Disaster Recovery Checklist

# Global Architecture and Request Flow

## Purpose

The Bytek homelab provides privately hosted identity, collaboration, documentation, monitoring, and project-management services.

The environment is hosted on Proxmox VE and follows these design principles:

- One major service per VM or LXC.
- Public services enter through a VPS instead of direct router port forwarding.
- WireGuard transports public traffic securely from the VPS to the home network.
- Traefik terminates HTTPS and routes requests by hostname.
- Authentik provides centralized authentication, MFA, and access policies.
- Pi-hole provides LAN DNS, split DNS, and DHCP reservations.
- Data-bearing applications use a separate LVM-thin storage pool.
- Proxmox backups are stored on a dedicated internal HDD.
- Management interfaces remain LAN or VPN only whenever practical.
- Each critical service retains an independent recovery method.

---

## High-Level Architecture