ZSLab Wiki
This is the homepage of my Home Lab (ZSLab). This wiki was born because I want to have a better documentation of my home lab, and to share my knowledge with others.
Note that this wiki will never be "up to date", as I am constantly playing with new toys and changing the way I do things.
๐ Table of Contentsโ
๐ The beginningโ
It all started with "I want to backup my photos", so I bought a Synology DS920+.
๐ Networkingโ
For hardware used, see Hardware.
Softwareโ
The home network uses a soft router running OPNsense and a Proxmox server for virtualization. Within OPNsense, I run AdGuard as a network filter and Unbound as a DNS server. On the same machine, I run Omada Controller as an SDN controller for my wired network.
VLANsโ
VLANs are defined in OPNsense and used to separate the network into different zones.
Intrusion Detectionโ
Suricata is used to detect intrusions and anomalies.
๐ Securityโ
Traefikโ
Traefik allows me easily access applications on the internal network through my registered domain name.
Tailscaleโ
Tailscale connects all the devices in my home lab and allows me to access them from anywhere.
Cloudflareโ
Cloudflare protects my home lab from the outside world.
OAuth 2.0โ
OAuth is connected to Traefik to force authentication for specific applications.
๐ค Automation Through Ansibleโ
I use Ansible to automate the setup of my home lab. They are managed on GitHub.
๐ Stuff to doโ
- Document existing network
๐ Stuff to Exploreโ
- Remove port fowarding to Traefik by using Cloudflare tunnels
Recommended Setup for Traefik using Cloudflare Tunnels : r/Traefik
- Enable Cloudflare Tunnel Authentication for monitoring applications
- Deploy portainer to monitor docker containers
- Add AdGuard or PiHole on Proxmox with Edge Router
- WireGuard mesh network using OPNsense ยท Tailscale Docs Tailscale WireGuard mesh network using OPNsense
- Traefik Tailscale Documentation - Traefik Provision TLS certificates for your internal Tailscale services.
- Exploring the Tailscale-Traefik Integration | Traefik Labs
- Recently reorganized network into VLANs : r/homelab look into Hashicorp tools
- Plex update list to tell users what new media there is (update notice)
- Setup Duplicity to backup Synology to OneDrive Encrypted #important