Personal project / 2024–2026
Homelab Infrastructure
An evolving homelab and work infrastructure built around clear trust boundaries. A Tailscale mesh connects personal devices, a Proxmox host, and a Raspberry Pi. Public requests enter through Cloudflare and travel over outbound tunnels to the appropriate service, while internal tools remain private. Proxmox runs isolated containers and VM guests; the Pi carries the smaller always-on personal services.
Role
Infrastructure architecture, deployment, and operations
Year
2024–2026
Full stack
9 tools
Interactive logical map
Hover, focus, or select a nodeFull stack
- 01Proxmox VE
- 02LXC
- 03Virtual machines
- 04Tailscale
- 05Cloudflare Tunnel
- 06Raspberry Pi 5
- 07n8n
- 08Vaultwarden
- 09Home Assistant
01
Built around
- Public services use outbound Cloudflare tunnels, so the network does not need publicly exposed inbound ports.
- Tailscale provides one private access plane across work hardware, personal computers, laptops, and the Pi.
- Work-hosted and personal traffic use distinct service paths while still sharing a legible operating model.
02
If I kept going
- Add one observability layer for service health, tunnel state, storage, and backup freshness.
- Move more of the repeatable setup into versioned infrastructure-as-code and documented recovery drills.