Skip to main content
Advanced Search
Search Terms
Content Type

Exact Matches
Tag Searches
Date Options
Updated after
Updated before
Created after
Created before

Search Results

131 total results found

homeLAB set-up

Welcome to my homelab. For those who don't know what that is, a homelab is a type of continuous project that many IT and Cyber Professionals work on. For some, it simulates Enterprise Technology Infrastructure and gives them an environment to test software. Fo...

Network Projects

Projects with Routers, Firewalls, and VPNs

Containers

Docker & Proxmox LXC

Grafana Dashboards

Grafana is an open-source analytics and visualization platform that enables users to query, visualize, and understand their data through customizable dashboards. Originally designed for monitoring and metric analytics, Grafana has evolved into a comprehensive ...

Web Applications

Web App Documentation  Portfolio Website  Bookstack LAMP Stack for Documenting Projects

Kubernetes

K8 Cluster + Projects

Hardware

Useful References

Lab Networking

Networking Considerations + Topology

OPNsense

Open Source FreeBSD based Firewall

BookStack

Project Documentation Website Bookstack to Build Digital Ocean to Host Cloudflare to Protect 

ZenArmor (NGFW)

Next-Generation Firewall

Proxmox Dash: InfluxDB + Grafana

Dashboard for Proxmox using Proxmox bucket from InfluxDB & Proxmox [Flux] Dashboard from Grafana

Network Design

Topology for the network I'll be simulating in Proxmox VE. This will be a simple outline of traffic flow between devices, and different systems being used.

Servers & Devices

Setting up Active Directory and User machines: Windows Server 2022  4 Windows 11 Pro VMs to represent "Employees" to manage with AD

Splunk SIEM

Set up, Configuration, Final Result 

Nessus Tenable Vulnerability Scanner

Firewalls

Docker Containers

T.I.G. Stack for OPNsense Firewall

Telegraf Agent + InfluxDB + Grafana stack to build dashboard from for my OPNsense Firewall & Router

LXC

Linux-based Containers with Proxmox VE

Prometheus

Open-source monitoring system with a dimensional data model, flexible query language, and efficient time series database.  My new monitoring solution for all of my services and technologies: containers, clusters, firewall, and server. I plan to shift all my m...

AZ-500

Azure Security Engineer Associate  Azure Portal

Windows 11 & Office 365 Deployment Lab Kit

Microsoft provides a free and complete lab environment which contains a full suite of their products with evaluation copies. Download here.

PowerShell / BASH / Azure CLI

WireGuard VPN

VPN server using Cloudflare DDNS and WireGuard

Dell PowerEdge R640

Hardware

Dell OptiPlex 7050 SFF

Hardware

NETGEAR GS108E Gigabit Switch

Hardware

Power Supply & Rack

Hardware

Eero Pro 6

Hardware

Setup & Installation

OPNsense

Initial Configurations

OPNsense

Current Results

OPNsense

Ventoy Drive

Hardware

WD Hard Drive for ISOs

Setup and Installation

ZenArmor (NGFW)

Firewall Configurations

OPNsense

Windows Server 2022

Servers & Devices

Portainer

Docker Containers

Web GUI to manage Docker containers being run on a Docker Engine hosted on an Ubuntu server

InfluxDB

Docker Containers

Database to store data from OPNsense and Proxmox. Will be used to populate Grafana Dashboards

InfluxDB

Proxmox Dash: InfluxDB + Grafana

Database that writes and queries data to then be used to populate Grafana Dashboards Check out the Docker shelf to see how to set up the InfluxDB container here

Grafana Container - Docker

Proxmox Dash: InfluxDB + Grafana

Grafana

Docker Containers

Used to build dashboards!

Windows Users "Employees"

Servers & Devices

Managing Identities in Entra ID

AZ-500

Manage Authentication with Entra ID

AZ-500

Network Topology for Segmentation

Lab Networking

Before setting up any servers or hardware, I needed to make sure my topology lay out is logical, and also completely isolates my lab environment from other devices on the network. That way when I inevetibally mess up, only my lab will get affected - super impo...

Uninterruptible Power Supply (UPS)

Hardware Power Supply & Rack

Home labbing can get expensive, and its incredibly important to protect your gear. To prevent any electrical damage that could occur from power failures, I purchased a CyberPower CP1500 System. This model is a PFC Sine Wave system, which is important as it wil...

Surge Protectors & Grounding

Hardware Power Supply & Rack

In addition to the UPS, I also purchased a 1U 10 outlet surge protector and have mounted it to my rack. The surge protector is grounded and will protect any other devices from power failure damage, like my Eero AP and NETGEAR switch

iDRAC9 Enterprise

Hardware Dell PowerEdge R640

iDRAC9 is Dell's version of remotely accessing and controlling the server. This was probably one of the most important parts of my homelab, as it lets me configure, power on and off, and control the server from anywhere in the house or via my VPN connection ...

R640 (1U) - Specs

Hardware Dell PowerEdge R640

I purchased this server from PC Server & Parts via Ebay.com, a reputed and certified seller of refurbished enterprise gear and hardware. Dell PowerEdge servers are extremely configurable, which can make it difficult to select the "right" server to purchase. So...

PCIe Expansion

Hardware Dell OptiPlex 7050 SFF

As stated on the previous page, the SFF OptiPlex had the capacity to add an additional NIC to the motherboard. I purchased an Intel I350-T4 NIC, which is a quad port gigabit NIC. I purchased the card for around $40.00 off of Ebay, but it had a full server heig...

Specs

Hardware Dell OptiPlex 7050 SFF

I purchased this Dell OptiPlex 7050 via Ebay for around $60.00. It is a small form factor (SFF) desktop, with additional PCIe expansion slots, which made it a suitable alternative to other dedicated hardware these days for firewall appliances. The desktop spec...

Official Documentation Links

Useful References

BookStack Docs Documentation OPNsense  About Documentation Forum ZenArmor About Documentation Proxmox About Documentation Forum

Installation

OPNsense Setup & Installation

Installing OPNsense onto hardware is quite easy and straight forward. Download the ISO from their official website opnsense.org and create a bootable drive. You can use Rufus, balenaEtcher, or any other software to burn the ISO onto the drive. I used Ventoy, a...

Hardware Requirements

OPNsense Setup & Installation

At the minimum, your host machine for OPNsense should have the following: 1GHz Dual Core CPU 2 GB RAM The recommended hardware, per OPNsense official documentation is as follows: 1.5 GHz CPU 8 GB RAM 120 GB SSD This recommended set up will allow...

Web GUI

OPNsense Initial Configurations

After installation, a message will appear stating the Web GUI is available at XXXX.XXXX.XXXX.XXXX My web GUI is @ 192.168.1.1 Login Page Login as root, with the password you set up during installation. Once you go through the initial set up wizard, your d...

Interfaces

OPNsense Initial Configurations

OPNsense allows you to set up Interfaces, which can be used to set up separate networks. I set up 2 interfaces to allow my homelab to operate on 1, and all other devices (including my roommates) to operate on the other. The Interface assignments are as follows...

Policies & Rules

ZenArmor (NGFW)

ZenArmor has a robust set of rules and policies you can enforce. The free version they offer will enforce "essential" security rules for up to 100 devices. You can find the policies and configure them by navigating to the Policies tab under the ZenArmor sectio...

Cloud Management Portal

ZenArmor (NGFW)

ZenArmor allows you to also manage your firewall via their cloud console. Once configured and set up with your ZenArmor account, you can configure and manage several deployments of ZenArmor to the same extent as you could via OPNsense. Cloud Management can be ...

Cloud Threat Intelligence

ZenArmor (NGFW)

One of the best features of ZenArmor, is it's real-time Cloud Reputation and Threat Intelligence. These features are served through what they call ZenArmor Cloud, which is hosted by them, using a Google Cloud Infrastructure. ZenArmor Cloud is essentially a dat...

Plug-Ins on OPNsense

ZenArmor (NGFW) Setup and Installation

There are several ways to install and deploy ZenArmor and its utilities. I chose to install it's plug-ins via my OPNsense Web GUI. To install, navigate to through System --> Firmware --> Plugins and locate the os-sunnyvalley plugin. These are the plugins I cur...

Dashboards & Reporting

ZenArmor (NGFW)

One of the greatest features of next-generation firewalls, are it's reporting dashboards and visualization capabilities. Below you'll see some of the dashboards of my firewall after only having it running for 48 hours. These dashboards are available in both, t...

Dashboards & Reporting

OPNsense Current Results

Thankfully I have a dynamic WAN IP that has since changed, making it alright to post this

What is it?

BookStack

BookStack is a self-hosted platform that allows you to store information in an organized and accessible way. There are several reasons I chose this, but mainly, it's ease of use and deployment. I was looking for something similar to Confluence from Atlassian, ...

Deployment

BookStack

Bookstack is a web application that is built on a LAMP stack. My deployment uses Linux, Apache, MySQL, and PHP to run services. Currently, I have this web application deployed on an Ubuntu Server. Digital Ocean I utilized Digital Ocean, which is Cloud Infras...