Security

Diagram of the home lab suite: public site, LAN-only console, private Git server, knowledge base and the hypervisor cluster underneath

My Home Lab Suite: A Guided Tour

A start-here tour of my home lab as one connected suite, from the Proxmox cluster and mail server to publishing, media, electronics and brewing, with a link to every project write-up.

Diagram of mail clients connecting to OpenLDAP over LDAPS, trusted by a private root CA

Building a Private LDAP Address Book with OpenLDAP

A private OpenLDAP address book secured with LDAPS, providing centralised contact lookup for Mutt and Thunderbird on a LAN.

Diagram of SSH and HTTP flows between the trusted workstation, DMZ web server, internal Git server and comments bridge

Locking Down SSH in a DMZ for Hugo Deployments

Hardening SSH to a DMZ web server revealed that my Hugo deploys also needed outbound Git access. Later I removed the inbound deploy trigger entirely, and that turned out to be the best hardening step.