Homelab write-ups
What I build after hours to go deeper: infrastructure as code, Zero Trust access, security monitoring and AI tooling. Architecture and lessons, with the sensitive bits left out.
How I am building an alert-handling layer on top of Wazuh: a local LLM writes first-pass summaries, I triage with a written playbook, and a council of models gates any automated patching, failing safe to high risk.
Read Private repository
How my four-node Proxmox cluster is described in Terraform and Ansible and driven entirely from GitLab CI, with reviewed plans, a manual approval gate and secrets loaded at run time.
Read Private repository
Moving my domain to Cloudflare and publishing homelab services through replicated Tunnel connectors, with Access on every route and JWT validation at the connector.
Read Private repository
Why I wrote my own Model Context Protocol servers for Proxmox, Wazuh, Tailscale and Jira, and the scoped, read-mostly design that keeps an AI agent useful without handing it the keys.
Read Private repository
A home security monitoring stack built around two complementary lenses: Wazuh for hosts and as the central log and alert pipeline, Suricata for network traffic, and what I learned about tuning them.
Read Private repository