Alagaësia
overview
A self-hosted homelab that grew from an old desktop into a small cluster. Everything runs in a 10-inch mini rack containing a virtualization cluster, network-attached storage, and a segmented UniFi network. It hosts the services on the home page (and the site itself) — plus monitoring, dashboards, and an isolated lab for security work.
Inspired by the Inheritance Cycle, this homelab takes its names from the characters, places, and factions that make up Alagaësia. A small homage to a world I've spent far too much time reading about, now living alongside the hardware I've spent far too much time configuring.
the rack
by the numbers
- 3NODES
- 64GBRAM
- 8TBSTORAGE
- 1GbpsNETWORK
what it runs
infrastructure
- Compute Two-node Proxmox cluster on Dell OptiPlex Micros, hosting LXC + VMs. Standalone Proxmox node with GPU passthrough, running a cyber attack range and local LLMs.
- Storage Raspberry Pi 5 NAS with a mergerfs pool, served to the cluster over NFS.
- Network UniFi gateway and switching, VLAN-segmented with granular firewall rules.
- Edge & TLS Caddy reverse proxy with automatic wildcard certificates via DNS challenge.
architecture
Cloudflare · DNS
-
DMZPUBLIC
The Public Edge. Services exposed to the outside world, protected by a reverse proxy.
-
InternalTRUSTED
The Main Network. For personal devices and normal household traffic.
-
LabISOLATED
The Sandbox. Isolated environment for infrastructure, AI, and security research.
Untrusted Public (DMZ) Trusted Isolated
Logical view — physical topology, addressing, and host-to-service mapping omitted.