My Homelab

A compact self-hosted environment built around Proxmox, pfSense, and Linux.

Architecture Overview

Internet ISP Connection
pfSense Firewall • Router • VLANs
Proxmox VE Hypervisor • VMs • LXC Containers
Linux Services Debian / Ubuntu • Docker • Apps

Hardware

Main Server (Proxmox)

  • Dell Precision T3500
  • Intel Xeon W3565 @ 3.20 GHz
  • 8 cores / 1 socket
  • 20 GB RAM
  • Multiple storage drives
  • Runs 24/7 as the main hypervisor

Networking

  • pfSense firewall / router
  • Zyxel 8-port managed PoE switch
  • TP-Link EAP610 access points
  • VLANs for Trusted / Lab / IoT
  • Tailscale for secure remote access

Other Devices

  • Raspberry Pi (4 GB RAM) — running ADS-B

Proxmox VE

Running on the Dell Precision T3500 (Xeon W3565, 8 cores, 20 GB RAM).

  • Full virtual machines for heavier workloads
  • LXC containers for lightweight services
  • Regular snapshots before making changes
  • Built-in backup system to local storage
  • Web interface for easy day-to-day management

pfSense

Handles all routing, firewalling, and network segmentation for the lab.

  • Primary firewall and edge router
  • VLAN segmentation (Trusted, Lab, IoT, Guest)
  • DNS resolver + DHCP server
  • Traffic monitoring and logging

Tailscale

Used for secure remote access to the homelab.

  • Mesh VPN based on WireGuard
  • Easy access to internal services from anywhere
  • No need to open ports on the firewall
  • Works across all devices (phone, laptop, etc.)

Linux Stack

Almost every service inside the lab runs on Linux.

  • Debian 12 and Ubuntu Server as base systems
  • Docker for many self-hosted applications
  • Common services: reverse proxy, monitoring, media, automation
  • SSH + key-based authentication only
  • Regular updates and minimal attack surface

Goals of the Lab

  • Learn networking, virtualization, and Linux administration
  • Host personal services instead of relying on the cloud
  • Keep the setup simple, reliable, and low-maintenance
  • Experiment safely with snapshots and isolated networks