TorresVault Documentation

This page documents the high-level architecture of the TorresVault home lab:

• Proxmox cluster and storage
• Network (UniFi, VLANs, WiFi)
• Core services (DNS, reverse proxy, storage, monitoring)
• Automation & lighting (Home Assistant, FPP)
• Future expansion plans (NAS hybrid box, mini PC cluster)

This is the birds-eye view of TorresVault as it exists today + near-term plans.

                  ┌──────────────── Internet ────────────────┐
                  │         Ting Fiber (WAN1)                │
                  └────────────────────┬─────────────────────┘
                                       │
                             [ WAN1 @ Port 5 ]
                                       │
                        ┌────────────────────────────────┐
                        │   UCG Max (192.168.1.1)        │
                        │   - Router / Firewall          │
                        │   - DHCP for all VLANs         │
                        └─────┬───────────┬──────────────┘
                              │           │
     VLAN 1 (192.168.1.0/24)  │           │  VLAN 10 (192.168.10.0/24)
                              │           │
                        ┌─────┴───────┐   │
                        │ USW-Lite-8  │   │
                        │ 8-PoE       │   │
                        │ 192.168.1.194  │
                        └─────┬───────┘   │
                              │           │
          ┌───────────────────┼───────────┼────────────────────┐
          │                   │           │                    │
   [Hallway AP]         [Front-end   [Other wired         [Downstream
   192.168.1.236        devices]     devices]             uplinks]
   (WiFi for multiple
   VLANs via SSIDs)

      Hallway AP (mesh) ──► UDB Switch (192.168.1.98)

                  ┌────────── Proxmox / Compute Layer ──────────┐

   VLAN 10 / 20 uplinks via:
     - USW Flex (192.168.10.7)
     - USW Flex 2.5G 5 (192.168.10.104)

     ┌────────────────────────────────────────────┐
     │              Proxmox Cluster              │
     │                                            │
     │  PVE1:  (details TBD)                      │
     │    - CPU:                                  │
     │    - RAM:                                  │
     │    - Storage: 12–14 × 1TB 2.5" disks       │
     │    - HBA:                                  │
     │                                            │
     │  PVE2:  (details TBD)                      │
     │    - CPU:                                  │
     │    - RAM:                                  │
     │    - Storage: 12–14 × 1TB 2.5" disks       │
     │    - HBA:                                  │
     │                                            │
     │  QDevice: Raspberry Pi (corosync qdevice)  │
     └────────────────────────────────────────────┘

     ┌────────────────────────────────────────────┐
     │    Future: NAS / Proxmox Hybrid (Define 7) │
     │    - ASRock Rack X570D4U                   │
     │    - Ryzen CPU                             │
     │    - RAM: TBD                              │
     │    - 2 × HBAs                              │
     │    - 16 × 6TB SAS enterprise drives        │
     │    - Dual Intel X550 10GbE                 │
     │    - 1 mgmt, 2 × 1G, 2 × 10G               │
     └────────────────────────────────────────────┘

     ┌────────────────────────────────────────────┐
     │   Services Cluster (Mini PCs)              │
     │   - 2 × MINISFORUM UM890 Pro               │
     │   - Future use: k3s / services / AI        │
     └────────────────────────────────────────────┘

         ┌────────────── Automation & Lighting Layer ─────────────┐

   VLAN 60  (Torres Family Lights)  →  192.168.60.0/24

        - FPP Controller: 192.168.60.55
        - Kulp controllers / smart receivers
        - WLED instances (including wled_car_warning)

The network core is provided by the UCG Max gateway and a UniFi switch/AP stack.

• UCG Max – 192.168.1.1
  • WAN1: Ting Fiber
  • Handles DHCP for all VLANs
  • Router for all subnets

• Switches
  • USW Flex – 192.168.10.7 (uplink from UCG Max Port 4)
  • USW Flex 2.5G 5 – 192.168.10.104 (uplink from USW Flex Port 5)
  • USW-Lite-8-PoE – 192.168.1.194 (uplink from UCG Max Port 1)
  • UDB Switch – 192.168.1.98 (meshed via Hallway AP)

• Access Points
  • Master Bedroom AP – 192.168.10.201 (uplink from USW Flex Port 4)
  • Hallway AP – 192.168.1.236 (uplink from USW-Lite-8-PoE, provides mesh to UDB)

Current layer-3 networks:

The hypervisor layer currently consists of two main Proxmox nodes plus a qdevice, with a future third node / NAS hybrid.

• CPU: TBD (fill from `lscpu`)
• RAM: TBD (fill from `free -h`)
• Disks: ~12–14 × 1TB 2.5“ drives (exact list from `lsblk`)
• HBA: TBD (from `lspci`)
• Roles:
  • Core VMs (Nextcloud, NPM, Jellyfin, Prometheus/Grafana, etc.)
  • Part of Proxmox cluster storage

• CPU: TBD
• RAM: TBD
• Disks: ~12–14 × 1TB 2.5” drives
• HBA: TBD
• Roles:
  • Redundancy for critical services
  • Test / lab workloads

• Hardware: Raspberry Pi
• Purpose: `corosync-qdevice` to avoid split-brain in 2-node cluster

• Case: Fractal Design Define 7 XL
• Motherboard: ASRock Rack X570D4U
• CPU: Ryzen (exact model TBD)
• RAM: TBD
• Disks: 16 × 6TB SAS enterprise drives via dual HBAs
• Network:
  • 1 × dedicated management port
  • 2 × 1GbE
  • 2 × 10GbE (Intel X550)
• Role:
  • High-capacity NAS
  • Proxmox node for storage-heavy workloads
  • “Set it and forget it” anchor of TorresVault 2.0

• 2 × MINISFORUM UM890 Pro mini PCs
• Planned use:
  • k3s or Docker-based service cluster
  • Local AI / automation workloads
  • Possibly offload lighter services from main Proxmox nodes

Key always-on services and where they live conceptually:

• DNS & Filtering
  • Pi-hole pair with VIP 192.168.1.5
  • Handles internal DNS including `torresvault.com` / `in.torresvault.com`

• Reverse Proxy
  • NGINX Proxy Manager
  • Exposes external services under `torresvault.com`
  • Internal apps reachable via `in.torresvault.com`

• Storage & Files
  • Nextcloud VM
  • Backed by Proxmox storage + future NAS

• Monitoring
  • Prometheus + Grafana
  • Targets: Proxmox nodes, UniFi, FPP, key VMs & containers

• Home Automation
  • Home Assistant (currently on a Pi)
  • Integrations:
    • UniFi presence / network health
    • BLE tracking
    • FPP (192.168.60.55)
    • WLED (including car warning instance)
    • Zigbee/Z-Wave/other smart devices

• Media
  • Jellyfin VM
  • Access protected via NPM / auth

The holiday light show runs on a dedicated VLAN and infrastructure:

• VLAN 60 – Torres Family lights – 192.168.60.0/24
• FPP primary controller – 192.168.60.55
• Kulp 32 controllers and smart receivers
• Mega tree, matrix, rooflines, and other props
• Home Assistant controls:
  • Start/Stop show
  • Sequence selection
  • Monitoring FPP state
• WLED instances:
  • `wled_car_warning` used for in-car item reminders

This layer is intentionally isolated using its own VLAN and firewall rules, while still tightly integrated with Home Assistant for automations.

Planned upgrades and architectural goals:

• Bring NAS / Proxmox hybrid online as a third cluster member and storage anchor.
• Deploy the 2 × MINISFORUM UM890 Pro mini PCs as a lightweight services/AI cluster.
• Migrate more VMs to containerized services (Docker / k3s) where it makes sense.
• Standardize on voice + automation (Home Assistant Voice, local AI).
• Tighten monitoring + alerting across Proxmox, UniFi, FPP, Pi-hole, and services.
• Document every major component and procedure in this wiki for future you.