Pawan Mahabir (Poexone)

Sovereign computing is the conviction that individuals and engineers should genuinely own their digital foundation rather than renting it from corporate cloud monopolies. When your personal finances, password vaults, family records, documents, and system telemetry live on proprietary cloud servers, you are perpetually subject to arbitrary pricing hikes, terms-of-service revisions, surveillance telemetry, and vendor lock-in.

We treat our homelab as an independent, sovereign data center: self-hosted, self-managed, and fortified with air-gapped 3-2-1 cryptographic backups that ensure our personal data remains ours forever.

Enterprise infrastructure software is frequently sterile, cold, and devoid of soul. The Legend of Zelda: Ocarina of Time aesthetic is not merely aesthetic nostalgia—it is an architectural metaphor. The three Golden Goddesses map directly to the foundational requirements of high-availability distributed systems:

• Din (Power): Compute muscle, application hosting, and the primary backup vault.
• Nayru (Wisdom): Perimeter defense, DNS sinkholes, encrypted routing, and zero-trust authentication.
• Farore (Courage): Geo-distributed sentries, disaster-recovery replicas, and outside-in audits.

Together they form the Triforce Fleet. Where the goddesses guard the realm, the dragons patrol the skies: Naydra, Dinraal and the newest arrival, Farosh, the lightning dragon that brings GPU-powered AI and bulk storage home.

Crafting glassmorphic HUDs, custom sound chimes, and retro-futuristic telemetry transforms daily server maintenance from a mundane chore into a sacred craft. Form and function should elevate one another.

We believe artificial intelligence works best close to the user’s own silicon. Day-to-day DevOps work, automated file operations, log triage, and bash scripting run on local AI on our own workstations, with zero telemetry leaving our network, and a dedicated GPU node in the fleet provides always-on local inference for the whole household. We keep testing local AIs to find the setup that needs the fewest paid tokens, sending work to commercial models only when it is genuinely worth it.

Commercial cloud models are treated strictly as secondary, non-critical circuit-breakers—never as the primary brain. If our upstream fiber connection goes dark, our automated AI capabilities remain 100% functional.

The best homelab is not the loudest one with a 42U rack consuming 1,200 watts of wall power. We prioritize silent operation, surgical resource footprints, and maximum compute-per-watt efficiency.

The always-on core runs on fanless-class Intel N-series mini-PCs with unprivileged Debian LXC micro-containers instead of bloated virtual machine fleets, so the essentials sip a few dozen watts and keep running on a modest UPS. The one power-hungry box, the GPU node, earns its keep: it is reserved for the work that genuinely needs a graphics card.

We assume that every perimeter barrier will eventually be probed. Consequently, our security model never relies on a single wall:

1. Total Port Isolation: Zero public port forwards on our residential edge router. Attackers scanning our WAN find zero entry points.
2. Sealed WireGuard Mesh: Nodes communicate strictly over encrypted Tailscale overlays.
3. Forward-Authentication SSO: Authelia verifies multi-factor session state at the reverse proxy layer before packets ever reach application memory.
4. Micro-Segmented VLANs: Smart cameras and consumer IoT devices are isolated from private subnets with automated rogue DNS port redirection.

Building a dependable self-hosted architecture is daunting, often clouded by fragmented forum posts, out-of-date tutorials, and breaking changes. Poexone Labs exists to document real-world architectural lessons and authentic post-mortems in full detail—free of corporate sponsorships, affiliate spam, or biased endorsements.

If our documentation empowers a fellow engineer or enthusiast to reclaim their digital sovereignty, prevent data loss, or design a more resilient infrastructure, our mission is achieved.

Proxmox VE provides true type-1 hypervisor isolation combined with lightweight Debian LXC containers. It allows running unprivileged microservices at near-zero overhead while cleanly separating compute workloads (Din) from perimeter ingress sentries (Nayru) and GPU/storage duties (Farosh). Proxmox Backup Server takes nightly deduplicated snapshots, mirrors them to a second on-site datastore, and an encrypted copy goes offsite to the cloud.

Zero-trust overlay networking eliminates public attack surfaces. By peering nodes over WireGuard, compute servers remain completely dark to the public internet, accessible only through authenticated edge proxies or encrypted administrative nodes. Attackers scanning our residential public IP find zero open application ports.

We operate a 3-tier swarm protocol: Tier 1 runs on local AI over our private mesh, where we continually test local models to find the combination that keeps paid token usage to a minimum. If local compute is sleeping or exceeds a 2.5-second SLA, a fast circuit-breaker fails over to a cloud model for sub-second responses, backed by autonomous heuristic lore engines for zero downtime.

We strictly enforce Google AdSense manual placement standards: Google “Auto-Ads” are permanently disabled to prevent injected floating banners or page reflows. Advertisements are confined exclusively to designated container slots, accompanied by clear disclosures, and our analytics are 100% cookieless and first-party.