Home server: what's exposed and how

Home server: what's exposed and how An architecture diagram generated by Archify. Me · Laptop and phone · Architecture component Me Laptop and phone Tailscale · Private network (tailnet) · Home server · Ubuntu 24.04 · Docker + systemd Tailscale Private network (tailnet) Personal services · Nextcloud · Navidrome · payroll · Home server · Ubuntu 24.04 · Docker + systemd Personal services Nextcloud · Navidrome · payroll Monitoring · Uptime Kuma · Beszel · Home server · Ubuntu 24.04 · Docker + systemd Monitoring Uptime Kuma · Beszel Users and services · Internet · webhooks · Architecture component Users and services Internet · webhooks Tailscale Funnel · Public HTTPS, specific paths · Home server · Ubuntu 24.04 · Docker + systemd Tailscale Funnel Public HTTPS, specific paths Personal service · With 2FA · Home server · Ubuntu 24.04 · Docker + systemd Personal service With 2FA My apps · Massage log · reminders · Home server · Ubuntu 24.04 · Docker + systemd My apps Massage log · reminders WhatsApp gateway · WAHA, localhost only · Home server · Ubuntu 24.04 · Docker + systemd WhatsApp gateway WAHA, localhost only Cloudflare Tunnel · No open ports · Home server · Ubuntu 24.04 · Docker + systemd Cloudflare Tunnel No open ports Sites and demos · Node + PM2 · Docker · Home server · Ubuntu 24.04 · Docker + systemd Sites and demos Node + PM2 · Docker GitHub · Push to main · Architecture component GitHub Push to main Actions runner · Tests → deploy → healthcheck · Home server · Ubuntu 24.04 · Docker + systemd Actions runner Tests → deploy → healthcheck Telegram · Alerts on failure · Architecture component Telegram Alerts on failure WireGuard private access HTTPS webhooks sends alerts HTTPS triggers deploys on failure Home server · Ubuntu 24.04 · Docker + systemd Legend Frontend Backend Cloud Security Message bus External