Nephim
LINUX • DOCKER • SELF-HOSTED

Homelab & Self-Hosted Linux Infrastructure

Alongside software development, I run a dedicated Linux machine hosting containerized web services, databases, development environments, and multiplayer game servers with Docker.

INFRASTRUCTURE TOPOLOGY // INGRESS TO CONTAINER RUNTIME DECLARATIVE DOCKER COMPOSE
1. INGRESS & TLS EDGE
DNS & Reverse Proxy
  • Cloudflare DNS & Tunneling (`*.nephim.dk`)
  • Automated Let’s Encrypt TLS termination
  • Internal split-horizon DNS routing
  • SSH key-only hardened host access
Isolated Bridge → proxy_net
2. CONTAINER WORKLOADS
Docker Compose Stacks
  • .NET & Web application staging containers
  • Nextcloud private file hosting
  • Dedicated multiplayer game servers
  • Self-hosted utilities & dashboards
ZFS / RAID → Webhooks
3. STORAGE & OPS
ZFS Redundancy & Backups
  • ZFS drive array in RAID for redundancy
  • Routine external backups of critical data
  • Automated Docker Compose stack updates
  • Discord webhook notifications for auditing

Core Infrastructure Layers

Self-Hosted on Linux

Ingress, DNS & Reverse Proxy

EDGE & TLS

All external and internal traffic is routed through a reverse proxy layer with automated Let’s Encrypt TLS certificates, strict subdomain routing, and isolated Docker bridge networks.

Reverse Proxy & TLS TerminationCloudflare DNS & TunnelingInternal Split-Horizon DNSIsolated Frontend / Backend Bridge Networks

Container Runtime & Orchestration

LINUX HOST

Dedicated Linux machine running declarative Docker Compose stacks so every service can be versioned, reproduced, and updated cleanly without host pollution.

Linux Server Host (SSH Key-Only Hardened)Declarative Docker Compose StacksResource Limits & HealthchecksAutomated Image Pruning & Rollback

Self-Hosted Applications & Game Servers

WORKLOADS

Hosts personal web services, development databases, media/file tooling, and dedicated multiplayer game servers for friends.

.NET & Web App Staging ContainersNextcloud for privately hosted filesDedicated Multiplayer Game ServersSelf-Hosted Utilities & Dashboards

Storage, Monitoring & Backups

RELIABILITY

Data is stored in a RAID configuration and critical data is routinely backed up along with automatic updates and notifications using webhooks to Discord.

ZFS drive array for redundancyCritical data is backed up externallyAutomatic updates to Docker Compose stacksNotifications to Discord enabling audit on all devices