Ops Knowledge BaseThe Ops Stack
HomeInsightsTopicsLabsToolchestAbout

Labs Pillar

Network and DNS

Pi-hole, split DNS, DHCP, VLAN-aware services, network visibility, and practical edge services.

Published Guides7
Branches3
Open Gaps0
Local DNS

Pi-hole core deployments, Technitium DNS setups, split DNS for self-hosted services

4 guides
Remote Networking

WireGuard access patterns, Tailscale overlay networks, DNS over VPN

1 guide
Network Visibility

DHCP audit scripts, VLAN-aware monitoring, edge diagnostics utility boxes

2 guides
Local DNS

Create a WireGuard plus Split DNS Lab for Secure Remote Access to Self-Hosted Services

By completing this guide, you will establish a secure remote access setup using WireGuard and implement split DNS for your self-hosted services.

Network Visibility

Build a Small Office Network Monitoring Stack with LibreNMS, Syslog, and Alert Routing

A practical setup for a small office network monitoring stack using LibreNMS for network visibility, syslog for log management, and alert routing for notifications.

Local DNS

PowerShell Health-Check Pack for Active Directory, DNS, DHCP, and Certificate Expiration

Create a PowerShell health-check pack for Active Directory, DNS, DHCP, and certificate checks in a small Windows network.

Network Visibility

Build a Home Network Visibility Dashboard with ntopng, Syslog, and VLAN Traffic Summaries

Build a home network visibility dashboard with ntopng, syslog, and VLAN summaries for quick traffic checks.

Local DNS

Small Office DHCP and DNS Audit Toolkit with PowerShell

A practical toolkit for a DHCP and DNS audit toolkit using PowerShell. The toolkit will include scripts for checking lease conflicts and exporting the results for further analysis.

Local DNS

Create a Raspberry Pi DNS Secondary Server with Pi-hole Sync and Failover Testing

Build a secondary Pi-hole DNS node on a Raspberry Pi, sync core configuration from the primary resolver, and prove client failover before changing router DHCP options.

Remote Networking

Creating a WireGuard Jump Host with MFA-Friendly Access Patterns

Create a WireGuard jump host for remote access that keeps internal services private and leaves room for MFA-friendly access patterns.

Browse

All Labs

Back to the full library.

The Ops Stack

Practical troubleshooting notes, lab builds, and operator tools for people who keep infrastructure running.

Field notes newsletter coming soon.

Explore

Recent WriteupsInsightsTopicsLabsToolchestContactPrivacyDisclosureRSS