Home lab projects
Things I've built at home. Each one is described by what it does and what I learned, not how my network is laid out.
Home lab
A Proxmox cluster of containers and virtual machines behind an OPNsense firewall, with a managed Cisco switch configured from the command line. It runs Authentik single sign-on in front of services, a Smallstep certificate authority with automated renewal, a password vault, DNS filtering, power-aware shutdown through a UPS, and scheduled backups. Everything is documented, and I treat the documentation as part of the system.
Lab audit dashboard
A Python dashboard that observes the lab and flags anything that has drifted from its documentation. It tracks where every deployed file came from, hands files out only through an allowlist, and every change to it has to pass its test suite on the real server before it counts. Building it taught me that a check can pass and still tell you less than you think. A few of those lessons are in the notes.
Domain, certificates and mail
I registered a domain and set up email on it with SPF, DKIM and DMARC, so mail is authenticated and hard to spoof. I also set up Let's Encrypt with the DNS-01 challenge, which proves domain ownership through DNS alone, using an API token limited to a single zone.
Ecne
An agentless network scanner that fingerprints hosts and builds a structured model of a network, a kind of digital twin, for security assessment. It works without storing credentials.
Neit
A breach-and-attack simulator, still in design, that will run attack scenarios against an Ecne model of a network. The working proof of concept is an AI referee: an attacker model and a defender model take turns over a randomly generated network, and the referee judges every move. Nothing either model writes is ever executed.