Homelab

A production-style platform at home where I practice what I do at work: run it, break it, write it down. The full story is the Homelab Rebuild series.

  • Hardware: a three-node Proxmox VE 9 cluster.
  • Stack: k0s, Cilium, FluxCD, Terraform, OpenBao, CloudNativePG, OpenTelemetry with VictoriaMetrics and Grafana, Kyverno and Tetragon.
  • Access: tailnet, home LAN, and a Cloudflare Tunnel (Three Ways Into My Homelab).

Homie

One page for the whole homelab: Proxmox, Kubernetes, Flux, alerts and security findings, with deep links for everything else. A single Rust binary, no database, about 5 MiB of memory.

dvarapala

An anti-DDoS gateway with protection from L4 to L7: connection limits, TLS, HTTP/2 and HTTP/3 limits, a token bucket per client, adaptive flood detection, and egress rate shaping toward third-party APIs. Runs as a reverse proxy, a forward proxy, or in process through Go, Python and JavaScript SDKs, with shared state across replicas and an optional XDP program that drops packet floods in the NIC driver. A Rust binary of 4.4 MB, about 6 MB of memory when idle.

ipcalc

An IPv4 and IPv6 subnet calculator that explains every answer and maps IPv6 back to IPv4 habits: explain, split, containment check, route summary, and a free JSON API. One WebAssembly component of 356 KB, about 6 MiB of memory.

Socialbtw

Hides spam, hate and harassment in the replies to my Threads posts. Each reply is graded by a decision model, with a chat model only for unsure cases. A Rust binary, about 1 MiB of memory.