┌───────────────────────┐
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
│                       │
└───────────────────────┘
[ Nexus Homelab ]
~ cold
STATUS //

  Active

STACK //

  Debian 13
  Docker
  Portainer
  Caddy
  Tailscale
  Syncthing

LAST UPDATED //

  July 2026

Nexus is my private homelab server, built from old desktop hardware
that would otherwise be sitting unused.

The goal is not to host as many services as possible. I would rather
keep a smaller set of useful services that I understand, can maintain,
and know how to recover when something inevitably fucks up.

HARDWARE //

  Intel Core i5-4670
  Gigabyte GA-Z97X-GAMING 5
  16 GB Corsair Vengeance Pro DDR3-2133
  Intel 660p 1 TB NVMe system drive
  Seagate 3 TB media drive
  Lian Li Lancool PC-K62

SERVICES //

  AdGuard Home        Network-wide DNS filtering
  Backrest            Restic backup management
  Beszel              Lightweight system monitoring
  Diun                Container image update notifications
  Homepage            Local service dashboard
  Jellyfin            Movies, television, and anime
  Navidrome           Music streaming
  ntfy                Private notifications
  Scrutiny            Drive-health monitoring
  Speedtest Tracker   Connection history
  Syncthing            File and note synchronization
  Uptime Kuma         Service availability monitoring

ACCESS MODEL //

Most web interfaces listen only on localhost and are reached through
Caddy using private home.arpa service names.

Tailscale and split DNS provide remote access. The same private service
names work locally and remotely without exposing Nexus directly to the
public internet.

No public port forwards point at Nexus.

DOCUMENTATION //

The source of truth is a synced Markdown runbook, aka "The Bible." A
separate sanitized GitHub repository stores reference documentation,
examples, and templates without secrets or raw configuration backups.