Certificates

A LAN-Only Web Console for My Home Lab

The scripts I used to run by hand from my desktop now live behind a small LAN-only web console. It uses passkey sign-in and a fixed list of audited actions. Claude drafts pages, and a security gate checks them before I approve anything.

Diagram of the acme.sh DNS-01 certificate automation across Cloudflare, Lets Encrypt, a local cert cache, and SSH push to internal hosts

Let's Encrypt for Internal Hosts with DNS-01 and SSH Push

How I replaced a dozen ad hoc certbot setups with one central acme.sh instance. It uses DNS-01 validation through Cloudflare and pushes each certificate to its host over SSH.

Diagram of the self-hosted mail flow through postscreen, milters, Dovecot, direct delivery and webmail

Self-Hosted Email: Running My Own Mail Server Again

How I moved my domain’s email from a hosted provider to a self-hosted Postfix and Dovecot server in my home lab, the design choices behind it, and what I learned along the way.