Byers Homelab Wiki¶
This wiki documents the whole home estate: a Proxmox box (Dell OptiPlex 7060 MFF) running the VMs and containers, a Synology NAS holding all backup data, a DigitalOcean VPS acting as the public front door, and the laptops/PCs that feed into the backup stack. Everything is stitched together by Tailscale (with ops as subnet router for the LAN) and a WireGuard hub on the VPS. Backups run on two rails: nightly vzdump VM dumps to the NAS (latest set mirrored to Google Drive), and a Kopia repository on the NAS fronted by a TLS server on ops for file-level backups from individual machines.
What runs where¶
| Host | Address | What it does |
|---|---|---|
| pve (Proxmox, OptiPlex 7060) | 192.168.1.138 | Hypervisor for everything below; nightly 02:00 vzdump of all VMs to the NAS |
| — VM 100 jarvis | LAN | Home Assistant |
| — VM 102 fr24 | LAN | Flight radar feeder |
| — VM 103 minecraft | LAN (WG 10.10.0.2) | Bedrock server; world tarballs daily 03:30 → Kopia |
| — LXC ops | 192.168.1.190 | Backup brain: Kopia server (:51515, TLS), rclone → Google Drive, ntfy monitoring, WoL scripts, Tailscale subnet router for 192.168.1.0/24 |
| — LXC 101 (PBS) | — | Decommissioned. Stopped; destroy after 2026-09-09 |
| NAS (Synology) | 192.168.1.5 | 7TB storage: vzdump dumps (NFS) + Kopia repository. Replacement by UniFi UNAS Pro 4 planned |
| VPS (byers-vps, DigitalOcean) | public + tailnet | NPM reverse proxy (web + Minecraft UDP passthrough), RustDesk relay, WireGuard hub, Tailscale node. SSH port 2222, key-only |
| MacBook | roaming | KopiaUI backing up Documents/Desktop/Pictures hourly; Time Machine LAN-only |
| Windows PCs / tablet | LAN / roaming | Phase 2 — not yet onboarded (see Status) |
How to use this wiki¶
Something is broken right now?
Go straight to the Oh No section. It has the triage pages for host unreachable, suspected attack, and lost or stolen device.
Otherwise:
- Status — what's in flight and what's waiting on Elliott.
- Backups — how both backup rails work, how to restore, onboarding a new machine, and the off-site story.
- Minecraft — server runbook, the mc-admin panel, and starting a new world.
- Network — topology, Tailscale, the VPS, WireGuard, and hardware notes.
- Security — current posture and the audit/change history.
Where the master copies live¶
Sources of truth
- This wiki is a git repo on the MacBook (
~/code/byers-homelab-wiki). Edit there, commit, and rebuild — the rendered site is a copy, the repo is the master. RUNBOOK.mdin the Sandlands Backup System folder on the MacBook (~/code/Sandlands Backup System/RUNBOOK.md) is the deep-dive for the backup stack itself — schedules, secret locations, decommission notes, and the authoritative open-items list that feeds the Status page.- Secrets are never in either place: passwords live in the password manager and
in
/etc/backup-stack/*.envonops(root, 0600).