Self-Hosted Infrastructure
What I build at home on weekends, I use during the week as the basis for decisions at work. Open source over vendor lock-in — self-hosted, documented, understood.
Home Assistant
Home Assistant runs as a dedicated HAOS VM on Proxmox — with around 3000 entities from over 40 Zigbee devices, the local weather station, air quality sensor, robot vacuum and multiroom audio.
All integrations run completely local — no cloud dependency, no data sharing, no outage when the internet goes down. Automations respond in milliseconds.
Home Assistant · Integrated
All security systems run centrally through Home Assistant — from cameras to water sensors. Every event triggers defined automations: immediate notification, optional siren, logging. No cloud subscription, no external monitoring centre — everything local, everything under control.
36 Stacks · 104 Containers
No Google Drive. No LastPass. No Notion.
Everything runs internally — controlled, current, understood.
Physical Layer
"The best monitoring system is one you built and broke yourself — at least once."
Zero Trust
No service is directly reachable from the internet. Every external access passes through the zero-trust stack — firewall with intrusion detection, then SafeLine WAF for layer-7 protection against web attacks, then two-factor authentication via Authelia, only then does one reach a service.
Internally, all systems are segmented. Compromising one device cannot spread laterally — firewall rules prevent unauthorised zone transitions.
Segmentation
Every device class lives in its own zone — with explicit firewall rules between segments.