Network Security Roadmap

The plan for the next phase of the homelab: replace basic routing with OPNsense as a proper firewall, then use VLANs to actually segment traffic instead of everything sitting flat on one network.

Remote access (Tailscale) is staying on its own track, separate from the perimeter security controls — I don't want my one remote-access tool to also be a single point of failure for the firewall.

Right now this is mostly reading documentation and sketching the network diagram. I'd rather get the design right on paper before I start reconfiguring a network I actually rely on day to day.