eal-core01 Infrastructure Node
A hardened self-hosted infrastructure node built from a donated mini PC: a private cloud for engineering files reachable from any of my devices, with zero public internet exposure. Treated like an engineering build — requirements first, decisions documented, behavior verified.
- Designed a Tailnet-only access model with a deny-by-default firewall and a Docker backend bound to localhost — defense by not being reachable, not just by rules.
- Deployed a Dockerized Nextcloud stack (MariaDB, Redis, cron) on Ubuntu Server with a deliberate live/backup storage split enforced at install time.
- Verified the access boundary holds — confirmed off-Tailnet devices time out — and staged a backup-and-restore gate before calling the node trustworthy.