What's Running in My House

Five machines live in my house, and every one of them runs Debian. Between them they handle my music, my movies, my files, my notes, my search engine, a couple of local AI models and a BBS running on a computer that doesn't physically exist. The public stuff lives on rented servers: the blogs, the Mastodon instance, the BBSes people actually call. This post is about what stays home. How traffic gets in The ISP's modem sits in bridge mode and does nothing else. An EdgeRouter-X handles the real work as gateway, firewall and NAT. Behind it there's a small managed 8-port switch and a Ubiquiti access point. LAN DNS comes from dnsmasq. Public web traffic hits the router, gets forwarded to one box, and that box decides where it goes. It's an nginx reverse proxy I call the ingress. Every public site hosted at home passes through it, so there's exactly one place to look when something breaks. The ingress also pushes dynamic DNS updates to deSEC, which hosts the public hostnames. Tailscale ties…

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town