Personal homelab documentation — migrated from the PhD lab environment to home. GL.iNet Flint 2 + TL-SG108E + VLAN segmentation now live.
| Section | Description |
|---|---|
| Physical Infrastructure | Rack layout, hardware inventory, power |
| Networking | Topology, VLANs, firewall, VPN |
| Services | Proxmox VMs, NAS, monitoring, self-hosted apps |
| Devices | All connected endpoints |
graph TD
WAN[University-connected upstream WAN]
Router[GL.iNet Flint 2<br/>stock OpenWrt · Router / Firewall]
Switch[TP-Link TL-SG108E<br/>8-Port Smart Switch, 802.1Q]
PATCH[Patch Panel<br/>12-Port Cat6]
IoT_AP[Old TP-Link<br/>OpenWrt 15.05.1 · dumb AP]
VLAN10[VLAN 10 — Lab<br/>Proxmox · nas/gha-runner/monitor VMs+LXCs · debian boxes]
VLAN20[VLAN 20 — Trusted<br/>WiFi `dfair_lab` · Phone · MacBook Pro]
VLAN30[VLAN 30 — IoT<br/>Cameras · smart plugs · research devices]
WAN --> Router
Router -->|2.5G Uplink, native VLAN 1 + tagged 10/20/30| Switch
Switch --> PATCH
Switch -->|access port 6| IoT_AP
PATCH --> VLAN10
Switch --> VLAN10
Router -.->|WiFi| VLAN20
IoT_AP --> VLAN30
| Item | Status |
|---|---|
| Physical rack build | ✅ Done |
| GL.iNet Flint 2 as main router | ✅ Running |
| VLAN configuration (10 Lab / 20 Trusted / 30 IoT) | ✅ Done — all 3 VLANs live, devices migrated, static reservations set |
| Proxmox setup | ✅ Running |
| Hermes HP gateway | ✅ Codex OAuth primary + Telegram gateway active; Qwen3.5 2B alias verified, automatic fallback pending live qualification — runbook |
| Local GPU LLM (Phase 4) | ✅ VM108 P4000 with Qwen3 8B (4K) and Qwen3.5 2B (64K) systemd services, authenticated Caddy HTTPS; host reboot and second-service reboot recovery pending — runbook |
| NAS / storage | ✅ Done |
| VPN (inbound) | ✅ VPS-relayed WireGuard live 2026-10-25; XPS off-network access validated, reboot/isolation checks pending |
| Mullvad selective egress | ✅ NAS + Telegram proxy Mullvad egress and switchable VLAN 20 VPN/WAN mode verified 2026-10-25; reboot/boot-order audit pending |
| GitHub Actions runners | ✅ KC + DFAIR + KC-Timing; Timing deployed 2026-10-27; nightly source update checks (check-only) |
| Monitoring stack | ✅ Kuma 2.5.7 with tested Telegram alerts; Prometheus/Grafana metrics running; runner job-active test pending |
| VLAN 30 Internet egress | 🔒 IoT → WAN forwarding removed 2026-10-22; client validation pending |
homelab-docs/
├── README.md ← You are here
├── docs/
│ ├── physical/
│ │ ├── README.md ← Rack layout & hardware inventory
│ │ ├── power.md ← UPS, PDU, power planning
│ │ └── rack-layout.md ← Visual rack diagram & placement
│ ├── networking/
│ │ ├── README.md ← Network overview & topology
│ │ ├── vlans.md ← VLAN design & policy
│ │ ├── firewall.md ← Firewall rules & design
│ │ └── vpn.md ← Inbound VPN & Mullvad config
│ ├── services/
│ │ ├── README.md ← Services overview
│ │ ├── proxmox.md ← Proxmox setup & VMs
│ │ ├── nas.md ← NAS / storage / qBittorrent
│ │ └── monitoring.md ← Monitoring stack
│ └── devices/
│ └── README.md ← Device inventory & notes
└── assets/ ← Diagrams, screenshots