Homelab build journal
Key milestones in building the lab and the checks completed along the way.
-
pve1 rebuild and Active Directory domain
M910q reinstalled on PM981a with ext4/LVM-thin. DC01, running Windows Server 2025, hosts AD DS and DNS for ad.lab.internal. Services, shares, DNS and targeted dcdiag checks verified; historical warnings from the global check are not claimed to be fully resolved.
-
First agent and centralised AD event
DC01 → Wazuh TCP 1514–1515 rule tested, agent 001 active and event 4720 found in Threat Hunting. Authorised administrative exercise; DC01 backup and soc.wazuh cleanup remain pending.
-
M920q migration
Verified backup archives, replaced the 1 TB NVMe with a Samsung PM981a 512 GB, reinstalled Proxmox with ext4 + LVM-thin and restored pfSense and Wazuh. Alpine is kept as a backup only.
-
Post-restoration checks
VLAN 20–60 interfaces recovered, Wazuh–pfSense communication with no packet loss and dashboard login validated. Automatic startup works after reboot. The inter-VLAN filtering audit is still pending.
-
Automated backups
Dedicated SATA storage mounted by UUID, weekly job for VMs 101 and 102, and successful manual run. Mount and VM state checked after reboot; external copies and regular restoration tests are planned.