System Architecture
Dual-site homelab infrastructure connected via encrypted Tailscale mesh. Cloudflare Pages at the edge, Workers for serverless compute, tunnels for zero-trust backend access.
Infrastructure Topology
Interactive force-directed graph of the complete dual-site architecture
Click a node in the graph to view its specs, services, and connections.
Request Flow
How requests traverse the infrastructure from browser to backend
No backend calls. Pre-built at deploy time. Instant global delivery with perfect SEO.
Real-time data, authentication, and admin features. Edge-processed then routed through encrypted tunnel.
Service Ecosystem
Software stack powering the infrastructure
AI & Machine Learning
Core Infrastructure
Build System
Observability
Build Swarm
Distributed Gentoo compilation across 4 agents spanning both sites
Architecture Decisions
Design rationale and trade-offs
Resilience and global reach. If the homelab goes down, the blog and portfolio remain available. Admin features degrade gracefully with cached data. Zero infrastructure cost for static assets, DDoS protection included, and automatic deployments from Git.
Static rendering for content (fast, cacheable, SEO-friendly). SSR for admin pages and APIs (real-time data, auth, secrets). One codebase, one deploy target, two rendering modes. Cloudflare Workers handle the SSR at the edge.
Zero inbound firewall rules. Outbound-only connections from the homelab to Cloudflare's edge. No port forwarding, no NAT hairpinning, no dynamic DNS. If the tunnel daemon stops, nothing is exposed. The attack surface is zero.
WireGuard-based mesh networking with zero-configuration. Subnet routing bridges the two physical sites transparently. Works behind CGNAT, double-NAT, and restrictive firewalls. ~38ms inter-site latency with end-to-end encryption.
Geographic redundancy and workload isolation. Jove (primary) handles web services and development. Kronos (secondary) handles storage, media, and heavy compute. Tailscale mesh makes them appear as a single logical network despite being in different locations.