Homelab Portfolio

d0dg3r's h0m3L@8

A personal showcase of an IaC-driven homelab platform. Enterprise-aligned open-source tools, Rocky Linux for compatibility, Proxmox as the compute foundation — patching, tickets, and changes automated as far as practical.

Explore the homelab All services

Principles

How the lab is built

Enterprise-aligned open-source tools, IaC, and automation — reproducible on Proxmox and Rocky Linux.

Infrastructure as Code

Guests and services are created reproducibly from Forgejo — OpenTofu, Ansible, Terrakube. Managed guests run Rocky Linux for enterprise compatibility.

Enterprise-aligned ops

Prefers open-source / community editions of enterprise tools — lifecycle, patching, tickets, and changes, automated as far as practical.

Identity first

A central OIDC IdP for apps and remote access.

Edge & Dual Remote

Dual 5G behind carrier-grade NAT — outbound tunnels instead of port-forwards; LAN proxy; Pangolin (HTTPS/OIDC) and overlay VPN as parallel remote paths.

Observability

Metrics, logs, alerts, and host audit (SIEM) belong to the platform from day one.

Secure by design

Secrets in HashiCorp Vault, TLS at the edge, clear roles between portfolio and operations.

Controlled AI

Local multi-pass pipeline on Ollama — facts Qwen3 8B, writer Qwen3.6 35B-A3B (MoE, 27B fallback), critic Qwen3.6 27B. Human approval, no blind apply, no cloud LLM.

Stack

Logical layers

Proxmox and Rocky Linux as the base — then identity, delivery, ops, and observability.

Compute

Proxmox Cluster · Rocky Linux Guests · Podman/Quadlet

Network

Dual 5G · CGNAT · Zoraxy · Pangolin · Overlay VPN

Identity

Keycloak OIDC · HashiCorp Vault Secrets & PKI

Delivery

Forgejo · Actions Linux/macOS/Windows · OpenTofu · Terrakube · Ansible / Foreman

Ops

Patching · Zammad (tickets/changes) · PBS backup

Observe

Prometheus · Loki · Grafana · Alerting

AI (local)

Ollama · Qwen3 8B · Qwen3.6 35B-A3B · Qwen3.6 27B · Open WebUI

Focus: Curated portfolio — enterprise-aligned open-source tools, Rocky Linux, Proxmox as compute foundation.

Activity

What is moving

Latest stations from the homelab journal — curated, with a link to the full page.

  1. Forgejo as lab SoT and CI matrix

    Self-hosted Git is the source of truth for IaC and docs; Actions run on Linux amd64, macOS Apple Silicon, Windows 64-bit, and Windows ARM64.

    View page

  2. Multi-pass with Qwen3.6 (writer + critic)

    Ops pipeline runs locally via Ollama — facts Qwen3 8B, writer Qwen3.6 35B-A3B (MoE, 27B fallback), critic Qwen3.6 27B. No cloud LLM.

    View page

  3. Tor gateway with onion doors

    Always-on Tor client with SSO remote browser and SOCKS; phase-2 onion ops doors — curated, without hostnames or reachability hints.

    View page

  4. This website explains itself

    root-files.net — Forgejo as SoT, private GitHub mirror, Cloudflare Pages with Hugo; curated catalogs instead of leaks.

    View page

  5. TrueNAS and OMV deliberately virtual

    Storage roles as hypervisor guests — one platform, hot ZFS kept apart from USB bulk (passthrough).

    View page

  6. Portfolio version and activity links

    Footer shows curated version plus build stamp; milestones link to the matching page.

    View page

All Homelab News

Highlights

Featured services

A sample from the lab — the full list lives under Services.

vlt

HashiCorp Vault

Secrets management and internal PKI.

Platform
edge

Zoraxy

Edge reverse proxy and TLS termination.

Platform
idp

Keycloak

Central identity provider for SSO.

Platform
git

Forgejo

Self-hosted Git — source of truth for IaC, docs, CI, and the portfolio; private GitHub mirror only for offsite.

Platform
cfg

Forgejo Actions

Self-hosted CI fleet — Linux amd64, macOS Apple Silicon, Windows 64-bit, and Windows ARM64.

Platform
tofu

Terrakube

OpenTofu collaboration and remote state.

Platform
edu

Homelab Academy

Technical training path around the homelab.

Platform
pan

Pangolin

Identity-aware remote edge for HTTPS — tunnel into the lab, OIDC against Keycloak.

Platform
mon

Grafana

Dashboards for hosts, apps, and uptime.

Observability
pve

Proxmox Cluster

Compute foundation of the lab — hypervisor cluster for nearly all guests and workloads.

Ops
cfg

Foreman

Host lifecycle, configuration, and patch orchestration.

Ops
tkt

Zammad

Service desk for incidents, changes, and problems.

Ops
ha

Home Assistant

Smart-home hub and automation.

Home
tor

Tor Gateway

Always-on Tor client — remote browser behind SSO, SOCKS for CLI, onion ops doors.

Apps

See all services

Platform, observability, ops, storage, and apps — as a portfolio overview.

Go to service list