC anyway, so a shared backing store there is the natural shape.",
+      "One Postgres instance, multiple databases. One Redis instance. A single init script provisions all schemas on first run.",
+    why: "Avoids 15 separate DB containers. Reduces RAM overhead significantly. All productivity apps share the same LXC (10.2.0.60).",
   },
   {
     title:
-      "Gitea CI/CD: self-hosted runner, internal pipeline, static deploy",
+      "Gitea CI/CD: Self-hosted runner with container build + SSH rsync deploy",
     decision:
-      "Self-hosted Gitea Actions runner builds the portfolio on push, then deploys pre-built static files to the public-facing host. Build runs in an isolated container so the runner host stays clean. Public host serves static files only — no build toolchain on it.",
-    why: "Keeps the whole pipeline internal. No external runners, no GitHub Actions. The build/serve split means the public-facing host has the smallest possible footprint — static file server, nothing more.",
+      "act_runner v0.3.1 on Gitea LXC (10.99.0.22). Push to dev → node:22-alpine container builds Next.js → rsync out/ to Portfolio LXC → SSH docker rebuild.",
+    why: "Keeps the full pipeline internal — no GitHub Actions, no external runners. Build runs in an isolated Alpine container so the Gitea LXC isn't polluted. Portfolio LXC (10.99.0.23) just serves pre-built static files via nginx.",
   },
   {
     title: "Authentik over Authelia",
@@ -155,7 +163,7 @@ export default function HomelabPage() {
       {/* VLAN table */}
       <Widget
         title="homelab/network"
-        meta="8 network segments · default deny"
+        meta="8 isolated vlans · default deny inter-vlan"
         as="section"
       >
         <div className="overflow-x-auto">
@@ -163,11 +171,14 @@ export default function HomelabPage() {
             <thead>
               <tr className="border-b border-[var(--color-border)]">
                 <th className="font-mono text-[var(--color-text-dim)] text-left py-qtr-lh pr-[3ch] uppercase">
-                  Segment
+                  VLAN
                 </th>
                 <th className="font-mono text-[var(--color-text-dim)] text-left py-qtr-lh pr-[3ch] uppercase">
                   Name
                 </th>
+                <th className="font-mono text-[var(--color-text-dim)] text-left py-qtr-lh pr-[3ch] uppercase">
+                  Subnet
+                </th>
                 <th className="font-mono text-[var(--color-text-dim)] text-left py-qtr-lh uppercase">
                   Purpose
                 </th>
@@ -185,6 +196,9 @@ export default function HomelabPage() {
                   <td className="font-mono text-[var(--color-text)] py-half-lh pr-[3ch]">
                     {v.name}
                   </td>
+                  <td className="font-mono text-[var(--color-text-label)] py-half-lh pr-[3ch]">
+                    {v.subnet}
+                  </td>
                   <td className="font-mono text-sm text-[var(--color-text)] py-2.5 opacity-80">
                     {v.purpose}
                   </td>

src/app/layout.tsx

@@ -24,7 +24,7 @@ export default function RootLayout({
   children: React.ReactNode;
 }) {
   return (
-    <html lang="en" suppressHydrationWarning>
+    <html lang="en" className="dark">
       <head>
         <ThemeScript />
       </head>

src/app/page.tsx

@@ -1,6 +1,10 @@
 import type { Metadata } from "next";
 import Hero from "@/components/Hero";
+import Skills from "@/components/Skills";
 import Timeline from "@/components/Timeline";
+import ProjectCard from "@/components/ProjectCard";
+import Widget from "@/components/Widget";
+import { featuredProjects } from "@/data/projects";
 
 export const metadata: Metadata = {
   title: "Tyler Koenig",
@@ -13,6 +17,14 @@ export default function Home() {
     <>
       <Hero />
       <Timeline />
+      <Widget title="tyler/projects" badge={featuredProjects.length}>
+        <div className="grid grid-cols-1 sm:grid-cols-2 gap-1ch">
+          {featuredProjects.map((project) => (
+            <ProjectCard key={project.slug} project={project} />
+          ))}
+        </div>
+      </Widget>
+      <Skills />
     </>
   );
 }

src/app/projects/page.tsx

@@ -1,77 +0,0 @@
-import type { Metadata } from "next";
-import Widget from "@/components/Widget";
-import ProjectCard from "@/components/ProjectCard";
-import { featuredProjects, archiveProjects } from "@/data/projects";
-
-export const metadata: Metadata = {
-  title: "Projects | Tyler Koenig",
-  description:
-    "Featured projects and earlier work — homelab, open-pact, helm, and bootcamp/experiment archive.",
-};
-
-export default function ProjectsPage() {
-  return (
-    <>
-      <div className="mb-4lh">
-        <p className="font-mono text-sm font-bold text-[var(--color-text)] mb-1lh">
-          <span className="text-[var(--color-accent-green)] select-none mr-1ch" aria-hidden="true">❯</span>
-          projects
-        </p>
-        <p className="font-mono text-sm text-[var(--color-text)] leading-relaxed max-w-xl opacity-80">
-          Featured work first. Earlier experiments, browser extensions, and bootcamp projects below — kept for context.
-        </p>
-      </div>
-
-      <Widget title="projects/featured" badge={featuredProjects.length} as="section">
-        <div className="grid grid-cols-1 sm:grid-cols-2 gap-1ch">
-          {featuredProjects.map((project) => (
-            <ProjectCard key={project.slug} project={project} />
-          ))}
-        </div>
-      </Widget>
-
-      <Widget title="projects/archive" badge={archiveProjects.length} as="section">
-        <div className="flex flex-col gap-px bg-[var(--color-border)]">
-          {archiveProjects.map((project) => (
-            <a
-              key={project.slug}
-              href={project.githubUrl}
-              target="_blank"
-              rel="noopener noreferrer"
-              className="bg-[var(--color-surface)] hover:bg-[var(--color-surface-raised)] flex items-start justify-between gap-2ch px-2ch py-1lh group"
-            >
-              <div className="flex flex-col gap-1ch flex-1 min-w-0">
-                <div className="flex items-center gap-1ch">
-                  {project.year && (
-                    <span className="font-mono text-sm text-[var(--color-text-dim)] shrink-0">
-                      {project.year}
-                    </span>
-                  )}
-                  <span className="font-mono text-sm text-[var(--color-text)] group-hover:text-[var(--color-accent-green)] truncate">
-                    {project.title}
-                  </span>
-                </div>
-                <p className="font-mono text-sm text-[var(--color-text)] leading-relaxed opacity-75">
-                  {project.description}
-                </p>
-                <div className="flex flex-wrap gap-x-1ch gap-y-0.5">
-                  {project.tags.map((tag) => (
-                    <span key={tag} className="font-mono text-sm text-[var(--color-text-dim)]">
-                      {tag}
-                    </span>
-                  ))}
-                </div>
-              </div>
-              <span
-                className="font-mono text-sm text-[var(--color-text-label)] group-hover:text-[var(--color-text)] shrink-0 mt-0.5"
-                aria-hidden="true"
-              >
-                ↗
-              </span>
-            </a>
-          ))}
-        </div>
-      </Widget>
-    </>
-  );
-}

src/components/Nav.tsx

@@ -7,7 +7,7 @@ import { useTheme } from "@/context/ThemeContext";
 const links = [
   { href: "/", label: "tyler" },
   { href: "/homelab/", label: "homelab" },
-  { href: "/projects/", label: "projects" },
+  { href: "/archive/", label: "archive" },
 ];
 
 export default function Nav() {

src/data/projects.ts

@@ -17,12 +17,22 @@ export const projects: Project[] = [
     slug: "homelab",
     title: "homelab",
     description:
-      "7-VLAN segmented network, Wireguard VPN, Proxmox VMs/LXCs, SSO via Authentik, full monitoring stack (VictoriaMetrics + Grafana + Beszel + ntfy).",
+      "8-VLAN segmented network, Proxmox VMs/LXCs, SSO via Authentik, full monitoring stack (VictoriaMetrics + Grafana + Beszel + ntfy).",
     tags: ["Markdown", "Mermaid", "Proxmox", "Monitor", "Backup"],
     githubUrl: "https://gitea.lerkolabs.com/lerko/homelab",
     tier: "featured",
     year: 2026,
   },
+  {
+    slug: "open-pact",
+    title: "open-pact",
+    description:
+      "Open protocol for AI agent identity, delegation, and portable memory. Ed25519 keypair identity, signed delegation warrants, portable signed memory facts. No central registry.",
+    tags: ["TypeScript", "Ed25519", "DID", "npm", "CC0"],
+    githubUrl: "https://github.com/lerko96/open-pact",
+    tier: "featured",
+    year: 2026,
+  },
   {
     slug: "portfolio",
     title: "portfolio",
@@ -33,27 +43,6 @@ export const projects: Project[] = [
     tier: "featured",
     year: 2021,
   },
-  {
-    slug: "nib",
-    title: "nib",
-    description:
-      "Capture-first personal journal built with Go + React + SQLite.  Currently developing in private when I have spare time.",
-    tags: ["Go", "React", "SQLite", "Journal", "Stream-of-Thought"],
-    githubUrl: "https://github.com/lerko96/nib",
-    tier: "featured",
-    year: 2026,
-  },
-  {
-    slug: "open-pact",
-    title: "open-pact",
-    description:
-      "Open protocol for AI agent identity, delegation, and portable memory. Ed25519 keypair identity, signed delegation warrants, portable signed memory facts. No central registry.",
-    tags: ["TypeScript", "Ed25519", "DID", "npm", "CC0"],
-    githubUrl: "https://github.com/lerko96/open-pact",
-    tier: "featured",
-    year: 2026,
-  },
-  // --- Archive ---
   {
     slug: "helm",
     title: "helm",
@@ -61,19 +50,20 @@ export const projects: Project[] = [
       "Full-stack personal productivity dashboard. Go backend with chi router and SQLite, React + TypeScript frontend. Notes, todos, calendar (CalDAV), clipboard, bookmarks, memos. Self-hosted, single-user, daily use.",
     tags: ["Go", "React", "TypeScript", "SQLite", "CalDAV"],
     githubUrl: "https://github.com/lerko96/helm",
-    tier: "archive",
+    tier: "featured",
     year: 2026,
   },
   {
-    slug: "risk-ops",
-    title: "risk-ops",
+    slug: "claude-vault",
+    title: "claude-vault",
     description:
-      "Browser-based strategy dashboard for Risk: Global Domination (SMG Studio). Open one HTML file — no install needed.",
-    tags: ["HTML", "JavaScript"],
-    githubUrl: "#",
-    tier: "archive",
+      "A scaffolding system for maintaining a living project knowledge base alongside a code repo, powered by Claude Code skills.",
+    tags: ["Shell", "Developer-Tools", "Claude", "Knowledge-Management"],
+    githubUrl: "https://github.com/lerko96/claude-vault",
+    tier: "featured",
     year: 2026,
   },
+  // --- Archive ---
   {
     slug: "golf-book-mobile",
     title: "golf-book-mobile",
@@ -86,6 +76,16 @@ export const projects: Project[] = [
     statusBadge: "Pending App Store Approval",
     year: 2025,
   },
+  {
+    slug: "risk-ops",
+    title: "risk-ops",
+    description:
+      "Browser-based strategy dashboard for Risk: Global Domination (SMG Studio). Open one HTML file — no install needed.",
+    tags: ["HTML", "JavaScript"],
+    githubUrl: "#",
+    tier: "archive",
+    year: 2026,
+  },
   {
     slug: "twitter-thread-ext",
     title: "twitter-thread-ext",

src/data/timeline.ts

@@ -47,19 +47,12 @@ export const timeline: TimelineEntry[] = [
     tags: ["go", "react", "typescript"],
   },
   {
-    date: "2025",
-    title: "Proxmox Backup Server",
-    type: "homelab",
-    description: "Deployed PBS on used desktop hardware for disaster recovery.",
-    tags: ["backup", "recovery", "retention"],
-  },
-  {
-    date: "2025",
+    date: "2024-08",
     title: "Proxmox Cluster",
     type: "homelab",
     description:
-      "Proxmox installed on dedicated server and the fun begins. VMs/LXCs, SSO via Authentik, full monitoring stack (VictoriaMetrics + Grafana + Beszel + ntfy).",
-    tags: ["proxmox", "containers", "VMs", "linux"],
+      "Proxmox VMs/LXCs, SSO via Authentik, full monitoring stack (VictoriaMetrics + Grafana + Beszel + ntfy).",
+    tags: ["proxmox", "networking", "monitoring", "sso"],
   },
   {
     date: "2024-06",
@@ -73,8 +66,7 @@ export const timeline: TimelineEntry[] = [
     date: "2024-03",
     title: "pfSense",
     type: "homelab",
-    description:
-      "Netgate 1100 picked up on ebay to experience hands on networking configuration and troubleshooting.",
+    description: "Netgate pfSense n100 picked up on ebay.",
     tags: ["network", "firewall", "vlan", "dhcp"],
   },
   {