### Homelab

Two nodes — **Nargothrond** (UNRAID) and a Proxmox node — fully containerised, every entry point proxied, zero open inbound ports.

```
Traefik + Pangolin      reverse proxy, zero-trust access, auto-TLS
AdGuard Home + Unbound  network-wide DNS filtering, split DNS
CrowdSec + Gluetun      intrusion detection, VPN-locked downloads
Jellyfin + *Arr stack   media library and automation
Navidrome + slskd       self-hosted music discovery and streaming
Immich + Vaultwarden    photo backup and password sync
```

Full stack reproduced from code — Ansible + Docker Compose, rebuild in under 30 minutes.
Documentation: **[Nargothrond](https://github.com/Quinta0/Nargothrond)**

<br/>

---

### Selected Projects

| Project | Description | Stack |
|---|---|---|
| **[riptune](https://github.com/Quinta0/riptune)** | Terminal-native music client for Subsonic servers, built for niri | Rust |
| **[re-soulcommand](https://github.com/Quinta0/re-soulcommand)** | ListenBrainz / Last.fm → Navidrome downloader via slskd | Python |
| **[Ainulindale](https://github.com/Quinta0/Ainulindale)** | Fully self-hosted music discovery and streaming stack | Shell |
| **[ObsidianSetup](https://github.com/Quinta0/ObsidianSetup)** | Cross-platform Obsidian and plugin installer — 26 stars | PowerShell |
| **[Nargothrond](https://github.com/Quinta0/Nargothrond)** | Homelab provisioning documentation | Docs |

<br/>