Unraid array with 26 TB parity protection and a 512 GB cache drive.
Storage Layer
Unraid: Starlight NAS
Hardware Specifications
Array Health & Parity
Array Reliability
Starlight NAS uses single-drive parity protection. This architecture allows a single 26 TB parity disk to protect the array against one drive failure while scheduled parity checks help preserve consistency across the full 84 TB raw pool.
- 512 GB SSD cache drive for appdata and ingress
- XFS formatted data disks
Compute Fabric
Proxmox Cluster: Starlight
daemon1
Main Control Node
cloudflared
Zero-Trust Tunneling
Creates a secure outbound-only connection to Cloudflare, removing the need for open router ports.
nginxproxymanager
Reverse Proxy & SSL
Routes incoming tunnel traffic to internal services and manages certificates.
seerr
Request Management
The primary request portal for users, feeding the automated search and download sequence.
prowlarr
Indexer Manager
Centralizes indexer search configuration across movie and TV automation tools.
flaresolverr
Anti-Bot Solution
Solves Cloudflare challenges for automated queries so indexers remain accessible.
cloudflare-ddns
Dynamic DNS Sync
Keeps Cloudflare records current when the home public IP changes.
wizarr
User Onboarding
Invitation and setup flow for users joining the Starlight ecosystem.
daemon2
Media & AI Compute
jellyfin
Primary Media Server
The core playback engine for movies and TV, with CPU-backed transcoding for remote and mobile clients.
ollama
Local AI LLM
Hosts private local models for offline AI workflows and lab-side experimentation.
daemon3
Service Node
audiobookshelf
Audiobook Server
High-fidelity library manager and player for audiobooks and podcasts with multi-user progress tracking.
homebox
Inventory Tracking
Tracks serials, hardware placement, and warranty metadata across the lab.
myspeed
ISP Benchmarking
Measures bandwidth and latency over time to identify service quality drift.
karakeep
Karaoke Media Host
Dedicated management and streaming host for the karaoke media library.
Operations Flow
Media Workflows
Requests Enter The Media Stack
Seerr handles movie and TV requests. Shelfmark is both the request intake and manager layer for audiobooks before they join the main automation chain.
Content Managers Split By Media Type
At this layer the stack diverges: Sonarr manages TV, Radarr manages movies, and Shelfmark handles both audiobook intake and library preparation.
Prowlarr
Syncs indexers and search access for the automation stack.
FlareSolverr
Bypasses bot checks so Prowlarr reaches protected indexers.
VPN-Bound qBittorrent Lanes
Approved releases move into dedicated qBittorrent containers so each media lane can stay isolated while routing through the VPN network.
Hardlinked Into The Main Media Folders
Completed downloads are renamed and hardlinked into the final Unraid library structure so the source can keep seeding while the organized copy stays usable.
/movies
/shows
/audiobooks
Libraries Become Browsable And Usable
Jellyfin serves movies and TV, Audiobookshelf indexes audiobooks, and RomM manages the gaming library so each collection stays organized and usable from the right interface.
Cloudflare Makes The Stack Web Accessible
Cloudflared creates the tunnel and Nginx Proxy Manager handles service routing so the media apps can be reached remotely without exposing direct inbound ports.
Reference Notes
Platform Basics
Proxmox VE
Proxmox is the virtualization platform that runs the cluster. It hosts virtual machines and Linux containers so services can be split across nodes instead of living on one bare-metal system.
LXC
LXC stands for Linux Containers. They are lighter than full virtual machines because they share the host kernel, which makes them useful for efficient service hosting with less overhead.
Unraid
Unraid is the storage platform in this lab. It provides the parity-protected array, shared media storage, cache handling, and the durable filesystem path the rest of the stack depends on.
Docker
Docker packages applications into isolated containers with their own dependencies and runtime settings. It simplifies service deployment, upgrades, and repeatable recovery across hosts.
Nginx Proxy Manager
Nginx Proxy Manager is the reverse proxy layer. It receives inbound requests, routes them to the correct internal service, and manages certificates and hostname-based access rules.
Cloudflared
Cloudflared creates an outbound tunnel from the homelab to Cloudflare. That allows remote access to internal services without exposing traditional inbound ports directly on the home network.
Hardlink Integration
The lab uses hardlinks for media management so the downloader can continue seeding from ingress while Jellyfin serves the renamed library copy without duplicating disk usage.
VPN Tunneling
All media downloading and seeding runs through qBittorrent containers bound directly to a VPN network. If the tunnel drops, the killswitch prevents WAN IP exposure.