Traefik Proxy
[#core]Edge HTTP reverse proxy and load balancer with dynamic Docker provider discovery and ACME TLS certificate management.
Homelab Lander & Infrastructure
CLUSTER ONLINE | 10GbE BACKBONE | TRAEFIK V3 EDGE PROXY
SYSTEM UPTIME: 99.98% (42d 14h)
LOCATION: ALABAMA DCs / RACK-01
/var/log/homelab-status.log
STDOUT [TTY1]
$ homelab-ctl status --output=summary
[OK] Edge Router: OPNsense 24.7 (10GbE SFP+ WAN/LAN)
[OK] Reverse Proxy: Traefik v3.1 (Auto Let's Encrypt TLS Wildcard)
[OK] Virtualization: Proxmox VE 8.2 Cluster (3 Bare-Metal Nodes)
[OK] ZFS Array: TrueNAS SCALE (48TB RaidZ2 Pool, 0 Degradation)
[INFO] Active Wireguard Mesh Peers: 14 Connected
[WARN] Sonarr Queue: 2 downloads pending verification
services_directory
OPNsense Firewall
[#core]Hardened FreeBSD firewall routing 10GbE traffic with VLAN isolation, Suricata IDS/IPS, and Unbound DNS.
Proxmox VE
[#compute]Enterprise hypervisor cluster hosting Debian LXC containers and KVM virtual machines with Ceph & ZFS backend.
TrueNAS SCALE
[#storage]Primary network attached storage managing 48TB ZFS RaidZ2 array, NFS shares, SMB datasets, and daily scrub jobs.
AdGuard Home
[#dns]Network-wide DNS sinkhole filtering trackers and ad domains across all VLANs with DNS-over-HTTPS upstream resolvers.
WireGuard Mesh
[#vpn]High-performance encrypted point-to-point VPN tunnel connecting remote laptops and mobile endpoints to homelab subnet.
Jellyfin Media
[#media]FOSS media streaming engine leveraging Intel QuickSync GPU hardware acceleration for 4K HDR transcoding.
Arr Stack (Sonarr/Radarr)
[#automation]Automated content indexing, Prowlarr torrent/Usenet management, and SABnzbd queue downloader pipeline.
Grafana & Prometheus
[#telemetry]Time-series metric collection with Node Exporter, Telegraf agents, and live cluster performance dashboards.
Uptime Kuma
[#status]Synthetic HTTP, Ping, and TCP health monitor broadcasting real-time service status alerts to Discord webhooks.
Vaultwarden
[#security]Lightweight Rust implementation of the Bitwarden API hosting encrypted credentials, SSH keys, and TOTP tokens.
Forgejo Git Server
[#git]Self-hosted Git forge hosting homelab infrastructure-as-code repos, Ansible playbooks, and Docker compose files.
hardware_nodes
| Hostname | Role & OS | Hardware Spec | CPU Load | RAM Util |
|---|---|---|---|---|
| gw-node01.lan | OPNsense 24.7 | Intel N100 (4C/4T) | 16GB DDR5 | 2.5GbE | 18% | 32% |
| pve-node02.lan | Proxmox VE 8.2 | AMD Ryzen 9 5900X (12C/24T) | 128GB ECC | NVMe | 42% | 68% |
| nas-node03.lan | TrueNAS SCALE | Intel Xeon E-2278G (8C/16T) | 64GB ECC | 6x16TB ZFS | 24% | 81% |
network_topology
// Network Edge & Traffic Routing Flow
[ WAN / INTERNET ]
│
▼
┌─────────────────────────┐
│ OPNsense Edge Gateway │ (10GbE SFP+ / Firewall / IDS)
└───────────┬─────────────┘
│
├───────────────► [ WireGuard Mesh VPN ] (51820/udp Remote Access)
│
▼
┌─────────────────────────┐
│ Traefik v3 Reverse Proxy│ (Auto TLS Certs / Authelia 2FA)
└───────────┬─────────────┘
│
┌─────────┴───────────────────────┬─────────────────────────┐
▼ ▼ ▼
┌─────────────────────────┐ ┌───────────────────────┐ ┌─────────────────────────┐
│ VLAN 10: Management │ │ VLAN 20: Services │ │ VLAN 30: Storage Pool │
│ • Proxmox VE (8006) │ │ • Grafana (3000) │ │ • TrueNAS ZFS (SMB/NFS) │
│ • AdGuard Home (53) │ │ • Jellyfin Media │ │ • MinIO S3 Bucket │
└─────────────────────────┘ └───────────────────────┘ └─────────────────────────┘