homelab/network-planning.md

Network Planning

Current Network Setup

• Document your current router/modem setup
• Note internal IP range (usually 192.168.1.x or 10.0.0.x)

SSH Access Planning

Local Network Access

• Assign static IP to ThinkPad
• Configure SSH key authentication
• Test SSH from WSL machine

External Access (Optional)

• Research dynamic DNS services (DuckDNS, No-IP)
• Configure router port forwarding (if needed)
• Set up VPN for secure remote access

Domain Setup Options

Local Domain

• Configure local DNS (Pi-hole, router settings)
• Use .local domain for internal services

Public Domain

• Register domain name
• Configure DNS records
• Set up reverse proxy (nginx, Caddy)

Security Considerations

• Change default SSH port
• Disable root SSH login
• Configure fail2ban
• Set up firewall rules (iptables/ufw)
• Regular security updates