Skip to content

🏠 Homelab Documentation

Personal homelab documentation — migrated from the PhD lab environment to home. GL.iNet Flint 2 + TL-SG108E + VLAN segmentation now live. Public for research reproducibility.

Section Description
Physical Infrastructure Rack layout, hardware inventory, power
Networking Topology, VLANs, firewall, VPN
Services Proxmox VMs, NAS, monitoring, self-hosted apps
Devices All connected endpoints

High-Level Overview

graph TD
    WAN[🌐 Home ISP]
    Router[GL.iNet Flint 2<br/>stock OpenWrt · Router / Firewall]
    Switch[TP-Link TL-SG108E<br/>8-Port Smart Switch, 802.1Q]
    PATCH[Patch Panel<br/>12-Port Cat6]
    IoT_AP[Old TP-Link<br/>OpenWrt 15.05.1 · dumb AP]

    VLAN10[VLAN 10 — Lab<br/>Proxmox · nas/gha-runner/monitor VMs+LXCs · debian boxes]
    VLAN20[VLAN 20 — Trusted<br/>WiFi `dfair_lab` · Phone · MacBook Pro]
    VLAN30[VLAN 30 — IoT<br/>Cameras · smart plugs · research devices]

    WAN --> Router
    Router -->|2.5G Uplink, native VLAN 1 + tagged 10/20/30| Switch
    Switch --> PATCH
    Switch -->|access port 6| IoT_AP
    PATCH --> VLAN10
    Switch --> VLAN10
    Router -.->|WiFi| VLAN20
    IoT_AP --> VLAN30

Status

Item Status
Physical rack build ✅ Done
GL.iNet Flint 2 as main router ✅ Running
VLAN configuration (10 Lab / 20 Trusted / 30 IoT) ✅ Done — all 3 VLANs live, devices migrated, static reservations set
Proxmox setup ✅ Running
Hermes HP gateway ✅ Codex OAuth primary + Telegram gateway active; Qwen3.5 2B alias verified, automatic fallback pending live qualification — runbook
Local GPU LLM (Phase 4) ✅ VM108 P4000 with Qwen3 8B (4K) and Qwen3.5 2B (64K) systemd services, authenticated Caddy HTTPS; host reboot and second-service reboot recovery pending — runbook
NAS / storage ✅ Done
VPN (inbound) ✅ VPS-relayed WireGuard live 2026-10-25; XPS off-network access validated, reboot/isolation checks pending
Mullvad selective egress 🔲 Planned — separate NAS and Uptime Kuma Telegram routing
GitHub Actions runners ✅ KC + DFAIR + KC-Timing; Timing deployed 2026-10-27; nightly source update checks (check-only)
Monitoring stack 🔧 Running; runner job-exporter added 2026-10-22, job-active test pending
VLAN 30 Internet egress 🔒 IoT → WAN forwarding removed 2026-10-22; client validation pending

!!! note This page mirrors the repo's root README.md (GitHub's landing page) for the built site's homepage. Keep both in sync when either changes.

Mullvad egress and Telegram notifications (2026-10-25)

Selective Mullvad egress is deployed for NAS/qBittorrent, Telegram proxy CT 107, and switchable Trusted VLAN 20 using Flint 2 trusted-vpn on|off|status. Uptime Kuma 2.5.7 sends tested Telegram alerts via the proxy. See the Mullvad runbook for validation, safe rollback, and reboot/boot-order follow-ups.