m4nifest0-tech

Search the site

Homelab · IT infrastructure

Servers, networks and virtualization. Designed with method.

I'm m4nifest0: this is where I collect projects, guides and notes on Proxmox VE clusters, Linux and Windows Server, segmented networks, backup, security and automation. From my home lab, with method and documentation.

Proxmox VE · LXC · Linux · Windows Server · VLAN · VPN · Backup · Monitoring

Skills

Areas of interest and expertise

The fields where I design, experiment and document. Each area leads to the related projects.

  • System administration

    Linux and Windows Server

    Installing, configuring and maintaining servers: services, roles, updates and documentation.

    See the projects

  • Virtualization and containers

    Proxmox VE and LXC

    Proxmox VE clusters, virtual machines and LXC containers, with attention to resources, isolation and recovery.

    See the projects

  • Networking

    VLANs, firewalls, DNS and VPN

    Network segmentation, access rules between segments, name resolution and secure remote access.

    See the projects

  • Storage and continuity

    NAS, backup and disaster recovery

    Data storage, verifiable backup strategies and recovery plans after a failure.

    See the projects

  • Cybersecurity and monitoring

    Hardening and observability

    Reducing the attack surface, access control, logs and alerts on the state of the infrastructure.

    See the projects

  • Self-hosting and automation

    Repeatable infrastructure services

    Services hosted at home, provisioning and configuration managed as code, versioned and reproducible.

    See the projects

  • Enterprise hardware

    Resource optimization

    Enterprise-class servers and components: power draw, noise, redundancy and efficient use of CPU, RAM and disks.

    See the homelab

  • AI for IT infrastructure

    Models run locally

    Artificial intelligence to analyze logs and metrics, keeping data inside your own infrastructure.

    See the projects

Portfolio

Featured projects

A selection of the most significant work: problem, implemented solution and results.

  • Storage and backupCompleted

    3-2-1 backup with automated restore verification

    Backup chain with Proxmox Backup Server, a NAS, and an off-site copy, paired with automated test restores that confirm it can be relied on.

    • Proxmox Backup Server
    • NAS
    • ZFS
    • verification script
  • NetworkingActive

    Segmented network with VLANs and a firewall

    Network divided into isolated VLAN segments (management, servers, clients, home automation, guests) with the firewall as the only routing point between segments.

    • VLAN 802.1Q
    • firewall
    • DNS
    • DHCP
    • +1
  • VirtualizationCompleted

    High-availability Proxmox VE cluster

    Three Proxmox VE nodes with ZFS replication and automatic VM failover, keeping services up even after the failure of a single node.

    • Proxmox VE
    • Corosync
    • ZFS
    • ZFS replication
    • +1

Inside the rack

Four layers, one lab

From the network to the power supply: each layer of the infrastructure has a precise role and relies on the others.

  1. Network and perimeter

    A perimeter firewall, a managed switch and the patch panel: all traffic between the five VLAN segments goes through a single control point.

    Network, VLANs and firewall
  2. Clustered compute

    Three heterogeneous Proxmox VE nodes with quorum, ZFS replication and high availability: virtual machines and containers can move from one node to another.

    Proxmox VE cluster
  3. Data and backup

    A dedicated NAS holds the services' data and the second copy of the backups, which are verified with test restores and not just with scheduled jobs.

    NAS and storage
  4. Power

    A monitored rack UPS warns the nodes before the battery runs out: an orderly shutdown beats a sudden failure.

    Physical nodes and hardware

Homelab

The lab where I try, break and rebuild

Cluster, network, storage and self-hosted services treated like a real environment and described by category. Addresses, hostnames and security rules are deliberately kept off the public pages.

Explore the homelab

Overall architecture

Homelab overviewOverview of the homelab, from top to bottom: the Internet reaches a firewall, connected by a trunk to a managed switch. The Proxmox VE cluster and the NAS holding the backup copies branch off the switch; the self-hosted services and the monitoring system run on the cluster.PerimeterNetwork coreInfrastructureWorkloadsInternetFirewallsegmentation and VPNManaged switchVLAN segmentsProxmox VE clustervirtualization and HANAS and backupdata and backup copiesSelf-hosted servicesVMs and containersMonitoringmetrics, logs, and alertsWAN802.1Q trunkhostshosts
Homelab overview. Overview of the homelab, from top to bottom: the Internet reaches a firewall, connected by a trunk to a managed switch. The Proxmox VE cluster and the NAS holding the backup copies branch off the switch; the self-hosted services and the monitoring system run on the cluster.

Blog and guides

Latest articles

Hands-on guides and technical notes, with copy-ready commands and notes on the critical points.

Contact

A question, a proposal or an error to report?

Write to me: your email app opens with the message ready to go, and I reply as soon as I can. If you're reporting an issue with an article, include its title so I can check quickly.

Or by email: email address protected (enable JavaScript to see it)