Skip to content

Uses

The hardware, software, and habits I actually use. Format borrowed fromuses.tech.

Homelab hardware

  • Proxmox VE

    The hypervisor. VMs, LXCs, and the K3s nodes all live here.

  • K3s nodes

    A small Kubernetes cluster for trying things I do not want to try at work.

  • TrueNAS

    Disks, backups, and the family photo pile.

  • Tailscale

    How I reach the lab from anywhere. MagicDNS and subnet routes do most of the work.

  • Network gear

    Separate VLANs for the lab, IoT junk, and the stuff I actually care about.

Software & tooling

  • Cursor

    Where I write scripts, infra, and this site.

  • GitLab

    CI at work, and the pipelines for the lab.

  • Python

    What I reach for first. Security automation, AI glue, and anything boring and repetitive.

  • Home Assistant

    Lights, sensors, and a pile of automations.

  • Immich

    Photo library I host for family and friends.

AI & ML

  • Foundation Models

    Trying models and wiring them into real workflows, not just demos.

  • Retrieval Architectures

    Getting the right context in front of a model. Reranking, query tweaks, and retrieval that is not always a vector database.

  • MLOps Pipelines

    Eval, versioning, deploys, and a way to roll back when a prompt change makes things worse.

  • Self-hosted Inference

    Local models on the homelab GPU, mostly so I can experiment without sending everything out.

Cloud & DevOps stack

  • Kubernetes (K3s)

    The cluster in the rack. Apps ship as Helm charts.

  • Helm + FluxCD

    Git says what should be running. Flux makes the cluster match.

  • Docker

    Building images and running things locally.

  • Zscaler (ZIA / ZPA / ZDX)

    I ran this stack for about four years. I still help with it.

  • PostgreSQL + Redis

    Databases and cache for stuff on the homelab.

Workflow

  • GitOps with FluxCD

    A merge deploys it. I try not to kubectl apply in production.

  • Validation gates in CI

    Changes get checked, reviewed, and a rollback path before they go out.

  • Segregated dev and prod

    Dev and prod are separate, and the prod config is encrypted.

  • Runbooks for everything

    If I do it by hand twice, I write it down.

↑↓ navigate↵ openesc close