3-2-1 backup with automated restore verification
Backup chain with Proxmox Backup Server, a NAS, and an off-site copy, paired with automated test restores that confirm it can be relied on.
- Proxmox Backup Server
- NAS
- ZFS
- verification script
Homelab · IT infrastructure
I'm m4nifest0: this is where I collect projects, guides and notes on Proxmox VE clusters, Linux and Windows Server, segmented networks, backup, security and automation. From my home lab, with method and documentation.
Proxmox VE · LXC · Linux · Windows Server · VLAN · VPN · Backup · Monitoring
Skills
The fields where I design, experiment and document. Each area leads to the related projects.
Linux and Windows Server
Installing, configuring and maintaining servers: services, roles, updates and documentation.
See the projects
Proxmox VE and LXC
Proxmox VE clusters, virtual machines and LXC containers, with attention to resources, isolation and recovery.
See the projects
VLANs, firewalls, DNS and VPN
Network segmentation, access rules between segments, name resolution and secure remote access.
See the projects
NAS, backup and disaster recovery
Data storage, verifiable backup strategies and recovery plans after a failure.
See the projects
Hardening and observability
Reducing the attack surface, access control, logs and alerts on the state of the infrastructure.
See the projects
Repeatable infrastructure services
Services hosted at home, provisioning and configuration managed as code, versioned and reproducible.
See the projects
Resource optimization
Enterprise-class servers and components: power draw, noise, redundancy and efficient use of CPU, RAM and disks.
See the homelab
Models run locally
Artificial intelligence to analyze logs and metrics, keeping data inside your own infrastructure.
See the projects
Portfolio
A selection of the most significant work: problem, implemented solution and results.
Backup chain with Proxmox Backup Server, a NAS, and an off-site copy, paired with automated test restores that confirm it can be relied on.
Network divided into isolated VLAN segments (management, servers, clients, home automation, guests) with the firewall as the only routing point between segments.
Three Proxmox VE nodes with ZFS replication and automatic VM failover, keeping services up even after the failure of a single node.
Inside the rack
From the network to the power supply: each layer of the infrastructure has a precise role and relies on the others.
A perimeter firewall, a managed switch and the patch panel: all traffic between the five VLAN segments goes through a single control point.
Network, VLANs and firewallThree heterogeneous Proxmox VE nodes with quorum, ZFS replication and high availability: virtual machines and containers can move from one node to another.
Proxmox VE clusterA dedicated NAS holds the services' data and the second copy of the backups, which are verified with test restores and not just with scheduled jobs.
NAS and storageA monitored rack UPS warns the nodes before the battery runs out: an orderly shutdown beats a sudden failure.
Physical nodes and hardwareHomelab
Cluster, network, storage and self-hosted services treated like a real environment and described by category. Addresses, hostnames and security rules are deliberately kept off the public pages.
Overall architecture
Blog and guides
Hands-on guides and technical notes, with copy-ready commands and notes on the critical points.
A Next.js bug that blocked every upload to Altervista, shared hosting limits on security headers, and a layout bug that broke words in tables.
Rebuilding the self-hosted dashboard with real data, a binary copy-paste that gets corrupted, and an unclosed CSS comment that silently disables an element.
How to use a local language model to summarize and classify system logs, masking sensitive data and leaving the final decision to a person.
Contact
Write to me: your email app opens with the message ready to go, and I reply as soon as I can. If you're reporting an issue with an article, include its title so I can check quickly.
Or by email: email address protected (enable JavaScript to see it)