h5h Homelab

26 self-hosted services on an M1 Mac — photos, files, media, monitoring, VPN, and SSO

Architecture

Two-folder strategy, chflags data protection, secret hygiene, nightly backups

Cloudflare Tunnel, Traefik forward-auth, Authentik 4-tier SSO, CrowdSec IDS

Make targets, Prometheus alerts, Grafana dashboards, upgrade workflow

Why no self-hosted email, why chflags, why Homepage over custom dashboard