LAB / 01

Private Home Infrastructure& Automation.

Local-First IoT · Networking · Virtualization · Software · Automation

DESIGN PRINCIPLE

Your home should not need to send its data somewhere else just to turn on a light.

OVERVIEW

Local infrastructure.
Local control.

Designed and built a self-managed home infrastructure and automation platform focused on local operation, privacy, network isolation and reduced dependency on external vendor cloud services.

The environment combines virtualization, custom software, home automation, managed networking, private cloud storage, CI/CD, monitoring and locally integrated devices.

STATUSActive & In Development
ENVIRONMENTOperational
APPROACHLocal-First
PRIVATE STORAGE500 GB
01APPLICATION ARCHITECTURE

A custom interface for the home.

Developed a custom React dashboard instead of relying exclusively on the standard home-automation interface.

The application communicates with a Node.js backend running on Debian, which integrates with Home Assistant and locally managed devices.

The interface can be accessed from desktop browsers and from a dedicated Shelly wall panel installed inside the home.

Application architecture
REACT · NODE.JS · DEBIAN · HOME ASSISTANT · LOCAL DEVICE INTEGRATION
02NETWORK ARCHITECTURE

Designed as infrastructure, not just Wi-Fi.

Built a managed network architecture supporting routing, switching, wireless access, automation services and segmented device environments.

Different device classes are separated rather than placing the entire home on one flat network.

Private home network architecture
ROUTING · MANAGED SWITCHING · WIRELESS · AUTOMATION INFRASTRUCTURE
03NETWORK SEGMENTATION

802.1Q VLAN architecture.

Implemented VLAN-based segmentation with 802.1Q tagging across the gateway, managed switch and wireless infrastructure.

Separate network zones allow communication policies to be applied between trusted devices, IoT devices, services, guests and other infrastructure.

VLAN802.1QFirewallIoT SegmentationGuest Isolation
802.1Q VLAN architecture
802.1Q TAGGING · SEGMENTED NETWORKING
04

VIRTUALIZED INFRASTRUCTURE

Services separated by responsibility.

01

Home Assistant

Central automation platform coordinating lights, plugs, sensors and other locally integrated devices.

02

Cleaning Robot

Dedicated Debian service supporting local integration of the cleaning robot and reducing dependence on external vendor services.

03

Application Server

Debian environment hosting Node.js services supporting the custom React dashboard and automation integrations.

04

CI/CD Server

Dedicated environment supporting automated build, deployment and verification workflows.

05

Private Cloud

Approximately 500 GB of privately managed storage running inside the local infrastructure.

06

Monitoring & Logging

Logging and operational monitoring provide visibility into system behaviour, services and faults.

05DEVELOPMENT & DEPLOYMENT

Treating the home platform like a software product.

Development changes move through source control, automated checks, build, deployment and verification instead of being manually copied into the running environment.

This creates a controlled development path for continuously improving the platform.

CI/CD deployment pipeline
DEVELOPMENT · GITHUB · CI · DEBIAN · VERIFICATION
06

LOCAL OPERATION & SECURITY

Privacy is part of the architecture.

LOCAL CONTROL

Device control remains on the local network wherever supported and configured.

SECRET MANAGEMENT

Installation secrets are maintained outside the source repository.

AUTHENTICATION

Password hashes are maintained within private user configuration.

AUTHORIZATION

Authentication and command authorization are handled by the backend.

NETWORK ISOLATION

Guest Wi-Fi remains separated from automation and service environments.

LOCAL-FIRST

External websites and cloud voice assistants remain outside the core local automation architecture.

CURRENT STATUS

Working today.
Still evolving.

The core network, automation services, custom dashboard, local device integrations, server infrastructure and private storage are already running inside the home.

Development continues as new automations, services, monitoring capabilities and integrations are introduced.