AJ's Blog

Homelab, 2024 stage 2

Stage 2 Security

The next stage of setting up my homelab will include ensuring that my network is secure and I have a mechanism for monitoring my systems for malicious software or unauthorized access. I will be sharing my guidelines as I am not comfortable showing my own firewall rules and configuration.

Network Security

Network security begins at your gateway to the internet. Your internet service provider (ISP) will assign a “public” or internet accessible IP address that will be configured on a network interface of the gateway/router in your network. You want to ensure that only authorized connections are allowed inbound to your public IP address as anyone who knows your IP address can attempt to open connections to your gateway.

Homelab, 2024 stage 1 Networking

updated 2024-04-28

Stage 1 Networking

The backbone of the homelab will be the Network. In a US residential property, there will be a commercial telecommunications company that provides connection to the internet. This will vary based on where you live in the world.

Once you have access to the internet, you need to connect your devices to a private network that shares access to the internet through your gateway.

Private networks refer to networks that are restricted in access, typically within a specific organization, such as a business, educational institution, or government agency. These networks are designed to be accessed only by authorized users or devices, offering a higher level of security compared to public networks like the internet. Most people do not realize that their internet service provider sets up a private network for them. For a homelab, you control the network rather than a business or other institution. Here are the basics:

State of the homelab, March 2024

As part of a big move, I will be setting up the homelab from the ground up. I am also setting a new objective for the homelab. The homelab is an environment to learn about software and computer networks. I prefer to learn by example so my lab will be a do-it-yourself software factory. There are many roles in the Tech industry and a homelab is a good place to learn aspects of technology that go beyond writing code.

Prometheus run on macOS

On macOS, you can run a Prometheus server by running the binary that is compatible with Apple silicon. If you are looking for information about what to do with Prometheus, check out a previous post to get an overview.

Install

If you are using a Mac, I recommend using homebrew to install Prometheus along with many other applications.

brew install prometheus

Configure prometheus

You can configure this Prometheus server by creating/updating the file /opt/homebrew/etc/prometheus.yml

Diagrams as code

Creating Diagrams with Mermaid.js

Mermaid is a JavaScript library for creating diagrams and flowcharts using a simple and intuitive markdown-like syntax. Mermaid.js allows developers and users to generate various types of diagrams, including flowcharts, sequence diagrams, Gantt charts, class diagrams, and more, directly in the browser or as part of web applications. It is already integrated in:

• vscode
• obsidian
• github

Setup

First, you need to include the Mermaid.js library in your project. You can do this by adding the following script tag to your HTML file:

Bridge home networks with Wireguard

Remote site project

I am moving but will not be moving in to the new place for at least several weeks. That is what prompted this project. Since I will not be on the property, I wanted to set up some Wi-Fi enabled security cameras until I can move all of my homelab to the new location.

Project description

This project will involve setting up a “remote site” or “edge” location (which is really the house where I am moving).