A serious one-box mini PC homelab setup
A single GEEKOM A9 Max mini PC runs the whole homelab with 128 GB of memory and 4 TB of NVMe storage. There is no rack and no group of servers; one small machine runs Proxmox with 16 and 4 LXCs. The network is split into four VLANs called CORE, ADMIN, INFRA, and EDGE, and OPNsense limits traffic between them with strict least-privilege firewall rules.
For access from the internet, an Infomaniak VPS passes TCP traffic through WireGuard to HAProxy at home, where SSL is handled. The status page runs on the VPS itself, so it can stay online even if the home server is down. Kubernetes runs as a 3-node Talos Linux cluster, with workloads packaged as Helm charts and deployed through ArgoCD.
Secrets are inserted during sync with the ArgoCD Vault Plugin, while SaltStack manages VM from a YAML inventory. HashiCorp Vault stores secrets, StackStorm handles event-based automation such as VM lifecycle work and internal certificate , and Prometheus, Grafana, and Loki are used for monitoring and logs.
Key points
- One mini PC runs Proxmox with 16 and 4 LXCs.
- The network is split into four VLANs with strict firewall rules between zones.
- uses a VPS, WireGuard, and HAProxy instead of exposing the home server directly.
- The status page stays on the VPS so it can remain available during home downtime.
- Deployment, secrets, , automation, monitoring, and logs are each handled by dedicated tools.