Homelab

Homelab

A personal showcase of an IaC-driven homelab platform — enterprise-aligned open-source tools on Proxmox and Rocky Linux.

Welcome to d0dg3r’s h0m3L@8 — a personal showcase of an IaC-driven homelab platform.

The lab mirrors what you typically find in enterprise IT — preferably via the open-source / community editions of those tools. The managed fleet runs Rocky Linux for enterprise compatibility. Proxmox is the compute foundation for nearly all guests and workloads. Lifecycle, patching, tickets, and changes are automated as far as practical.

Here you will find:

  • News — homelab journal since 1 August 2026 (earlier stations stay visible)
  • the logical architecture from edge and identity to compute and observability
  • Forgejo — self-hosted Git as the source of truth for lab code; CI on Linux, macOS, and Windows (amd64 and ARM64)
  • this website — Forgejo → private GitHub mirror → Cloudflare Pages (Hugo)
  • connectivity — dual 5G, CGNAT, and outbound tunnels instead of port-forwards
  • storage & backup — Ceph, file tiers, backup instead of RAID everywhere
  • the design principles that guide how the lab is built and operated
  • a service overview across platform, ops, and app workloads
  • the hardware that carries compute, runners, networking, and storage
  • a look at home automation
  • Ops AI showcases — controlled multi-pass analyses and patch notes (scrubbed)

These pages show how the building blocks fit together — as a portfolio, not as an operations dashboard.

Architecture

Architecture

Logical layers of the homelab — Proxmox and Rocky Linux as the base, then identity, delivery, ops, and observability.

Journal

News

Homelab journal since 1 August 2026 — services, hardware, platform, and design, curated and scrubbed. Older milestones stay visible.

Architecture

Website

How root-files.net is delivered — a curated Hugo portfolio from Forgejo, a private GitHub mirror, and Cloudflare Pages.

Architecture

Connectivity

Dual 5G uplinks, carrier-grade NAT, outbound tunnels and IPv6 via a WireGuard broker — internet without port-forwards.

Architecture

Storage & Backup

Ceph for guest disks, separated file tiers, backup instead of RAID everywhere — plus an offsite target for site resilience.

AI

Ops AI Showcases

Controlled multi-pass LLM examples — alert analysis (mail/Telegram) and app patch notes with breaking changes. Scrubbed, no autopilot.

Homelab

Hardware

Physical building blocks: compute, runners, network, NAS, and storage.

Automation

Home Automation

Home Assistant, Zigbee2MQTT, and the sensor/device landscape at a glance.

Services

Services

Homelab services — by category and role.

Services

Highlights

Short sample — full list under Services.

vlt

HashiCorp Vault

Secrets management and internal PKI.

Platform
edge

Zoraxy

Edge reverse proxy and TLS termination.

Platform
idp

Keycloak

Central identity provider for SSO.

Platform
git

Forgejo

Self-hosted Git — source of truth for IaC, docs, CI, and the portfolio; private GitHub mirror only for offsite.

Platform
cfg

Forgejo Actions

Self-hosted CI fleet — Linux amd64, macOS Apple Silicon, Windows 64-bit, and Windows ARM64.

Platform
tofu

Terrakube

OpenTofu collaboration and remote state.

Platform
edu

Homelab Academy

Technical training path around the homelab.

Platform
pan

Pangolin

Identity-aware remote edge for HTTPS — tunnel into the lab, OIDC against Keycloak.

Platform

Full list

All platform, ops, and app services at a glance.

All services