Overview
A home-lab environment built to gain hands-on depth in infrastructure security: infrastructure-as-code, network segmentation, and hardened Linux and Windows Server systems. This project has not been built yet — the sections below describe the plan, not completed work.
Planned Architecture
- Proxmox or another hypervisor for virtualization
- pfSense or OPNsense for perimeter and routing
- Segmented networks separating management, server, and endpoint zones
- Ubuntu servers
- Windows Server and Active Directory
- Wazuh for monitoring, extending the existing endpoint monitoring lab
- Docker for containerized services
- Terraform for infrastructure provisioning
- Ansible for configuration management
- AWS components, where relevant to a hybrid setup
Security Goals
- Practice least-privilege network segmentation between zones
- Manage infrastructure as code rather than manual configuration
- Apply consistent Linux and Windows hardening baselines
- Centralize monitoring and detection across the environment
Threat Model
[CONTENT NEEDED: what this lab is defending against and what's explicitly out of scope]
Build Phases
[CONTENT NEEDED: phase breakdown as the build progresses]
Current Progress
[CONTENT NEEDED: current status]
Next Milestone
[CONTENT NEEDED: next concrete step]
Screenshots & Diagrams
[ADD DIAGRAM: network topology once segmentation is built] · [ADD SCREENSHOT: hypervisor console, once deployed]