This is the repository for all my automations and notes for my homelab. My homelab runs on a single home server.
The base is Proxmox Community Edition with the following network setup:
- Proxmox SDN — internal network for inter-VM/container communication (10.0.0.0/24)
- Proxmox default bridge — LAN access from home network, later WAN access from VPN routing (192.168.15.0/24)
The homelab is organized into layers, simulating companies departments:
Base infrastructure — the most critical and sensitive pieces. Everything else depends on it.
- Proxmox — host virtualization
- Docker Compose — container orchestration
- Traefik — reverse proxy and TLS termination (via Cloudflare DNS challenge), running with
network_mode: host - Cloudflare DDNS — keeps DNS records in sync with the home WAN IP
- Container Registry — private Docker image registry (Distribution v3) with a browsing UI, no auth yet (internal
.labonly)
Apps that govern and organize the lab: IAM/OAuth provider, DNS, automation, wiki/docs. All other services should integrate with these.
- CoreDNS - Hosted in a LXC Container, terminates the domain for local access
- authentik - IAM/OAuth provider (replaces the previously used lldap)
Apps organized by area/objective, each isolated by domain and purpose (Active development):
- Personal
- Development
- Music/DJ
- Gaming servers
- Household
- still deciding...
| Service | Layer | Domain |
|---|---|---|
| Traefik v3.6 | Platform | traefik.lab.marioverde.com.br |
| Cloudflare DDNS | Platform | — |
| Container Registry | Platform | registry.lab.marioverde.com.br |
| Registry UI | Platform | registry-ui.lab.marioverde.com.br |
| CoreDNS (LXC) | Corporate | — |
| authentik | Corporate | auth.lab.marioverde.com.br |
| Meerkat CRM | Personal | meerkat.lab.marioverde.com.br |
APPNAME.app.marioverde.com.br= Apps that will be deployed in WANAPPNAME.lab.marioverde.com.br- Apps deployerd both in LAN and Internal network.