Build. Break. Learn. Repeat.
A hands-on space for exploring technology, security and new ideas. Select a topic and explore what I'm building and learning.
STAY CURIOUS. KEEP EXPLORING.
Proxmox VE cluster CLU01 runs virtualized workloads across pve and pve2. TrueNAS provides NFS-based storage used for images and backups. The lab is also a place to learn recovery from real storage interruptions.
FortiGate handles firewalling and segmentation, FortiSwitch provides switched connectivity, and FortiAP adds wireless access. VLAN separation supports experimentation without placing every system on the same network.
Two Windows Server domain controllers provide Active Directory, DNS and DHCP services. An offline Root CA signs an Enterprise Issuing CA, with certificates and revocation lists available from a separate IIS publication server. Certificate templates and automatic enrollment are planned.
The Cowrie SSH honeypot is already running at home on Proxmox, with events forwarded to Wazuh. A public, anonymized event feed and an isolated interactive demonstration are ideas for a later release — not features currently exposed here.
Zabbix provides infrastructure and server monitoring, while Action1 supports patch and vulnerability management. The public Monitoring page ↗ is currently a design preview without live backend access.
A Windows client will be introduced after the hybrid identity environment is ready. Autopilot, device enrollment and further automation are planned experiments, not completed installations.