Networked services.
Always a homelab running under Proxmox: I experiment, I break things, I rebuild. Here's what's currently spinning on the rack
- 01
Proxmox VE
Hypervisor: 2 standalone nodes (Core Infra + Apps), VLAN-aware bridge, segmented into dedicated VLANs
Virtualization - 02
Proxmox Backup Server
Daily snapshots of the VMs/LXCs on both nodes. First link in the 3-2-1 chain (PBS → replica → Backblaze B2)
Virtualization - 03
OPNsense
Router / firewall: gateway for the VLANs (Mgmt, Infra, Prod, Dev, Media), strict inter-VLAN rules
Network - 04
Cloudflare Tunnel
Single encrypted entry point. Routes HTTPS traffic to internal services, nothing exposed directly to the WAN
Network - 05
Tailscale
Zero-trust remote access over P2P WireGuard. Home subnet-router advertising the internal VLANs, replaces Twingate
Network - 06
Caddy
Internal reverse proxy: automatic TLS and routing for services behind the tunnel
Network - 07
AdGuard Home
Local DNS: network-wide ad and tracker blocking, hosted on Srv1 for stability
Network - 08
Coolify
Self-hosted PaaS: deploys sites and personal apps via GitHub webhooks. Dedicated worker kept separate from the panel to bound the blast radius
Containers - 09
Grafana + Prometheus + Loki
Dashboards for latency, load, temperature, logs. node_exporter on each VM, critical alerts to Telegram
Monitoring - 10
Uptime Kuma
Watches internal services and public sites. Telegram alert the moment a probe goes down
Monitoring - 11
Glance
Bridgehead dashboard: service status, feeds and shortcuts on a single page
Monitoring - 12
n8n
Workflow automation: bots, Notion sync, inter-service glue. The core of internal orchestration
Productivity - 13
Immich
Google Photos alternative: auto mobile backup, local ML for face recognition, scene-based search
Media - 14
Jellyfin
Media server for movies and series. Manual acquisition via qBittorrent, playback on every device
Media - 15
Navidrome
Personal music streaming: Subsonic API, regular library scans, plays on every device
Media - 16
MeTube
YouTube downloader: videos to Jellyfin, audio to Navidrome. Keeping the artifacts that matter to me
Media - 17
Filebrowser
Personal drive: web UI over the /data tree, occasional file sharing via link
Media - 18
Hermes
Self-hosted AI agent (Nous Research): contrarian second brain and backup butler, persistent memory, reachable 24/7 over Telegram
AI - 19
Time Machine
Mac backup over SMB on a dedicated LXC, on a direct gigabit LAN, never over the VPN
Other