Homelab
Journal
The project's logbook, step by step, with the mistakes and what they taught.
-
Login watch, and the WAF again
An alert when login attempts come from an address never seen to succeed, without noise from 5G; dashboards fixed; and a night when the WAF was killed 139 times.
-
A fifth disk, then a disk replaced
Full burn-in of a second-hand disk, RAIDZ2 expanded from 4 to 5 disks without downtime, then a disk with growing bad sectors replaced, with no free bay.
-
Security audit, fleet updates and email
A black-box and grey-box audit, schedulable updates for the whole fleet with vulnerability watch, readable logs, and emails that finally get past the filters.
-
Group-based access, quotas and documentation in the homelab's colours
Access to each service is granted by ticking a group, administration rights follow the directory, and allocated space is set from a single page.
-
Monitoring, a custom NOC and automation
The homelab monitors itself, sends alerts to the phone, shows its status on a home-made NOC and is driven from Semaphore.
-
First server in service, first audit
The T330 is running, and so is the firewall; an audit of what exists sets the priorities before adding services.
-
Launching the homelab
Why I am building a personal 24/7 infrastructure, and how it will be built.