All projects
Homelab
Infrastructure across three sites where I try out what I later deploy for customers. This website runs on it too.
- Client
- Personal infrastructure
- Year
- 2026
- My role
- Design, Operations, Security
- Technology
- Proxmox VE, UniFi Cloud Gateway Ultra, WireGuard, Ansible, Wazuh, Grafana
About the project
The homelab is my sandbox for work. Before I recommend or deploy a technology for a customer, I try it out here on my own systems.
What it includes
- A network split into zones on a UniFi Cloud Gateway Ultra with a zone firewall and IPS: services, customer websites, management and smart devices are separated from each other.
- Two Proxmox VE servers and a Proxmox Backup Server, with backups also kept off-site.
- WireGuard connects all three sites and is also used for remote access.
- Single sign-on through Authentik behind Cloudflare Tunnel and Access.
- Security monitoring: a Wazuh SIEM agent on every server.
- Monitoring in Grafana with email alerts.
How it is managed
Everything is deployed with Ansible roles, and every service has documentation and runbooks for routine work and incidents. This website runs in containers in a separate zone for websites. It is published through Cloudflare Tunnel, so the server needs no open ports.