< Back to projects

Proxmox / pfSense Homelab

M1 SI Solo August 2025 Completed

Solo project, extensively documented in a 588-line write-up. A full "open-source infrastructure PoC": Proxmox VE deployed on Debian 12 with encrypted storage, hosting a pfSense firewall and several self-hosted services in LXC containers.

Homelab network architecture Internet pfSense WAN / LAN bridges LXC: AdGuard Home DNS filtering LXC: Passbolt password manager (Docker) LXC: Firefly III finance tracking Proxmox VE host Debian 12, LVM on LUKS
All services run as LXC containers on a single Proxmox VE host, with pfSense handling WAN/LAN separation and hosting AdGuard Home, Passbolt and Firefly III.

What was built

  • Proxmox VE installed on Debian 12, with the host's storage set up as LVM on a LUKS-encrypted volume, and /boot, swap and /var/lib/vz kept as separate partitions.
  • A pfSense firewall running as a guest, with dedicated WAN and LAN bridges to segment the lab network from the outside.
  • AdGuard Home in an LXC container, providing network-wide DNS filtering.
  • Passbolt, a self-hosted password manager, deployed via Docker inside its own LXC container.
  • Firefly III, a self-hosted personal finance tracker, as a third LXC service.

Tech stack

Proxmox VE pfSense LXC Docker AdGuard Home Passbolt LUKS / LVM Debian 12

Status

Completed and documented in a step-by-step write-up covering partitioning, network configuration and service installation.

< All projects