Fifty VMs on one host used to share one flat bridge with my LAN. Now every VM lives in its own VLAN behind a VyOS router VM — denied by default, published through the proxy, declared as code.
How Terraform, cloud-init, Ansible, and Docker Compose turned recurring homelab work into a supervised, reviewable workflow.
How I turned routing, authentication, DNS and public exposure into a repeatable workflow for every self-hosted service.
Enterprise by Design is a blog series documenting the design and implementation of a fictional company's IT infrastructure. Every architectural decision is driven by business requirements and implemented using real-world technologies and best practices.
Keeping services available can be a difficult task. Here’s how I approach it in my homelab.
I use Authentik as the central identity provider in my homelab.
Implementing SSO for SSH using Vault and Authentik. Why I do not use Traditional SSH Keys