Homelab Infrastructure - Edge Router + Production VPS

OpenWrt Edge Router + Self-Hosted VPS (13+ Services)

Personal • 2024 – Present

Production (2+ years)

My self-hosted network has been running continuously for over 2 years and now spans the home edge and the cloud. An OpenWrt edge router (Wi-Fi 6) joins my home LAN and a public VPS into one private network over a WireGuard site-to-site tunnel, with network-wide AdGuard DNS filtering and nftables default-deny segmentation (LAN / guest / WireGuard). On the VPS, a system-level Nginx acts as a reverse proxy with SSL termination (Certbot), forwarding traffic to 13+ Docker containers bound exclusively to 127.0.0.1 across 4 domains. Admin services (VPN management, remote-access gateway) sit behind Authelia SSO with YubiKey WebAuthn 2FA, and the UFW firewall exposes only HTTP(S), WireGuard and SSH. The full sanitized config, CI linting, and audit/health scripts are on GitHub.

View source on GitHub

Internet → Nginx (TLS, Certbot) → Docker services on 127.0.0.1 ├── CV website (this site) ├── VPN management (Authelia SSO + YubiKey) ├── Remote-access gateway (Authelia SSO + YubiKey) ├── Authelia SSO portal ├── File browser ├── UPSl schedule platform and the schedule caching app └── Lab projects (game-finder and others)

Domains

arseni-aliakseichyk.com - CV, VPN, remote access, SSO
arseni-lab.com - lab projects (UPSl schedule platform, game-finder, cloud, presentation)
upsl.lol - legacy domain, redirects to upsl.arseni-lab.com
raspisanie-bsufl-neoficalno.lol - university schedule caching

OpenWrt
WireGuard (site-to-site)
AdGuard Home
nftables
Docker/Compose
Nginx
Certbot
UFW
Authelia
Linux networking