diff --git a/README.md b/README.md new file mode 100644 index 0000000..73514f8 --- /dev/null +++ b/README.md @@ -0,0 +1,82 @@ +# Enterprise Hybrid IaC Homelab: Version 2 🚀 + +THis is my **Homelab Version 2**. This project is an advanced, expanded, and more secure iteration of the private cloud architecture first built in [Homelab v1](https://github.com/Isshi0417/homelab-server.git). + +Version 2 upgrades the OS baseline, scales the virtual infrastructure from 3 to 5 virtual machines, shifts from experimental Podman Quadlets to robust system-level sytemd service wrappers, and introduces secure, zero-config WAN networking (Cloudflare Tunnels & Playit.gg) to bypass local NAT limitations. + +--- + +## 1. What's New in Version 2? (V1 vs V2 Comparison) + +| Engineering Metric | Homelab V1 | Homelab V2 (Current Project) | +|:---|:---|:---| +| **Control Laptop OS** | Nobara Linux | **Bazzite** (Atomic/Immutable Fedora-based OS) | +| **Physical Host OS** | RHEL 10 | **AlmaLinux 10** (Network Bridge `br0`) | +| **VM Capacity** | 3 Virtual Machines | **5 Virtual Machines** (Scaled & Isolated workloads) | +| **Container Engine** | User-level Podman Quadlets | **System-level systemd Podman wrappers** (compatible with Debian 12 Podman 4.3.1) | +| **Identity Management** | None (Local files/User lists) | **FreeIPA Identity Manager** (`freeipa.lab.local`) | +| **Web Reverse Proxy** | Local Nginx bindings | **Cloudflare Zero Trust Tunnel** (`--net=host` container) | +| **Game Server Hosting** | None | **Minecraft & Palworld Dedicated VMs** router port-forwarding | +| **Shared Storage** | None | **Rclone FUSE Google Drive Mount** (`user_allow_other` enabled) | + +--- + +## 2. Infrastructure Architecture + +This lab runs on a dedicated physical BOSGAME PC acting as our baremetal KVM hypervisor. The VMs are bridged directly to the local LAN, allowing them to act as first-class network devices. + +```mermaid +graph TD + Laptop[Laptop: Bazzite OS] -- SSH / IaC Control --o Hypervisor[Hypervisor Host: AlmaLinux 10] + + subgraph host ["Hypervisor Host (172.30.1.200)] + Bridge[Physical Bridge: br0] + KVM[KVM / QEMU Hypervisor] + Cloudflared[cloudflared container
--net=host] + + Bridge --- Cloudlfared + Bridge --- VM1[freeipa
172.30.1.85] + Bridge --- VM2[portfolio
172.30.1.93] + Bridge --- VM3[minecraft
172.30.1.91] + Bridge --- VM4[palworld
172.30.1.90] + Bridge --- VM5[navidrome
172.30.1.92] + end + + subgraph cloudflare ["Cloudflare Edge (WAN)"] + CF_Edge[Cloudflare Proxy] + CF_Edge -- portfolio.shooey.xyz -> VM2:80 --o Client1[Browser] + CF_Edge -- Secure Tunnel -o Cloudflared + CF_Edge -- hampter.shooey.xyz -> VM2:8080 --o Client2[Browser] + CF_Edge -- ipa.shooey.xyz -> VM1:443 --o Client4[Browser] + end + + subgraph playit ["Playit.gg Edge (WAN)"] + Playit_Edge[Playit UDP/TCP Relays] + Playit_Edge -- UDP Tunnel --o VM4[Palworld playit agent] + Playit_Edge -- TCP Tunnel --o VM3[Minecraft playit agent] + end +``` + +--- + +## 3. Project Documentation Directory + +To keep the project clean, the documentation is modularized as below: + +* **[Hypervisor & Bridge Networking](./docs/01_hypervisor_networking.md)** +*Setting up AlmaLinux 10, KVM, storage pools, bridge interface (`br0`), and DHCP MAC reservation sweeps.* + +* **[IaC Provisioning (Terraform & Ansible)](./docs/02_provisioning.md) +*Declarative VM deployments using Terraform cloud-init templates, and Ansible playbooks to install Podman, mount drives, and configure files.* + +* **[Secure Remote Access (Cloudflare Tunnels)](./docs/03_cloudflare_tunnels.md)** +*Configuring the `cloudflared` agent container in host network mode to expose web services privately with Host Header overrides for FreeIPA.* + +* **[Dedicated Game Servers](./docs/04_game_servers.md)** +*Setting up Minecraft Java server (wuith auto-pause and RCON console) and Palworld UDP server, tunneled through Playit agents using custom SRV records. + +* **[Shared Cloud Storage (Rclone & FUSE)](./docs/05_navidrome_rclone.md)** +*Configuring Rclone to mount Google Drive, adjusting `/etc/fuse.conf` permissions, and setting up the Navidrome music server. + +* **[Custom Web Hosting (Hammie's Y2K Card Deck)](./docs/06_hamster_website.md)** +*A dedicated early-2000s pink hamster website on port 8080 with 3D flippable cards, local loopable `.webm` background audio, and click-sparkle JS. diff --git a/docs/01_hypervisor_networking.md b/docs/01_hypervisor_networking.md new file mode 100644 index 0000000..7fa3e66 --- /dev/null +++ b/docs/01_hypervisor_networking.md @@ -0,0 +1 @@ +Update at later time diff --git a/docs/02_provisioning.md b/docs/02_provisioning.md new file mode 100644 index 0000000..7fa3e66 --- /dev/null +++ b/docs/02_provisioning.md @@ -0,0 +1 @@ +Update at later time diff --git a/docs/03_cloudflare_tunnels.md b/docs/03_cloudflare_tunnels.md new file mode 100644 index 0000000..7fa3e66 --- /dev/null +++ b/docs/03_cloudflare_tunnels.md @@ -0,0 +1 @@ +Update at later time diff --git a/docs/04_game_servers.md b/docs/04_game_servers.md new file mode 100644 index 0000000..7fa3e66 --- /dev/null +++ b/docs/04_game_servers.md @@ -0,0 +1 @@ +Update at later time diff --git a/docs/05_navidrome_rclone.md b/docs/05_navidrome_rclone.md new file mode 100644 index 0000000..7fa3e66 --- /dev/null +++ b/docs/05_navidrome_rclone.md @@ -0,0 +1 @@ +Update at later time diff --git a/docs/06_hamster_website.md b/docs/06_hamster_website.md new file mode 100644 index 0000000..7fa3e66 --- /dev/null +++ b/docs/06_hamster_website.md @@ -0,0 +1 @@ +Update at later time