Infrastructure / Security Monitoring

Homelab Monitoring Stack

Active / Expanding Infrastructure / Self-Hosting

My homelab is actively evolving into a self-hosted project environment for portfolio infrastructure, AI workflow tools, small web apps, monitoring/security experiments, and repeatable deployment practice.

Overview

My homelab is actively evolving into a self-hosted project environment for portfolio infrastructure, AI workflow tools, small web apps, monitoring/security experiments, and repeatable deployment practice.

Problem

I wanted a hands-on environment to learn how infrastructure, monitoring, security visibility, DNS filtering, remote access, and alerting work together in real systems.

My Role

I designed, configured, tested, and documented the environment as a personal learning lab.

Tools Used

Proxmox TrueNAS / NAS planning Uptime Kuma AdGuard Wazuh CrowdSec Tailscale UniFi OS Server 10Gb networking Cloudflare Tunnel Docker LXC

Process

  • Build and organize virtualized services.
  • Monitor uptime and service health.
  • Add DNS filtering and remote access tooling.
  • Experiment with security monitoring and alerting.
  • Document how services relate to each other.
  • Plan network and storage improvements.

Challenges

  • Keeping services organized.
  • Balancing convenience with security.
  • Avoiding unnecessary exposure of internal services.
  • Learning how monitoring and alerting tools overlap.
  • Planning around real network hardware limitations.

Outcome

Multiple projects are being organized in Docker, remote access is improving with Tailscale, and Cloudflare Tunnel concepts are being used for safe exposure where appropriate. The environment now supports practical deployment, troubleshooting, monitoring, and documentation work.

What I Learned

  • Monitoring is only useful when alerts are meaningful.
  • Homelabs are best when they are documented clearly.
  • Security tools require tuning and context.
  • Network design decisions affect everything downstream.
  • Self-hosting teaches troubleshooting across many layers.

Future Improvements

  • Add a sanitized network diagram.
  • Improve centralized logging.
  • Add more structured alert documentation.
  • Expand Wazuh and CrowdSec use cases.
  • Add backup testing documentation.
  • Create public-facing writeups for specific services.

Sanitized Screenshots / Artifacts

Uptime Kuma dashboard
Sanitized screenshot coming soon - remove public IPs, private IPs, hostnames, tokens, internal URLs, and sensitive service details before publishing.
Proxmox VM/container list
Sanitized screenshot coming soon - remove public IPs, private IPs, hostnames, tokens, internal URLs, and sensitive service details before publishing.
Wazuh dashboard
Sanitized screenshot coming soon - remove public IPs, private IPs, hostnames, tokens, internal URLs, and sensitive service details before publishing.
CrowdSec dashboard
Sanitized screenshot coming soon - remove public IPs, private IPs, hostnames, tokens, internal URLs, and sensitive service details before publishing.
Network diagram
Sanitized screenshot coming soon - remove public IPs, private IPs, hostnames, tokens, internal URLs, and sensitive service details before publishing.
Service map
Sanitized screenshot coming soon - remove public IPs, private IPs, hostnames, tokens, internal URLs, and sensitive service details before publishing.