🔐 Active Directory & Domain Services
I have successfully designed and deployed a Windows Server 2022 Active Directory domain controller to serve as the backbone of my HomeNet network. This domain controller manages centralized authentication, user accounts, DNS, and Group Policy, simulating an enterprise-grade directory environment for skills development and lab purposes.
📁 File Server Deployment
To complement the domain controller, I set up a dedicated file server using Windows Server 2022 that provides shared storage across my network via SMB. This allows for efficient file sharing between devices, with NTFS permissions tightly integrated into Active Directory for proper access control and security management.
🛡️ Penetration Testing & Security Lab
For cybersecurity practice, I deployed a Kali Linux virtual machine dedicated to penetration testing and security auditing. This system includes a full range of tools such as Metasploit, Nmap, Wireshark, and Burp Suite, allowing me to simulate real-world attack scenarios and enhance my security testing skills in a safe and controlled environment.
🔒 VPN Server Deployment
As part of my remote access strategy, I provisioned an Ubuntu Server to function as a VPN server, with future plans to install either OpenVPN or WireGuard. This setup will allow secure remote access into my home lab from external locations while maintaining strict network security.
🌐 Web Server & Personal Website Hosting
I launched my personal web server hosting my primary website, arran.cc, using IIS on Windows Server 2022. The web server is fully configured for HTTP and HTTPS traffic with SSL certificates and DNS management, allowing me to host both static and dynamic web content for personal and development use.
☁️ Cloudflare Integration
To optimize performance and security for my web services, I migrated DNS management to Cloudflare. This integration offers faster DNS resolution, DDoS protection, proxying capabilities, SSL management, and advanced DNS control, providing an enterprise-grade solution for my personal domain.
📧 Email & SMTP Integration
For email delivery, I integrated SMTP2GO as a smart host to handle outbound email from my systems. I have also begun planning the deployment of a dedicated mail server for inbound mail, with DNS configurations for MX, SPF, DKIM, and DMARC to ensure proper email authentication, security, and deliverability.
📊 Monitoring & Alerting
To monitor my infrastructure, I deployed a dedicated monitoring solution using Grafana and Prometheus. This system provides real-time tracking of CPU usage, memory, disk performance, and network traffic across my environment. I integrated it with Zoho Mail for email alerting, ensuring I am notified promptly of any critical system events.
🔧 Admin Dashboard Development
I developed a custom web-based admin dashboard to manage file shares and web content directly from my arran.cc website. This full-stack solution uses Node.js, Express, SMB client integration, and an HTML editor, allowing me to manage backend storage through a secure, session-authenticated web interface.
🖥️ Linux Remote Desktop Access
To simplify remote management of my Linux servers, I installed XRDP and XFCE4 on both Ubuntu and Kali machines. This allows me to access Linux desktops through standard RDP clients, elim inating the need for SSH tunnels while maintaining convenience and control.
🔗 Networking & Port Forwarding
On the networking side, I configured port forwarding on my Sky Broadband router to expose selected internal services like HTTP and HTTPS to the internet. I have also begun designing VLANs and firewall rule sets as part of a longer-term plan to simulate enterprise network segmentation and improve security posture.
⚡ Virtualization Lab Environment
All of my servers and projects are hosted on a fully virtualized environment using Microsoft Hyper-V. This allows me to create, modify, and manage virtual machines efficiently, simulating enterprise virtualization environments with full control over networking, storage, and compute resources.
🏠 ISP Migration & Network Rebuild
As part of a broader home network rebuild, I migrated my ISP service to Sky FTTP. Due to limitations in my rented flat where I cannot run physical cables through walls, I extended the network using TP-Link TL-WPA4221 KIT AV600 powerline adapters, maintaining stable wired and wireless connectivity throughout the property.
📝 Technical Documentation & Blogging
I have documented several of my projects through technical blog posts, including detailed write-ups of my Grafana and Prometheus monitoring setup, SMTP email integration, and admin dashboard development. This process helps me refine my technical writing skills and share knowledge with the wider IT community.
🚀 What's Next?
Check out what I'm planning next — from hardware upgrades to advanced security enhancements and testing.
Explore Upcoming Projects