Homelab
snarfnet.net
November 2026
Networks
VLANs & Subnets
LAN
Core & Gateway
14.44.4.0/25
WAN 1
Fiber ONT
174.106.252.0/24
WAN 2
5G Backup
192.168.225.0/24
VLAN 20
Compute Fleet
140.44.4.0/25
VLAN 3
Spacedock HCI
140.44.1.0/24
VLAN 40
Storage SAN
14.10.10.0/25
VLAN 50
Smart Home
14.4.4.0/25
Tailscale
Mesh Tailnet
100.64.0.0/10
Legend
wired link, colored by network
internet uplinks (fiber, 5G)
Wi-Fi (not a cable)
planned / expansion
line width = speed (10G SFP+ vs 1G)
app.snarfnet.net
served by Ingress
:port
published service port
Internet
two independent uplinks
WAN 1 • Fiber ONT
1 Gbps Symmetric
10G SFP+ to UDM-SE
WAN 2 • 5G Modem
Cellular Standby
GbE RJ45 Failover
🛡️
UDM-SE
• gateway & router
14.44.4.1 • UniFi OS v4.1
10G SFP+ Backbone
Hardware
CPU: 4× Cortex-A57 @ 1.7G
RAM: 4 GB DDR4
Storage: 128 GB SSD
Ports: Dual 10G + 8× GbE PoE
Services
• Suricata IPS/IDS L5
• WireGuard Server
• Inter-VLAN L3 Routing
• Deep Packet Inspection
Uplink Policies
• WAN 1: Fiber (Primary)
• WAN 2: 5G (Hot Standby)
• VLAN 20 Compute Priority
• Smart Queues FQ-CoDel
Wi-Fi clients • wireless
U6-Enterprise & U6-Pro APs
Phones, Laptops, Smart TV, IoT
Core Switch • 2.5G/10G
USW-Enterprise-24-PoE
10G SFP+ Uplink to Fleet
Ways in from outside
Zero Open Ports
Cloudflare Tunnel
HTTPS
*.snarfnet.net (Zero Inbound Ports)
Edge DDoS & WAF Protection
Tailscale & WireGuard
Tailnet
100.64.0.0/10 • Mesh Interconnect
Direct Admin Subnet Route
GitOps & CI/CD Pipeline
1. Author
Developer Commit
git push
↓
2. Repository
Gitea Webhook
git.snarfnet.net
↓
3. Reconcile
Argo CD Sync
selfHeal: true
↓
4. Target
Aerodrome & Spaceport
K3s Deploy
Outside services it relies on
Cloudflare
GitHub
Let's Encrypt
Docker Hub
Tailscale DERP
⚡
snarfnet
• core infrastructure fabric
4 Clusters • 50+ Containers & Pods • Reconciled Declaratively via GitOps
15/15 Argo Apps Synced
Uptime Kuma: 35 Probes
Hardware Nodes
Aerodrome (k3s Master)
140.44.4.11
AMD EPYC • 64 GiB DDR4 • Dual 10GbE SFP+
NVIDIA RTX 3060 12GB (Tensor AI Core)
Spaceport (k3s Worker)
140.44.4.41
Intel Core i7 • 32 GiB DDR4 • Dual 2.5GbE
Spacedock (Harvester HCI)
140.44.1.0/24
Multi-Node Hypervisors • 128 GiB RAM • Ceph
Shipyard (Docker Swarm)
140.44.4.15
Container Fleet • 32 GiB RAM • GbE
Storage Array Pools
TrueNAS ZFS Flash Pool
4.2 / 8.0 TiB (52%)
NVMe Mirror • High-IOPS Databases & Volumes
SnarfNAS Bulk Storage
28.5 / 64.0 TiB (44%)
HDD RAID-Z2 • Media Library & Long-term Backups
Longhorn Distributed SAN
850 GiB / 2.0 TiB (42%)
Cross-Cluster Block Replicated Volumes
Runs on Host Fabric
• K3s v1.28 Engine
• Harvester v1.3 HCI
• Docker Swarm v24
• Keepalived VRRP
Edge & Ingress
NGINX Proxy Mgr
Reverse Proxy & SSL
:81
Authentik SSO
Identity & MFA RBAC
:9000
Cloudflare Tunnel
Zero-Trust Ingress
HTTPS
Keepalived VIP
HA VRRP Virtual IP
.10
GitOps & Automation
Argo CD
Declarative GitOps
Synced
Gitea Repos
Git Repositories
:3000
AWX Automation
Ansible Playbooks
:8052
Semaphore UI
Playbook Runner
:3001
Observability
Grafana Analytics
Metrics & Dashboards
:3000
Uptime Kuma
Status & Multi-Heartbeat
35 Probes
Zabbix Fleet
Hardware & SNMP Alarms
:8080
PeaNUT UPS
Battery & Power Telemetry
:3493
Storage & Platform
Longhorn Aerodrome
Distributed NVMe Flash
SAN
Longhorn Spaceport
Distributed Storage
SAN
Rancher Manager
K8s Multi-Cluster Ops
HTTPS
Homepage Dashboard
Unified Operations Hub
:3000
AI & Inference Fabric
Ollama Engine
Local LLM Acceleration
:11434
Open-WebUI
Multi-Model AI Chat
:8080
NVIDIA DCGM
GPU VRAM & Telemetry
:9400
Glances Monitor
Live Host Metric Stream
:61208
Smart Home & Environment
Home Assistant
Home Automation Core
:8123
Tempest Weather
Backyard Sensor Array
UDP/API
UniFi Controller
WLAN & Switching SDN
:8443
Portainer Swarm
Container Management
:9000