One (potential) downside to running public services on your homelab, is that you expose your IP address. That may, or may not, be a problem — but here are ways around it. The simplest way is to put Cloudflare in front, but this will only handle web traffic, and is a bit of a black box.

Another, more hands-on, approach is to use a VPS (or LXC container); WireGuard and iptables. We will create a secure tunnel between the VPS/container and the homelab HAProxy instance, and forward traffic using iptables.

I’ve been using dnsmasq as a local DNS resolver for a while, time to switch to Unbound instead.

I have two fiber cables in my patch panel — a single-mode simplex SC from my ISP, and a multi-mode duplex LC for 10 GbE network to my desktop computer.

In our new house there is an 20 m² basement, it consists of two rooms — both 10 m². I have turned the inner room into my new home office/server room, with my electronics lab and homelab.

Dropping the Altibox router/modem, and getting IPv6 using 6rd to work on OPNsense.