Capstone Project Brochure – Building a Digital Fortress

This project addresses the growing need for secure, customizable, and efficient home infrastructures capable of meeting diverse technological demands. Utilizing a virtualization environment like VMware ESXi on Dell PowerEdge server and VMware vCenter for centralized host management, we can implement things like automation, robust network security, and comprehensive self-hosted services including media streaming, network video recording, and secure cloud storage. The result is a modular, scalable, and secure digital ecosystem suitable for home or small business environments.

Core Phase 1 – Virtual Infrastructure Setup

The first phase of this project involves preparing a virtualization environment for our self-hosted programs and services. This phase will consist of the setup and configuration of the chosen hardware, in this case a Dell PowerEdge R730 server. Configuration will include formatting and choosing RAID level for physical drives, configuring network connection and booting from a virtual CD-ROM via iDRAC to install VMware ESXi as the server’s virtualization hypervisor. After preparing the hardware we will then create and configure our first virtual machine that will run vCenter on the ESXi host for centralized management. We will then

create three other virtual machines using the following operating systems: Debain, Ubuntu-Server, and HAOS.

Core Phase 2 – Implementation of Self-Hosted Services

Phase 2 will consist of self-hosting services like Nextcloud for cloud storage, RustDesk for remote desktop connections, Vaultwarden for secure password management, Frigate for network video recording/re-streaming, and Jellyfin for media management.

Core Phase 3 – Automation and Monitoring Solutions

Phase 3 will be configuring integrations and creating automations in Home Assistant, implementing HASS agent to control Windows computer, setting up re-streaming in Frigate and adding the streams to Home Assistant, and hosting Netdata to monitor our virtual machines.

Extension Phase – Enhanced Security, Remote Access and Optimization

The extension phase will include the setup and configuration of OPNsense. OPNsense is a router/firewall operating system that will replace and out-perform typical home routers/modems. OPNsense is also extremely flexible and allows for full control over a private network. This phase will also include utilizing Wireguard VPN and Cloudflare tunnels with a public domain for secure remote access to the self-hosted services in the private network.

Conclusion

This project fulfilled a personal and technical goal of building a fully self-hosted, smart, and secure digital environment. It brought together lessons from networking, systems, and electronics into a real-world application. Through hands-on work, it demonstrated the power of open-source software, containerization, and virtualization. Most importantly, it proved that anyone can reclaim control over their digital life by combining creativity, technical knowledge, and a strong DIY spirit. This “digital fortress” is now a scalable, future-proof platform ready for continued development and innovation.