Internal DNS
How Unbound serves homelab.internal and split DNS.
Network engineer, building in public
6+ years in the Air Force, from WAN engineering to data center operations. Now documenting a homelab built like production. Segmented, patched, backed up, and every fix verified.
What I’ve built
Section titled “What I’ve built”
Featured
Patching OPNsense for PHP2Shell
Verified the fix at the package level, patched with about 60 seconds of downtime, then closed a gap in GUI exposure.
Firewall config backups to GitEvery OPNsense change becomes a commit in a private repo. Restore tested.
Segmented home networkLab VLAN isolated from the LAN and verified from the untrusted side, plus encrypted DNS.
Coming next
Section titled “Coming next”Virtualization
Proxmox VE, with management moved off the lab VLAN.
HTTPS for the homelab
Let’s Encrypt wildcard certificates with my own domain.
Password manager
Self-hosted Vaultwarden.
Why I build in public
Section titled “Why I build in public”I write every guide so someone else can follow it, including the parts that broke. Most homelab tutorials show the happy path. The useful stuff is in the errors, the wrong turns, and the tests that caught what I missed.
If one of these saves you an afternoon of troubleshooting, it did its job.
How these docs work
Section titled “How these docs work”Each page follows the same format:
- Summary: problem, approach, and outcome in one table
- Goal: what I’m trying to do and why
- Steps: what I actually did, with screenshots
- Verify: how I proved it works
- Lessons: what broke and what I learned