Vlan

This homelab uses segmented networks, policy enforcement at the edge, and redundant services for the few components that would otherwise make a bad afternoon much worse. Architecture at a glance # The design separates management, infrastructure, isolated workloads, connected devices, and out-of-band administration. The firewall enforces the boundaries. Internal services use role-based names, and public access is mediated through an authenticated edge rather than direct exposure of individual workloads.