How did you create this diagram?

Very nice! Question tho, how bad’s the power bill?

This is beautiful... What are you using your homelab for?

I see development environments and a lot of virtualized stuff, is it just for learning/FAFO?

This is more complicated than most professional organizations. Very nice

Very impressive and great work, thanks for sharing, inspiring!!

I’m what you call a professional dumbass

Same here. ^same ^here.

And great work. And props for keeping it organized enough to be able to create a somewhat organized diagram of it all. Respect.

It's only been a bit less than a month since the last diagram update, but I've done a lot of rearranging!

As per usual, diagram and shape libraries for those of you that want to check it out! Ansible playbooks are also on GitHub, though they still need to be updated to fit the new migration to Proxmox.

The new server layouts have been inspired by /u/rts-2cv's modified version of /u/gjperera's own template.

Also, there are a few easter eggs in the diagram now. Feel free to see if you can find em!

The obvious

Many of y'all have mentioned dark mode. Took me a while to get the colors to look good, and I'm still not sold on the colored server blocks for the VLANs, but I don't think they look awful. It's certainly harder getting things to look good for those backgrounds than it is in light mode.

Diagram updates

Hardware specs

I've wanted to showcase hardware specs for a while, and finally came up with a decent looking way to do it.

Services

Hopefully, this makes it a bit clearer as to what things that might not be standard I'm running in certain situations.

Core updates

OPNsense

Heard about the shenanigans Netgate has been pulling for a while now with pfSense, but the nail in the coffin was when someone couldn't reinstall Home/Lab due to an invalid license, and found out about the cancellation of that program via support ticket, because no official announcement was made at the time.

Anyway, I set up OPNsense from scratch, backed up pfSense config, and combed through it and manually recreated everything. Somehow total downtime was less than 2 hours.

Removed remote access VPN

The remote access VPN is no longer needed, and since I can access things via Tailscale, I removed the tunnel and made one less hole I have to poke in the firewall.

New™ zirconium Optiplex server

I've recently inherited an Optiplex 7050 Micro that was given to me. Nothing too powerful, but I slapped 16GB of RAM in it, and it now serves its duty running Home Assistant.

In lieu of moving Home Assistant to the 3020, I've elected to install it here. This lets me tuck this in on a different UPS from the rack. While the HA dashboard will be down if the rack goes down, cause there won't be network access, Zigbee most importantly should still work. Which means that maintenance on the servers or the UPS in the rack won't disable my lights from working.

Zigbee stuff

On a related note, I migrated all of the lights I have from the Philips Hue bridge to Home Assistant on zirconium and now I can theoretically rip that out of the rack. Frees up a plug on the PDU, and it gets rid of the second Zigbee network, so in theory everything should work a little bit better.

But holy shit, compared to Hue stuff just working on their bridge and the app, I spent so much time getting lights working again. Still don't have a reliable way to cycle through scenes on the dimmers, but I have on/off and brightness working for now, so that's the thing that matters.

Network updates

DN42

So this whole thing is new to me, and I'm still in the process of getting things up, but I have an ASN with DN42 now, and have peered with someone, and can see routes. The curious thing I cannot figure out is that from OPNsense, I can ping my peer on the other side of the VPN, and I have routes advertised to me via BGP, so it should know where everything is, but I can't ping anything on the DN42 network.

If someone knows how I might fix this, that would be awesome!

VM updates

Debian development environment

I've had some weird issues with upgrading Python on Ubuntu, and migrated to Python 3.12 for one of my projects. As a result, I've added a Debian based VM on my computer that has Python installed where I can compile Python 3.12 things.

To Do List

• Fix my Ansible playbooks, and properly write them to do more things. One of these days, I'll get around to it.

I love design, wish i do same, but my lab evolving faster than i can draw diagrams...

wierd nitpick, pihole has a lot of writes for logs, and QVO drives don’t like writes, i’d swap that for an EVO or smtn else entirely, gorgeous otherwise

This is good stuff.

Quick FYI for folks looking for a learning opportunity - if anyone is looking at this as a professional learning experience, this would be far, far too confusing and has entirely too much info. If this were a complex banking system, for example, this would be broken down into 3 or 4 different diagrams, with a dedicated diagram for each of the key systems as well, and info like IP wouldn't be included. (Just had to re-do a bunch of diagrams for one of the largest banks in the world, because they had grown to be incredibly complex like this.)

For a homelab though, I love it. I especially like the very unusual color scheme because all the colors complement each other very well. OP, you have a good eye for color.

pretty cool, im sure its been said and probably you just done care, but why is ther hardware so separated, i mean why is like that single proxmox box that is doing just about nothing other than eating 400w idling with those dual xeons, instead of moving those functions into docker/q or vm on main desktop etc.

also maybe im blind but wheres your fw/routers at? I'd assum its your sc510 doing it but it only seems to have ovpn and unbound on it.

also curious, how and where do you actually cloud backup to? do you just backup the 30tb array or all 150t? this is just going to google? arent they pretty terrible for bandwidth throttling when trying to retrieve data back? did you ever test it?(not talking shit, just actually curiious if I could setup similar).

HOLY SHIT‼️ I wish I was that smart. I mean, I don’t even have a network switch or VM environment. That’s like a very time needed solution. I have a 16 yr old daughter, 5 yr old son and an almost 2 yr old daughter. I don’t think I could find time working remote and building that. How long have you been at it and how much do you think you spent in money minus your time?

I salute you sir‼️This old man (55) can’t hold a candle to your impressive setup. I’m jealous and would almost want to pay someone or have a friend help me get started. That’s my problem, I think too far in the weeds and ahead to just start.

I noticed it before but is there a specific use case / reason you're running some docker containers outside stacks? I noticed on nitrogen that pihole is not inside a stack, or plex & portainer. The same for oxygen where you're running unifi-controller, homarr and a few others outside compose files.

Perhaps an idea to add your stack name to the information, so it's clear why they're left out of the stack? As on nitrogen I'd call it a media stack but then would include Plex as well. Unless it's a download stack, what would explain why Plex is not part of it ;)

Another Q but perhaps already answered somewhere is what (and it's more a general question) people decide to run multiple VMs with multiple docker stacks per VM instead of having one machine and have all docker stacks on a single VM/system?