+
Self-Hosted Infrastructure Platform
+
Infrastructure, security, monitoring, and automation built from scratch.
+
+ ByteGeist Cloud is a self-hosted homelab platform running on Ubuntu, Docker,
+ Authentik, Grafana, Loki, Prometheus, CrowdSec, Gitea, and Woodpecker CI.
+
-
+
+
+
Platform Overview
+
+ What is ByteGeist?
- ByteGeist uses Nginx Proxy Manager for routing, Authentik for identity, Grafana and
- Prometheus for monitoring, Loki and Alloy for logs, and Woodpecker for automation.
+ ByteGeist Cloud is a self-hosted infrastructure platform built to practice real-world
+ Linux administration, Docker operations, networking, identity management, monitoring,
+ logging, security hardening, backup planning, disaster recovery, and CI/CD automation.
+
-
-
-
Infrastructure
-
Ubuntu 24.04, Docker, Docker Compose, Portainer, and Nginx Proxy Manager.
-
-
-
Identity
-
Centralized SSO using Authentik, OAuth2, OIDC, Forward Auth, and 2FA.
-
-
-
Observability
-
Grafana dashboards, Prometheus metrics, Loki logs, Node Exporter, and cAdvisor.
-
+
+
+
Architecture
+
Platform Design
+
+ Traffic flows through Nginx Proxy Manager, authentication is centralized through
+ Authentik, and services are monitored, logged, backed up, and documented.
+
+
+
+
+
+
+
+
Operations
+
Monitoring & Logging
+
+ Grafana, Prometheus, Loki, Alloy, Node Exporter, and cAdvisor provide visibility
+ into system health, container workloads, and infrastructure logs.
+
+
+
+
+
+
Infrastructure Monitoring
+
System health, uptime, memory, CPU, disk usage, and container metrics in Grafana.
+
+
+
+ 
+
+
Centralized Logging
+
Loki and Grafana provide searchable logs for containers and infrastructure troubleshooting.
+
Security Controls
-
-
-
SSH Hardening
-
Password authentication disabled. ED25519 key-only access enforced.
-
-
-
Threat Detection
-
Fail2Ban and CrowdSec detect brute-force attempts and automatically block attackers.
-
-
-
Access Control
-
Services protected with Authentik SSO, 2FA, HTTPS, and reverse proxy policies.
-
+
+
Security
+
Identity & Threat Detection
+
+ Authentik provides single sign-on and access control while Fail2Ban and CrowdSec
+ detect and block hostile traffic.
+
+
+
+
+
+ 
+
+
Centralized Identity
+
SSO, OAuth2, OIDC, Forward Auth, and 2FA protect access to internal services.
+
+
+
+ 
+
+
Threat Detection
+
CrowdSec detects brute-force behavior and creates firewall decisions to block attackers.
+
-
- Automation & CI/CD
-
- Woodpecker CI is integrated with Gitea to run automated pipelines when code is pushed.
- The first test pipeline successfully cloned a repository, executed build steps, and returned exit code 0.
-
+
+
+
Development
+
Git Hosting & CI/CD
+
+ Gitea hosts the code and infrastructure repositories while Woodpecker CI runs automated
+ pipelines triggered by repository activity.
+
+
+
+ 
+
+
Self-Hosted Git
+
Gitea manages source code, project history, documentation, and infrastructure repositories.
+
+
+
+ 
+
+
CI/CD Automation
+
Woodpecker successfully runs automated pipelines connected to Gitea repositories.
+
+
Documentation & Recovery
-
- ByteGeist includes disaster recovery documentation, backup validation, service inventory,
- restore procedures, and operational notes for maintaining the platform.
-
+
+
+
Service Portal
+
Centralized Dashboard
+
+ Dashy acts as the launchpad for the environment, organizing infrastructure,
+ observability, development, security, tools, and user services.
+
+
+
+ 
+
+
Operations Portal
+
Quick access to core infrastructure, observability, and development services.
+
+
+
+ 
+
+
Service Catalog
+
Organized access to security tools, utilities, file management, and public sites.
+
+
+
Recovery
+
Documentation & Disaster Recovery
+
+ ByteGeist includes documented restore procedures, backup validation, service inventory,
+ DNS information, and recovery priorities.
+
+
+
+
Skills Demonstrated
+
+ Linux Administration
+ Docker
+ Docker Compose
+ Reverse Proxies
+ SSL/TLS
+ DNS
+ SSO
+ OAuth2 / OIDC
+ Monitoring
+ Centralized Logging
+ CI/CD
+ Security Hardening
+ Threat Detection
+ Backup Strategy
+ Disaster Recovery
+ Technical Documentation
+