Homelab / Services

Services

Homelab services — by category and role.

The service list covers the lab’s platform and application workloads: identity, edge, Git/CI, observability, storage, and apps. Each card shows name, category, and role in the overall system.

Platform

Platform

vlt

HashiCorp Vault

Secrets management and internal PKI.

Platform
edge

Zoraxy

Edge reverse proxy and TLS termination.

Platform
idp

Keycloak

Central identity provider for SSO.

Platform
git

Forgejo

Self-hosted Git — source of truth for IaC, docs, CI, and the portfolio; private GitHub mirror only for offsite.

Platform
cfg

Forgejo Actions

Self-hosted CI fleet — Linux amd64, macOS Apple Silicon, Windows 64-bit, and Windows ARM64.

Platform
tofu

Terrakube

OpenTofu collaboration and remote state.

Platform
docs

Wiki

Knowledge base and handbooks for the lab platform.

Platform
edu

Homelab Academy

Technical training path around the homelab.

Platform
pan

Pangolin

Identity-aware remote edge for HTTPS — tunnel into the lab, OIDC against Keycloak.

Platform
gw

Gateway

Overlay VPN node for dual remote; public tunnel connector on Ingress.

Platform
ssh

Jump

Central entry point for administration and automation.

Platform
pxe

iVentoy

PXE and ISO boot for installations.

Platform
rdp

RustDesk

Self-hosted remote desktop for devices in the lab.

Platform

Observability

Observability

mon

Grafana

Dashboards for hosts, apps, and uptime.

Observability
prm

Prometheus

Metrics collection and alerting foundation.

Observability
log

Loki

Central log aggregation.

Observability
alrt

Alertmanager

Alert routing and notifications.

Observability
siem

Wazuh

SIEM and host audit for SSH, sudo, and auth events.

Observability

Ops

Ops

pve

Proxmox Cluster

Compute foundation of the lab — hypervisor cluster for nearly all guests and workloads.

Ops
pve

Proxmox Offsite

Additional hypervisor site for resilience.

Ops
cfg

Foreman

Host lifecycle, configuration, and patch orchestration.

Ops
pve

PDM

Cluster and datacenter overview for Proxmox.

Ops
bak

PBS

Primary backup for VMs and containers — not for file shares.

Ops
bak

PBS Offsite

Selective offsite backup at a second site.

Ops
mail

PMG

Mail gateway for filtering and relay.

Ops
tkt

Zammad

Service desk for incidents, changes, and problems.

Ops
net

UniFi

Network control for Wi-Fi, switching, and firewall.

Ops

Storage

Storage

sto

OMV

Warm/cold shares on external USB disks.

Storage
zfs

TrueNAS

ZFS hot shares for documents, pictures, and media.

Storage
arc

Synology

Second medium — file copies and cold archive.

Storage

Home

Home

ha

Home Assistant

Smart-home hub and automation.

Home

Apps

Apps

ui

Homepage

Launch portal for lab services.

Apps
aud

Audiobookshelf

Audiobooks and radio plays.

Apps
bm

Karakeep

Bookmarks and read-later.

Apps
bot

Hermes Agent

Read-only ops assistance — diagnose and next steps, no apply.

Apps
ai

Open WebUI

Local tutor/chat via Ollama — same local models as the ops pipeline, no blind ops.

Apps
pdf

Stirling PDF

PDF tools (merge, split, OCR).

Apps
book

Books

Ebooks, magazines, and comics (Kavita).

Apps
pwm

Vaultwarden

Credential manager for lab and everyday logins.

Apps
mail

Webmail

Webmail client (Roundcube).

Apps
tor

Tor Gateway

Always-on Tor client — remote browser behind SSO, SOCKS for CLI, onion ops doors.

Apps
shr

Share

Simple file sharing.

Apps
pic

Immich

Self-hosted photo library.

Apps
docs

Paperless

Document archive and OCR.

Apps
dcim

NetBox

Inventory and address planning for the lab infrastructure.

Apps