A running record of my home infrastructure builds, documented the way I'd document production systems: real configs, real topology, real bugs.
This repo now spans two generations:
| Version | Status | Summary |
|---|---|---|
| v1 — Sophos-on-Proxmox, Site-to-Site VPN | 📦 Decommissioned (Nov 2025 – Apr 2026) | Virtualized Sophos Home firewall on a Dell/Proxmox host, StrongSwan site-to-site IPsec to Oracle Cloud, self-built dynamic DNS (BIND9 + nsupdate), Samba file share. |
| v2 — Segmented OPNsense Build | 🚧 Active, in progress | Dedicated bare-metal OPNsense firewall, 5-VLAN segmentation (trusted/servers/guest/IoT + management), redundant DNS (Pi-hole + Unbound failover), dual-instance OpenVPN with content-safety hardening, a Proxmox host running every core service, and a self-hosted Prometheus/Grafana observability stack watching all of it. |
Each version's folder is self-contained — its own README, its own component docs, its own configs/ (secrets redacted). v1 is preserved as-is, a historical record of what worked, what didn't, and what I'd do differently. v2 is a living document, updated as the build progresses.
The architectures are genuinely different, not just a hardware refresh — v1 ran the firewall as a VM behind a hypervisor; v2 runs it as the dedicated bare-metal edge device, with virtualization (Proxmox) living behind the firewall as a segment on the network, not the thing hosting it. Keeping both visible shows the actual progression in reasoning, not just a finished result.
- Evaluating this for a role or a portfolio review? Start with
v2/README.md— the Highlights section up top summarizes what's built and what it demonstrates in under a minute. - Digging into a specific component? Each v2 doc is self-contained and cross-links to the others:
opnsense.md(firewall/VLANs/DNS),proxmox.md(hypervisor),unifi.md(switch/AP/controller),pihole.md(DNS/ad-blocking),monitoring.md(Prometheus/Grafana). - Curious how the previous generation worked?
v1/README.mdis a closed-book retrospective, including the bugs found only after the fact.
All content in this repository is shared under the Creative Commons Attribution 4.0 International License (CC BY 4.0).
💼 LinkedIn · ✉️ famerisbraccia@gmail.com