{"schemaVersion":1,"platform":"home-lab","label":"Home Lab","route":"/home-lab/","sourceRoot":"content/home-lab","summary":"Personal infrastructure evidence organized by technology, operational task, validated result, proof, scope, and limitation.","technologies":[{"slug":"environment","label":"Environment","status":"validated","statusLabel":"Environment inventoried","skill":"Infrastructure environment administration","task":"Maintained a documented nonproduction environment spanning virtualization, firewalling, Windows, Linux, networking, and backup services.","result":"The environment is represented through system inventories, topology context, validation records, and operational documentation.","proof":{"label":"Open the Home Lab case study","href":"/on-prem-home-lab.html"},"scope":"Personally operated nonproduction lab.","limitations":"Does not represent enterprise scale, production availability, or employer infrastructure."},{"slug":"proxmox","label":"Proxmox","status":"validated","statusLabel":"Platform state validated","skill":"Virtualization administration","task":"Reviewed node, VM, storage, bridge, VLAN, guest-agent, snapshot, backup, and lifecycle state.","result":"Proxmox platform inventory and operational evidence support bounded virtualization claims.","proof":{"label":"Open Proxmox platform evidence","href":"/evidence-library/projects/on-prem-home-lab/current-validated-state/direct-evidence/proxmox-platform-inventory.html"},"scope":"Single personal Proxmox host.","limitations":"Does not prove clustered virtualization, high availability, or production capacity planning."},{"slug":"active-directory","label":"Active Directory","status":"validated","statusLabel":"Directory state validated","skill":"Active Directory administration","task":"Reviewed domain and forest state, FSMO roles, organizational units, users, groups, Group Policy, clients, and Linux integration.","result":"Directory structure and supporting service evidence are available for inspection.","proof":{"label":"Open Active Directory evidence","href":"/evidence-library/projects/on-prem-home-lab/current-validated-state/direct-evidence/dc01-system-and-role-validation.html"},"scope":"Single-domain personal lab.","limitations":"Does not prove multi-site design, high availability, or production directory ownership."},{"slug":"dns-dhcp","label":"DNS and DHCP","status":"tested","statusLabel":"Validated within scope","skill":"Core network-service administration","task":"Reviewed DNS and DHCP configuration and performed direct name-resolution and service checks.","result":"The evidence supports domain records, host records, scope inventory, and bounded service validation.","proof":{"label":"Open server and role evidence","href":"/evidence-library/projects/on-prem-home-lab/current-validated-state/direct-evidence/dc01-system-and-role-validation.html"},"scope":"Personal Active Directory lab.","limitations":"Does not prove redundant DNS or DHCP failover."},{"slug":"networking","label":"Networking","status":"tested","statusLabel":"Connectivity validated within scope","skill":"Network administration and troubleshooting","task":"Worked with routed subnets, VLANs, VPN routes, DNS queries, IP configuration, and layered TCP connectivity tests.","result":"The repository distinguishes confirmed connectivity from timeouts, access limits, and untested conditions.","proof":{"label":"Review network context","href":"/on-prem-home-lab.html"},"scope":"Segmented personal-lab networks.","limitations":"Does not prove enterprise routing, switching, or complete policy enforcement."},{"slug":"pfsense","label":"pfSense","status":"tested","statusLabel":"Narrow validation completed","skill":"Firewall and routing platform administration","task":"Maintained pfSense inventory, segmentation documentation, and a controlled isolated restore workflow.","result":"Platform and restore evidence support a bounded administration claim.","proof":{"label":"Review restore validation","href":"/evidence-library/projects/on-prem-home-lab/infrastructure-validation-2026-07/"},"scope":"Personal-lab firewall and router.","limitations":"Does not prove complete firewall-rule enforcement, NAT behavior, VPN correctness, or production recovery."},{"slug":"windows-server","label":"Windows Server","status":"validated","statusLabel":"Server roles inventoried","skill":"Windows Server administration","task":"Reviewed server roles, services, storage, event summaries, directory indicators, DNS, DHCP, and Group Policy.","result":"Authenticated inventory supports hands-on Windows Server and infrastructure-service capability.","proof":{"label":"Open Windows Server evidence","href":"/evidence-library/projects/on-prem-home-lab/current-validated-state/direct-evidence/dc01-system-and-role-validation.html"},"scope":"Personal domain-controller lab.","limitations":"Does not prove continuous service health or enterprise server ownership."},{"slug":"windows-clients","label":"Windows Clients","status":"validated","statusLabel":"Client state validated","skill":"Domain-joined endpoint administration","task":"Reviewed domain membership, secure-channel state, network configuration, Group Policy application, and mapped-drive access controls.","result":"Windows client evidence connects identity, policy, networking, and file-access behavior.","proof":{"label":"Open Windows client evidence","href":"/evidence-library/projects/on-prem-home-lab/current-validated-state/direct-evidence/ws01-system-and-domain-validation.html"},"scope":"Personal Windows client lab.","limitations":"Does not prove fleet management or production endpoint ownership."},{"slug":"linux","label":"Linux","status":"validated","statusLabel":"Linux services validated","skill":"Linux systems administration","task":"Reviewed Ubuntu networking, SSH, time synchronization, logging, updates, security controls, guest integration, Kerberos, realmd, and SSSD.","result":"Linux inventory and remediation evidence support administration and directory-integration capability.","proof":{"label":"Open Linux evidence","href":"/evidence-library/projects/on-prem-home-lab/current-validated-state/direct-evidence/linux01-system-network-domain-validation.html"},"scope":"Single personal Ubuntu server.","limitations":"Does not prove management of a production Linux fleet."},{"slug":"backup-recovery","label":"Backup and Recovery","status":"tested","statusLabel":"Restore testing completed within scope","skill":"Backup administration and controlled recovery testing","task":"Reviewed backup coverage, archive state, network isolation, temporary restore VMs, validation checkpoints, cleanup, and result boundaries.","result":"Selected systems achieved bounded pass results while unresolved checkpoints remain clearly classified.","proof":{"label":"Review the restore case study","href":"/on-prem-home-lab.html#restore"},"scope":"Controlled personal-lab restore exercises.","limitations":"Does not prove disaster-recovery readiness, production recovery, RTO, or RPO."},{"slug":"monitoring-logging","label":"Monitoring and Logging","status":"configured","statusLabel":"Implemented and documented in parts","skill":"Operational logging and monitoring preparation","task":"Reviewed rsyslog service and listener state, connectivity baselines, monitoring documentation, and planned logging expansion.","result":"Implemented logging is separated from planned monitoring work.","proof":{"label":"Review operations proof","href":"/home-lab-operations-proof.html"},"scope":"Personal-lab logging and validation.","limitations":"Does not prove a mature production monitoring or alert-response program."},{"slug":"security","label":"Security","status":"validated","statusLabel":"Operational safeguards demonstrated","skill":"Security-conscious infrastructure operations","task":"Used read-only collection, sanitization, secret review, network isolation, integrity records, and bounded result classification.","result":"The evidence demonstrates safe operating habits and controlled proof publication.","proof":{"label":"Review proof boundaries","href":"/proof.html"},"scope":"Personal-lab operations and public evidence handling.","limitations":"Does not represent a formal security program, SOC function, or compliance certification."},{"slug":"automation","label":"Automation","status":"validated","statusLabel":"Repository-backed","skill":"PowerShell infrastructure automation","task":"Used scripts for inventory, connectivity checks, evidence capture, sanitization, structured exports, hash checks, and repository validation.","result":"Repeatable workflows support consistent administration, troubleshooting, and documentation.","proof":{"label":"Review automation work","href":"/projects.html"},"scope":"Personal-lab and portfolio automation.","limitations":"Does not imply unattended production change authority."}]}