#security
- First minimal router: an OpenWrt gateway for the homelab
Turning a TP-Link Archer C7 into the homelab gateway with OpenWrt: an isolated DMZ for the cluster, a wired-only admin network, and all DMZ traffic sent through a WireGuard tunnel to our VPS, with a kill switch.
- First minimal infrastructure: OVH VPS - from order to a hardened server
A step-by-step guide for a first server: order an OVHcloud VPS, log in with SSH keys, and lock it down with a firewall, fail2ban, automatic updates and backups.