rootless podman · one open port · nothing else published
A homelab built to be taken apart and explained. Everything below runs in its own container on a private network, reached through a single hardened proxy.