diff --git a/docs/homelab/Services/outline.md b/docs/homelab/Services/outline.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/homelab/index.md b/docs/homelab/index.md deleted file mode 100644 index 96bd1ee..0000000 --- a/docs/homelab/index.md +++ /dev/null @@ -1,29 +0,0 @@ ---- -sidebar_position: 1 -title: Homelab ---- - -## What is it? - -This is my project of publicly available documentation of my home servers and self-hosted services. - -## Network - -The gate to my HomeLab is a **UniFi Cloud Gateway Ultra**. It is connected to a **1 Gbps** fiber optic from my ISP and manages **3 static WAN IP** addresses. - -The local network is separated into **four VLANs**. - -The gateway is also a DNS server for all local network and VPN clients. - -WiFi network is delivered by **two UniFi U6+** access points powered with the **Switch Lite 8 PoE**. - -[More on network](network.md) - -## Servers -My family home cloud is provided by the **Synology DS423+**. It is for photos and documents hosting and sharing. - -I also have a **DIY NAS with TrueNAS Community Edition** on it that hosts most of the services for personal and family use, that are not from Synology. - -The third one is the **Asus PN42** min PC with an Intel N100 CPU with the **Proxomox VE** on it. It hosts public services, like this website, my Gitea instance, and others. - -I also have a mighty **Home Assistant Blue** with... well **Home Assistant** on it. It does not depend on other servers and has a separate Cloudflare tunnel to it from the outside to be available even when all other servers fail. diff --git a/docs/homelab/network.md b/docs/homelab/network.md deleted file mode 100644 index 21a6546..0000000 --- a/docs/homelab/network.md +++ /dev/null @@ -1,111 +0,0 @@ ---- -sidebar_position: 2 -title: Network ---- -The gate to my HomeLab is a **UniFi Cloud Gateway Ultra**. It is connected to a **1 Gbps** fiber optic from my ISP and manages **3 static WAN IP** addresses. - -## Hardware - -```mermaid ---- -config: - look: handDrawn - theme: forest ---- -flowchart TB - gateway(UniFi Cloud Gateway Ultra) - poe(UniFi Switch Light 8 PoE) - wifi1((UniFi U6+)) - wifi2((UniFi U6+)) - ISP <--> gateway - gateway <--> lan1[LAN] - gateway <--> poe - poe <--> lan2[LAN] - poe <-->|PoE| wifi1 - poe <-->|PoE| wifi2 -``` - -## WAN - -### Port forwarding - -```mermaid ---- -config: - look: handDrawn - theme: neutral ---- -flowchart LR - W8[WAN IP *8] - W9[WAN IP *9] - W0[WAN IP *0] - montgomery("`Synology NAS - _DSM Web UI, Hyper Backup Vault, Drive Server_`") - plex(Plex external access) - ingress50("`ingress-50 - _Zoraxy_`") - ingress1("`ingress-1 - _Zoraxy_`") - WAN1 --> W8 - WAN1 --> W9 - WAN1 --> W0 - W8 --> montgomery - W8 --> plex - W8 --> qbt(qBittorrent) - W9 --> gitssh(Gitea SSH) - W9 --> ingress50 --> pub(Public services) - W0 --> ingress1 --> per(Personal services) -``` - -### Firewall rules -In addition to default rules. - -| Name | Action | Source Zone | Destination Zone | -|-------------------------- | ------ | ------------- | ---------------- | -| Allow UniFi remote access | Allow | External | Gateway | - -## Local network -### VLANs -| Name | Subnet | Description | Isolate network | -|------------ | ----------------- | ------------------------------------------------------------- | --------------- | -| **Default** | _192.168.1.0/24_ | Default local network for laptops, family phones and tablets | No | -| **Pub** | _192.168.50.0/24_ | An isolated VLAN for public services | No | -| **Guest** | _192.168.5.0/24_ | An isolated VLAN for guest WiFi access | No | -| **IoT** | _192.168.6.0/24_ | An isolated VLAN for connected home appliance | No | - -- Device Isolation is disabled for all networks - -### Firewall zones -| Name | Built in | Networks / Interfaces | -|---------------- | -------- | ------------------------------------------- | -| Internal | ✅ | [`Default`](#vlans) | -| External | ✅ | [`Primary (WAN1)`](#wan) `Secondary (WAN2)` | -| Gateway | ✅ | - | -| VPN | ✅ | [`Hearthstone`](#vpn) [`VPS`](#vpn) | -| Hotspot | ✅ | [`Guest`](#vlans) | -| DMZ | ✅ | - | -| VLAN 50 | ❌ | [`Pub`](#vlans) | -| VLAN 6 | ❌ | [`IoT`](#vlans) | - -### Zones access rules -Additional Firewall rules allowing or blocking zone-to-zone or subnet-to-subnet communications. - -| Source Zone | Destination Zone | Source | Destination | Action | Description | -|-------------- | ---------------- | --------------------- | --------------------------- | ------------------ | ---------------------------------------------------------------------------------- | -| Internal | VLAN 50 | All | All | Allow with return | Allow all traffic from [`Default`](#vlans) network to [`Pub`](#vlans) | -| Internal | VLAN 6 | All | All | Allow with return | Allow all traffic from [`Default`](#vlans) network to [`IoT`](#vlans) | -| VPN | Internal | [VPS subnet](#vpn) | All | Allow only return | Allow return traffic from [`VPS`](#vpn) subnet to [`Default`](#vlans) | -| VPN | Internal | [VPS subnet](#vpn) | All | Block | Block [`VPS`](#vpn) VPN clients from accessing the [`Default`](#vlans) network | -| VPN | Hotspot | [VPS subnet](#vpn) | All | Block | Block [`VPS`](#vpn) VPN clients from accessing the [`Guest`](#vlans) network | -| VPN | DMZ | [VPS subnet](#vpn) | All | Block | Block [`VPS`](#vpn) VPN clients from accessing the [`DMZ`](#firewall-zones) zone | -| VPN | VLAN 50 | All | [Hearthstone](#vpn) | Allow all | Allow [`Hearthstone`](#vpn) VPN clients access to [`Pub`](#vlans) network | -| VPN | VLAN 6 (IoT) | All | [Hearthstone](#vpn) | Allow all | Block [`Hearthstone`](#vpn) VPN clients access to [`IoT`](#vlans) network | -| VLAN 50 | VLAN 50 | All | All | Allow all | Allow [`Pub`](#vlans) network clients accessing each other | - -## VPN -There are two Wireguard servers configured: -1. **Hearthstone**. Subnet _192.168.3.0/24_. For external access to all local networks. -1. **VPS**. Subnet _192.168.4.0/24_. For accessing VPS servers as local network devices. - -## DNS Server -I use my gateway as a local DNS server with additional records for internal services, allowing them to be accessed using domain names like `beszel.int.example.com`, but only from the LAN or VPN. Almost all internal domains are pointing to the `ingress1` (Zoraxy reverse proxy), that also manages SSL termination. diff --git a/docs/index.md b/docs/index.md new file mode 100644 index 0000000..c57eff5 --- /dev/null +++ b/docs/index.md @@ -0,0 +1 @@ +Hello World! \ No newline at end of file diff --git a/docusaurus.config.js b/docusaurus.config.js index 42117d6..39b91f1 100644 --- a/docusaurus.config.js +++ b/docusaurus.config.js @@ -98,12 +98,6 @@ const config = { srcDark: 'img/logo_dark.svg', }, items: [ - { - type: 'docSidebar', - sidebarId: 'docsSidebar', - position: 'left', - label: 'Homelab', - }, { to: '/blog', label: 'Blog', position: 'left' }, ], }, @@ -113,10 +107,6 @@ const config = { { title: 'This site sections', items: [ - { - label: 'Homelab', - to: '/docs/homelab', - }, { label: 'Blog', to: '/blog', @@ -131,41 +121,7 @@ const config = { }, ], }, - { - title: 'My', - items: [ - { - label: 'Code', - href: 'https://git.nicelycomposed.codes/yehor', - }, - ], - }, - { - title: 'Me on', - items: [ - { - label: 'Mastodon', - href: 'https://techhub.social/@estevez', - }, - { - label: 'Pixelfed', - href: 'https://pixelfed.social/estevez', - }, - { - label: 'GitHub', - href: 'https://github.com/estevez-dev', - }, - { - label: 'Untappd', - href: 'https://untappd.com/user/estevezz', - }, - { - label: 'LinkedIn', - href: 'https://www.linkedin.com/in/yehor-vialov-2a362158/', - }, - ], - }, ], copyright: `Copyright © ${new Date().getFullYear()} Yehor Vialov.`, diff --git a/package.json b/package.json index eea41e8..d299ef4 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "yevi-org", - "version": "0.1.1", + "version": "0.2.0", "private": true, "scripts": { "docusaurus": "docusaurus", diff --git a/src/components/HomepageFeatures/index.js b/src/components/HomepageFeatures/index.js index 0e65da0..02e6911 100644 --- a/src/components/HomepageFeatures/index.js +++ b/src/components/HomepageFeatures/index.js @@ -6,7 +6,7 @@ const FeatureList = [ { title: 'Blog', link: 'blog', - Svg: require('@site/static/img/blog.svg').default, + Svg: require('@site/static/icons/blog.svg').default, description: ( <> Some notes, interesting things and projects. @@ -14,12 +14,62 @@ const FeatureList = [ ), }, { - title: 'Homelab Documented', - link: 'docs/homelab', - Svg: require('@site/static/img/homelab.svg').default, + title: 'Git', + link: 'https://git.nicelycomposed.codes/yehor', + Svg: require('@site/static/icons/gitea.svg').default, description: ( <> - Here I'm trying my best in documenting my home servers and self-hosted services. + My code + + ), + }, + { + title: 'Mastodon', + link: 'https://techhub.social/@estevez', + Svg: require('@site/static/icons/mastodon.svg').default, + description: ( + <> + My micro blog at techhub.social + + ), + }, + { + title: 'Matrix', + link: 'https://matrix.to/#/@yehor:vi.place', + Svg: require('@site/static/icons/matrix.svg').default, + description: ( + <> + If you want to chat + + ), + }, + { + title: 'GitHub', + link: 'https://github.com/estevez-dev', + Svg: require('@site/static/icons/github.svg').default, + description: ( + <> + Some forks and contributions + + ), + }, + { + title: 'Untappd', + link: 'https://untappd.com/user/estevezz', + Svg: require('@site/static/icons/untappd.svg').default, + description: ( + <> + Budmo! + + ), + }, + { + title: 'Linkedin', + link: 'https://www.linkedin.com/in/yehor-vialov-2a362158/', + Svg: require('@site/static/icons/linkedin.svg').default, + description: ( + <> + They say I need this to find any work ), }, @@ -28,10 +78,10 @@ const FeatureList = [ function Feature({ Svg, title, link, description }) { return ( -
+
- - + +
diff --git a/src/components/HomepageFeatures/styles.module.css b/src/components/HomepageFeatures/styles.module.css index a8c75c9..1eb4706 100644 --- a/src/components/HomepageFeatures/styles.module.css +++ b/src/components/HomepageFeatures/styles.module.css @@ -6,8 +6,12 @@ } .featureSvg { - height: 200px; - width: 200px; + height: 100px; + width: 100px; +} + +.featureSvg path { + fill: var(--ifm-link-color) !important; } .featureLink { diff --git a/src/pages/index.js b/src/pages/index.js index db9db62..0c088f2 100644 --- a/src/pages/index.js +++ b/src/pages/index.js @@ -16,7 +16,7 @@ function HomepageHeader() { Yehor Vialov

Public Profiles

-
+ {/*
@@ -27,11 +27,6 @@ function HomepageHeader() { to="https://techhub.social/@estevez"> Mastodon - - Pixelfed - @@ -47,7 +42,7 @@ function HomepageHeader() { to="https://www.linkedin.com/in/yehor-vialov-2a362158/"> LinkedIn -
+
*/}
); diff --git a/static/icons/blog.svg b/static/icons/blog.svg new file mode 100644 index 0000000..3ddac1f --- /dev/null +++ b/static/icons/blog.svg @@ -0,0 +1,21 @@ + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/static/icons/docusaurus.svg b/static/icons/docusaurus.svg new file mode 100644 index 0000000..3ff5112 --- /dev/null +++ b/static/icons/docusaurus.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/static/icons/gitea.svg b/static/icons/gitea.svg new file mode 100644 index 0000000..677bff8 --- /dev/null +++ b/static/icons/gitea.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/static/icons/github.svg b/static/icons/github.svg new file mode 100644 index 0000000..7914685 --- /dev/null +++ b/static/icons/github.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/static/icons/linkedin.svg b/static/icons/linkedin.svg new file mode 100644 index 0000000..50fbb3c --- /dev/null +++ b/static/icons/linkedin.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/static/icons/mastodon.svg b/static/icons/mastodon.svg new file mode 100644 index 0000000..27f3c95 --- /dev/null +++ b/static/icons/mastodon.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/static/icons/matrix.svg b/static/icons/matrix.svg new file mode 100644 index 0000000..ad7bc80 --- /dev/null +++ b/static/icons/matrix.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/static/icons/untappd.svg b/static/icons/untappd.svg new file mode 100644 index 0000000..9b7020d --- /dev/null +++ b/static/icons/untappd.svg @@ -0,0 +1 @@ + \ No newline at end of file