Ripperda TechnologyIT leadership · Transformation

Projects · GitHub

Leading with my own code.

Alongside my leadership role, I build my own tools. They show that I don't just steer technology, I understand and use it myself.

github.com/sebastianripperda/haus-ki Publicv1.6.0MIT

Haus-KI

A local AI assistant for the family on Proxmox. It connects Ollama with Paperless-ngx, Jellyfin, KNX and Microsoft 365. Permissions per person, actions only after confirmation, speech input and read-aloud processed locally. German interface, usable as an app on your phone.

Problem
Cloud AI assistants know nothing about your own documents, appointments or home, and they process private data outside your own network.
Solution
An assistant that computes on the home network, accesses existing systems, backs its answers with sources and only acts once an authorised person confirms.
Python · FastAPIJavaScriptProxmox LXCOllamaWhisperPiperSQLiteCaddy

Features

What Haus-KI handles day to day.

Questions about your own data

Answers from Paperless, calendar, KNX and Jellyfin, each with its source.

Actions after confirmation

Lights, blinds, playback, to-dos and email drafts. Nothing is executed until you click.

For the whole family

Sign-in with Microsoft, roles and permissions per person and room, a simple view and a learning mode for children.

Speech, processed locally

Speech input with Whisper, read-aloud with Piper. Recordings are not stored.

Nightly tasks

Backups, deadlines, calendar sync and the search index run automatically.

Operated like enterprise IT

Installation script, checksum-verified updates, a backup before every update and automatic rollback on errors.

Architecture

Everything runs on the home network.

Toggle to see which connections leave the home network.

Devices

Browser
Mobile app

Proxmox host · home network

LXC Haus-KI

Caddy · HTTPS
FastAPI · queue
Whisper · Piper
SQLite · nightly backup

LXC / VM Ollama

Ollama :11434
Agent :8765

Services on the home network

Paperless-ngx
Jellyfin
KNX IP interface

External

Microsoft 365
IMAP mailboxes
Web search only when enabled
Push services
Model downloads one-off

What the project shows about how I work

The same principles as in enterprise IT.

Haus-KI is a hobby project. The security decisions behind it are the same ones I am responsible for in IT organisations.

In Haus-KIIn a company, this means
Actions only run after confirmation by an authorised person.Human in the loop for AI with authority to act
Permissions apply per person and room. Front door, garage door and alarm system are read-only.Least privilege and graded permissions
No actions are possible after web content.Protection against prompt injection through clear trust boundaries
Emails are never sent, only saved as drafts.Four-eyes principle for external communication
Every sign-in and action is logged for 365 days. Secrets are stored encrypted.Traceability and secret management, audit-proof
Checksum-verified updates, backup beforehand, automatic rollback.Change and release management with rollback

Hobby project without warranty. Components and models have their own licences, see NOTICE.md in the repository.

More projects to follow. I will add new repositories here in the same format: problem, solution, architecture and the principles behind it.

GitHub profile ↗

Exchange

Let's talk about IT leadership and transformation.

I welcome professional exchange, requests for talks and workshops, and questions about the book.

Usually a reply within 48 hours

Get in touchLinkedIn ↗