TomSecSECURITY / SYSTEMS
TOMSEC / PUBLIC TERMINAL

READ-ONLY SESSION · CHOOSE A SYSTEM TO INSPECT

~/search
~/ HOME

> inspect --trust-boundaries

PUBLIC RECORD / READ-ONLY

The homelab

Learning by operating real services.

FRAME / 02 · CONCEPTUAL TOPOLOGY

Public surface. Private control.

EDITORIAL VIEW
NO PRIVATE TELEMETRY
Public surface. Private control. Select a node to inspect its role.TRUST BOUNDARY / SEPARATE ROUTESNODE 01INTERNETNODE 02PUBLIC EDGENODE 03TOMSECNODE 04CLOUD SERVICESNODE 05TRUSTED DEVICENODE 06NETBIRDNODE 07LINUX HOSTNODE 08MEDIA SERVERNODE 09BOUNDED STORAGENODE 10OBSERVABILITY
INSPECT / INTERNET

Visitors reach published applications. This conceptual map makes no live requests to the lab.

Conceptual architecture and editorial service descriptions. This page does not query private health endpoints.

Compute

  • HP Linux homelab server
  • Media server
  • Desktop workstation
  • Fedora laptop

Platforms

  • Debian
  • Ubuntu
  • Fedora
  • Windows

Containers

  • Docker
  • Docker Compose
  • systemd startup integration

Networking

  • NetBird private overlay
  • Cloudflare application access
  • Xray privacy routing
  • DNS / HTTPS / reverse proxies

Security & observation

  • Vaultwarden
  • AdGuard
  • Caddy
  • Uptime Kuma
  • Dozzle

Storage & applications

  • Nextcloud
  • Kiwix
  • Local recovery snapshots
  • Jellyfin / media automation
  • Minecraft

Application roles

Vaultwarden

Password management with restricted registration and consistent recovery snapshots.

Operating

Nextcloud

Documents, coursework and file access within a bounded storage tree.

Operating

AdGuard

DNS filtering for the lab environment.

Operating

Uptime Kuma & Dozzle

Service checks and container log inspection through private access.

Operating

Kiwix

An offline reference collection on persistent storage.

Operating

Minecraft

Game server administration; a backup mount-check repair remains outstanding.

Operating