Homelab Infrastructure
Full home lab network designed to replicate a real enterprise infrastructure: VEVOR 12U rack, dual Proxmox hypervisors, pfSense firewall, Cisco L3 switch with VLANs, Active Directory and a full monitoring stack.
Addresses, hostnames and version numbers are deliberately anonymized for security reasons.
Network Topology
Click any component to view its detailed project page.
Homelab Evolution
- 112U Network Rack Build and Homelab Infrastructure
Full homelab build: VEVOR 12U rack, dual Proxmox hypervisors (Dell R720 + HP ProDesk), pfSense on Sophos SG210, Cisco 3560-CX L3 switching and UniFi Wi-Fi.
Proxmox VE 8pfSense CE 2.xCisco IOS 15.2D-Link - 2Network Segmentation: VLANs, L3 Inter-VLAN Routing and Cisco ACLs
5-VLAN segmentation with L3 inter-VLAN routing on Cisco 3560-CX, named ACLs for traffic filtering, and pfSense reduced to WAN/NAT gateway role.
Cisco IOS 15.2VLANs 802.1QRoutage L3ACLs nommées - 3Full Monitoring Stack: Zabbix, Prometheus, Grafana and Loki
Self-hosted monitoring stack in LXC containers: Zabbix 7 (SNMP), Prometheus, Grafana and Loki with Grafana Alloy for centralised log collection.
Zabbix 7Prometheus 3Grafana 13Loki 3 - 4Active Directory Deployment on Windows Server 2022 Core
Active Directory DC (corp.lab.example) on Windows Server 2022 Core in Proxmox VM, with integrated DNS, OU structure and security GPOs.
Windows Server 2022 CoreActive Directory DSDNS autoritaireGPO - 5Self-hosted services on Proxmox: VLAN 20 application infrastructure
9 self-hosted services on Proxmox LXC (VLAN 20): wiki, task management, n8n automation, local Ollama LLM, Jellyfin media server and finance apps.
Proxmox LXCDebian 12Dockern8n - 6pfSense Security Hardening: 12-Block Firewall Configuration
Structured pfSense CE 2.x hardening in 12 blocks: admin lockdown, DNS over TLS, NTP, logging, XML backups and physical/VM instance synchronisation.
pfSense CE 2.xFirewallDNS over TLSNTP sécurisé - 7DNS infrastructure, secure remote access and secret management
Secure access infrastructure: Vaultwarden password vault, NPM wildcard SSL, AdGuard DoT DNS filtering, Tailscale VPN and split-horizon DNS.
VaultwardenNginx Proxy ManagerAdGuard HomeTailscale
Detailed project pages
12U Network Rack Build and Homelab Infrastructure
Sept 2025Full homelab build: VEVOR 12U rack, dual Proxmox hypervisors (Dell R720 + HP ProDesk), pfSense on Sophos SG210, Cisco 3560-CX L3 switching and UniFi Wi-Fi.
Network Segmentation: VLANs, L3 Inter-VLAN Routing and Cisco ACLs
Oct 20255-VLAN segmentation with L3 inter-VLAN routing on Cisco 3560-CX, named ACLs for traffic filtering, and pfSense reduced to WAN/NAT gateway role.
Full Monitoring Stack: Zabbix, Prometheus, Grafana and Loki
Nov 2025Self-hosted monitoring stack in LXC containers: Zabbix 7 (SNMP), Prometheus, Grafana and Loki with Grafana Alloy for centralised log collection.
Active Directory Deployment on Windows Server 2022 Core
Dec 2025Active Directory DC (corp.lab.example) on Windows Server 2022 Core in Proxmox VM, with integrated DNS, OU structure and security GPOs.
Self-hosted services on Proxmox: VLAN 20 application infrastructure
Jan 20269 self-hosted services on Proxmox LXC (VLAN 20): wiki, task management, n8n automation, local Ollama LLM, Jellyfin media server and finance apps.
pfSense Security Hardening: 12-Block Firewall Configuration
Feb 2026Structured pfSense CE 2.x hardening in 12 blocks: admin lockdown, DNS over TLS, NTP, logging, XML backups and physical/VM instance synchronisation.
DNS infrastructure, secure remote access and secret management
Apr 2026Secure access infrastructure: Vaultwarden password vault, NPM wildcard SSL, AdGuard DoT DNS filtering, Tailscale VPN and split-horizon DNS.