I don't run a homelab. I am the homelab.
KXVN is a full digital life — movies, TV, comics, photos, school, email, smart home — and none of it needs babysitting. It runs end-to-end on Hermit: one AI agent holding the keys to every machine, watching everything, fixing things before anyone notices they broke.
Everything talks to one brain.
People don't open a panel for Hermit — they text it. "Watch this show", "what's my mark", "grab that comic", "why is the server slow". Same brain on every chat app, 24/7, and it just happens.
Hermit
Not a chatbot bolted onto a server — the operator. It holds SSH keys to every machine, wrote its own watchdogs, deploys new services on request, and lives on Discord, Telegram, WhatsApp and the web at the same time. Memory that never resets. The whole stack is its backlog — and its work queue is whatever Kishan texts it.
School canvas · two sites shipped
Polls his university's Canvas API for announcements, due dates and lecture files. Before midterms it builds entire review websites — lectures mined, worked examples CAS-verified in SymPy, graphics generated. calc.kxvn.io and linag.kxvn.io were both born from a single "help me study" text.
Email & paper trails oauth
Reads, drafts and sends from real inboxes: pulls confirmations out of threads, writes replies in his voice, converts documents and ships them to his CDN. "Find that receipt" becomes a searched-and-answered link in one message.
The media empire V.A.U.L.T.
"I want every essential Marvel movie before Doomsday" → it pulled the critics' list, queued the downloads, shelved the library, built a watch-order collection page, and pinged when it was all playable. Ask in the car, watch at home.
Comics on demand S.H.E.L.F.
Drop a download link or just say "get Invincible volume 14" in any chat → mirrors resolved, issues fetched, shelved to the reader, scanned, live on his phone. Whole manga runs, same flow.
Family support real example
When his grandfather came out of triple-bypass surgery, it researched the cardiac diet and built a low-sodium playbook — daily menus under the sodium cap, portion guides, red-flag list — that the family actually uses.
Smart home & the fleet HA · tailscale · ssh
Runs lights and plugs through Home Assistant, and SSHes into the laptop, MacBook, gaming PC and VPS like a sysadmin with four hands. Storage mount went stale mid-afternoon? It noticed, remounted, restarted the containers, and left a report.
Ops nobody sees cron · watchdogs
New streaming accounts get their permissions fixed automatically by its own watcher service. Nightly backups, cache purges, cert renewals, disk sweeps — the boring half of sysadmin life, zero humans involved.
Right hand, not a tool every gateway
Real commute transit routes, Spotify wired into his landing page, a Discord bot with 16+ commands that it also wrote, reminders, drafting messages as him, roasting his friends on request. You don't open Hermit — you text it.
Thirty services. One shelf.
The map of the stack, the way I'd describe it to a friend — what each piece does and how it fits. No configs, no endpoints, no repro steps: enough to understand the architecture, nowhere near enough to rebuild it.
The movies-and-TV machine. One message to Hermit becomes: request check → indexer search → downloaders → clean import → shelf → notify. Everything below moves content.
FTV Media primary
The flagship. Movies & TV for the house and for friends — proper native apps on phones, TVs and desktops, watch history and progress synced across every device, custom intro-skipper, splash art, and its own custom-branded clients. Runs 24/7 and survived multiple major-version upgrades with zero downtime drama because every upgrade ships with a full backup and a proven rollback path.
V.A.U.L.T.Sonarr
The TV brain. Tracks every wanted episode, monitors release quality, and hands grabs to the downloaders. Runs a strict quality ladder — per-episode grabs first, season packs only as a fallback — plus a custom anime profile. New episodes show up by themselves hours after air.
V.A.U.L.T.Radarr
Sonarr's movie twin. Same automation shape — quality profiles, minimum-age filtering to skip ancient rips, an anime profile mirroring Sonarr's. Every movie on the wishlist arrives without anyone opening a browser.
V.A.U.L.T.Prowlarr
Single pane of glass over every indexer. One config change propagates to all the arrs at once — add an indexer, everyone gets it. Feeds both Usenet and torrent flows.
V.A.U.L.T.SABnzbd
The Usenet workhorse. Handles the PAR2 verification and RAR unpacking, then hands pristine files to the arrs for import. Tuned speed/care settings so bandwidth goes where it should.
V.A.U.L.T.qBittorrent
The torrent sidecar. Quietly exists for the rare grab that Usenet can't find. Nobody touches it directly — the arrs drive it, it seeds politely, done.
V.A.U.L.T.Jellyseerr
Friend-facing requests. TMDB-backed search, approval flow, and an availability scanner tuned down to one-minute cycles — the "it's still saying processing" lag is gone. Requests auto-flip to Available the moment the file lands.
V.A.U.L.T.Tdarr
The transcode farm. A server node plus a worker, sitting ready for heavy batch jobs — normalizing old formats, shrinking oversized encodes. Works in-place and (thanks to a custom notifier patch) no longer spams phantom "deleted" pings.
V.A.U.L.T.Streamystats
Watch-time analytics with an AI layer — embeddings-powered recommendations built on a local vector store. Who watched what, and what anyone should watch next.
V.A.U.L.T.Quick Stream
One-tap direct-watch pages for every movie and episode, auto-generated from TMDB data. Season-organized listings, admin toggles behind auth, in-app-browser warnings for friends whose apps sabotage autoplay.
funSwipe
Tinder for the library — poster cards you flick through. Right-swipe queues it up to watch. Login-gated, viewer-only. Genuinely the most fun way to pick a movie with someone.
funThe second machine. Native Linux, headless, containers managed by Watchtower. Local storage instead of the object-storage hop — fast reads for the reader and photo apps.
Kavita
Comics & manga server. A clean browser reader plus an OPDS feed so iOS reader apps just work. Series scan in automatically after every acquisition. The literal shelf that S.H.E.L.F. is named after.
S.H.E.L.F.Mylar3
Comic-series automation — watches wanted series, grabs new issues the day they drop, same shape as the *arr pattern but built for comics.
S.H.E.L.F.Acquisition pipeline
The agent-run glue. Drop a download-site link or just a title into any chat — "get Invincible volume 14" — and it resolves mirrors, fetches the issues, shelves them, rescans Kavita, and pings back. Whole manga runs, same flow.
S.H.E.L.F.Immich
Photo & video backup done properly: mobile auto-upload on Wi-Fi, on-device ML face and object search, shareable albums for family. Photos live here, not on some cloud's goodwill.
S.H.E.L.F.Study sites
Exam-cram review pages built from his actual lecture corpus — Canvas API mined for announcements and files, worked examples computed and verified with a CAS (SymPy), every claim checked, graphs generated. Built for his engineering math courses, one text message at a time.
toolsDaily-driver surfaces. If it can be self-hosted, it is.
kxvn.io
The front door. A splash page with an audio gate, a Minecraft-flavored touch, live Discord presence, and a Spotify now-playing widget — all vanilla JS, no framework, because it loads in half a second.
toolsKXVN CDN
Self-hosted file hosting with drag-and-drop upload and instant shareable links. Fully re-skinned — no upstream branding anywhere, custom domain, clean URLs.
toolsKXVN PDF
Fifty-odd PDF tools — merge, split, OCR, redact, sign, compress. Login-gated and completely rebranded so it reads like its own product.
toolsKXVN Trades
LLM-powered trading research — several AI personas debate a thesis in paper mode and return a written plan. Deliberately built so it can never execute a trade. Research toy, not a slot machine.
toolsLobeChat
Private multi-user AI chat with web search, preseeded with the house model lineup and a default profile tuned for media lore questions. Access-code gated.
toolsClient fleet
A custom-branded Fladder web build, Pelagica web clients on two extra aliases, and a free download page for the mobile client — every entry point points at the same server, first-launch prefill included so new users never type a server address.
toolsThe part that makes it survive. Nobody opens these — they just work, and they page when something doesn't.
Uptime Kuma
24/7 health checks on every public service. When something falls over, Discord knows before a human does.
opsHomarr
The master dashboard — every service on one board, live integrations into the arr stack and smart home. First stop for "what's running".
opsBeszel
Fleet-wide lightweight server metrics — CPU, RAM, disk, network — across both machines in one view.
opsGlances
Deep host metrics per box, including the per-container breakdown when a single service needs a post-mortem.
opsntfy
Self-hosted push notifications — the target every cron job, watcher, and watchdog on the box talks to. High-priority owner alerts included.
opsDockge
Compose-stack manager for the /opt/stacks deployments. The agent edits the YAML, Dockge reconciles, everyone stays honest.
opsHome Assistant
The physical-layer hub — lights, switches, scenes, the PC's power plug — all behind one fabric, reachable by the agent with a single API call.
opsBecause a house needs toys too.
KXVN Discord bot
Sixteen-plus slash commands written by the agent itself — library stats, requests, account self-service, permission grant flows. Slash-only, tidy lifecycle rules, embeds branded to the house purple.
funSpotify Now Bridge
Feeds the landing page its now-playing card. What's on my headphones shows up on my front door in real time.
funRustDesk
Self-hosted remote desktop — own TeamViewer, zero third party in the loop. Relay runs on the box itself.
funLiveKit
Voice/video server powering the agent's voice-channel sessions.
funIPTV search
A split-routed playlist search UI and stream proxy — search side and playback side live on different backends, and that's the whole trick.
funPairDrop
Local-only, zero-trust AirDrop substitute — drag a file across any two browsers on the same LAN. No accounts, no cloud.
funFlipper Zero + Devboard
The physical access layer — a bridge on the VPS with the token kept off-device, so the hardware can drive the smart home without holding its own keys.
funThe fleet
Laptop server, MacBook, gaming PC, phones — all on one Tailscale mesh, all with SSH keys deployed, all reachable and run by the agent. One mesh, four hands.
opsOpen source lifts the heavy parts. Hermit does the wiring.
Every project below runs the house — the part the README can't show is the glue: patched, chained, branded and watched over by the agent.
Hermes Agent
Hermit's brain. One core, every gateway, persistent memory.
nous researchJellyfin
Media server core. Its upgrades ship via full-backup + rollback doc.
jellyfin.orgSonarr · Radarr · Prowlarr
The acquisition automation quartet.
servarrSABnzbd + qBittorrent
Usenet + torrent backends, tuned and monitored.
open sourceKavita
Comics/manga server + OPDS.
kavitareader.comImmich
Photos with ML face/object search.
immich.appJellyseerr
Request management, webhook-wired.
jellyseerrTdarr · Fladder · Pelagica
Transcode farm + universal clients, custom-branded builds.
communityCloudflare · Nginx · Let's Encrypt
Every subdomain: DNS-01 certs, routing, custom 404 cat included.
fabricTailscale
The mesh — machines, one wire.
wireguardDocker + Watchtower
Everything ships as containers; updates roll nightly.
dockerOllama + local models
Embeddings + inference behind stats and AI features.
ollamaUptime Kuma · ntfy · Homarr
Observability: if it matters, it pings.
self-hostedWasabi + rclone
Warm object storage mount — the library's body.
s3-compatibleZipline + Stirling-PDF
File host + PDF suite, de-branded, re-skinned.
open sourceHome Assistant
The physical-world API. Lights, plugs, presence.
home-assistant.ioPublic entry points
No admin panels, no backends, nothing sensitive — that stays unlisted on purpose.
kxvn.io
The front door — splash, presence, now-playing.
ftv.kxvn.io
FTV Media — the main player.
play.kxvn.io
Native apps + account signup.
request.kxvn.io
Request movies & shows.
comics.kxvn.io
Comics & manga reader.
kxvn.io/quicklinks
FTV Quick Stream listing.
swipe.kxvn.io
Swipe-to-queue browsing.
stats.kxvn.io
Watch stats + AI recs.
status.kxvn.io
Live service status.
docs.kxvn.io
The documentation hub.
pdf.kxvn.io
The PDF toolbox.
github.com/kishyxd/projects
The README mirror of this page.