A public description of a real home Proxmox cluster, sanitized to remove secrets. Revision: v2.0 draft Live audit date: 2026-07-26 Operational examples revalidated: 2026-08-01
This is not just a list of VMs. It is a map of the home infrastructure: what roles the nodes have, where services live, how the network, storage, backups, monitoring, and power are structured.
The first version of this repository described a smaller and simpler lab. Version 2 is a three-node Proxmox VE cluster, where each node is responsible for its own layer.
- Cluster:
homelab, Proxmox VE9.2, 3 nodes, quorum was healthy at the time of the audit. - LAN:
192.168.8.0/24. - Nodes:
192.168.8.64—lenovo-m70q, main compute/app node.192.168.8.65—network-node, network, ingress, and observability.192.168.8.66—nas-node, storage and home automation.
- Guests: 16 Proxmox workloads: 7 VMs and 9 LXC containers.
- Storage backbone: TrueNAS exports NFS back to Proxmox for ISO/templates, backup storage, and Immich media.
- Power: APC Back-UPS BX1200MI connected to
lenovo-m70q; the other Proxmox nodes follow it via apcupsd network mode.
LAN 192.168.8.0/24
│
├─ lenovo-m70q .64 compute/apps
│ ├─ media-server .102 Jellyfin + download automation
│ ├─ Hermes .106 AI agent runtime
│ ├─ Forgejo .107 local git
│ ├─ Immich .108 photo archive
│ └─ Frigate .112 NVR/camera stack
│
├─ network-node .65 edge + observability
│ ├─ AdGuard .100 DNS filtering
│ ├─ pfSense .103 firewall/router VM
│ ├─ Proxy .105 Nginx Proxy Manager
│ ├─ ntfy .110 notifications
│ ├─ Uptime Kuma .148 simple availability checks
│ └─ Monitoring .149 Prometheus/Grafana/Loki/Alertmanager
│
└─ nas-node .66 storage + smart home
├─ TrueNAS .109 ZFS, NFS exports, backup storage
└─ Home Assistant .111 smart-home control plane
docs/architecture.md— overall architecture and role separation logic.docs/nodes.md— nodes, hardware, storage pressure, and guest placement.docs/services.md— VM/LXC workloads in plain language.docs/network.md— LAN, bridges, DNS, ingress, and lab subnet.docs/storage-backups.md— Proxmox storage, TrueNAS exports, vzdump, and host config backups.docs/automation.md— cron, systemd, and custom scripts found on the servers.automation/— live-verified and sanitized operational examples.docs/ups/— UPS, apcupsd, power events, and runbook.docs/security-notes.md— what is intentionally not published.
Machine-readable sanitized inventory:
The repository does not and must not contain:
- passwords, API tokens, bot tokens, or private keys;
- MAC addresses, disk serials, disk UUID/by-id/WWN, or UPS serial;
- raw firewall/proxy configs;
- raw audit dumps from live machines.
Raw exports were used as a source but are not in the git tree and must not appear in commit history.