qioqvi Log in

What I've built.

A homelab is a small data centre at home. Mine started as a place to learn, and now runs a private cloud my family uses every day: two small computers, a handful of services in sealed-off compartments, and a lot of care about what happens when something goes wrong.

How a visit reaches your photos

You, on your phone

You open the photos app. Your request sets off across the internet towards Tommy's home.

The location filter

Connections from places the cloud isn't used are dropped before they reach anything at all.

The front door

One small, locked-down gateway reads only the name on the envelope and passes the still-encrypted request to the right service.

The bouncer

Anyone who has been scanning or guessing passwords is already banned, and stopped here.

Two-step login

Your password plus a second step on your phone or a passkey. A stolen password alone gets nowhere.

Your photos

Inside its own sealed-off compartment, backed up and encrypted every night. Six stops, a fraction of a second.

Projects

Each one solves a real problem in the homelab.

  • Family cloud

    Photos and files for family and friends, behind one invite-only account with two-step login and storage plans.

    Proxmox, Immich, Nextcloud, Authentik

  • The front door

    A small gateway that sends encrypted connections to the right service by name, without decrypting them, while still passing on who the visitor really is.

    Traefik, TLS passthrough, PROXY protocol, CrowdSec

  • Storage plans that keep themselves in sync

    Change someone's plan in one place and every app follows within ten minutes. It never shrinks below what you already use, and tells me when something doesn't add up.

    Python, 19 unit tests, systemd

  • Security advisory watch

    Checks the projects I depend on every hour and tells me when a security fix is published, with my version next to the fixed one.

    Python, GitHub Security Advisories

  • Monitoring and alerts

    Every machine reports its health. Full disks, crashed services and failed backups reach my phone, and an outside check notices if the monitoring itself goes quiet.

    Prometheus, Grafana, Alertmanager, Uptime Kuma

  • Encrypted backups

    Nightly backups of every machine, encrypted before they leave it, with a third copy on a drive that's unplugged most of the time.

    Proxmox Backup Server

  • More to come

    Write-ups of each project, and projects from outside the homelab.