Self-hosted infrastructure

AdGuard Home as a Network DNS Sinkhole

Block ads, trackers, and malware at the resolver instead of on every device, run a synced standby so a single reboot doesn't take DNS down, and let an AI agent query and tune it through tiered MCP…

Backup & Recovery

How to protect your OpenClaw workspace, configuration, and memory from data loss. Encrypted backups, restore testing, and disaster recovery planning.

Desktop Integration: The Daily Driver as a Peer

Most homelab writeups treat the desktop as a dumb client that connects to the server. I run it the other way too. My always-on Linux agent host SSHes into the Windows 11 daily driver, mounts its…

Homelab Topology: The Map

This is the floor plan of my homelab. One hypervisor, a pile of LXC containers, two VMs, and a backup server that lives on the same box it protects. It covers what runs where, how I split LXC versus…

NAS and Network Storage Mounts

How to wire network storage into a Linux host so a powered-off peer never hangs your boot, an agent never deletes irreplaceable data, and a consumer NAS never silently corrupts a backup chunkstore.…

OpenClaw Host Topology

Proxmox as the Agent Lab Substrate

One consumer-grade hypervisor runs the always-on agent stack's supporting services, an AI agent inspects and safely operates it through a token-gated MCP, and a separate auditor grades the host…

Service Isolation: One Service Per Container

I run my homelab as a pile of small, boring, unprivileged LXC containers. One service each. Not one fat VM with a docker-compose monolith, not a single Debian box hand-fed twelve daemons. This guide…

Upgrade Hygiene: Promoting OpenClaw Releases Without Breaking the Gateway

Every OpenClaw minor release has, at least once, silently regenerated my systemd unit or broken on old config. I stopped upgrading in place. A promote script now builds a tagged release in its own…