Homelab Blueprint: Automated Archival Stack

This blueprint details a Docker-based architecture for hosting an automated, zero-trust preservation stack on a local home server or Raspberry Pi.

Infrastructure Architecture

• Primary Pool: Local ZFS or SnapRAID array containing master media assets.
• Read-Only Ingestion: Source storage is mounted read-only (:ro) into processing containers to eliminate accidental deletion or unauthorized modification.
• Automated Maintenance: Scheduled containers run deduplication scans, generate fixity trees, and push encrypted snapshots offsite.

Production Docker Compose Blueprint

Save this configuration as compose.yaml in your local management folder:

version: '3.8'

services:
  # Kopia Backup Engine
  kopia:
    image: kopia/kopia:latest
    container_name: preservation_kopia
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    command:
      - server
      - start
      - --address=0.0.0.0:51515
      - --insecure
    volumes:
      - /opt/data/preservation_vault:/app/repository
      - /opt/data/archive_source:/data:ro
    ports:
      - "51515:51515"

  # Worker Container for File Integrity & Cleaning Tasks
  czkawka:
    image: qmcgaw/czkawka:latest
    container_name: preservation_cleaner
    entrypoint: ["tail", "-f", "/dev/null"]
    volumes:
      - /opt/data/archive_source:/data