By the numbers
The whole stack, at a glance.
Networks4Home, work, IoT, DMZ
Internet2ISPs with failover
Alert rules17Every one emailed
Burn-in91 hBefore production
A home lab · online since 2026
A home network built like a carrier edge: segmented, redundant, watched and patched. Every box has a job, a name and an alert behind it.
Nothing trusts anything.
Home, work, smart devices and public services each live on their own network. Devices that don't need to talk can't.
Lose a line, keep going.
Two internet providers with automatic failover and failback, tested by pulling cables. A configured spare firewall sits in the safe.
If it breaks, I hear about it.
Prometheus and Grafana track every host. Alerts fire on silence, heat, high CPU, stopped services and full disks.
Updates don't wait for me.
Servers install security updates on their own from signed repositories. Keys only, no passwords, no root logins.
You reached a small Debian virtual machine running Caddy, in a DMZ built for exactly one job. It holds static files and a certificate, and that's all.
2.5 hours
From a written plan to a live, certified site: new network, firewall policy, server, monitoring and alerts.
An antenna on the roof feeds a Raspberry Pi that decodes the position reports aircraft broadcast. It contributes to a global flight-tracking network and drives three views of my own.