mirror of
https://github.com/ced4568/ceds-homelab.git
synced 2026-08-12 19:54:02 +00:00
Revise Ced's HomeLab Diagrams documentation
Updated the document to enhance clarity and organization, including new headings and improved diagram descriptions.
This commit is contained in:
Chase Dumphord
+85
-133
@@ -1,177 +1,129 @@
|
||||
# Ced's HomeLab – Network & Cloud Architecture Diagrams
|
||||
# 🧠 Ced's HomeLab - Architecture & Network Diagrams
|
||||
|
||||
This file contains **Mermaid diagrams** for:
|
||||
This document provides visual representations of the Ced's HomeLab environment, including:
|
||||
|
||||
- Cloud & homelab architecture
|
||||
- VLAN segmentation
|
||||
- Request flows (Proxmox, Home Assistant)
|
||||
- 🌐 Cloud and homelab architecture
|
||||
- 🧩 VLAN segmentation
|
||||
- 🔄 Request flow through Cloudflare, reverse proxy, and internal services
|
||||
|
||||
You can view or edit them with:
|
||||
- Mermaid Live Editor: https://mermaid.live
|
||||
- Draw.io (Arrange → Insert → Advanced → Mermaid)
|
||||
- GitHub / Obsidian / VS Code (Mermaid support)
|
||||
These diagrams explain how infrastructure components interact and how services are exposed.
|
||||
|
||||
---
|
||||
|
||||
## 1. High-Level Cloud & Homelab Architecture
|
||||
## 🛠️ Viewing & Editing
|
||||
|
||||
You can view or edit these diagrams using:
|
||||
|
||||
- Mermaid Live Editor: https://mermaid.live
|
||||
- Draw.io → Arrange → Insert → Advanced → Mermaid
|
||||
- GitHub / VS Code with Mermaid support
|
||||
|
||||
---
|
||||
|
||||
## 🌐 1. High-Level Cloud & Homelab Architecture
|
||||
|
||||
```mermaid
|
||||
graph TD
|
||||
subgraph Internet["🌐 Internet"]
|
||||
User[User Browser]
|
||||
end
|
||||
User[User Browser] --> CFDNS[Cloudflare DNS and SSL]
|
||||
CFDNS --> CFZT[Cloudflare Zero Trust Planned]
|
||||
CFZT --> CFTUN[Cloudflare Tunnel]
|
||||
CFTUN --> NPM[Nginx Proxy Manager 10.10.30.210]
|
||||
|
||||
subgraph Cloudflare["Cloudflare Edge"]
|
||||
CF_DNS[DNS & SSL]
|
||||
CF_ZT[Zero Trust (future)]
|
||||
end
|
||||
NPM --> PVE[Proxmox VE Host 10.10.30.250]
|
||||
NPM --> TRUENAS[TrueNAS Storage 10.10.30.143]
|
||||
NPM --> HA[Home Assistant 10.10.30.104]
|
||||
NPM --> GRAF[Grafana]
|
||||
NPM --> PROM[Prometheus]
|
||||
NPM --> UPTK[Uptime Kuma]
|
||||
NPM --> JF[Jellyfin]
|
||||
NPM --> ARR[Arr Suite]
|
||||
|
||||
subgraph Tunnel["Cloudflare Tunnel"]
|
||||
CF_Tunnel[cloudflared<br/>NPM LXC]
|
||||
end
|
||||
|
||||
subgraph HomeLab_VLAN["HomeLab VLAN 10.10.30.0/24"]
|
||||
NPM[Nginx Proxy Manager<br/>10.10.30.210]
|
||||
PVE[Proxmox VE Host<br/>10.10.30.250]
|
||||
TRUENAS[TrueNAS & Media<br/>10.10.30.143]
|
||||
HA[Home Assistant<br/>10.10.30.104]
|
||||
|
||||
subgraph K3S["Raspberry Pi K3s Cluster<br/>12 nodes"]
|
||||
K3S_M[Masters]
|
||||
K3S_W[Workers]
|
||||
end
|
||||
|
||||
subgraph OBS["Observability Stack"]
|
||||
GRAF[Grafana]
|
||||
PROM[Prometheus]
|
||||
UPTK[Uptime Kuma]
|
||||
end
|
||||
|
||||
subgraph MEDIA["Media & Arr Suite"]
|
||||
ARR[Sonarr/Radarr/etc.]
|
||||
JF[Jellyfin]
|
||||
end
|
||||
end
|
||||
|
||||
User -->|"https://*.cedshomelab.com"| CF_DNS --> CF_ZT
|
||||
CF_ZT --> CF_Tunnel --> NPM
|
||||
|
||||
NPM -->|"dashy.cedshomelab.com"| NPM
|
||||
NPM -->|"pve.cedshomelab.com"| PVE
|
||||
NPM -->|"truenas.cedshomelab.com"| TRUENAS
|
||||
NPM -->|"ha.cedshomelab.com"| HA
|
||||
NPM -->|"jellyfin.cedshomelab.com"| JF
|
||||
NPM -->|"grafana.cedshomelab.com"| GRAF
|
||||
NPM -->|"prometheus.cedshomelab.com"| PROM
|
||||
NPM -->|"uptime.cedshomelab.com"| UPTK
|
||||
NPM -->|"arr.cedshomelab.com"| ARR
|
||||
|
||||
PVE -.-> OBS
|
||||
PVE -.-> MEDIA
|
||||
PVE -.-> K3S
|
||||
PVE -.-> K3S[K3s Cluster 12 Nodes]
|
||||
PVE -.-> OBS[Observability Stack]
|
||||
PVE -.-> MEDIA[Media Services]
|
||||
TRUENAS -. Storage .- PVE
|
||||
TRUENAS -. Media Storage .- JF
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 2. VLAN & Network Segmentation Diagram
|
||||
## 🧩 2. VLAN & Network Segmentation
|
||||
|
||||
```mermaid
|
||||
flowchart LR
|
||||
subgraph UDR["UniFi Dream Router (UDR)"]
|
||||
GW_MAIN["VLAN Main 10.10.10.1"]
|
||||
GW_IOT["VLAN IoT 10.10.20.1"]
|
||||
GW_LAB["VLAN HomeLab 10.10.30.1"]
|
||||
GW_GUEST["VLAN Guest 10.10.99.1"]
|
||||
end
|
||||
graph TD
|
||||
UDR[UniFi Dream Router]
|
||||
|
||||
subgraph VLAN_MAIN["Main Network 10.10.10.0/24"]
|
||||
DEV1[Phones / Laptops / PCs]
|
||||
end
|
||||
MAIN[Main 10.10.10.0/24]
|
||||
IOT[MyHomeIOT 10.10.20.0/24]
|
||||
LAB[HomeLab 10.10.30.0/24]
|
||||
GUEST[Guest 10.10.99.0/24]
|
||||
|
||||
subgraph VLAN_IOT["MyHomeIOT 10.10.20.0/24"]
|
||||
IOT1[IoT Devices]
|
||||
TV[Smart TVs / Consoles]
|
||||
end
|
||||
DEV[User Devices]
|
||||
IOTDEV[IoT Devices and TVs]
|
||||
LABDEV[Servers and Services]
|
||||
GDEV[Guest Devices]
|
||||
|
||||
subgraph VLAN_LAB["Ced's HomeLab 10.10.30.0/24"]
|
||||
PVE[Proxmox Host(s)]
|
||||
NPM[Nginx Proxy Manager<br/>+ cloudflared]
|
||||
TRUENAS[TrueNAS]
|
||||
HA[Home Assistant]
|
||||
K3S["K3s Pi Cluster"]
|
||||
OBS[Grafana / Prometheus / Uptime Kuma]
|
||||
MEDIA[Arr Suite / Jellyfin]
|
||||
end
|
||||
UDR --> MAIN
|
||||
UDR --> IOT
|
||||
UDR --> LAB
|
||||
UDR --> GUEST
|
||||
|
||||
subgraph VLAN_GUEST["Guest Network 10.10.99.0/24"]
|
||||
GUEST_DEV[Guest Devices]
|
||||
end
|
||||
|
||||
UDR --- VLAN_MAIN
|
||||
UDR --- VLAN_IOT
|
||||
UDR --- VLAN_LAB
|
||||
UDR --- VLAN_GUEST
|
||||
|
||||
VLAN_MAIN -->|Restricted Access| VLAN_LAB
|
||||
VLAN_IOT -->|HA API Only| HA
|
||||
VLAN_GUEST -->|Internet Only| UDR
|
||||
|
||||
VLAN_LAB -->|Cloudflare Tunnel<br/>Outbound Only| NPM
|
||||
MAIN --> DEV
|
||||
IOT --> IOTDEV
|
||||
LAB --> LABDEV
|
||||
GUEST --> GDEV
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 3. Request Flow – Proxmox via `pve.cedshomelab.com`
|
||||
## 🔄 3. Request Flow - Proxmox Access
|
||||
|
||||
```mermaid
|
||||
sequenceDiagram
|
||||
participant User as User Browser
|
||||
participant CF as Cloudflare Edge
|
||||
participant Tunnel as cloudflared (NPM LXC)
|
||||
participant NPM as Nginx Proxy Manager
|
||||
participant PVE as Proxmox (10.10.30.250:8006)
|
||||
participant User
|
||||
participant CF as Cloudflare
|
||||
participant Tunnel
|
||||
participant NPM
|
||||
participant PVE as Proxmox
|
||||
|
||||
User->>CF: HTTPS GET pve.cedshomelab.com
|
||||
CF->>CF: DNS resolve / SSL terminate / (Zero Trust auth)
|
||||
CF-->>Tunnel: Encrypted Tunnel Connection
|
||||
Tunnel-->>NPM: HTTP request (Host: pve.cedshomelab.com)
|
||||
NPM->>PVE: HTTPS to 10.10.30.250:8006<br/>proxy headers
|
||||
PVE-->>NPM: Proxmox login HTML
|
||||
NPM-->>Tunnel: Response
|
||||
Tunnel-->>CF: Encrypted tunnel response
|
||||
CF-->>User: HTTPS response (Proxmox UI)
|
||||
User->>CF: HTTPS request for pve.cedshomelab.com
|
||||
CF->>Tunnel: Encrypted tunnel
|
||||
Tunnel->>NPM: Forward request
|
||||
NPM->>PVE: Proxy to port 8006
|
||||
PVE-->>NPM: UI response
|
||||
NPM-->>Tunnel: Return response
|
||||
Tunnel-->>CF: Return response
|
||||
CF-->>User: Proxmox UI
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 4. Request Flow – Home Assistant via `ha.cedshomelab.com`
|
||||
## 🔄 4. Request Flow - Home Assistant
|
||||
|
||||
```mermaid
|
||||
sequenceDiagram
|
||||
participant User as User (Phone/Laptop)
|
||||
participant CF as Cloudflare Edge
|
||||
participant Tunnel as cloudflared (NPM LXC)
|
||||
participant NPM as Nginx Proxy Manager
|
||||
participant HA as Home Assistant (10.10.30.104:8123)
|
||||
participant User
|
||||
participant CF as Cloudflare
|
||||
participant Tunnel
|
||||
participant NPM
|
||||
participant HA as Home Assistant
|
||||
|
||||
User->>CF: HTTPS GET ha.cedshomelab.com
|
||||
CF->>CF: DNS / SSL / (Zero Trust future)
|
||||
CF-->>Tunnel: Encrypted tunnel connection
|
||||
Tunnel-->>NPM: HTTP request with X-Forwarded-For
|
||||
NPM->>HA: HTTP to 10.10.30.104:8123
|
||||
HA->>HA: Check trusted_proxies & use_x_forwarded_for
|
||||
HA-->>NPM: HA UI / API response
|
||||
NPM-->>Tunnel: Response
|
||||
Tunnel-->>CF: Response
|
||||
CF-->>User: HTTPS response (HA UI)
|
||||
User->>CF: HTTPS request for ha.cedshomelab.com
|
||||
CF->>Tunnel: Encrypted tunnel
|
||||
Tunnel->>NPM: Forward request
|
||||
NPM->>HA: Proxy to port 8123
|
||||
HA-->>NPM: UI or API response
|
||||
NPM-->>Tunnel: Return response
|
||||
Tunnel-->>CF: Return response
|
||||
CF-->>User: Home Assistant UI
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 5. Notes
|
||||
## 🧠 Notes
|
||||
|
||||
- Cloudflare Zero Trust can be layered in front of any critical service.
|
||||
- External entrypoint is always `*.cedshomelab.com`.
|
||||
- Only outbound traffic from the HomeLab VLAN is required.
|
||||
- 🌐 All external access is routed through Cloudflare Tunnel
|
||||
- 🚫 No inbound port forwarding is required
|
||||
- 🔗 Services are exposed via subdomains under `cedshomelab.com`
|
||||
- 🧩 VLAN segmentation reduces unnecessary lateral movement
|
||||
- 🔐 Cloudflare Zero Trust can be layered on sensitive services
|
||||
|
||||
Reference in New Issue
Block a user