Architecture
Logical layers of the homelab — Proxmox and Rocky Linux as the base, then identity, delivery, ops, and observability.
Homelab
A personal showcase of an IaC-driven homelab platform — enterprise-aligned open-source tools on Proxmox and Rocky Linux.
Welcome to d0dg3r’s h0m3L@8 — a personal showcase of an IaC-driven homelab platform.
The lab mirrors what you typically find in enterprise IT — preferably via the open-source / community editions of those tools. The managed fleet runs Rocky Linux for enterprise compatibility. Proxmox is the compute foundation for nearly all guests and workloads. Lifecycle, patching, tickets, and changes are automated as far as practical.
Here you will find:
These pages show how the building blocks fit together — as a portfolio, not as an operations dashboard.
Logical layers of the homelab — Proxmox and Rocky Linux as the base, then identity, delivery, ops, and observability.
Homelab journal since 1 August 2026 — services, hardware, platform, and design, curated and scrubbed. Older milestones stay visible.
How root-files.net is delivered — a curated Hugo portfolio from Forgejo, a private GitHub mirror, and Cloudflare Pages.
Dual 5G uplinks, carrier-grade NAT, outbound tunnels and IPv6 via a WireGuard broker — internet without port-forwards.
Ceph for guest disks, separated file tiers, backup instead of RAID everywhere — plus an offsite target for site resilience.
Controlled multi-pass LLM examples — alert analysis (mail/Telegram) and app patch notes with breaking changes. Scrubbed, no autopilot.
Physical building blocks: compute, runners, network, NAS, and storage.
Home Assistant, Zigbee2MQTT, and the sensor/device landscape at a glance.
Homelab services — by category and role.
Services
Short sample — full list under Services.
Secrets management and internal PKI.
Edge reverse proxy and TLS termination.
Central identity provider for SSO.
Self-hosted Git — source of truth for IaC, docs, CI, and the portfolio; private GitHub mirror only for offsite.
Self-hosted CI fleet — Linux amd64, macOS Apple Silicon, Windows 64-bit, and Windows ARM64.
OpenTofu collaboration and remote state.
Technical training path around the homelab.
Identity-aware remote edge for HTTPS — tunnel into the lab, OIDC against Keycloak.
All platform, ops, and app services at a glance.