NODE MAP · PRIVACY-SAFE
The lab
A high-level view of how the homelab is organised. Details that would help an attacker — addresses, hostnames, topology, credentials — are deliberately omitted.
CORETrusted services
Container host running background jobs and internal tooling.
EDGEIngress & DNS
Filtering, name resolution, and controlled inbound paths.
LABExperiments
Isolated segment where things are allowed to break.
IOTUntrusted devices
Segregated from trusted hosts by policy, not by hope.
Operating principles
- Segment first: trust zones are separated so a compromise stays contained.
- Measure everything: if it isn't observable, it isn't in production.
- Power-aware: idle draw matters as much as peak throughput.
- Recoverable: every change has a documented rollback path.