Self-Hosted Infrastructure Platform

Infrastructure, security, monitoring, and automation built from scratch.

ByteGeist Cloud is a self-hosted homelab platform running on Ubuntu, Docker, Authentik, Grafana, Loki, Prometheus, CrowdSec, Gitea, and Woodpecker CI.

ByteGeist Grafana operations dashboard
26

Containers

20+

Services

SSO

Authentik

CI/CD

Woodpecker

What is ByteGeist?

ByteGeist Cloud is a self-hosted infrastructure platform built to practice real-world Linux administration, Docker operations, networking, identity management, monitoring, logging, security hardening, backup planning, disaster recovery, and CI/CD automation.

Architecture

Platform Design

Traffic flows through Nginx Proxy Manager, authentication is centralized through Authentik, and services are monitored, logged, backed up, and documented.

ByteGeist architecture diagram

Operations

Monitoring & Logging

Grafana, Prometheus, Loki, Alloy, Node Exporter, and cAdvisor provide visibility into system health, container workloads, and infrastructure logs.

Grafana operations dashboard

Infrastructure Monitoring

System health, uptime, memory, CPU, disk usage, and container metrics in Grafana.

Grafana logs dashboard

Centralized Logging

Loki and Grafana provide searchable logs for containers and infrastructure troubleshooting.

Security

Identity & Threat Detection

Authentik provides single sign-on and access control while Fail2Ban and CrowdSec detect and block hostile traffic.

Authentik application portal

Centralized Identity

SSO, OAuth2, OIDC, Forward Auth, and 2FA protect access to internal services.

CrowdSec security decisions

Threat Detection

CrowdSec detects brute-force behavior and creates firewall decisions to block attackers.

Development

Git Hosting & CI/CD

Gitea hosts the code and infrastructure repositories while Woodpecker CI runs automated pipelines triggered by repository activity.

Gitea dashboard

Self-Hosted Git

Gitea manages source code, project history, documentation, and infrastructure repositories.

Woodpecker successful pipeline

CI/CD Automation

Woodpecker successfully runs automated pipelines connected to Gitea repositories.

Service Portal

Centralized Dashboard

Dashy acts as the launchpad for the environment, organizing infrastructure, observability, development, security, tools, and user services.

Dashy dashboard overview

Operations Portal

Quick access to core infrastructure, observability, and development services.

Dashy service catalog

Service Catalog

Organized access to security tools, utilities, file management, and public sites.

Recovery

Documentation & Disaster Recovery

ByteGeist includes documented restore procedures, backup validation, service inventory, DNS information, and recovery priorities.

ByteGeist disaster recovery documentation

Skills Demonstrated

Linux Administration Docker Docker Compose Reverse Proxies SSL/TLS DNS SSO OAuth2 / OIDC Monitoring Centralized Logging CI/CD Security Hardening Threat Detection Backup Strategy Disaster Recovery Technical Documentation