$ whoami

Devyn Trujillo

Cybersecurity Student & Homelab Enthusiast

Cybersecurity student and homelab tinkerer from Oklahoma. I got into self-hosting out of curiosity, it kind of snowballed, and now I have 25 containers, a NAS, a SIEM, a VPN, a handheld voice-note device of my own design, and way too many late nights debugging DNS.

devyn@homelab ~

docker ps -q | wc -l

25 (live)


pvesh get /nodes/Mothership/status

CPU 9% RAM 26.7/33GB


qm list | grep running | wc -l

3 VMs running


curl ifconfig.me # your public IP

216.73.216.70


this is a real shell — type help and hit ↵

25 containers live
Proxmox CPU 9% live
RAM 26.7/33GB
3 VMs running
24/7 uptime
01  /  SECURITY TOOLS

Security Tools

Interactive tools. No data leaves your browser.

🔑

Password Strength

entropy · crack time · no data sent

🌐

IP Reputation

Shodan InternetDB

02  /  FEATURED PROJECTS

Featured Projects

A few things from the lab. See everything on the projects page.

🎙️

Delos — DIY Voice-Note Device

An ESP32-S3 e-paper handheld I specced, built and debugged; Claude wrote the code, I directed it. Hold the button, talk, and the clip goes to self-hosted Whisper, gets cleaned up and titled, and lands in my Obsidian vault. Updates its own firmware over the air with bootloader rollback.

ESP32-S3e-PaperWhisperObsidianOTAC++
🛡️

SIEM & Security Monitoring

Wazuh on a dedicated machine for log ingestion, threat detection, and EDR. Prometheus + Grafana tie both machines together. Hands-on practice with what I am studying in school.

WazuhPrometheusGrafanaEDR
🔐

Zero-Trust Access & Security

Vaultwarden, Nginx Proxy Manager, Cloudflare Tunnels, Tailscale subnet routing, and Fail2ban. Nothing public-facing has an open port.

VaultwardenCloudflare TunnelFail2banTailscale
🎬

Self-Hosted Media Stack

Jellyfin + full *arr stack with qBittorrent tunneled through Gluetun VPN, so nothing leaks if the tunnel drops.

JellyfinRadarrSonarrGluetunDocker
03  /  TECH STACK

Tech Stack

Tools I use in the lab, at work, and while breaking things on purpose.

Pentesting

  • Kali Linux
  • nmap
  • gobuster
  • TryHackMe
  • CTF competitions
  • Flipper Zero
  • Pwnagotchi
  • Dual ESP32

Containers

  • Docker
  • Docker Compose
  • Watchtower
  • Portainer

Networking

  • DNS (AdGuard)
  • Reverse Proxy (NPM)
  • VPN (Gluetun/PIA)
  • Tailscale
  • Cloudflare Tunnels

Linux

  • Ubuntu Server
  • systemd
  • iptables / DOCKER-USER
  • NFS / fstab

Security

  • Wazuh SIEM/EDR
  • Fail2ban
  • Vaultwarden
  • Let's Encrypt
  • Zero-Trust Access

Monitoring

  • Uptime Kuma
  • Prometheus
  • Grafana
  • cAdvisor
  • node-exporter

Embedded

  • ESP32-S3
  • Arduino toolchain
  • e-Paper displays
  • OTA + bootloader rollback
  • Hardware debugging
  • 3D-printed enclosures

Self-Hosted AI

  • Whisper ASR
  • Claude CLI pipelines
  • Directing AI to build things
  • FastAPI / Python stacks
  • cron automation