One (potential) downside to running public services on your homelab, is that you expose your IP address. That may, or may not, be a problem — but here are ways around it. The simplest way is to put Cloudflare in front, but this will only handle web traffic, and is a bit of a black box.

Another, more hands-on, approach is to use a VPS (or LXC container); WireGuard and iptables. We will create a secure tunnel between the VPS/container and the homelab HAProxy instance, and forward traffic using iptables.

I’m using Prometheus to monitor my home office and homelab, I figured it would be cool to have a stack light show the active warnings and alerts from Alertmanager. So I made a HAT (Hardware Attached on Top) for the Raspberry Pi to drive a five-colored stack light.