Homelab Topology Map

I’m a huge fan of self hosting. I love having full control of my data, privacy, and not being at the mercy of large provider’s whims/mistakes for my account and data’s continued existance.

Over the last 5 years I’ve slowly grown my home lab environment to host almost 2 dozen services that I use on a regular basis as a replacement for mainstream, often privacy invading services like Gmail, Google Photos, OneDrive, Spotify, Netflix and a handful of others.

All the services below are running as docker compose containers on Linux Based VMs, within a 3 node Proxmox Cluster, with the majority of services routed through NGINX Proxy Manager reverse proxy for SSL Certificates + Encryption. The services that I regularly use while i’m out and about are whitelisted to be reachable through WAN and everything else is LAN only, but reachable through a Wireguard VPN tunnel if needed.

Network Topology Map:

SelfHostedServicesTopologyMap.drawio.svg (Might take a few seconds to load depending on your connection speed) Draw.io File:SelfHostedServicesTopologyMap.drawio

Hardware

The Cost of Running a Home Lab#equipment

Services

ServiceDescription
pfSenseFirewall
WireguardVPN Tunnel
Adguard HomeDNS Level Adblocker + Internal DNS Resolver
Adguard Home SyncSynchronizes Adguard Home instances’ configurations
NGINX Proxy ManagerReverse Proxy + SSL Encryption for Services
ntfy.shPush notification service
HeimdallWeb Dashboard for quick links
RadicaleCalDAV/CardDAV server
Node-Redflow editor for home automation
DeconzZigbee Controller for Home Automation
SyncthingContinuous File Synchronization
urBackupOpen Source Client/Server Backup Service
Paperless-NGXDocument Management System
Proxmox Backup ServerDeduplicating Proxmox VM Backups
File BrowserGraphical File Browser for NAS
AudiobookshelfAudiobook & Podcast Server
JellyfinMedia Server
PlexMedia Server
NavidromeMusic Streaming Server
KavitaEbook Server
ImmichSelf Hosted Google Photos Alternative

To Do List

  • Migrate from NGINX Proxy Manager to Caddy for Automatic SSL setup for new Docker services
  • Setup Unifi + Prometheus + Unifi Poller for Visual Monitoring
  • setup Crowdsec for crowd sourced host blacklisting

Last updated on August 27, 2024. For any questions/feedback, email me at blog@zinchuk.xyz.