HOME LAB

Firewall & Security: Virtualize OPNsense on Proxmox for network isolation (VLANs) and use Wazuh in a sandboxed VM to monitor and test security threats without risks.

NAS & Recovery: Turn the Mac Mini into a NAS/Proxmox Backup Server using ZFS snapshots to ensure data integrity and instant recovery if anything breaks.

Components

 * 1x HP Desktop – CPU: Intel i3 7th Gen | RAM: 12 GB | Drive: SSD (Proxmox VE)

 * 1x Mac Mini 2014 – CPU: Intel i5 4th Gen | RAM: 16 GB | Drives: 1x SSD + 1x 1 TB HDD

 * 1x Netgear L3 Switch – 8 Ports

1) HP Desktop – Primary Server (Proxmox)

Install Proxmox VE on the main SSD.

 * Available Resources: 12 GB RAM | i3 7th Gen CPU | 3x Lightweight VMs

Virtual Machines (VMs):

 * VM 1 – Firewall (Critical)

   * Name: firewall-lab | RAM: 2 GB | CPU: 2 Cores | Disk: 20 GB

   * Purpose: Simulate corporate networks, security testing, and lab network management.

   * Software: OPNsense (Network segmentation, VLANs, and firewalling).

 * VM 2 – Wazuh (Security / Monitoring)

   * Name: ubuntu-server | RAM: 4 GB | CPU: 2 Cores | Disk: 50 GB

   * Purpose: Security monitoring, log analysis, and corporate environment simulation.

   * Software: Wazuh.

2) Mac Mini 2014 – Simple NAS

Install Debian (or Ubuntu Server).

 * Disk Configuration:

   * SSD: OS (Operating System).

   * 1 TB HDD: Storage only (File storage + Proxmox VM backups).

 * Services:

   * Simple NAS: Root directory at /mnt/nas.

   * Network Sharing: SMB (Windows access) and NFS (Linux/Proxmox access).

   * Roles: Personal file storage and Proxmox backup target.

3) Logical Network Schema

L3 Switch (Network Core):

 * Management: Handles VLANs, Inter-VLAN routing, and basic security.

 * VLAN Strategy:

   * VLAN 10: Management

   * VLAN 20: Servers / VMs

   * VLAN 30: NAS / Storage

   * VLAN 40: Test / Lab

4) Final Architecture

 * HP Desktop (Proxmox): Hosts the Firewall (OPNsense), Security Monitoring (Wazuh), and various Lab Test VMs.

 * Mac Mini (Linux): Acts as a lightweight NAS, Backup Server (NFS/SMB), and dedicated Lab Storage.

Home Lab + NAS semplice

Componenti: 

• 1 HP Desktop - CPU: Intel i3 7th Gen - RAM: 12 GB - Disco: SSD (sistema Proxmox)

• 1 Mac Mini 2014 - CPU: Intel i5 4th Gen - RAM: 16 GB - Disco: 1 SSD + 1 HDD da 1 TB

• 1 Switch Netgear L3 – 8 porte

1) HP Desktop – Server principale (Proxmox)

Sul desktop HP installi Proxmox su SSD principale.

Risorse disponibili

• RAM totale: 12 GB - CPU: i3 7th Gen - 3 macchine virtuali leggere

Macchine virtuali

VM 1 – Firewall (la più importante)

Nome: firewall-lab
RAM: 2 GB
CPU: 2 core
Disco: 20 GB

Serve per:

• simulare una rete aziendale

• fare test di sicurezza

• gestire il network setup del lab

OPNsense :
- segmentazione della rete

• VLAN

• firewalling tra le reti

VM 2 – Wazuh (Security / Monitoring)

Nome: ubuntu-server
RAM: 4 GB
CPU: 2 core
Disco: 50 GB

Serve per:

• installare Wazuh

• monitoraggio sicurezza

• log analysis

• simulazione ambiente aziendale

2) Mac Mini 2014 – NAS semplice

Debian

Struttura dischi

SSD

• sistema operativo

HDD 1 TB

• solo storage file

• backup VM Proxmox

Servizi da attivare

NAS semplice con:

Cartella principale

/mnt/nas

Condivisione rete

• accesso da Windows

• accesso da Linux

• backup delle VM

• storage file personale

3) Schema logico della rete

Switch L3 (il cuore della rete)

Gestisce:

• VLAN

• routing tra VLAN

• sicurezza base

VLAN

• VLAN 10 → Management

• VLAN 20 → Server / VM

• VLAN 30 → NAS / Storage

• VLAN 40 → Test / Lab

4) Struttura finale

HP Desktop (Proxmox)

Dentro Proxmox:

• VM Firewall (OPNsense)

• VM Linux (Wazuh)

• VM di test (rete lab)

Mac Mini (Linux)

Usato come:

• NAS leggero

• server backup

• NFS / SMB server

• storage per il lab