Tesseract
- YEAR
- 2026
- ROLE
- Design & Operations
- STACK
- Debian · Docker · Tailscale · Caddy · Prometheus · Grafana


Context
Personal homelab — self-hosted infrastructure. Design and operation of a personal production infrastructure, hosted in the Paris region on a dedicated machine (Debian 12, i5-9500, 32 GB RAM). Running since 2024.

Containerisation
20+ services orchestrated with Docker Compose, organised into isolated stacks by functional domain — each domain is independent, versioned and redeployable without affecting the others.

Networking & security
- Tailscale mesh VPN with granular per-role ACLs.
- Caddy reverse proxy with automatic TLS.
- Role-based segmentation — no publicly exposed ports.

Observability
Full monitoring stack: Prometheus + Grafana (provisioned dashboards), Loki / Promtail (centralised logs) and Uptime Kuma (external monitoring).

Reliability
3-tier backup policy (daily / weekly / monthly) via docker-volume-backup,
with backup metrics exposed to Prometheus for tracking and alerting.
Applications
Applications designed and deployed on the infrastructure — including WikiLab.
