Home Lab & Cloud Portfolio

Savi Palihawadana

Building and managing a self-hosted home lab running on Proxmox — spanning virtualisation, containerisation, networking, and cloud infrastructure. All services running in production on real hardware.

Home Lab Infrastructure

Technical Skills

🖥️

Virtualisation

Proxmox VE — VM and LXC container management

🐳

Containerisation

Docker, docker-compose, container networking

🌐

Networking

CGNAT bypass, Cloudflare Tunnel, reverse proxy, DNS

☁️

Cloud

Cloudflare, DNS management, tunnel architecture

🐧

Linux

Ubuntu Server 22.04, systemd, shell scripting

🔒

Security

SSL/TLS, UFW, Fail2Ban, SSH hardening

⚙️

Automation

Bash scripting, cron jobs, systemd services

📡

Self Hosting

Nginx, Plex, Jellyfin, game servers, finance tools

Running Services

Plex Media Server

Live

Self-hosted media streaming server with external access via Cloudflare Tunnel.

LXC 100 Cloudflare Streaming

Jellyfin

Live

Open source media server — free multi-user streaming with Samba mount integration.

LXC 104 Docker Samba

Actual Budget

Live

Self-hosted finance tracking with Nginx reverse proxy and SSL — accessible via custom domain.

LXC 102 Docker Nginx SSL

Palworld Server

Live

Dedicated game server with public access via PlayIT tunnel — bypasses ISP CGNAT limitations.

VM 201 PlayIT SteamCMD

Samba File Share

Live

Network attached storage serving media to Plex and Jellyfin across the home lab.

LXC 101 CIFS NAS

Nginx Proxy Manager

Live

Centralised reverse proxy managing all service routing and SSL termination.

LXC 103 Nginx Proxy

Infrastructure

VM 200

Ubuntu Desktop

Full VM

VM 201

Palworld Server

Full VM

LXC 100

Plex

Container

LXC 101

Samba

Container

LXC 102

Actual Budget

Container

LXC 103

Nginx Proxy

Container

LXC 104

Jellyfin

Container

Network Architecture

Internet

→

Cloudflare Edge

→

Cloudflare Tunnel

→

Proxmox Host

→

Services

ISP CGNAT bypass via Cloudflare Tunnel — no port forwarding required. All external traffic routes through Cloudflare's edge network providing DDoS protection and SSL termination. Dynamic DNS via DuckDNS for game server public access. Domain managed via savi-services.com on Cloudflare.