●compute7

hypervisorVMware vSphere — two-node cluster, mini-PCs

node_01Intel NUC 12 — i7, 64GB ECC DDR4, 1TB NVMe

node_02Intel NUC 12 — i7, 64GB ECC DDR4, 1TB NVMe

total_ram128GB ECC

vms_running15 — mix of NixOS, Ubuntu, Windows

orchestrationk3s — single-node Kubernetes, because why not

guest_osNixOS — declarative, reproducible, occasionally infuriating

●storage5

primary_nasSynology DS923+ — 4-bay, raidz2 equivalent

capacity12TB usable after parity

protocolNFS + iSCSI — 1.0TB iSCSI for VMs, NFS for the rest

secondaryTrueNAS Scale — older machine, backup target + ZFS snapshots

backupsRestic — local → NAS → cold storage. 3-2-1. Restores tested twice, in 2025.

●network6

firewallFortigate 60F — gateway, IPS, SD-WAN

switchingUbiquiti USW-Pro-24-PoE — 24-port managed

wifiUbiquiti U6-Pro ×2 — whole-house coverage, unifi controller

vlans4 production, 4 experimental — IoT, lab, DMZ, mgmt, and four you talked yourself into

uplink1Gbps fiber — symmetric, into the meterkast

dnsPi-hole + Unbound — recursive, local overrides, no cloud

●services7

proxynginx — DMZ reverse proxy, TLS termination

gitGitLab CE — private repos, CI/CD, container registry

home_automationHome Assistant — 138 devices, zigbee, z-wave, mqtt, wifi

ipamNetbox — IP management, rack diagrams, cable tracking

documentsPaperless-ngx — scanned, OCR'd, searchable

observabilityPrometheus + Grafana + PRTG — metrics, dashboards, alerts

miscVaultwarden, Jellyfin, Nextcloud — the classics

●workstation6

machineMacBook Pro M3 — main driver, 18GB

osmacOS + WSL2 on a Windows box — depending on the task

editorVS Code — with too many extensions, as god intended

terminalWezTerm — JetBrains Mono, dark, no nonsense

shellzsh + starship — minimal prompt, lots of aliases

monitorLG 27" 4K — nothing exotic