Build guides
How to build this lab yourself, one part at a time. Every step ends with a check, so you know it worked before you move on, and every configuration file is complete and downloadable.
The guides follow the tour: the tour explains what each part does and why, the guides show how to set it up. Start with the firewall: every other part of the lab lives in one of its networks. The web server guide stands apart: it builds the cloud server this site runs on, which has no way into the lab. Each guide says what it needs before you begin.
They are written for one particular set of hardware, but nothing in them depends on that hardware except interface names, which are easy to change.
- 1FirewallAn OpenBSD firewall with eight separated networks, a default-deny policy, and a VPN that fails closed. 7 chapters.
- 2Cluster and SIEMSix Raspberry Pi boards, a Kubernetes cluster run from Git, and the SIEM that watches the firewall. 8 chapters.
- 3Access pointA self-hosted UniFi controller, and the Wi-Fi networks as VLANs. 1 chapter.
- 4Web serverThe cloud server this site runs on: locked down, with strict headers, write-only deploys, and its logs fetched from home. 4 chapters.
- 5KodiThe media player on its own network, through the VPN, controlled from the phone. Coming later.
- 6Home AssistantHome automation on its own Raspberry Pi, with Zigbee, allowed into the IoT network and nothing more. Coming later.