JasonJeffers
I run my homelab like production, with an AI doing a lot of the operations work. This is what I build, what breaks, and what I learn.
You, anywhere
A phone on 5G, a laptop in a hotel. Every request starts outside the house.
Cloudflare edge
Identity is checked here, before anything reaches home. Access, Tunnel and Workers do the front-door work.
Read how it worksAI operator
Claude runs day-to-day operations through APIs, with docs in Git, secrets in a vault, and a rollback plan for every change.
UniFi network
Gateway, VLANs, cameras, and encrypted DNS through Zero Trust.
Observability
Metrics, logs, uptime checks, and alerts that reach my phone, with quiet hours.
Read how it worksStorage + backups
NAS storage and nightly, verified backups for every guest that fits.
Home Assistant
The house itself, with its own nightly backup and a tested restore.
Tour the lab
Operations
An AI operator, on a short leash.
Claude does the hands-on work through each system's API. Every change is planned, approved, logged in Git and reversible. Secrets never leave the vault.
Observability
Know before you go looking.
VictoriaMetrics, VictoriaLogs and Grafana on one small VM. Thirteen alert rules reach my phone, and warnings wait until morning.
Read the build notesStorage
Backups that have been restored.
Nightly backups to Proxmox Backup Server for every guest that fits, verified, with a test restore to prove it.
Compute
Four nodes, one standard.
A Proxmox cluster running the VMs and containers. New builds follow the newest node; older ones get rebuilt to match.
Network
Segmented and quiet.
UniFi gateway and switching, VLANs by purpose, and DNS that leaves the house encrypted through Cloudflare Zero Trust.
Edge
Nothing listens at home.
Cloudflare Tunnel and Access put identity in front of every service. The router has no open ports.
Read the build notes
The rack
Every post, racked by length: 1U for a quick read, up to 3U for a long one. The lit unit is the newest. See all writing
- Bringing a ten-year-old Google Workspace domain up to 2026 email standardsFive MX records, a DMARC policy that only covered 5% of mail, and no transport security. Here is what I changed, in what order, and why each record matters.3 min read
- Remote desktop in a browser tab, with no client and no open ports2 min read
- Observability for a homelab without the Prometheus sprawlMetrics, logs, uptime checks and alerts for a four-node Proxmox cluster, UniFi network and NAS boxes, running on one small VM. What I picked, what I skipped, and why alerts go to Telegram.3 min read
Check a domain's email security
Looks up the public DNS records that decide whether mail from a domain can be spoofed or read in transit. Runs in your browser through Cloudflare's DNS-over-HTTPS. Nothing is stored.