My Home Lab
Architecture

How I built a distributed infrastructure for remote development, CAD workloads, and seamless computing across all devices using modern mesh networking.

24/7

Server Uptime

6

Connected Devices

~12ms

Low Latency

8TB

Storage Pool

System Topology

A mesh network connecting all devices through Tailscale VPN, enabling secure remote access without port forwarding or complex networking.

Tailscale

Mesh VPN

Synology NAS
Storage Hub
RS1221+
Planned
Mac mini M4
Server & Dev
Windows PC
GPU & Gaming
MacBook Air
Primary Client
Mobile
iPhone & iPad
Mesh Network
WireGuard Protocol • Zero Trust

WireGuard

Modern VPN protocol with cryptokey routing

< 15ms

Average latency between nodes

Zero Ports

No port forwarding or firewall rules needed

Hardware Stack

Each device serves a specific purpose in the distributed computing architecture

Mac mini M4

24/7 Server & Development Hub

32GB RAM
256GB SSD
Docker/Colima
Tailscale Exit Node

Services

Postgres
n8n
Traefik
Uptime Kuma

1GbE → NAS • Tailscale Mesh

Windows Workstation

GPU Workloads & Gaming

32GB RAM
RTX 4070
2x NVMe SSD
Sunshine Streaming

Services

SolidWorks
Blender
Steam
Parsec

Ethernet • Tailscale VPN

Synology NAS

Storage & Backup Hub

8TB Storage
6GB RAM
RAID 1
10GbE Ready

Services

SMB/NFS
Hyper Backup
Drive Sync
Snapshots

1-10GbE • Tailscale Agent

Planned 2025 Q2

Synology RS1221+

Enterprise Storage Expansion

8-Bay Rackmount
Up to 128TB
ECC Memory
10GbE x2

Services

High-Capacity Archive
Backup Target
Cold Storage

10GbE Backbone • Tailscale

MacBook Air M3

Primary Client Device

8GB RAM
256GB SSD
Fanless Design
24h Battery

Services

VS Code Remote
Screen Sharing
Moonlight Client

WiFi 6E • 5G Cellular • Tailscale

Mobile Devices

Remote Access & Monitoring

iPhone 16
iPad M2
Always Connected
Touch UI

Services

Jump Desktop
Tailscale
SSH Client
Monitoring

5G/WiFi • Tailscale Mesh

My Daily Workflow

How I use this setup for development, CAD work, media processing, and remote access

1

Connect via Tailscale

Single authentication gives me secure access to all devices from anywhere. No VPN configuration or port forwarding needed.

2

Development on Mac mini

VS Code Remote-SSH to Mac mini for all development work. Docker containers, databases, and build processes run on the server with full compute power.

3

CAD & GPU Work

Stream Windows PC desktop via Sunshine/Moonlight for SolidWorks, Blender, and gaming. RTX 4070 handles all GPU-intensive tasks remotely.

4

Data & Storage

NAS handles all file storage with automatic backups and versioning. Large exports and media files sync seamlessly across devices.

ssh luis@mac-mini.tailnet
docker-compose up -d
moonlight windows-pc.tailnet

Mac mini

Windows PC

NAS

Software Stack

The technologies and tools that power this infrastructure

Networking

• Tailscale (WireGuard)
• MagicDNS
• SSH over Tailscale
• Zero-config networking

Containers

• Docker with Colima
• Docker Compose
• Traefik reverse proxy
• Watchtower auto-updates

Development

• VS Code Remote-SSH
• PostgreSQL
• Supabase stack
• n8n automation

Streaming

• Sunshine (Windows)
• Moonlight clients
• macOS Screen Sharing
• Jump Desktop

Storage

• Synology DSM
• SMB/NFS shares
• Hyper Backup
• Btrfs snapshots

Monitoring

• Uptime Kuma
• System metrics
• Health checks
• Alert notifications

Security

• Zero Trust networking
• mTLS authentication
• No open ports
• ACL-based access

Automation

• Automated backups
• Container updates
• Wake-on-LAN
• Workflow triggers

Key Insights

What I've learned building and running this distributed infrastructure

Performance First

Tailscale mesh networking eliminates traditional VPN bottlenecks. Direct peer-to-peer connections deliver near-local performance.

~12ms latency • 110MB/s throughput

Rock Solid

M4 Mac mini runs 24/7 with exceptional reliability. Automated monitoring and backup strategies ensure minimal downtime.

99.8% uptime • 8W idle power

Future Ready

Docker containerization and ARM64 architecture provide a solid foundation for scaling and adding new services.

Ready for RS1221+ • 128TB expansion

Best Practices Learned

Separate Compute from Storage
Keep databases local, use NAS for backup and media
Automate Everything
Monitoring, backups, and updates reduce manual overhead
Network Quality Matters
Invest in good upload speeds for remote streaming
Power Management
Configure wake-on-LAN and auto-restart policies
Security by Default
Zero-trust networking with Tailscale ACLs
Start Small, Scale Smart
Begin with essentials, add complexity incrementally