Skip to content

Home network (simple)

Saxon's home network connects the internet to his router, Wi‑Fi, server, and PC at the Sunbury house.

You do not need to configure anything to understand this page — it is a map for when things break or when Ryan takes over.

The one diagram

                    INTERNET (NBN)
              ┌───────────────────────┐
              │ UniFi Dream Machine SE│  ← Router ("gateway")
              │   usually 192.168.2.1 │
              └───────────┬───────────┘
        ┌─────────────────┼─────────────────┐
        │                 │                 │
        ▼                 ▼                 ▼
   U7 Wi‑Fi AP       TrueNAS            Windows PC
   (×2, wireless)    Ugreen server       Saxon's desk
                     192.168.2.203       192.168.2.200
                     Docker apps:
                     Jellyfin, Vault,
                     tunnel to Cloudflare

Numbers to know

Name Number Plain meaning
Subnet 192.168.2.0/24 All home devices use 192.168.2.something
Router / gateway 192.168.2.1 (typical) UniFi Dream Machine — internet in, LAN out
TrueNAS server 192.168.2.203 Storage and apps
Windows PC 192.168.2.200 Desk computer

These IPs are fixed reservations in UniFi so they never change — important for file shares and tunnels.

What each piece does

UniFi Dream Machine SE

  • Plugs into NBN modem
  • Creates Wi‑Fi (with two U7 access points)
  • Firewall — blocks unwanted inbound traffic
  • UniFi app manages settings — password in Vaultwarden

TrueNAS (192.168.2.203)

  • Holds disks with media and photos
  • Runs Docker apps (Jellyfin, Vaultwarden, …)
  • Runs cloudflared so vault.saxobroko.com works from outside

See What is TrueNAS?.

Windows PC (192.168.2.200)

  • Normal Windows 11 desktop
  • Uses Wi‑Fi or Ethernet
  • Watches Jellyfin as a client — transcoding happens on TrueNAS

Home vs outside access

You are… What works easily
On home Wi‑Fi Direct IP to TrueNAS (192.168.2.203), PC file shares, UniFi app
Outside home (Australia) *.saxobroko.com homelab URLs via Cloudflare Tunnel
Outside Australia Many homelab URLs blocked on purpose (block no aus)
docs.saxobroko.com Needs Cloudflare Access login from anywhere

CGNAT (why the tunnel exists)

Saxon's ISP does not give a simple public address for port forwarding. So:

  1. TrueNAS opens a tunnel outbound to Cloudflare.
  2. Visitors never connect straight to the house IP.

Details: Network doc and What is Cloudflare?.

Step-by-step: check if home network is alive

  1. On a phone on home Wi‑Fi, open a browser.
  2. Try https://192.168.2.203 — TrueNAS login page should appear (certificate warning possible — advanced users know why).
  3. If that works, LAN is fine — problem may be internet or tunnel only.
  4. If that fails, check power on router and TrueNAS — Turn everything on.

Wi‑Fi passwords

SSID names and Wi‑Fi passwords are not in this guide. Find them in Vaultwarden or UniFi app once logged in.

If this goes wrong

Wi‑Fi works, no internet

  • NBN or ISP issue — reboot modem and Dream Machine (wait 5 min between).

Internet works, saxobroko.com homelab dead from phone LTE

PC cannot see media drive

  • PC must be on same network (192.168.2.x). TrueNAS must be on. See Windows shares.

After moving furniture

  • Do not unplug TrueNAS or router long-term — estate may still need bills and access.