Users access the site through a domain (like pogostar.com).
Your home router directs traffic.
• Port forwarding
• Firewall rules
Served using Caddy (auto HTTPS).
Hosts the public Pogostar pages.
WireGuard VPN controls access.
Only authorized devices can enter.
Examples running inside the lab:
• Jellyfin (media server)
• Pi-hole (DNS filtering)
• Samba (file sharing)
• CUPS (printing)
Drives for media and shared files.
Separate from system OS.
Phones, tablets, laptops:
• Local network access
• Remote access via VPN
This map shows how the system works conceptually, while keeping internal addresses, ports, and access points private.