Willard Palm

Self-hosting the future, one container at a time

// tech stack

Built on a
solid foundation

A carefully curated homelab stack focused on security, performance and self-sufficiency.

Proxmox VE

Bare-metal hypervisor running on a 12-core i5 with 16GB RAM. All workloads run as LXC containers for minimal overhead.

Proxmox 7 LXC ZFS

UniFi ZBF

Zone-based firewall with full VLAN segmentation. IoT, Secure, Guest and VPN zones — each with strict inter-VLAN policies and logging.

UniFi CGU IPv4+IPv6 IDS/IPS

Adguard Home

Network-wide DNS filtering with 535k+ block rules. Parallel DoH upstreams via Cloudflare, Adguard DNS and Quad9 with DNSSEC.

DNS-over-HTTPS DNSSEC 535k rules

Docker + Podman

Containerised services managed through Portainer. Immutable SHA-pinned deployments via the Portainer API for reproducible stacks.

Portainer Docker Podman

Nginx Proxy Manager

Reverse proxy with automatic SSL via Let's Encrypt. All services exposed through ipalm.nl with HSTS, access lists and IPv6 support.

Let's Encrypt HSTS Wildcard DNS

AI & Automation

MCP-driven infrastructure management — UniFi, Proxmox and Adguard controlled via AI agents. Hermes Agent orchestrates the homelab.

MCP Protocol Hermes Agent GraphDB

// infrastructure

The Homelab

Proxmox pve01 — 12-core, 16GB. Six production LXC containers, one VM running Home Assistant OS.

Nginx Proxy Manager

CT-01 · 10.x.x.22

Vaultwarden

CT-02 · 10.x.x.26

Docker

CT-03 · 10.x.x.23

Podman

CT-04 · 10.x.x.25

Jellyfin

CT-05 · 10.x.x.59

Adguard Home

CT-06 · 10.x.x.62

pve01 — system status

willard@pve01:~$ pvesh get /nodes/pve01/status

{

  "cpu": 0.04,

  "memory": {

    "used": "in use",

    "total": "total"

  },

  "uptime": "stable",

  "kernel": "current",

  "ipv6": "xxxx:xxxx:xxxx::/48"

}

willard@pve01:~$ _

// network topology

VLAN Segmentation

Zero-trust network design with strict inter-VLAN firewall policies, dual-stack IPv4+IPv6 and DNS filtering on every segment.