Kitsunet Homelab Architecture

Kitsunet Homelab Architecture An architecture diagram generated by Archify. Cloudflare DNS · DNS-only · DNS-01 · Architecture component Cloudflare DNS DNS-only · DNS-01 Browsers & native apps · Web · Sync · APIs · Architecture component Browsers & native apps Web · Sync · APIs UniFi Gateway · WAN → LAN · Architecture component UniFi Gateway WAN → LAN Pangolin + Traefik · Edge VM · Public TLS · Architecture component Pangolin + Traefik Edge VM · Public TLS Coolify · Apps VM · Sites & APIs · Architecture component Coolify Apps VM · Sites & APIs Unraid · Containers · Data · VMs · Architecture component Unraid Containers · Data · VMs Admin devices · Authorized devices · Architecture component Admin devices Authorized devices LAN / Tailscale · Private management network · Architecture component LAN / Tailscale Private management network Management interfaces · Pangolin · Coolify · Unraid · Architecture component Management interfaces Pangolin · Coolify · Unraid DNS query HTTPS ACME DNS-01 TCP 80 / 443 HTTP :80 Service routing Private access Administration Legend Backend Database Cloud Security External

Access & certificates

  • • kitsunezu.com: personal site; kitsunet.app: Homelab services
  • • DNS points to home WAN; Traefik obtains TLS certificates via DNS-01
  • • Management interfaces use LAN / Tailscale

Coolify apps

  • • Portfolio · Eventernote Dashboard
  • • Eventernote Autofill · Voiceprint Search
  • • Dedicated Apps VM with an internal Traefik proxy

Unraid & management

  • • Nextcloud · Immich · Vaultwarden
  • • n8n · Sub2API · Homarr
  • • Unraid hosts both VMs and manages data services