Welcome to my personal project dedicated to building a self-hosted, modular, and scalable environment based on:
- Ubuntu Server
- Docker
- Portainer
- AdGuard Home (DNS filtering)
- WireGuard (VPN)
- Caddy (reverse proxy)
- Ip tables/UFW
- Cloudflare DDNS
- Crowdsec & FAIL2BAN
- Netdata
The purpose of this repository is to document step-by-step the configuration of the entire system in a simple, repeatable way, suitable for both VirtualBox environments and dedicated hardware like Raspberry Pi or mini PCs.
I tried to include the issues encountered and their solutions.
The project started in November 2025 and is still under constant integration and updates.
📚Table of Contents
📄 Step 1 – Ubuntu Server
📄 Step 2 – Docker
📄 Step 3 – Portainer
📄 Step 4 – AdGuard Home
📄 Step 5 – WireGuard
📄 Step 6 – Raspberry Pi 5
📄 Step 7 – Caddy
📄 Step 8 – Ufw
📄 Step 9 – Crowdsec
📄 Step 10 – Cloudflare
📄 Step 11 – Fail2ban
📄 Step 12 – hardening
🧱 Project Goals
- Centralized Home Server Infrastructure: Implement a Docker-based home server environment to centralize and manage network services and self-hosted applications in a modular and efficient way.
- Filter DNS traffic at the network level to block ads and tracking.
- Ensure secure remote access via VPN.
- Apply container hardening practices (e.g., non-root users, read-only filesystem, capability limitations) to reduce the attack surface.
- Deploy Custom Applications: Host internally developed applications with a focus on modern architectures (reverse proxy with automatic HTTPS, isolated networks).
- Reproducibility and Documentation: Document the entire configuration (Infrastructure as Code) through docker-compose.yml files, scripts, and step-by-step guides to enable rapid disaster recovery and system replicability on other nodes.
⭐ If you liked my project, give it a star!
Enrico Soci