https://afelizcyberlabs.com/homelab/index.html Homelab Build Series 🖥️ Complete build documentation of my Proxmox-based cybersecurity home lab — built from scratch on enterprise hardware, documented step by step. Hardware Server: HP Z440 (Xeon E5-2690 v4, 64GB ECC RAM) Hypervisor: Proxmox VE 8.4 Firewall: OPNsense 25.1 NICs: Intel eno1 (management) + Fenvi Dual Port I226-V (WAN) Lab Network IP Device 172.16.0.1 OPNsense LAN gateway 172.16.0.10 Ubuntu Server 172.16.0.20 Kali Linux 172.16.0.30 Windows Server 2022 172.16.0.40 Security Onion (Phase 2) 172.16.0.50 Wazuh SIEM (Phase 2) Build Phases Navigate the phases using the sidebar to follow the full build from bare metal to fully operational security lab. Hugo en https://afelizcyberlabs.com/homelab/phase-0-hardware/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://afelizcyberlabs.com/homelab/phase-0-hardware/index.html Phase 0 — Hardware Build 🔧 Before a single line of configuration was written, there was a machine to build. This page documents the hardware decisions behind the AlphaLab server — what was chosen, why, and how it all came together. The Base Machine — HP Z440 Workstation The foundation of the lab is an HP Z440 Workstation, sourced refurbished from PC Server & Parts. The Z440 is a professional-grade workstation platform originally designed for CAD, engineering, and media production workloads — which makes it an ideal candidate for a home lab server. It has enterprise-class ECC memory support, PCIe expansion, and a tool-less chassis designed for frequent hardware changes. https://afelizcyberlabs.com/homelab/phase-1-proxmox/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://afelizcyberlabs.com/homelab/phase-1-proxmox/index.html Phase 1 — Proxmox Installation 🖥️ What is Proxmox? Proxmox VE (Virtual Environment) is a bare metal hypervisor — meaning it runs directly on the hardware with no underlying OS beneath it. It lets you run multiple virtual machines simultaneously on a single physical server, each isolated from one another. Think of it as the foundation everything else in the lab sits on top of. https://afelizcyberlabs.com/homelab/phase-2-network/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://afelizcyberlabs.com/homelab/phase-2-network/index.html Phase 2 — Network Configuration 🌐 Physical Network Layout Device Role IP Xfinity Gateway Upstream internet — TP-Link GE650 Home router 192.168.0.1 Netgear GS308 Dumb switch — HP Z440 (Proxmox) Lab server 192.168.0.10 XFlow_Machine Main workstation 192.168.0.51 OPNsense WAN Firewall WAN 192.168.0.207 WiFi Networks SSID Band Purpose standard_issue 2.4/5GHz Main home network apex_issue 6GHz High speed devices cold_zone 2.4/5GHz IoT devices (isolated) Proxmox Bridge Architecture Proxmox uses Linux bridges — think of them as virtual switches inside the hypervisor. VMs plug into bridges instead of physical NICs directly. https://afelizcyberlabs.com/homelab/phase-3-opnsense/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://afelizcyberlabs.com/homelab/phase-3-opnsense/index.html Phase 3 — OPNsense Firewall 🔥 What is OPNsense? OPNsense is an open-source firewall and router platform built on FreeBSD — not Linux, an important distinction. It handles all traffic entering and leaving the lab network: NAT, firewall rules, DHCP, DNS, and routing. Think of it as the security perimeter between the home network and the lab. https://afelizcyberlabs.com/homelab/phase-4-ubuntu/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://afelizcyberlabs.com/homelab/phase-4-ubuntu/index.html Phase 4 — Ubuntu Server 🐧 What is Ubuntu Server? Ubuntu Server is a Linux distribution maintained by Canonical, designed specifically for server workloads. Unlike the desktop version it has no graphical interface — everything is managed through the terminal. This is intentional: no GUI means less attack surface, lower memory usage, and it forces you to get comfortable with the command line — an essential skill for any cybersecurity professional. https://afelizcyberlabs.com/homelab/phase-5-kali/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://afelizcyberlabs.com/homelab/phase-5-kali/index.html Phase 5 — Kali Linux 🐉 What is Kali Linux? Kali Linux is a Debian-based Linux distribution maintained by Offensive Security, designed specifically for penetration testing, digital forensics, and security research. It comes pre-loaded with hundreds of security tools — network scanners, exploit frameworks, password crackers, wireless analysis tools, and more. https://afelizcyberlabs.com/homelab/phase-6-windows/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://afelizcyberlabs.com/homelab/phase-6-windows/index.html Phase 6 — Windows Server 2022 🪟 What is Windows Server 2022? Windows Server 2022 is Microsoft’s current server operating system, used in the vast majority of enterprise environments worldwide. It provides Active Directory Domain Services (AD DS), Group Policy, DNS, DHCP, file sharing, and a wide range of enterprise services that form the backbone of corporate IT infrastructure.