TAPROOT
Taproot is an old Windows PC converted into a Proxmox VE 9.1.1 homelab server. It runs LXC containers on a ZFS storage pool, with Docker inside each container for service isolation. The name comes from the idea of a root system — infrastructure that supports everything growing above it. The design principle is progressive self-sufficiency. The build starts with fundamentals: monitoring, password management, and remote access. Each step is a real service running on real hardware, not a tutorial exercise. The constraint of limited hardware (single-disk ZFS, no redundancy) forces clarity about what actually needs protection. **Uptime Kuma** is live on docker-host (CT 100) — health monitoring for all services. **Vaultwarden** deployment is in progress on CT 101 — self-hosted password management. Tailscale and a Claude-backed service are next.
Proxmox Hypervisor
Bare-metal Proxmox VE on custom-built hardware. LXC containers for isolation — docker-host, vaultwarden, n8n each run independently with their own network stack.
Cloudflare Tunnel
Zero exposed ports on the home network. All public traffic routes through Cloudflare Tunnel — vault.rootstack.dev, research.rootstack.dev, api.understorylabs.co.
Status API
Express service reads container state from Proxmox API and uptime data from Uptime Kuma. Exposed publicly at api.understorylabs.co with CORS headers.
Research API
Brave Search and ManualsLib proxy running on port 3002. Feeds product intelligence context into Current OS. Deployed at research.rootstack.dev.