[{"data":1,"prerenderedAt":293},["ShallowReactive",2],{"project-artlab":3},{"id":4,"title":5,"description":6,"extension":7,"favorite":8,"icon":9,"meta":10,"publishedAt":280,"readingTime":269,"shortDescription":281,"slug":282,"status":283,"stem":284,"tags":285,"type":291,"__hash__":292},"projects\u002Fprojects\u002Fartlab.md","ArtLab - Personal HomeLab","A private R&D sandbox and high-availability infrastructure for deploying MLOps pipelines, managing large-scale data, and experimenting with cloud-native automation.","md",true,"i-ph-flask-duotone",{"body":11},{"type":12,"value":13,"toc":267},"minimark",[14,28,33,48,52,55,60,88,92,118,122,148,152,172,176,261,264],[15,16,17,27],"p",{},[18,19,23],"a",{"href":20,"rel":21},"https:\u002F\u002Fgo.arthurdanjou.fr\u002Fstatus",[22],"nofollow",[24,25,26],"strong",{},"ArtLab"," is my personal homelab: a controlled environment for experimenting with DevOps, distributed systems, and private cloud architecture.",[29,30,32],"h2",{"id":31},"architectural-philosophy","Architectural Philosophy",[15,34,35,36,39,40,43,44,47],{},"The infrastructure follows a ",[24,37,38],{},"Zero Trust"," model. Access is restricted to a private mesh VPN using ",[24,41,42],{},"Tailscale (WireGuard)",", removing the need for open ports. For select public endpoints, ",[24,45,46],{},"Cloudflare Tunnels"," provide a hardened entry point, keeping my public IP hidden while preserving end-to-end encryption from the edge to the origin.",[29,49,51],{"id":50},"service-stack","Service Stack",[15,53,54],{},"Services are grouped by functional domain to keep orchestration clean and scalable:",[56,57,59],"h3",{"id":58},"infrastructure-virtualization","Infrastructure & Virtualization",[61,62,63,70,76,82],"ul",{},[64,65,66,69],"li",{},[24,67,68],{},"Proxmox VE",": Type-1 hypervisor managing LXC containers and VMs for strict resource isolation.",[64,71,72,75],{},[24,73,74],{},"Docker & Portainer",": Container runtime and orchestration for rapid deployment.",[64,77,78,81],{},[24,79,80],{},"Traefik",": Edge router and reverse proxy providing automatic HTTPS via Let's Encrypt.",[64,83,84,87],{},[24,85,86],{},"Tailscale",": Secure networking layer for cross-device connectivity and remote management.",[56,89,91],{"id":90},"data-storage","Data & Storage",[61,93,94,100,106,112],{},[64,95,96,99],{},[24,97,98],{},"Garage",": S3-compatible distributed object storage for backups and static assets.",[64,101,102,105],{},[24,103,104],{},"Immich",": High-performance photo management and AI-powered backup solution.",[64,107,108,111],{},[24,109,110],{},"Jellyfin",": Media server for hardware-accelerated streaming.",[64,113,114,117],{},[24,115,116],{},"Redis",": In-memory data structure store for caching and session management.",[56,119,121],{"id":120},"automation-observability","Automation & Observability",[61,123,124,130,136,142],{},[64,125,126,129],{},[24,127,128],{},"n8n",": Workflow automation platform for orchestrating complex service interactions.",[64,131,132,135],{},[24,133,134],{},"Uptime Kuma",": Real-time status monitoring and incident alerting.",[64,137,138,141],{},[24,139,140],{},"Beszel",": Lightweight agent-based resource monitoring for CPU\u002FRAM\u002FDisk metrics.",[64,143,144,147],{},[24,145,146],{},"AdGuard Home",": Network-wide DNS sinkhole for ad-blocking and privacy.",[56,149,151],{"id":150},"home-intelligence","Home Intelligence",[61,153,154,160,166],{},[64,155,156,159],{},[24,157,158],{},"Home Assistant",": Centralized hub for IoT integration and automation logic.",[64,161,162,165],{},[24,163,164],{},"MQTT Broker",": Low-latency message bus for device-to-service communication.",[64,167,168,171],{},[24,169,170],{},"Zigbee2MQTT",": Bridge for local Zigbee device control without cloud dependencies.",[29,173,175],{"id":174},"hardware-specifications","Hardware Specifications",[177,178,179,196],"table",{},[180,181,182],"thead",{},[183,184,185,190,193],"tr",{},[186,187,189],"th",{"align":188},"left","Component",[186,191,192],{"align":188},"Hardware",[186,194,195],{"align":188},"Role",[197,198,199,216,231,246],"tbody",{},[183,200,201,207,213],{},[202,203,204],"td",{"align":188},[24,205,206],{},"Main Host",[202,208,209,212],{"align":188},[24,210,211],{},"Beelink EQR6"," (AMD Ryzen)",[202,214,215],{"align":188},"Compute, Containers & VMs",[183,217,218,223,228],{},[202,219,220],{"align":188},[24,221,222],{},"Storage",[202,224,225],{"align":188},[24,226,227],{},"UGREEN NASync DXP4800 Plus",[202,229,230],{"align":188},"4-bay NAS, 16TB ZFS \u002F Backups",[183,232,233,238,243],{},[202,234,235],{"align":188},[24,236,237],{},"Networking",[202,239,240],{"align":188},[24,241,242],{},"TP-Link 5-port Gigabit Switch",[202,244,245],{"align":188},"Local Backbone",[183,247,248,253,258],{},[202,249,250],{"align":188},[24,251,252],{},"Zigbee",[202,254,255],{"align":188},[24,256,257],{},"SLZB-MR4 Coordinator",[202,259,260],{"align":188},"Home Automation Mesh",[262,263],"hr",{},[15,265,266],{},"This homelab is a sandbox for DevOps experimentation, infrastructure reliability, and privacy-respecting digital autonomy.",{"title":268,"searchDepth":269,"depth":269,"links":270},"",2,[271,272,279],{"id":31,"depth":269,"text":32},{"id":50,"depth":269,"text":51,"children":273},[274,276,277,278],{"id":58,"depth":275,"text":59},3,{"id":90,"depth":275,"text":91},{"id":120,"depth":275,"text":121},{"id":150,"depth":275,"text":151},{"id":174,"depth":269,"text":175},"2025-09-04","A professional-grade homelab for self-hosting, MLOps, and network security.","artlab","Active","projects\u002Fartlab",[286,287,288,289,290,237],"Docker","Proxmox","HomeLab","Self-Hosted","Infrastructure","Personal Project","poGf_u4F9-pC4hDcnhOFDVGRi3hfF5aYzEeoxvGGYPA",1777982163834]