Infrastructure
A small, deliberate network
Four nodes, one WireGuard mesh, and a shared monitoring layer. Everything here is self-hosted, self-maintained, and running for real, daily use — not a demo environment.
Nodes
Four nodes, each doing one job well
SECURITY-CORE
Security, monitoring & automation host
- Host
- Ubuntu Server
- Wazuh
- Suricata
- Prometheus
- Grafana
- Portainer
- Uptime Kuma
- Pi-hole
- Docker
- KVM
- Security application
- Automation workloads
GRAYDRAGON-AI
Local AI inference node
- Host
- Ubuntu + NVIDIA GTX 1080
- Local LLM inference
- llama.cpp
- CUDA
- Qwen models
- OpenAI-compatible API
PI4-CORE
Network core & VPN gateway
- Host
- Raspberry Pi 4
- WireGuard server
- Prometheus
- Grafana
- Pi-hole
- Blackbox exporter
- Speedtest exporter
- Portainer
PI3B-RIVER
Remote telemetry node
- Host
- Raspberry Pi 3B
- Remote WireGuard client
- Monitoring exporters
- Remote infrastructure telemetry
Design Principle
Security-sensitive workloads, AI inference, and networking each run on the node best suited to them — connected through a single WireGuard mesh and observed through one shared Prometheus/Grafana layer.
The goal is infrastructure that stays understandable as it grows, not a pile of one-off boxes.