Homelab
Part testing ground, part production
The lab is testing ground, personal infrastructure, and proving ground all at once — where I break things on purpose, learn how they go back together, and run services my family actually depends on.
Hardware
The physical layer
The rack lives in a converted closet — four physical servers, two UPS units, and a rat's nest of cable management I'm slowly winning. Everything's numbered and labeled the same way I'd label a client's rack, because half of running a homelab is being able to find the problem at 2am.
This is illustrated. See the actual rack →
Hover or tap any unit in the rack for its name and specs.
View live status ↗Networking
How it all talks to itself
- UniFi Dream Machine Pro Full VLAN segmentation throughout the lab.
- Site Magic Persistent VPN tunnel to my parents’ house for remote connectivity.
- WireGuard Secure remote access when I’m away from home.
- Pi-hole (HA pair) Primary and secondary, for local DNS and ad-blocking.
- Active Directory Testing domain-join scenarios and group policy.
- NUT Network UPS Tools, watching an APC Smart-UPS over its SNMP card with tuned shutdown sequencing.
Services
30+ services, containerized
Most run on Docker Compose, structured to mirror real client environments so I can test updates and configuration changes with zero production risk.
Paperless-ngx pairs with a local Ollama instance for document tagging — one piece of a larger self-hosted AI stack that runs on this same cluster. More on that →
Right now
SSO via Authentik + Active Directory
Just finished a Proxmox 8→9 upgrade across the whole cluster. Current focus is integrating Authentik across lab services with LDAP to centralize identity management — with the longer goal of bringing it to clients who need better access control. The lab is always evolving; that's the point.