Homelab Topology Map
I’m a huge fan of self hosting. I love having full control of my data, privacy, and not being at the mercy of large provider’s whims/mistakes for my account and data’s continued existance.
Over the last 5 years I’ve slowly grown my home lab environment to host almost 2 dozen services that I use on a regular basis as a replacement for mainstream, often privacy invading services like Gmail, Google Photos, OneDrive, Spotify, Netflix and a handful of others.
All the services below are running as docker compose containers on Linux Based VMs, within a 3 node Proxmox Cluster, with the majority of services routed through NGINX Proxy Manager reverse proxy for SSL Certificates + Encryption. The services that I regularly use while i’m out and about are whitelisted to be reachable through WAN and everything else is LAN only, but reachable through a Wireguard VPN tunnel if needed.
Network Topology Map:
(Might take a few seconds to load depending on your connection speed) Draw.io File:SelfHostedServicesTopologyMap.drawio
Hardware
The Cost of Running a Home Lab#equipment
Services
Service | Description |
---|---|
pfSense | Firewall |
Wireguard | VPN Tunnel |
Adguard Home | DNS Level Adblocker + Internal DNS Resolver |
Adguard Home Sync | Synchronizes Adguard Home instances’ configurations |
NGINX Proxy Manager | Reverse Proxy + SSL Encryption for Services |
ntfy.sh | Push notification service |
Heimdall | Web Dashboard for quick links |
Radicale | CalDAV/CardDAV server |
Node-Red | flow editor for home automation |
Deconz | Zigbee Controller for Home Automation |
Syncthing | Continuous File Synchronization |
urBackup | Open Source Client/Server Backup Service |
Paperless-NGX | Document Management System |
Proxmox Backup Server | Deduplicating Proxmox VM Backups |
File Browser | Graphical File Browser for NAS |
Audiobookshelf | Audiobook & Podcast Server |
Jellyfin | Media Server |
Plex | Media Server |
Navidrome | Music Streaming Server |
Kavita | Ebook Server |
Immich | Self Hosted Google Photos Alternative |
To Do List
- Migrate from NGINX Proxy Manager to Caddy for Automatic SSL setup for new Docker services
- Setup Unifi + Prometheus + Unifi Poller for Visual Monitoring
- setup Crowdsec for crowd sourced host blacklisting
Last updated on August 27, 2024. For any questions/feedback, email me at blog@zinchuk.xyz.