Syllabus

Two days, 14 labs, roughly 14 hours of instruction. Click any card to open the lab.

Day 1

Field-Ready Router — 7 labs, ~4 hours

Lab 01 Not started

Hardware Familiarization & Recovery

Router teardown, recovery procedures, and U-Boot serial console.

60 min needs Mango

Lab 02 Not started

ImageBuilder Firmware

Compile a custom OpenWrt firmware with your package set.

45 min cloud-only

Lab 03 Not started

Overlay Deployment

ExtRoot on USB — persistent services across sysupgrades.

30 min cloud-only

Lab 04 Not started

Domain & Cloudflare Verification

Verify workshop subdomain delegation and Cloudflare zone access.

15 min cloud-only

Lab 05 Not started

Tailscale Mesh

Build a two-node tailnet: devcontainer + Mango drop device.

30 min cloud-only

Lab 06 Not started

Cloudflare Tunnel

Zero-port-forward access to your router via cloudflared.

30 min cloud-only

Lab 07 Not started

First Worker

Build the route dispatcher that powers this site's own /api/*.

60 min cloud-only

Day 2

Engagement Stack — 7 labs, ~7 hours

Lab 08 Not started

Cloudflare Access

OTP-to-email auth policy — the same gate you used to reach this site.

45 min cloud-only

Lab 09 Not started

D1 Database

Device registry and audit trail in D1 — this site's own schema extended.

60 min cloud-only

Lab 10 Not started

KV & R2 Storage

Session cache in KV; artifact storage and signed URLs from R2.

45 min cloud-only

Lab 11 Not started

ChatOps — EmojiChef

6-bit food-emoji encoding scheme; Discord command bridge.

45 min cloud-only

Lab 12 Not started

Drop Device

Harden the Mango, deploy enrollment script, validate OPSEC posture.

60 min needs Mango

Lab 13 Not started

Redirector & Relay

Malleable Worker redirector pattern based on Oblique-Relay.

60 min cloud-only

Lab 14 Not started

Capstone

Full round-trip: Discord emoji → Worker → Tailnet → Mango → R2 → signed URL.

90 min needs Mango

14 labs total ~14 hours instruction $50 hardware kit included All labs index