Management Access VPN
WireGuard server on the gateway
NetBird peers
WireGuard mesh, my remote devices
NetBird managementNetBird dashboard
Proton VPN
WireGuard egress for Proton-WiFi and Gluetun
WireGuard client
Cloudflare
DNS for 4 zones, Tunnel, Access
cloudflared connector
Cloudflare Access
Let's Encrypt wildcard
Playit.gg
TeamSpeak relay
Playit agent
GitHub, ghcr.io
Repository and container images
GitHub CLI
Microsoft 365 / Entra ID
Entra Cloud Sync, Intune, Azure Arc
Entra Cloud Sync agent
Azure Arc agent
Action1
endpoint management
Action1 agentAction1 Deployer
VirusTotal, MalwareBazaar
Wazuh lookups and the weekly hash list
VirusTotal integrationMalwareBazaar hash list
Discord
#bots channel for Grafana and Splunk alerts
Discord alert bot
WAN 1 · Verizon Fios
primary uplink, 2.5 GbE into gateway port 1
WAN 2
DHCP failover, no link
Ahsoka Gateway
UCG-Fiber · zone-based firewall
12 zones · 89 policies · 30 DNS records · Threat Management
UniFi NetworkLocal DNSThreat ManagementManagement Access VPNProtonVPN clientCEF syslog exportBane Switch POE
USW-Pro-Max-16-PoE
10G DAC from gateway SFP+ 1
Mace Switch
USW-Flex-2.5G-5 · Flex Mini 2.5G
port 5 to Bane port 15, powered over PoE
Jango Switch
USW-Flex-2.5G-5 · Flex Mini 2.5G
port 5 to Mace port 4
Anakin AP
U7 Pro XG · 2.4, 5 and 6 GHz
Mace port 3 · 5 WLANs, 3 enabled
ethVLAN 50
Jedi PC
physical PC
Custom build, ASUS TUF Gaming X870-Plus WiFi
AMD Ryzen 9 9950X3D16 cores, 32 threads
32 GB DDR5, 2 × 16 GB
NVIDIA GeForce RTX 5070 Ti
2 TB NVMe, Samsung 9100 PROC:, Windows
2 TB NVMe, Samsung 990 PROD:, storage
MeshCentral agent
RustDesk clientethVLAN 60
ObiPC
DHCP · physical PC
Custom build, ASUS TUF Gaming B650-Plus WiFi
AMD Ryzen 7 7700X8 cores, 16 threads
32 GB DDR5, 2 × 16 GB
NVIDIA GeForce RTX 3070, 8 GB
1 TB NVMe, Samsung 980C:, Windows
500 GB NVMe, Crucial P310D:
Action1 agentMeshCentral agentApp Portal clientOpenSSHRustDesk clienteth
G6 Pro camera
UniFi Protect camera
PoE from Bane port 6
Wi-FiVLAN 10
Surface Pro
Wi-Fi laptop
Microsoft Surface Pro (2017), Model 1796
Intel Core, 7th generation2 cores, 4 threads
MeshCentral agentWi-FiVLAN 10
Parrot OS-Mac
Wi-Fi laptop
Apple MacBook Pro 15-inch (2017), MacBookPro14,3
Intel Core i7, 7th generation4 cores, 8 threads
16 GB LPDDR3
Wi-FiVLAN 10
M3 MacBook
Wi-Fi laptop
Apple M38 cores: 4 performance, 4 efficiency
Intune Company PortalMeshCentral agenttrunkVLAN All
Custom build, MSI MS-7C91 board
AMD Ryzen 7 3700X8 cores, 16 threads
64 GB DDR4, 4 × 16 GB at 3200 MT/s
NVIDIA GeForce GTX 1080 Ti
1 TB NVMe, Crucial P310boot and local-lvm
2 TB SATA SSD, Crucial BX500ssd-lvm1, LVM-thin
2 TB HDD, Toshibahddpool-1, ZFS
Proxmox VE
NUT server
Wazuh agent
node_exporterVirtual Machines
security-01
VM 200 · Ubuntu 24.04
Docker containers
Wazuh manager, indexer, dashboard
Wazuh MCP Serverread-only
Splunk Universal Forwarderto splunk-siem
VirusTotal integration
node_exporter
cAdvisor
Hawser
splunk-siem
VM 109 · Rocky Linux 10
Services
Splunk Enterprise
Enterprise Security
SC4SPodman, forwards to HEC
node_exporter
HQ-DC01
VM 301 · Windows Server 2025
Services
AD DS, DNS, GC
OpenSSHSSH Manager
HQ-DC02
VM 302 · Windows Server 2025
Services
AD DS, DNS, GC
OpenSSH
HQ-MGT01
VM 303 · Windows Server 2025
Services
Windows Admin Center
Entra Cloud Sync agent
Azure Connected Machine agent
Action1 Deployer
MeshCentral agent
HQ-WS001
VM 310 · Windows 11 Pro
Services
Action1 agent
OpenSSHfrom Secure VLAN 50 only
ubuntu-dev
VM 105 · Ubuntu 26.04
Services
Docker CE
VS Code
MCP clientsCodex, Claude Code
GitHub CLI
Samba
RustDesk clientto hbbs on docker-blue
node_exporterWazuhwin11-dev
VM 103 · Windows 11 Pro
Services
OpenSSH Server
kali-pen
VM 102 · Kali Linux
LXC Containers
docker-main
LXC 110 · Debian 12
Docker containers
ImmichPostgreSQL and Valkey
Forgejoregistry
Dockhand
BookLoreMariaDB
Ollamaqwen3.5:2b
Open WebUI
App Portal
CLI Proxy API
Internal docs site
Dashboard
WUDWazuhnode_exporterTemplates
Templates
on grey-server
Templates
debian13-template
ws2025-template
ubuntu-cloud-template
trunkVLAN All
Lenovo ThinkCentre M920q Tiny
Intel Core i5-8500T6 cores, 6 threads
16 GB DDR4, 2 × 8 GB at 2400 MT/s
256 GB NVMe, Toshibaboot and local-lvm
250 GB SATA SSD, Samsung 850 EVOssd-lvm2, LVM-thin
Proxmox VEWazuh agentnode_exporterVirtual Machines
edge-01
VM 121 · Debian 13
Services
Caddyauto_https off
cloudflaredtunnel connector
Wazuhnode_exporterapp-01
VM 116 · Debian 13
Docker containers
Coolify
Traefik (coolify-proxy)
PostgreSQLcoolify-db
Rediscoolify-redis
Coolify Realtime and Sentinel
cAdvisornode_exporterWazuhalpha-prod-01
VM 401 · Debian 13
Docker containers
TeamSpeak 3 Server x2ts-valorant-02, ts-valorant-03
TS3 Manager
TeamSpeak reachability collector
Playit agent
WUDcAdvisorHawserWazuhnode_exportertrunkVLAN All
Lenovo ThinkCentre M910q Tiny
Intel Core i5-7500T4 cores, 4 threads
6 GB DDR4, 2 GB + 4 GB at 2133 MT/s
256 GB NVMe, Samsungboot and local-lvm
500 GB HDD, WDspare, not in use
Proxmox VEWazuh agentnode_exporterLXC Containers
docker-network
LXC 107 · Debian 13
Docker containers
Nginx Proxy Manager
NetBird server
NetBird dashboard
Wildcard certificate
WUDcAdvisorHawserWazuhnode_exportermonitor-01
LXC 104 · Debian 13
Docker containers
Prometheus
Grafana
Discord alert bot
Proxmox exporter
blackbox exporter23 probes
NUT exporter
PeaNUT
cAdvisorWUDHawserWazuhnode_exporteransible-01
LXC 100 · Debian 13
Services
Ansible
Semaphore
Galaxy PXE
tftpd-hpa
Wazuhnode_exporterdocker-blue
LXC 108 · Debian 13
Docker containers
Executor
Docker MCP Gateway x2
UniFi Network MCPfull access
SSH Manager MCP24 servers
RustDesk hbbs, hbbr
MeshCentral
WUDcAdvisorHawserWazuhnode_exportertrunkVLAN All
Lenovo ThinkCentre M920q Tiny
Intel Core i5-8500T6 cores, 6 threads
16 GB DDR4, 2 × 8 GB at 2666 MT/s
256 GB NVMe, Samsungboot and local-lvm
1 TB HDD, Seagatemedia-01 /data, bind mount
Proxmox VEWazuh agentnode_exporterLXC Containers
media-01
LXC 842 · Debian 13
Docker containers
JellyfinQuick Sync
Seerr
Sonarr
Radarr
Prowlarr
FlareSolverr
qBittorrentvia Gluetun
GluetunProton WireGuard, kill switch
WUDcAdvisorHawserWazuhnode_exportertrunkVLAN All
Lenovo ThinkCentre M920q Tiny
Intel Core i5-8500T6 cores, 6 threads
16 GB DDR4, 2 × 8 GB at 2666 MT/s
256 GB NVMe, Samsungboot and local-lvm
320 GB HDD, Hitachifailed its SMART test, not in use
Proxmox VEWazuh agentnode_exporterNo guests yet
UPS-02
APC Back-UPS RS 1500MS2
gateway, Bane Switch, Verizon ONT, grey, blue, red
NUT serverPeaNUTUPS-01
APC Back-UPS Pro BR1500MS2
Jedi PC
Click a VLAN to light up its hosts.
Internal
Management
Untrusted
Dmz
AlphaSec-Identity
AlphaSec-Mgmt
AlphaSec-Observability
AlphaSec-Servers
AlphaSec-Access
External
Internet 1Internet 2ProtonVPN
Vpn
Management AccessFamilyVPNGame-AccessTemp
grey-serverpurple-serverblue-serverred-servergreen-servertrunk or uplink cableaccess cable in its VLAN colourWi-Fi
Flows, moving toward their target: