greenbeanorg

Andy Alexander — Homelab & Infrastructure

Multi-site homelab infrastructure, documented as production-style runbooks. I'm a Linux systems engineer, and this is where I design, break, fix, and document infrastructure. Everything here is real and running — Proxmox across two sites, ZFS storage on TrueNAS SCALE, OPNsense edge routing over XGS-PON fiber, a WireGuard overlay network, redundant DNS, and automated verified backups.

Repositories

homelab-docs

Runbooks and design docs: storage, backup, networking, power, DNS, services

homelab

Sanitized configs: Docker Compose stacks, NUT, restic scripts, tooling

Recently completed

done30TB storage migration: mdadm RAID5 → TrueNAS SCALE / ZFS RAIDZ1 with PCIe SATA passthrough
doneRedundant Pi-hole DNS across two independent failure domains, advertised via Kea DHCPv4
doneWireGuard hub-and-spoke VPN — cloud-hosted hub, multi-site subnet routing, roaming clients
doneAutomated, verified restic backups with 90-day retention to off-site cloud storage
doneReplaced ISP gateway with an XGS-PON ONT-on-a-stick running community firmware — eliminated a recurring outage
doneRebuilt an ARM single-board host off an orphaned vendor kernel onto maintained Armbian

In progress

wipAnsible fleet management — baseline, NUT, restic, and Docker host roles
wipVLAN segmentation on the core switch, replacing a flat L2 network
wipPrometheus + Grafana + node_exporter, alongside Uptime Kuma
wipTerraform for declarative Proxmox VM provisioning