Infrastructure Monitoring
System health, uptime, memory, CPU, disk usage, and container metrics in Grafana.
Self-Hosted Infrastructure Platform
ByteGeist Cloud is a self-hosted homelab platform running on Ubuntu, Docker, Authentik, Grafana, Loki, Prometheus, CrowdSec, Gitea, and Woodpecker CI.
Containers
Services
Authentik
Woodpecker
ByteGeist Cloud is a self-hosted infrastructure platform built to practice real-world Linux administration, Docker operations, networking, identity management, monitoring, logging, security hardening, backup planning, disaster recovery, and CI/CD automation.
Architecture
Traffic flows through Nginx Proxy Manager, authentication is centralized through Authentik, and services are monitored, logged, backed up, and documented.
Operations
Grafana, Prometheus, Loki, Alloy, Node Exporter, and cAdvisor provide visibility into system health, container workloads, and infrastructure logs.
System health, uptime, memory, CPU, disk usage, and container metrics in Grafana.
Loki and Grafana provide searchable logs for containers and infrastructure troubleshooting.
Security
Authentik provides single sign-on and access control while Fail2Ban and CrowdSec detect and block hostile traffic.
SSO, OAuth2, OIDC, Forward Auth, and 2FA protect access to internal services.
CrowdSec detects brute-force behavior and creates firewall decisions to block attackers.
Development
Gitea hosts the code and infrastructure repositories while Woodpecker CI runs automated pipelines triggered by repository activity.
Gitea manages source code, project history, documentation, and infrastructure repositories.
Woodpecker successfully runs automated pipelines connected to Gitea repositories.
Service Portal
Dashy acts as the launchpad for the environment, organizing infrastructure, observability, development, security, tools, and user services.
Quick access to core infrastructure, observability, and development services.
Organized access to security tools, utilities, file management, and public sites.
Recovery
ByteGeist includes documented restore procedures, backup validation, service inventory, DNS information, and recovery priorities.