Everything below runs on a repurposed old laptop. Built and maintained by me, in my free time.
The site runs inside a containerized Nginx environment managed through Docker. The container isolates the web layer from the host system to keep it separate and self‑contained. This setup allows me to redeploy or adjust the web stack without affecting the underlying server.
All public traffic is routed through Cloudflare Tunnel, which exposes the site to the internet without opening any inbound ports on my home network. This keeps the host completely closed off from direct external access while still allowing the site to remain reachable. The tunnel acts as the only entry point, reducing the attack surface and keeping internal services private.
My network uses a two‑stage DNS setup designed for privacy and control:
This setup removes reliance on third‑party DNS providers and gives full visibility into DNS behavior. No upstream resolver means queries go directly to the root servers to improve privacy.
I built this with the understanding that many people viewing it work in IT and know how to probe a system, so the public surface area is intentionally minimal and hardened to make casual inspection or access significantly more difficult :
The whole environment runs on repurposed laptop hardware and supports the DNS, VPN, container, and web services that make up my homelab. It’s straightforward, reliable, and maintained by one person.