Homelab
A self-hosted platform for personal services, monitoring and local AI.
Personal services need repeatable deployment, reliable networking, service visibility and appropriate access boundaries.
My contribution
How it worksDesigned the environment, integrated upstream applications, configured ingress and network access, maintained persistent services, and published sanitized configuration and validation tooling.
How it works
Six independently managed Docker Compose stacks on Fedora Linux, with Caddy ingress, HTTPS, restricted remote access, monitoring, GPU-enabled services and configuration validation.
- Remote accessLAN, split DNS and WireGuard
- IngressCaddy HTTPS and source-IP policies
- Compose stacksInfrastructure, media, apps and data services
- OperationsMonitoring, alerting and log visibility
- Local computeNVIDIA GPU workloads and AI services
Engineering decisions
Separated Compose projects
Use independently managed stack boundaries with explicit volumes and common network access.
Defense in depth
Combine private-network/source-IP access controls with app-level authentication rather than expose all dashboards publicly.
Configuration checks
Automate static Compose and Caddy configuration validation in GitHub Actions.