Vigía: monitoring the homelab, and why I ended up using Spring Boot

A Java service that watches the homelab with HTTP and ping checks and alerts on Telegram only on state changes. Why the FastAPI plan got binned, and what broke on deployment day.

Homelab ED50 (4/4): self-hosted invoicing and offsite backup on Hetzner

Invoice issuing with FacturaScripts, prepared for Facturae and Verifactu, and the client-side encrypted offsite copy on a Hetzner Storage Box that closes the 3-2-1, uncovering years of silently failing NAS backups along the way.

Homelab ED50 (3/4): TicketBot, receipt digitization via Telegram

A Telegram bot that turns the photo of a paper receipt into an archived, classified fiscal document in Paperless-ngx in about 15 seconds, built with n8n, a vision model, and the Paperless API.

Homelab ED50 (2/4): domains and TLS with Caddy, invoice management with Paperless-ngx

Caddy as a reverse proxy with a wildcard Let's Encrypt certificate and zero open ports, plus Paperless-ngx as the invoice document manager with automatic intake over IMAP.

Homelab ED50 (1/4): final hardware, Immich, and a verified 3-2-1 backup strategy

How the v1 plan got trimmed against the real budget, the final hardware, self-hosted photo management with Immich, and a 3-2-1 backup strategy verified end to end, including the migration of ~145 GB of family photos.

Infrastructure: choosing and justifying the hardware

The hardware behind the enterprise network project, backups, firewall, and the Proxmox server, and the reasoning for each choice.

Planning a self-hosted service centralization (v1 architecture)

I'd been running my self-hosted stuff in a messy, ad-hoc way and finally sat down to plan it properly. VLANs, OPNsense, Proxmox, and the headache of doing it right when there's real client data on the network.

Getting started with usbmon on Arch Linux

Setting up Wireshark and usbmon to capture USB traffic on Arch Linux without running as root.