← PROJECTSFLAGSHIP / HOMELAB-NETWORKING
HOME LAB + NETWORKING / FLAGSHIP CASE STUDY

Make the request path and the operating boundary visible.

Homelab networking case study technical content

A factual operating note on my self-hosted environment: the services, the request path, resource boundaries, monitoring, and the storage-expansion incident that exposed an incomplete disk resize.

STATUS / OPERATEDHOST / UBUNTU + KVMEVIDENCE / LIVE SERVICE CHECKS
CASE / 02
01 / Problem

A service is only useful when its whole path can be explained.

A home lab turns infrastructure into something you can actually see: virtualization, Linux, containers, DNS, reverse proxies, storage, monitoring and backups all meeting at the same boundary. Collecting software isn't the hard part. The hard part is knowing which layer failed: a request that never arrives, a service that won't start, or a disk that looks bigger on paper while the filesystem underneath is still the old size.

I describe this environment as a learning and operating system on purpose, not enterprise infrastructure. Its value comes from being able to build something, break it, trace what went wrong, and improve it on a path that's real.

02 / Request flow

From hostname to service, one boundary at a time.

The edge path is conceptual; the host and service facts below are verified on the current server.

PATH / 06
01 / NAMEDNSresolve the requested hostname
02 / EDGEROUTER + NATreach the host boundary where applicable
03 / WEBNGINXselect the hostname and route
04 / HOSTUBUNTU SERVERprocesses, filesystems and services
05 / CONTAINERSDOCKERisolate application and database paths
06 / RESULTHTTP RESPONSEverify status, content and headers
Conceptual request path used for diagnosis; private addresses and router secrets are deliberately omitted.
03 / Verified environment

What is actually operating.

HOST

Ubuntu on KVM

Current host evidence shows Ubuntu 26.04.1 LTS on x86_64, 4 logical CPUs and 11 GiB of RAM. The virtual disk sits at 260 GiB after expansion.

EDGE

Nginx + HTTPS

Nginx serves the ayron.in portfolio and preserves the independent pc.ayron.in dashboard and news.ayron.in service.

OBSERVABILITY

Real checks

Uptime checks verify the portfolio, robots, sitemap and preserved subdomains. Umami, Uptime Kuma and SEOnaut remain on loopback/private bindings.

CONTAINERS

Bounded services

Current SEO services use persistent databases, restart policies, resource controls, scheduled reports and local backups. Database ports are not public.

04 / Incident report

The virtual disk grew first. The filesystem did not.

The server reported a 260 GiB virtual disk. Inspection told a different story: a 62 GiB root partition, a 31 GiB root logical volume, and an ext4 root filesystem sitting at about 4.2 GiB free.

The partition table was GPT, and `/dev/sda3` turned out to be the LVM physical volume, confirmed rather than assumed. The volume group had roughly 31 GiB free before any resize took place. I backed up the GPT and LVM metadata first, then expanded only the path I'd identified: partition 3, the PV, the root LV, and ext4 on top.

BEFORE31G root LV · 4.2G free · 86% used
AFTER258G root LV · 218G free · 11% used

No partition was shrunk or deleted. The expansion was verified with `lsblk`, `findmnt`, LVM inspection and `df`.

05 / Operating posture

Observe → back up → change one boundary → verify.

01

Monitoring

Check availability and response paths at bounded intervals.

02

Crawling

Run SiteOne and SEOnaut as sensors, not as automatic change engines.

03

Performance

Use Lighthouse history to detect regressions, not to chase a perfect score.

04

Backups

Keep database dumps, configuration, reports and restoration metadata.

05

Security

Keep dashboards private, secrets local and capabilities narrow.

06

Diagnosis

Separate application, localhost, port, proxy, DNS and upstream failures.

06 / Lessons and next direction

The useful architecture is the one that can be debugged.

The lab shows how a request travels through boundaries, but it doesn't claim fixed enterprise topology, production-scale traffic, guaranteed uptime, or public exposure for every service documented here. Some of the portfolio diagrams are still conceptual, and they're labelled that way.

The improvements worth making next aren't more containers for their own sake. They're an external backup copy, private admin access over VPN/SSH, measured real-user data, and case studies tied to actual project evidence.

Related AI system

Put intelligence inside the boundary.

KHS AI adds controlled tools, observation and verification on top of this infrastructure.

Open KHS AI case study
References / Verified sources

Technology & official sources.

The documentation behind the infrastructure layers and operating practices used in this case study.

SOURCES / 06

Case study by Ayron Jins. The dashboard described here is open source: homelab-dashboard. Related reading: the homelab services overview, the networking notes, and KHS AI, which is developed against this infrastructure.