AdGuard Home + Unbound
I use AdGuard Home with Unbound for network-wide blocking and recursive DNS — queries go to the root servers, not some upstream resolver.
christopher@homelab:~$ whoami
christopher — I build and run a homelab at home
christopher@homelab:~$ cat mission.txt
christopher@homelab:~$ _
All of this runs in Docker on one machine at my place. Caddy sits in front and handles HTTPS.
I use AdGuard Home with Unbound for network-wide blocking and recursive DNS — queries go to the root servers, not some upstream resolver.
DoH, DoT, and DoQ endpoints so devices can resolve DNS privately — works off-network too when I'm on the VPN.
Tailscale mesh VPN with an exit node and MagicDNS — I can reach everything at home from anywhere without opening ports.
Self-hosted SearXNG for search — no tracking, no profile building, just aggregated results.
Caddy as reverse proxy and TLS. Let's Encrypt certs via DNS-01, so every service gets a clean HTTPS URL.
Uptime Kuma for uptime, Beszel for metrics, Dozzle for container logs, and a speedtest tracker so I know when the ISP is acting up.
Homepage dashboard — one page with links and widgets for everything on the network.
Fabric Minecraft server (The Boys) with Chunky pregen and BlueMap for a live web map of the world.
Read-only shell into /opt/stacks and Minecraft config over a Cloudflare Tunnel. You can't edit anything — sensitive paths are blocked and output gets redacted.
Pulled live from my Uptime Kuma instance — updates every minute.
No datacenter required — this whole stack runs on a recycled office desktop in my house.
I run a homelab at home — DNS, VPN, reverse proxy, monitoring, Docker containers, a Minecraft server. I set it all up and maintain it myself on hardware that's on 24/7 in my house.
Most of what I know about infra and Linux I picked up by actually running it, not just reading docs.