lfs3c/Home-Lab
Cybersecurity homelab documentation: Debian server hardening, self-hosted services (Pi-hole, N8N), infrastructure setup | Student portfolio @ Bergen Community College
๐ง Home-Lab
Cybersecurity homelab documentation: Debian server hardening, self-hosted services, Raspberry Pi infrastructure, and real-world security projects
๐จโ๐ป About Me
Leandro Freitas | Cybersecurity Student @ Bergen Community College
๐ New Jersey, USA | ๐ Graduating 2027
๐ผ Career transition: CNC Programmer โ IT/Cybersecurity
This repository documents my hands-on learning journey building and securing real infrastructure. Everything here runs on actual hardware and reflects real decisions
๐ก Repository Purpose
What this is:
- Working documentation for my production homelab
- Portfolio of applied security concepts
- Learning journal with real implementations
Current infrastructure:
- Debian 12 server (server-lf1) running Pi-hole + N8N
- Raspberry Pi NAS with PhotoPrism + Samba
- Raspberry Pi syslog sensor (Blue Team practice)
- Flipper Zero security testing
- Self-hosted AI models (Ollama, Stable Diffusion)
Goals:
- Apply classroom concepts to real systems
- Build maintainable, documented infrastructure
- Create technical portfolio for career transition What this is:
๐งฉ Repository Structure
| Folder | Description |
|---|---|
| CollegePythonScripts/ | Collection of Python scripts from my academic journey (INF-103) โ includes exercises, automations, and OOP projects with full documentation |
| server_setup/ | Configuration files, hardening reports, and documentation for my Debian-based home server |
| raspberry_pi_projects/ | Self-hosted services and infrastructure projects built on Raspberry Pi devices |
๐๏ธ Lab Infrastructure
Server-LF1 (Debian 12)
Services:
- ๐ก๏ธ Pi-hole - Network-wide DNS filtering (ports 53, 80)
- โ๏ธ N8N - Workflow automation (port 5678)
- ๐ณ Docker - Container orchestration
Security measures:
- SSH key-only authentication
- UFW firewall configuration
- Documented hardening process
Raspberry Pi Projects
NAS/Media Server:
- Samba file sharing
- PhotoPrism photo management
- External HDD storage (no SD writes)
Blue Team Sensor:
- Centralized syslog collection
- Fail2Ban implementation
- Lightweight passive monitoring
๐ Academic Work
Python Fundamentals (INF-103)
- 16+ functional scripts documented with learning context
- OOP project: Mobile phone management system
- Topics: file handling, automation, Caesar cipher, password generation
โ๏ธ License
CC0-1.0 License (Public Domain) unless specified otherwise.
Free to use for educational or personal purposes.
๐ฌ Contact
Questions or suggestions? Open an issue or reach out.
Last updated: January 2026