m4nifest0-tech

Search the site

Homelab

My home infrastructure

The lab where I experiment: virtualization cluster, segmented network, storage and backup, self-hosted services, monitoring and security. Each component has an entry with its objective, technologies, architecture and status.

What you won't find on these pages

For security I don't publish IP addresses, hostnames, credentials or detailed firewall rules. The entries describe architectures, choices and principles, not the network map.

Architecture overview

Homelab overviewOverview of the homelab, from top to bottom: the Internet reaches a firewall, connected by a trunk to a managed switch. The Proxmox VE cluster and the NAS holding the backup copies branch off the switch; the self-hosted services and the monitoring system run on the cluster.PerimeterNetwork coreInfrastructureWorkloadsInternetFirewallsegmentation and VPNManaged switchVLAN segmentsProxmox VE clustervirtualization and HANAS and backupdata and backup copiesSelf-hosted servicesVMs and containersMonitoringmetrics, logs, and alertsWAN802.1Q trunkhostshosts
  • Internet is connected to Firewall (WAN)
  • Firewall is connected to Managed switch (802.1Q trunk)
  • Managed switch is connected to Proxmox VE cluster
  • Managed switch is connected to NAS and backup
  • Proxmox VE cluster is connected to Self-hosted services (hosts)
  • Proxmox VE cluster is connected to Monitoring (hosts)
Homelab overview. Overview of the homelab, from top to bottom: the Internet reaches a firewall, connected by a trunk to a managed switch. The Proxmox VE cluster and the NAS holding the backup copies branch off the switch; the self-hosted services and the monitoring system run on the cluster.

Proxmox VE cluster

Nodes, quorum, high availability and management of the virtualization cluster.

  • Active

    Proxmox VE cluster

    Virtualization cluster based on Proxmox VE, with quorum, a dedicated network for cluster services, and storage replicated between nodes.

    • Proxmox VE
    • Corosync
    • ZFS
    • ZFS replication

    Full entry

Physical servers and hardware

Physical machines, components, power and resource optimization.

  • Active

    Physical nodes and hardware

    Hardware classes for the homelab nodes and the criteria behind the choices: power consumption, noise, power redundancy, and room for expansion.

    • x86 servers
    • Hardware virtualization
    • GPU passthrough
    • SSD

    Full entry

Virtual machines and containers

Workloads in VMs and LXC containers: criteria, templates and resources.

  • Active

    Virtual machines and LXC containers

    Inventory of the homelab's virtual machines and LXC containers: how many there are, what kinds of workloads they host, and how they are sized.

    • Proxmox VE
    • KVM/QEMU
    • LXC

    Full entry

Storage and backup systems

NAS, disk pools, backups, off-site copies and restores.

  • Active

    NAS and storage

    Network storage for service data, shares, and the second copy of backups, with integrity checks and access separated by role.

    • QNAP
    • ZFS
    • Network shares
    • Snapshots

    Full entry

  • Active

    Backup and disaster recovery strategy

    Backup plan based on the 3-2-1 rule, with Proxmox Backup Server, a second copy on a NAS, an off-site copy, and periodic test restores.

    • Proxmox Backup Server
    • NAS
    • ZFS
    • Off-site sync

    Full entry

Networking and network segmentation

VLANs, firewalls, DNS and remote access, described by principle.

  • Active

    Network, VLANs, and firewall

    Network segmented into VLANs, with the firewall as the routing point between segments and a restrictive access policy.

    • VLAN 802.1Q
    • NethSecurity
    • HP 1910-24G
    • DHCP

    Full entry

  • Active

    Remote access via VPN

    Internal network access from outside only through a VPN, with key-based authentication and an optional site-to-site link between locations.

    • WireGuard
    • Firewall
    • Routing
    • DNS

    Full entry

Self-hosted services

Services hosted at home: selection criteria, updates and data.

  • Active

    Self-hosted services

    The services hosted in the homelab: DNS and reverse proxy, monitoring, photos, network documentation, and server platforms.

    • AdGuard Home
    • Nginx Proxy Manager
    • Uptime Kuma
    • Pulse

    Full entry

Monitoring and security

Metrics, logs, alerts and defenses of the infrastructure.

  • Active

    Monitoring and security

    Cluster monitoring with Pulse and recurring security checks with Wazuh, OpenVAS, and OpenCanary.

    • Pulse
    • Wazuh
    • OpenVAS
    • OpenCanary

    Full entry