Projects

Kabason Lab

A self-hosted home lab that doubles as my test environment. Fully documented, publicly, as things get built and broken.

The home lab

Proxmox VE / 8U rack / 20+ services
Guides, configs, and troubleshooting notes from a self-hosted home lab, written as things get built, broken, and fixed.

The lab runs on a Dell Precision 3450 SFF in an 8U rack, with Proxmox VE as the primary hypervisor alongside VMware ESXi and Docker. Identity is centralised through Authentik, internal name resolution runs on Technitium DNS, and external access goes through Cloudflare Tunnels and Pangolin rather than opening ports.

It is not a toy. It is where I run a Microsoft lab with SCCM and MECM, a Tanium appliance, Wazuh for SIEM, and local AI through Ollama and Open WebUI. Backups run to Proxmox Backup Server, and Uptime Kuma and Zabbix watch everything else. Every service has a write-up on kabason.net covering the build, the config, and whatever went wrong on the way.

Virtualization and containers

Proxmox VE VMware ESXi Docker

Identity and access

Authentik Cloudflare Tunnels Pangolin OpenVPN

Security and monitoring

Wazuh Zabbix Uptime Kuma Proxmox Backup Server

Network and enterprise

pfSense Technitium DNS Nginx Proxy Manager SCCM / MECM Tanium appliance Ansible

Applications and AI

Ollama Open WebUI Nextcloud Gitea Mailcow Snipe-IT BookStack Paperless-ngx Audiobookshelf n8n Pairdrop
View full homelab documentation kabason.net

Write-ups

Individual builds

Three of the builds documented in more detail.

OpenVPN Community Edition

An OpenVPN server on Ubuntu Server inside Proxmox, providing remote access to the lab network. Client profiles per device, router port forwarding, and end-to-end connectivity testing from outside the network.

Read the write-up

Self-hosted email (Mailcow)

A dockerized Mailcow stack on a VPS running Ubuntu. UFW hardened to expose only the required mail and web ports, with SPF, DKIM, and DMARC configured and verified against external testing tools.

Read the write-up

Microsoft lab (SCCM and Intune)

A full Microsoft environment: domain controllers with AD DS, DNS, and DHCP, an SCCM site with SQL, WDS and WSUS, plus a Microsoft 365 tenant synced through Entra Connect for Intune enrollment and application deployment.

Read the write-up

Everything is documented

Build notes, configs, and the troubleshooting that went with them.

Go to kabason.net