Administrative access stays private. Public services are exposed deliberately.
Lab
Own the stack where it matters.
A small personal infrastructure project: learn the layers, keep them replaceable, and expose as little as possible.
EDGE
↓
Cloudflare
DNS, Pages, TLS and selected public service tunnels.
HOME LAB
↓
Hub
Ubuntu Server on repurposed hardware. Containers, APIs, monitoring and experiments.
STORAGE
NAS + Backups
Redundant local storage with independent backups. RAID is redundancy, not backup.
Principles
Small rules that keep the lab sane.
The domain stays constant while hosting, mail and compute can change.
Critical data gets verified copies before storage experiments begin.
Use abstractions, but understand DNS, TLS, SSH, containers and storage underneath.