Homelab

This is an architecture showcase for a small, private stack. It focuses on the ideas behind the system rather than exposing operational details.

Architecture

The stack combines Synology, Docker, Home Assistant, AdGuard Home, Unbound, and Tailscale. The access model is private by default over Tailscale, with no inbound port forwarding.

Trusted device

Tailscale

Synology + Docker

Docker services include Home Assistant, AdGuard Home, and Unbound. Each service has a focused role, while the private access layer keeps the whole arrangement coherent.

Backup philosophy

Backups are treated as a recovery practice: protect important data with independent copies, make backup jobs observable, and rehearse restoration. A backup only earns trust when a restore has been shown to work.

Lessons learned

Private-by-default access keeps the public surface small.
Small, composable services make changes and recovery easier to reason about.
Documentation and restore practice are part of reliability, not afterthoughts.