Hardware Layout • Virtualization • Security Zones • Monitoring Stack
Infrastructure Diagram
This diagram represents the complete home‑lab environment including Windows Server host, VMware virtual machines, Ubuntu laptops, ARM devices, Docker workloads, and the security posture applied across the environment.
Security Summary
All servers use default‑deny firewalls.
Remote access is internal‑network only.
Docker containers hardened and isolated.
Nginx is the only public‑facing entrypoint.
Prometheus installed across all nodes.
Grafana provides dashboards for system health.
Windows Server BIOS‑level power scheduling reduces energy footprint.