>_SPENCERLABSECURITY · INFRASTRUCTURE SERVING FROM THE HOMELAB|0 INBOUND PORTS
GitHub

Archive

All posts

Every write-up and video, newest first.

Built
Builtin progress

Domainfolio: one app, a sale page for every domain

A self-hosted domain portfolio: every domain I own points at one Next.js app, which reads the Host header and renders that domain's for-sale page, with an offers inbox, per-domain visit stats and lease-to-own terms. It runs in Docker behind its own Cloudflare Tunnel, and the names are also listed on Afternic.

3 min read
Administered
Administered

Every VM, every night: homelab backups to the Time Capsule

Nightly vzdump backups on all three Proxmox hosts, pushed to a Time Capsule on the LAN and pruned to four copies per guest. The pruning had never worked: one host's disk filled to 98.8% and every backup on it failed before the bug was found. Fixing it freed about 530 GB.

4 min read
Assessed
Assessed

Market-readiness review: five billing and signup holes in my own SaaS

A pre-launch review of Aegis CloudOps and Fishing Rod Terminal found that signup could join any tenant or choose a paid plan, checkout granted plans for free without Stripe, pay-as-you-go unlocked paid features with no card, and two products could charge each other's prices. All five were fixed and verified live. None had been used.

3 min read
Built
Built

The Great Migration: Aegis production comes home

The production API behind Aegis CloudOps and Fishing Rod Terminal moved off a DigitalOcean droplet and onto a VM in this homelab, behind its own Cloudflare Tunnel. The move, an exposed Kubernetes API found on the new box, an outage, and the claims that had to be corrected afterwards.

6 min read
Built
Built

Cloud Migration Readiness: a 6R assessment inside Aegis

A new Aegis feature: upload a server inventory, or run a read-only Proxmox discovery script, and get a 6R call per workload, an end-of-support check, AWS sizing at list price, a readiness score and dependency-grouped move waves. Its first real test was the Proxmox host that had just taken production out of the cloud.

4 min read
Built
Builtin progress

Road to CISSP: building a study platform from fundamentals to CISSP

road2cissp.com: a React study platform with an AI tutor, interactive labs, a Security+ exam simulator and synced progress. The frontend is on Vercel and the FastAPI backend runs on a Fedora VM in this homelab, behind its own Cloudflare Tunnel.

2 min read
Built
Builtin progress

A third Proxmox host, outside the cluster

A third machine running Proxmox VE as a standalone host, next to the two-node cluster rather than in it. It started with the Minecraft server and now also runs production for Aegis CloudOps and Fishing Rod Terminal, with production-first boot order and nightly backups to the Time Capsule.

2 min read
Administered
Administered

A self-hosted Minecraft server, run with Crafty

A Paper Minecraft server on its own VM on the third Proxmox host, managed with Crafty Controller, with Geyser so phones and consoles can join the Java world. The panel stays LAN-only, and this site shows the server's live status without exposing anything new.

2 min read
Built

The Real-Life ATM — my backend, Claude Code's frontend

A three-bank ATM in Python: I wrote the object-oriented banking backend, Claude Code built the Pygame arcade machine on top of it — and the same game now runs in your browser, compiled to WebAssembly.

4 min read