# Frequently Asked Questions

## General

| Question | Answer |
|----------|--------|
| **What is the Homelab?** | A collection of self‑hosted services managed via GitOps on a cluster of NAS, VM, and edge devices. |
| **How do I get started?** | See the [Getting‑Started](getting-started/BEGINNER_QUICKSTART.md) guide. |
| **Which hosts are available?** | See the [Host Inventory](docs/architecture/host-inventory.md). |

## Deployment

| Question | Answer |
|----------|--------|
| **Can I deploy services manually?** | Yes – use Portainer UI, but recommended is GitOps for consistency. |
| **How to rollback a service?** | Use `git rollback` tag or refer to the *GitOps rollback* page. |
| **What if a stack fails?** | Check Portainer stack events and the corresponding logs in Loki. |

## Troubleshooting

| Question | Answer |
|----------|--------|
| **Container exits unexpectedly** | Look at `docker logs <container>`, verify health‑check, and check resource limits. |
| **Service not reachable** | Ensure firewall allows port, confirm DNS, and verify internal IP. |
| **Database connection fails** | Check credentials, network policy, and service health. |

## Security

| Question | Answer |
|----------|--------|
| **How to rotate SSH keys?** | Use the `ssh-keyrotator.sh` script in `scripts/`. |
| **Where are secrets stored?** | Hashicorp Vault – credentials never in repo. |
| **How to enable MFA?** | Enable on Authentik → Users → MFA. |

---

> **Got an issue not covered here?** Create an issue with the *documentation* label in the repo or ping me on Fluxer chat.