GitHunt
LF

lfs3c/Home-Lab

Cybersecurity homelab documentation: Debian server hardening, self-hosted services (Pi-hole, N8N), infrastructure setup | Student portfolio @ Bergen Community College

๐Ÿง  Home-Lab

Debian
Raspberry Pi
Docker
Pi-hole
N8N
PhotoPrism
Python
Security
Syslog
Ollama
Stable Diffusion
License
Last Commit
Repo Size

Cybersecurity homelab documentation: Debian server hardening, self-hosted services, Raspberry Pi infrastructure, and real-world security projects


๐Ÿ‘จโ€๐Ÿ’ป About Me

Leandro Freitas | Cybersecurity Student @ Bergen Community College
๐Ÿ“ New Jersey, USA | ๐ŸŽ“ Graduating 2027
๐Ÿ’ผ Career transition: CNC Programmer โ†’ IT/Cybersecurity

This repository documents my hands-on learning journey building and securing real infrastructure. Everything here runs on actual hardware and reflects real decisions


๐Ÿ’ก Repository Purpose

What this is:

  • Working documentation for my production homelab
  • Portfolio of applied security concepts
  • Learning journal with real implementations

Current infrastructure:

  • Debian 12 server (server-lf1) running Pi-hole + N8N
  • Raspberry Pi NAS with PhotoPrism + Samba
  • Raspberry Pi syslog sensor (Blue Team practice)
  • Flipper Zero security testing
  • Self-hosted AI models (Ollama, Stable Diffusion)

Goals:

  • Apply classroom concepts to real systems
  • Build maintainable, documented infrastructure
  • Create technical portfolio for career transition What this is:

๐Ÿงฉ Repository Structure

Folder Description
CollegePythonScripts/ Collection of Python scripts from my academic journey (INF-103) โ€” includes exercises, automations, and OOP projects with full documentation
server_setup/ Configuration files, hardening reports, and documentation for my Debian-based home server
raspberry_pi_projects/ Self-hosted services and infrastructure projects built on Raspberry Pi devices

๐Ÿ—๏ธ Lab Infrastructure

Server-LF1 (Debian 12)

Services:

  • ๐Ÿ›ก๏ธ Pi-hole - Network-wide DNS filtering (ports 53, 80)
  • โš™๏ธ N8N - Workflow automation (port 5678)
  • ๐Ÿณ Docker - Container orchestration

Security measures:

  • SSH key-only authentication
  • UFW firewall configuration
  • Documented hardening process

Raspberry Pi Projects

NAS/Media Server:

  • Samba file sharing
  • PhotoPrism photo management
  • External HDD storage (no SD writes)

Blue Team Sensor:

  • Centralized syslog collection
  • Fail2Ban implementation
  • Lightweight passive monitoring

๐ŸŽ“ Academic Work

Python Fundamentals (INF-103)

  • 16+ functional scripts documented with learning context
  • OOP project: Mobile phone management system
  • Topics: file handling, automation, Caesar cipher, password generation

โš–๏ธ License

CC0-1.0 License (Public Domain) unless specified otherwise.
Free to use for educational or personal purposes.


๐Ÿ’ฌ Contact

Questions or suggestions? Open an issue or reach out.

Last updated: January 2026