My Proxmox Journey: From Zero to an Enterprise-Like Setup

-

My Proxmox Journey: From Zero to an Enterprise-Like Setup

How a beginner can build a real, production-style homelab using Proxmox — step by step and one service at a time.




Everything Runs on Proxmox (Except the Router)

Almost everything in my homelab runs inside Proxmox VE, my main virtualization platform. Only my bare-metal Mikrotik router sits outside it — the router handles the network edge, internet routing, VLANs, DHCP, and firewall rules.

Proxmox acts like a mini data center at home — it lets me run VMs (virtual machines) and LXCs (lightweight containers). I use LXCs for lightweight services and VMs for workloads that need more isolation or resources.

What’s Inside My Proxmox Host

Type Tool Function
LXCZabbix ServerMonitors my network and systems
LXCrsyslogCollects and centralizes logs
LXCn8nAutomation and alerts
LXCSuricataIntrusion detection and monitoring
LXCAdGuard HomeDNS filtering and ad blocking
LXCOllamaLocal AI model inference
LXCOpen WebUIWeb interface for the local AI
VMSquid ProxyWeb caching and bandwidth optimization
VMHome AssistantSmart home / IoT control

Why I Chose This Layout

  • LXCs are fast and lightweight — great for smaller services.
  • VMs give more isolation for heavier workloads (like Home Assistant or Squid).
  • Each service has its own role, just like in real enterprise setups.
  • I can monitor, filter, automate, and secure everything from one host.

What I Learned Building It

When I started, I didn’t know how routers, DNS filters, proxies, or IDS systems worked. By building one service at a time, I learned:

  • How traffic flows from the router to containers and VMs
  • How to monitor systems with Zabbix
  • How to automate actions using n8n
  • How to detect suspicious traffic with Suricata
  • How to block ads and bad domains with AdGuard
  • How to experiment with local AI using Ollama

Each component taught me something new. The best part: you don’t need expensive gear — just curiosity, patience, and an old PC or mini-server.

How You Can Start Too

  1. Use an old computer and install Proxmox VE.
  2. Create one or two containers — start with AdGuard Home or Pi-hole for DNS filtering.
  3. Add a monitoring tool like Zabbix, Netdata or Uptime Kuma.
  4. Try n8n to connect services and automate alerts.
  5. Experiment with security tools like Suricata or Fail2Ban.

Start small, one service at a time. You’ll be surprised how much you learn.

The Takeaway

I’m not a professional network engineer or sysadmin — I’m just a curious beginner who wanted to understand how things work. This homelab proved that anyone — even a newbie — can build something that looks and feels like an enterprise setup. Break it. Fix it. Learn from it. That’s how we all start.

— Pinoy IT Enthusiast

Comments

Post a Comment

Popular posts from this blog

Suricata on Mikrotik(IDS+IPS) = Part 4 - Configuration of the IPS Part

-
Image
  Configuration Disclaimer:  this one again is only for  ubuntu 18.04  and login as  root  user to be sure Make sure you have a good understanding of the suricata rules before doing this This might cause some disconnection from the site or services you are visiting and even the internet if not properly configured. In the real environment it is best not to run as root user but for the sake of just testing it I opted to run as root configure the following rules on your mikrotik router: /ip firewall filter add action=drop chain=input comment="Block bad actors" src-address-list=Blocked /ip firewall filter add action=drop chain=forward comment="Drop any traffic going to bad actors" dst-address-list=Blocked create a user group with all policies checked except telnet create a user allowing your local addresses with the group you created earlier Lets Start ... 1.      Install PHP         apt install php -y 2.   Navigate...
Read more

Why upload comes first before download

-
Image
Before we dive into why upload comes first, let’s quickly define upload and download in data communication. Upload refers to sending data from your device to a remote server or another device. This happens when you send an email, upload a file to the cloud, or even just request a webpage. Download is the process of receiving data from a remote source to your device. This includes streaming videos, loading webpages, or saving files from the internet. Think of it like a conversation: when you ask someone a question (upload), they respond with an answer (download). The same applies to internet communication—before you can receive data, you must first send a request. Why Upload Comes First in Data Communication Now that we understand uploads and downloads, let’s put it in simple human terms. Imagine you’re having a conversation with a friend: You ask a question (Upload): Before your friend can give you an answer, you first need to say something—whether it’s a question, a request, or a ...
Read more

Suricata on Mikrotik(IDS+IPS) = Part 3 - Configuration of the IDS Part

-
Image
Configuration Disclaimer:  this one is only for ubuntu 18.04 and login as root user to be sure In the real environment it is best not to run as root user but for the sake of just testing it I opted to run as root configure the following rules on your mikrotik router: /tool sniffer set streaming-enabled=yes streaming-server=<ip_of_the_server> /tool sniffer set filter-ip-address=<an_example_filter_ip> tool sniffer print ; tool sniffer start ; tool snifer stop Lets Start ... 1.     Configure the correct time zone and NTP synchronization         systemctl start systemd-timesync           systemctl status systemd-timesyncd         dpkg-reconfigure tzdat a 2.     Add the suricata in the repository    add-apt-repository ppa:oisf/suricata-stable 3.     Update the package database:         ...
Read more