Infra · Docker · Zero Trust
Private Cloud Infrastructure
Enterprise-grade homelab: containerized microservices on bare-metal, Zero Trust networking via Cloudflare Tunnels — no open inbound ports.
0
Open inbound ports
100%
Container-isolated services
1
Outbound tunnel model
The challenge
Self-hosting multiple production services requires reliable hardware, container isolation, persistent storage and secure remote access — without exposing the network to inbound attacks via port forwarding.
What we built
Physical x86_64 servers running ZimaOS, all applications in isolated Docker containers via docker-compose, outbound-only Cloudflare Tunnels for secure public access, and bind-mounted volumes for stateful data and easy backup.
Key capabilities
- Bare-metal HP/Lenovo servers with ZimaOS — Docker-centric NAS/homelab OS.
- Every app in isolated Docker containers orchestrated via docker-compose.
- Cloudflare Tunnel (cloudflared) — zero open inbound ports, server IP hidden.
- Cross-cutting infra powering TradePulse, ElderVoice, databases and internal tools.
Tech stack
ZimaOS · Docker · Docker Compose · Cloudflare Tunnel · cloudflared