@tsapz

Fabian

House of Zoldyck 22 hosts · 55 containers built, not bought
enter the rack

live briefing · netero

Built, not bought..

These numbers are live — pulled from netero, an SSH-audit tool I wrote that scans the whole lab. Scan #29 · 2026-05-30.

the architecture · 5 pillars

The Rack.

One node, two firewalled networks, a hardened public edge. Five pillars hold the House of Zoldyck up — each named after a Hunter × Hunter character. Scroll to explore, hover to inspect.

live traffic status LED hover a unit — it ejects to inspect move the mouse to orbit

request lifecycle · one way in

One Way In.

Follow a request: it lands on the VPS, rides the encrypted tunnel home, passes the firewall — and only then reaches a service. Anything that tries to cross segments is dropped.

public internet ging VPS · public edge encrypted tunnel · WireGuard hisoka firewall · default-deny segment 01 · services milluki reverse proxy killua hypervisor 21 guests greedisland backups · nightly default-deny segment 02 · isolated no route from segment 01
request path cross-segment traffic · dropped nightly backup lane

stack · tools · daily drivers

System Stack.

What I touch on a regular basis — from the bare-metal layer to the proxy out front.

whoami

About.

I'm Fabian — an IT Specialist for Systems Integration who treats a homelab like a workshop. Servers, networks, and the quiet satisfaction of a green dashboard.

Most of what you see here actually runs at home: a small rack that keeps growing, wired together with Proxmox, Docker and a reverse proxy that politely answers the door. I build it to learn, break it to understand, and document it so future-me doesn't have to guess.

If it boots, routes, or needs a certificate — I'm probably already poking at it.

all systems · live