ENDEع
All projects
Live in my home

Moutaz Home

A self-hosted homelab on a Raspberry Pi 5 that runs, backs up and watches itself.

Raspberry Pi 5DockerZero TrustresticMonitoring

Problem

I wanted my passwords, documents and budget at home instead of in a dozen clouds, without opening my home network to the internet and without a setup that breaks silently.

Architecture

  1. 01 Phone / laptop
  2. 02 Tailscale · Cloudflare Access
  3. 03 Reverse proxy + TLS
  4. 04 Services
  5. 05 3-2-1 backups

Key decisions

  1. Zero Trust instead of open ports: private services are only reachable over Tailscale; the one public entry sits behind Cloudflare Tunnel + Access with country and bot rules.
  2. 3-2-1 encrypted backups (local HDD, Google Drive, Cloudflare R2) plus a monthly automatic restore test that compares checksums. A backup is only real once it was restored.
  3. Network-wide ad and tracker blocking with a recursive DNS resolver, pushed to every device through the VPN.
  4. Monitoring with push alerts split into two channels: things that are broken, and everything else.

What I learned

  • Reliability is mostly boring details: power supplies, USB disks that disconnect, and timers that must not overlap.
  • Write down every decision. The documentation is part of the system.

Repository

Repository coming soon