Fabric
The connective layer of the homelab — three sites (edge, production, home) stitched together by a NetBird mesh, with VLAN segmentation in production and home.
The connective layer of the homelab — three sites (edge, production, home) stitched together by a NetBird mesh, with VLAN segmentation in production and home.
WireGuard mesh overlay (api.netbird.io) that ties the edge, production, and home environments into a single private network with identity-based access control.
NetBird peer running on the Maresa Synology host so the NAS is reachable over the mesh — Syncthing, AdGuard, and the Traefik dashboard all available to authenticated mesh members.
Use PROXY protocol v2 to carry the real client IP through netbird/SNAT and a multi-proxy chain — with Gitea (HTTP + SSH) as a worked example showing both mental models.