Media
- Jellyfinthe home Netflix, 15 accounts
- Plexon a second, isolated hypervisor
- Komgacomics, manga and books
The rack
The whole setup in one rack. Click a unit, an LED or a container for its sheet. “Cause an outage” unplugs three cables: drag each plug to the right port (or tap the plug, then the port).
Detailsclick an item
Containers
Supervisionall green
Secret #49 · Lightning adminNetwork back up in under 10 seconds. It now shows on the secrets page.
The machine
4cores, 8 threads · Intel i3-10100T, 35 W
24 GBof RAM
256 GBNVMe SSD for the system
32LXC containers and 1 VM
Everything fits in an HP mini PC the size of a book: an Intel Core i3-10100T at 35 W, 24 GB of RAM and a 256 GB NVMe SSD. It draws little power, makes no noise and runs around the clock.
Heavy storage (films, series, books) and backups live on a NAS, mounted over NFS in Proxmox. The mini PC only keeps the systems.
The diagram
Visitors go through Cloudflare Tunnel: the server opens the connection to Cloudflare itself, so nothing comes straight into my home. Caddy then routes to the right service. Plex runs apart, on a second, isolated hypervisor.
The services
Network and security
- Cloudflare Tunneloutside access with no open port
- Pi-holeDNS and ad blocking for the whole home
- Vaultwardenpassword manager
- Caddyweb server, including this portfolio
Monitoring
- Uptime Kumaalerts when a service goes down
- MySpeedinternet speed history
- Homarrdashboard of every service
- Nextermweb terminal to the servers
Organisation
- Docmostwiki and documentation
- Memosquick notes
- Homeboxhome equipment inventory
My projects
- Autocutautomatic silence cutting
- This portfolioserved by Caddy, updated on every merge
- Mathélio ↗arithmetic and maths for kids aged 6 to 11
- Lunélio ↗2D pixel-art video game
- BreachCyberpunk 2077-style hacking mini-game
- More to comeother apps in the works
Backups
Every night at 1 am, Proxmox snapshots each container and sends it to the NAS. A broken machine is restored in minutes. There is of course an offline backup.
Same principle as at work: monitor, back up, test the restore. A homelab is also where I try for real what I then recommend.