#Homelab
All CosmicBytez Labs articles tagged #Homelab, across news, security advisories, how-to guides, and projects.
- Project
Cloudflare Zero Trust Tunnel: Secure Remote Access Without Open Ports
Expose self-hosted homelab services to the internet with zero inbound firewall rules, using cloudflared tunnels and Cloudflare Access policies for...
- Project
DMARC Aggregate Report Monitoring with ParseDMARC, Elasticsearch, and Grafana
Deploy an open-source pipeline that pulls DMARC aggregate reports from a mailbox, indexes them in Elasticsearch, and visualizes spoofing attempts in Grafana.
- Project
Fleet + osquery: Cross-Platform Endpoint Visibility and Live Queries
Deploy Fleet in Docker to fleet-manage osquery agents across Linux, macOS, and Windows, run live SQL queries against live endpoints, and alert on drift...
- Project
Zabbix Monitoring Stack: Self-Hosted Infrastructure Health & Alerting
Deploy Zabbix 7.0 in Docker to monitor hosts, containers, and network gear, then wire trigger-based alerts straight into Discord.
- Project
Headscale: Self-Hosted Tailscale Control Server for Zero-Trust Mesh VPN
Replace Tailscale's cloud coordination server with a self-hosted Headscale instance, then lock the tailnet down with ACL policies, tagged nodes, and a...
- HOWTO
Deploying Vaultwarden: A Self-Hosted Password Manager
Stand up a lightweight, Bitwarden-compatible password vault on your own infrastructure — with Docker, TLS via reverse proxy, and an automated backup routine.
- Project
MITRE Caldera: Building an Adversary Emulation Lab
Deploy MITRE Caldera in your homelab to run automated ATT&CK-based adversary emulation, validate detection rules, and run structured purple team exercises.
- Project
Step-CA: Build a Private Certificate Authority for Your Homelab
Stop accepting self-signed certificate warnings. Deploy Smallstep's step-ca as a fully automated internal PKI — complete with ACME support, Traefik...
- Project
TheHive: Self-Hosted Incident Response Case Management
Build a production-grade security incident response platform using TheHive 5, Cassandra, Elasticsearch, and MinIO — then integrate it with Wazuh alerts...
- Project
Gophish Phishing Simulation Lab: Security Awareness Testing in Docker
Deploy a self-hosted phishing simulation platform using Gophish in Docker. Build real-world phishing campaigns, track user engagement, and run security...
- Project
OpenCTI: Building a Cyber Threat Intelligence Platform in Your Homelab
Deploy OpenCTI to aggregate, correlate, and visualize threat intelligence from MISP, NVD, AlienVault OTX, and Shodan — all in a self-hosted Docker stack.
- Project
Building a SOAR Platform with Shuffle in Your Homelab
Deploy Shuffle, the open-source SOAR platform, to automate security workflows and orchestrate your homelab tools — from Wazuh alerts to enrichment lookups...
- Project
Teleport PAM: Zero-Trust Privileged Access for Your Homelab
Deploy Teleport's open-source privileged access management platform to replace static SSH keys with short-lived certificates, enforce MFA, record every...
- Project
Building a Wazuh XDR + SIEM Homelab
Deploy a full Wazuh stack in Docker to gain host-based intrusion detection, file integrity monitoring, vulnerability scanning, and active response across your…
- Project
Runtime Security Monitoring with Falco: Detect Container
Deploy Falco on a Docker host to monitor container syscalls at the kernel level, write custom homelab detection rules, and route real-time alerts through.
- Project
Pi-hole v6 + Unbound: Network-Wide DNS Sinkhole with Recursive Resolution
Deploy Pi-hole v6 as a network-wide DNS sinkhole backed by Unbound as a self-hosted recursive resolver — eliminating ads, trackers, and malware domains...
- Project
Build a Production Monitoring Stack with Prometheus and Grafana
Deploy a full observability stack — Prometheus metrics collection, Grafana dashboards, AlertManager notifications, and three exporters — all containerized...
- Project
Building a Production-Ready Reverse Proxy with Traefik v3
Deploy Traefik v3 as a Docker-native reverse proxy with automatic Let's Encrypt TLS, label-based routing, and security middleware — no more port juggling...
- Project
Self-Hosted Password Manager with Vaultwarden
Deploy a fully self-hosted, Bitwarden-compatible password manager using Vaultwarden on Docker with Caddy reverse proxy, automatic TLS, WebSocket...
- Project
WireGuard Road Warrior VPN Server
Build a self-hosted WireGuard VPN server on Ubuntu for secure remote access — with NAT masquerading, DNS leak protection, QR-code client provisioning, and...
- Project
Build a Collaborative IPS with CrowdSec
Deploy CrowdSec on a Linux server to get community-powered intrusion prevention — block brute-force attacks, credential stuffing, and vulnerability...
- Project
Keycloak SSO: Self-Hosted Identity Provider for Your Homelab
Deploy Keycloak with Docker Compose and PostgreSQL to build a centralised single sign-on platform for your homelab services, with OIDC integration for...
- Project
HashiCorp Vault: Secrets Management for Your Homelab and Apps
Deploy HashiCorp Vault to centrally manage secrets, certificates, and dynamic credentials — eliminating hardcoded passwords from your infrastructure with...
- Project
Homelab Media Server with Full ARR Stack
Deploy a complete self-hosted media automation system with Plex, Sonarr, Radarr, Prowlarr, and more. Includes Traefik reverse proxy, Authentik SSO, and...
- Project
Kubernetes Homelab Cluster with K3s
Build a production-grade K3s cluster on Proxmox/bare metal with Longhorn storage, Traefik ingress, cert-manager, and ArgoCD for GitOps.
- HOWTO
Building a Secure Homelab in 2026: Complete Guide
Learn how to set up a production-grade homelab with proper network segmentation, monitoring, and security controls. Perfect for IT professionals and...