Homelab

Two nodes — Nargothrond (UNRAID) and a Proxmox node — fully containerised, every entry point proxied, zero open inbound ports.

Traefik + Pangolin      reverse proxy, zero-trust access, auto-TLS
AdGuard Home + Unbound  network-wide DNS filtering, split DNS
CrowdSec + Gluetun      intrusion detection, VPN-locked downloads
Jellyfin + *Arr stack   media library and automation
Navidrome + slskd       self-hosted music discovery and streaming
Immich + Vaultwarden    photo backup and password sync

Full stack reproduced from code — Ansible + Docker Compose, rebuild in under 30 minutes. Documentation: Nargothrond

---

Selected Projects

Project	Description	Stack
riptune	Terminal-native music client for Subsonic servers, built for niri	Rust
re-soulcommand	ListenBrainz / Last.fm → Navidrome downloader via slskd	Python
Ainulindale	Fully self-hosted music discovery and streaming stack	Shell
ObsidianSetup	Cross-platform Obsidian and plugin installer — 26 stars	PowerShell
Nargothrond	Homelab provisioning documentation	Docs