Enterprise Homelab

Appearance

Container Mapping ​

Complete mapping of all 28 containers with their configurations, resource allocations, and GitOps definitions.

🎬 Media Stack (9 containers) ​

Core Media Services ​

VMIDContainerIP AddressResourcesKey Features
120plex192.168.0.2074GB RAM, 2 coresGPU passthrough, privileged, media server
107qbittorrent192.168.0.132 + 10.10.10.22GB RAM, 2 coresDual network, VPN routing
108prowlarr192.168.0.119 + 10.10.10.31GB RAM, 2 coresIndexer management, VPN

*arr Automation Stack ​

VMIDContainerIP AddressResourcesPurpose
112sonarr192.168.0.2031GB RAM, 2 coresTV show automation
113radarr192.168.0.1651GB RAM, 2 coresMovie automation
121lidarr192.168.0.177512MB RAM, 1 coreMusic automation
114overseerr192.168.0.120512MB RAM, 1 coreMedia requests frontend
115flaresolverr192.168.0.138256MB RAM, 1 coreCaptcha solver support
118autobrr192.168.0.107256MB RAM, 1 coreRSS automation

Media Stack Features ​

  • GPU Acceleration: Plex with hardware transcoding
  • VPN Integration: Torrenting through Wireguard tunnel
  • Automated Workflows: Complete *arr stack integration
  • Request Management: User-friendly Overseerr interface

📊 Advanced Monitoring (9 containers) ​

Core Monitoring Infrastructure ​

VMIDContainerIP AddressResourcesFunction
110grafana192.168.0.2431GB RAM, 2 coresDashboard visualization
109alpine-prometheusDHCP512MB RAM, 1 coreMetrics collection
130loki192.168.0.2002GB RAM, 2 coresCentralized logging
131alertmanager192.168.0.201512MB RAM, 1 coreIntelligent alerting

Specialized Monitoring ​

VMIDContainerIP AddressResourcesSpecialty
132blackbox-exporter192.168.0.202256MB RAM, 1 coreExternal endpoint monitoring
133promtail192.168.0.204512MB RAM, 1 coreLog shipping to Loki
106prometheus-pve-exporterDHCP256MB RAM, 1 coreProxmox metrics
123uptimekuma192.168.0.181256MB RAM, 1 coreService uptime monitoring
119glance192.168.0.44256MB RAM, 1 coreDashboard frontend

Monitoring Capabilities ​

  • 31-day log retention with Loki
  • Real-time alerting via ntfy mobile notifications
  • External monitoring with Blackbox Exporter
  • Infrastructure metrics from Proxmox integration

🔒 Security & Network (4 containers) ​

VMIDContainerIP AddressResourcesFunction
100SWAG192.168.0.31GB RAM, 2 coresReverse proxy, SSL, firewall
116wireguard192.168.0.219 + 10.10.10.12GB RAM, 2 coresVPN server, dual network
104alpine-vaultwarden192.168.0.2482GB RAM, 2 coresPassword manager
103rustdeskserver192.168.0.140512MB RAM, 1 coreRemote desktop server

Security Features ​

  • SSL Termination: Let's Encrypt certificates via SWAG
  • VPN Access: Secure remote access through Wireguard
  • Password Management: Self-hosted Vaultwarden
  • Network Segmentation: Firewall rules for container isolation

🏢 Business & Storage (6 containers) ​

Photo & Document Management ​

VMIDContainerIP AddressResourcesPurpose
105immich192.168.0.154GB RAM, 4 coresPhoto management, GPU, privileged
117immich-backup192.168.0.109GB RAM, 4 coresBackup instance (stopped)
128paperless-ngx192.168.0.1492GB RAM, 2 coresDocument management

Storage & Business Applications ​

VMIDContainerIP AddressResourcesFunction
102fileserver192.168.0.52GB RAM, 2 coresNAS, Cockpit, SMB shares
101drive192.168.0.126512MB RAM, 1 coreGoogle Drive sync
111docker192.168.0.1532GB RAM, 2 coresContainer runtime host
125odoo192.168.0.1592GB RAM, 2 coresERP system
124ntfy192.168.0.124256MB RAM, 1 coreNotification server

Business Features ​

  • Photo AI: Immich with GPU-accelerated face recognition
  • ERP Integration: Full Odoo business management suite
  • Document OCR: Paperless-ngx with automated processing
  • Cloud Sync: Automated Google Drive integration

🌐 Network Configuration ​

Primary Network (vmbr0) - 192.168.0.x/24 ​

  • Gateway: 192.168.0.1
  • DNS: Cloudflare (1.1.1.1, 1.0.0.1)
  • Containers: 26 containers with direct internet access
  • Firewall: Port-specific rules for external access

VPN Network (vmbr1) - 10.10.10.x/24 ​

  • Gateway: 10.10.10.1 (Wireguard container)
  • Purpose: Isolated torrent traffic routing
  • Containers: qBittorrent (10.10.10.2), Prowlarr (10.10.10.3)
  • Routing: All traffic through Wireguard VPN tunnel

💾 Storage Mounts ​

Common Mount Patterns ​

bash
# Media containers
/data/media     → 10TB shared media storage
/docker         → Container-specific volumes

# Business containers  
/data/documents → Document storage
/data/photos    → Photo storage with AI processing

# Monitoring containers
/monitoring     → 64GB specialized logging storage
/data/metrics   → Prometheus time-series data

# Security containers
/config         → Configuration persistence
/certs          → SSL certificate storage

🔧 Resource Summary ​

Total Allocation ​

  • RAM: 30.75GB across 28 containers (99% host utilization)
  • Storage: 10TB shared + 128GB Docker volumes + 64GB monitoring
  • CPU: Optimized core allocation based on service requirements
  • Network: Dual-bridge setup with VPN routing

High-Resource Containers ​

  1. Immich Backup: 9GB RAM (stopped by default)
  2. Immich: 4GB RAM + GPU passthrough
  3. Plex: 4GB RAM + GPU passthrough
  4. qBittorrent: 2GB RAM for heavy torrent workloads

🚀 GitOps Integration ​

All containers are defined in Terraform modules:

  • terraform/containers/media-stack.tf: Media services
  • terraform/containers/monitoring.tf: Observability stack
  • terraform/containers/security.tf: Security services
  • terraform/containers/business.tf: Business applications

Each container includes:

  • Resource allocation (RAM, CPU, storage)
  • Network configuration (static IPs, firewall rules)
  • Feature settings (privileged access, GPU passthrough)
  • Ansible integration for service deployment

Enterprise-Grade Homelab Infrastructure

Copyright © 2025 Piyush Mehta. Built with GitOps principles.