Infrastructure as Code
Guests and services are created reproducibly from Forgejo — OpenTofu, Ansible, Terrakube. Managed guests run Rocky Linux for enterprise compatibility.
Homelab Portfolio
d0dg3r's h0m3L@8
A personal showcase of an IaC-driven homelab platform. Enterprise-aligned open-source tools, Rocky Linux for compatibility, Proxmox as the compute foundation — patching, tickets, and changes automated as far as practical.
Principles
How the lab is built
Enterprise-aligned open-source tools, IaC, and automation — reproducible on Proxmox and Rocky Linux.
Enterprise-aligned ops
Prefers open-source / community editions of enterprise tools — lifecycle, patching, tickets, and changes, automated as far as practical.
Identity first
A central OIDC IdP for apps and remote access.
Edge & Dual Remote
Dual 5G behind carrier-grade NAT — outbound tunnels instead of port-forwards; LAN proxy; Pangolin (HTTPS/OIDC) and overlay VPN as parallel remote paths.
Observability
Metrics, logs, alerts, and host audit (SIEM) belong to the platform from day one.
Secure by design
Secrets in HashiCorp Vault, TLS at the edge, clear roles between portfolio and operations.
Controlled AI
Local multi-pass pipeline on Ollama — facts Qwen3.5 9B, writer Qwen3.6 35B-A3B (MoE, Qwen3.8 27B fallback), critic Qwen3.8 27B. Human approval, no blind apply, no cloud LLM.
Stack
Logical layers
Proxmox and Rocky Linux as the base — then identity, delivery, ops, and observability.
Compute
Proxmox Cluster · Rocky Linux Guests · Podman/Quadlet
Network
Dual 5G · CGNAT · Zoraxy · Pangolin · Overlay VPN
Identity
Keycloak OIDC · HashiCorp Vault Secrets & PKI
Delivery
Forgejo · Actions Linux/macOS/Windows · OpenTofu · Terrakube · Ansible / Foreman
Ops
Patching · Zammad (tickets/changes) · PBS backup
Observe
Prometheus · Loki · Grafana · Alerting
AI (local)
Ollama · Qwen3.5 9B · Qwen3.6 35B-A3B · Qwen3.8 27B · Open WebUI
Focus:
Curated portfolio — enterprise-aligned open-source tools, Rocky Linux, Proxmox as compute foundation.
Activity
What is moving
Latest stations from the homelab journal — curated, with a link to the full page.
-
Wiki Chat — handbook RAG and live tools
Public architecture page for Wiki Chat — hybrid search over wiki and handbooks, local Qwen3 models, plus read-only tools for RAM, CPU, disk, and uptime when those values are never in the wiki.
-
ai-geek.net live — second site on the same pipeline
Company website for SME software in the Bern region — theme-less Hugo, data-driven pricing and services, Forgejo → GitHub mirror → Cloudflare Pages; contact form as a Pages Function with Turnstile and SES, preview lock until launch.
-
Lab Pulse — dense fleet KPIs and sparklines
root-files.net shows live aggregates (probes, hosts, apps, CPU/RAM/network) plus posture (backup coverage, alerts, edge latency) and sparklines — without hostnames, IPs, or admin UIs.
-
Forgejo as lab SoT and CI matrix
Self-hosted Git is the source of truth for IaC and docs; Actions run on Linux amd64, macOS Apple Silicon, Windows 64-bit, and Windows ARM64.
-
Multi-pass with Qwen3.6 (writer + critic)
Ops pipeline runs locally via Ollama — facts Qwen3.5 9B, writer Qwen3.6 35B-A3B (MoE, Qwen3.8 27B fallback), critic Qwen3.8 27B. No cloud LLM.
-
Privacy gateway for ops remote
Always-on privacy gateway with remote browser behind SSO; phase-2 ops entrances — curated, without hostnames or reachability hints.
Highlights
Featured services
A sample from the lab — the full list lives under Services.
HashiCorp Vault
Secrets management and internal PKI.
Zoraxy
Edge reverse proxy and TLS termination.
Keycloak
Central identity provider for SSO.
Forgejo
Self-hosted Git — source of truth for IaC, docs, CI, and the portfolio; private GitHub mirror only for offsite.
Forgejo Actions
Self-hosted CI fleet — Linux amd64, macOS Apple Silicon, Windows 64-bit, and Windows ARM64.
Terrakube
OpenTofu collaboration and remote state.
Homelab Academy
Technical training path around the homelab.
Pangolin
Identity-aware remote edge for HTTPS — tunnel into the lab, OIDC against Keycloak.
Grafana
Dashboards for hosts, apps, and uptime.
Proxmox Cluster
Compute foundation of the lab — hypervisor cluster for nearly all guests and workloads.
Foreman
Host lifecycle, configuration, and patch orchestration.
Zammad
Service desk for incidents, changes, and problems.
Home Assistant
Smart-home hub and automation.
Wiki Chat
Questions to the homelab wiki with sources — plus tools for current RAM, CPU, disk, and uptime. Answers only from the pages or from live metrics, no blind ops.
See all services
Platform, observability, ops, storage, and apps — as a portfolio overview.