Keep the factory off the torrent IP.

A live planner for a single-node Proxmox box behind a UniFi Cloud Gateway. The page is free. The zip is a dollar: compose, Caddyfile, LXC script, VLAN table, and an original Home Assistant dashboard. Fulfillment is instant.

Buy the pack · $1 Generate a plan

Why this exists

Bandwidth apps, GPU rentals, and “just open 443” are how a media stack and a public product share one disaster. Labkit prints the four planes (LAN-only, tunnel-out, VPN-only, WAN-raw) for the hardware you already have. No new Cloudflare paid features. No inbound factory ports.

Isolation plan

WAN, Mbps ISP

Guests on this node

Home Assistant Media / *arr VPN downloads Minecraft Product factory (n8n/Caddy) UniFi gateway

Unlock the zip · $1

tunnel/docker-compose.yml + Caddyfile (cloudflared profile)
proxmox/create-products-lxc.sh
unifi-vlan-plan.csv
homeassistant/lovelace-homelab.yaml
isolation-checklist.md

Pay 1 USDC or about $1 of SOL on Solana. Phantom, Solflare, and any Solana Pay wallet work. No account, no email.