Infrastructure
Self-hosted home infrastructure - gateway, server, IoT, and cloud services
Architecture
Telstra - 946 / 96 Mbps
Gateway / AP / Switch - WiFi 6E
Pi-hole DNS / Docker / Cloudflare Tunnel
Gateway
All-in-one gateway, access point, and managed switch. Single SSID with Multi-PSK - devices are automatically routed to VLANs based on their pre-shared key.
| Band | Channel | Width | Clients | Protocol |
|---|---|---|---|---|
| 2.4 GHz | 1 | 20 MHz | 4 | WiFi 4 |
| 5 GHz | 100 | 40 MHz | 12 | WiFi 6 |
| 6 GHz | 53 | 40 MHz | 0 | WiFi 6E |
| Port | Media | Link Speed | Connected Device |
|---|---|---|---|
| Port 1 | 2.5GbE | 1 Gbps | Elysium (Home Server) |
| Port 2 | 2.5GbE | - | Not connected |
| Port 3 | 2.5GbE | 100 Mbps | Philips Hue Bridge |
| Port 4 | 2.5GbE | 1 Gbps | WAN Uplink (Telstra) |
| SFP+ 1 | SFP+ | - | WAN2 (unused) |
| Network | VLAN | Purpose | Type | Notes |
|---|---|---|---|---|
| Core | Untagged | Primary LAN | Corporate | Default network, DNS via Pi-hole, mDNS enabled |
| Trusted | 20 | Trusted devices | Corporate | High-trust devices with elevated access |
| IoT | 30 | IoT isolation | Corporate | Smart home devices, isolated from primary LAN |
| Media | 40 | Gaming and media | Corporate | Streaming and gaming devices |
| Guest | 60 | Guest access | Guest | Isolated guest network, no LAN access |
| ElysiumAdmin | - | Remote access | VPN | WireGuard tunnel for remote admin via vpn.motawehsolutions.com |
Server
Self-hosted home server running all containerized services, DNS filtering, game servers, and the Cloudflare Tunnel for public access.
| Service | Role | Type |
|---|---|---|
| Pi-hole v6 | Network-wide DNS ad blocking and filtering (v6.4.2 / FTL v6.6.2) | Native |
| Cloudflare Tunnel | Secure public access to services (token-based, no open ports) | Native |
| Minecraft Server | Paper + Geyser/Floodgate - Java and Bedrock crossplay, family server | Native |
| Plex Media Server | Media streaming for the household | Native |
| Samba | Network file sharing (ROM library access) | Native |
| ttyd | Read-only web terminal (btop system monitor) | Native |
| Avahi | mDNS/DNS-SD for local service discovery | Native |
Containers
All public-facing services run in Docker with automatic restart policies. Public access routes through a Cloudflare Tunnel with no inbound ports exposed.
Retro game ROM management and browser-based emulation platform
Live camera feed and MQTT status from the Bambu Lab P1S
| Hostname | Backend | Service |
|---|---|---|
games.motawehsolutions.com |
RomM Nginx | ROM library + emulator |
elysium.motawehsolutions.com |
Static site + stats API | Server dashboard |
printer.motawehsolutions.com |
Bambu Nginx | P1S camera + print status |
3D Printing
Fully enclosed CoreXY 3D printer running in LAN-only mode with Developer Mode enabled. Connected to the network via WiFi with a static DHCP lease.
| Component | Description |
|---|---|
| FULU Foundation OrcaSlicer | Fork with Bambu network plugin via WSL2 bridge for LAN printing |
| go2rtc (Docker) | Proxies the P1S proprietary camera protocol (TCP 6000) to MJPEG |
| MQTT Status Service (Docker) | Subscribes to printer telemetry (TLS 8883) and serves JSON status API |
| Developer Mode | Unlocks MQTT, FTPS, and video stream for third-party integrations |
The P1S camera (~1 fps, 720p, ESP32 hardware) streams via a go2rtc proxy on Elysium. The feed is exposed publicly at printer.motawehsolutions.com through the Cloudflare Tunnel with a live web dashboard showing print name, progress, temps, and layer count.
Connected Devices
Web Properties
All sites deploy to Cloudflare Pages or route through the Cloudflare Tunnel from Elysium. DNS managed via Cloudflare.
| Domain | Description | Platform |
|---|---|---|
| motawehsolutions.com | Personal portfolio | Cloudflare Pages |
| home.motawehsolutions.com | Project Ghan dashboard | Cloudflare Pages |
| photo.motawehsolutions.com | Photography portfolio | Cloudflare Pages |
| elysium.motawehsolutions.com | Server dashboard + live stats | Tunnel |
| games.motawehsolutions.com | RomM - retro game library | Tunnel |
| printer.motawehsolutions.com | P1S live camera + print status | Tunnel |
| bullfighter.motawehsolutions.com | BullFighter3D - Unity WebGL game | Cloudflare Pages |
vpn.motawehsolutions.com |
WireGuard VPN endpoint | DDNS |
Observability
Elysium runs health checks every 60 seconds and generates real-time stats every 5 seconds, both via systemd timers.
Security