After a cloud outage killed my Alexa-dependent home for 6 hours, I went nuclear: replaced every cloud dependency with a local OpenClaw node running on a Mac Mini M4 Pro. 47 Zigbee devices, local voice control, AI-powered automations — all running on my LAN. Here's the full architecture.

The Cloud Outrage

In Jan 2026, AWS-us-east-1 went down for 6 hours. My lights, thermostat, locks, and garage door were all offline. Smart home became 'dumb home.' Never again.

Outage Duration

Affected Devices

$37/mo

Cloud Subscriptions

4/year

Previous Outages

Architecture Overview

Everything runs on a Mac Mini M4 Pro (16GB RAM) inside a network closet. Home Assistant handles device communication. OpenClaw provides the AI intelligence layer — voice commands, smart automations, and anomaly detection. A Raspberry Pi 5 serves as hot-standby for core functions.

┌────────────────────────────────────────────────┐
│              LAN (No Internet Required)         │
├────────────────────────────────────────────────┤
│                                                │
│  ┌─────────────┐     ┌──────────────────┐      │
│  │  Mac Mini   │────►│  Home Assistant   │      │
│  │  M4 Pro     │     │  (Docker)         │      │
│  │             │     └────────┬─────────┘      │
│  │  OpenClaw   │              │                │
│  │  + Ollama   │     ┌────────┼────────┐       │
│  │  + Whisper  │     │        │        │       │
│  └──────┬──────┘   Zigbee  Z-Wave    MQTT     │
│         │            │        │        │       │
│  ┌──────┴──────┐   ┌─┴──┐  ┌─┴──┐  ┌──┴───┐  │
│  │  Whisper    │   │ 42 │  │ 5  │  │ ESPs │  │
│  │  Mic Array  │   │devs│  │locks│ │sensors│  │
│  └─────────────┘   └────┘  └────┘  └──────┘  │
│                                                │
│  ┌─────────────┐  Hot Standby                  │
│  │  RPi 5      │  (core automations only)      │
│  └─────────────┘                               │
└────────────────────────────────────────────────┘

OpenClaw Configuration

IDENTITY.md

# IDENTITY.md for Smart Home Agent

You are a smart home controller.
You manage 47 devices via Home Assistant's REST API.
You process voice commands via local Whisper transcription.

## Voice Command Patterns
- "Turn [on/off] the [room] [device]" → HA service call
- "Set [device] to [value]" → HA service call with data
- "What's the [room] temperature?" → HA state query
- "Lock/unlock the [door]" → Z-Wave command (require PIN confirmation)
- "Goodnight" → Run scene: all lights off, doors locked, alarm armed
- "I'm leaving" → Run scene: eco mode, cameras active, welcome sequence off

## Automation Rules
- Motion at front door + after sunset → porch light on for 5 min
- Outdoor temp > 30°C + nobody home → AC eco mode
- Motion at 2AM + all doors locked → capture camera still, send to phone
- Humidity > 70% in bathroom → exhaust fan on for 15 min
- No motion for 30 min in room → lights off (except bedroom after 10pm)
- Washing machine power < 5W for 10 min → notify "laundry done"

## Safety Rules
- NEVER unlock doors via voice without PIN confirmation
- NEVER disable smoke/CO detectors
- Garage door: close automatically at 11pm if open
- If OpenClaw goes offline, Home Assistant continues basic automations

docker-compose.yml

# docker-compose.yml — Smart Home Stack
version: '3.8'
services:
  openclaw:
    image: openclaw/openclaw:latest
    ports:
      - "18789:18789"
    environment:
      - OPENCLAW_MODEL=ollama:llama3:8b
      - HA_URL=http://homeassistant:8123
      - HA_TOKEN=${HA_LONG_LIVED_TOKEN}
      - WHISPER_MODEL=base.en
      - MQTT_BROKER=mqtt://mosquitto:1883
    volumes:
      - ./identity:/app/identity
      - ./data:/app/data
    depends_on:
      - ollama
      - homeassistant
      - mosquitto
    restart: unless-stopped

  homeassistant:
    image: homeassistant/home-assistant:stable
    ports:
      - "8123:8123"
    volumes:
      - ./ha-config:/config
      - /run/dbus:/run/dbus:ro
    devices:
      - /dev/ttyUSB0:/dev/ttyUSB0  # Zigbee dongle
      - /dev/ttyUSB1:/dev/ttyUSB1  # Z-Wave stick
    privileged: true
    restart: unless-stopped

  ollama:
    image: ollama/ollama:latest
    volumes:
      - ollama_data:/root/.ollama

  mosquitto:
    image: eclipse-mosquitto:2
    ports:
      - "1883:1883"
    volumes:
      - ./mosquitto:/mosquitto/config

volumes:
  ollama_data:

1. Hardware Stack

The complete bill of materials for a cloud-free smart home:

Item	Cost	Notes
Mac Mini M4 Pro (16GB)	$599	Main brain — OpenClaw + Home Assistant + Ollama
SONOFF Zigbee 3.0 Dongle Plus	$30	42 devices: lights, sensors, switches, plugs
Aeotec Z-Wave Stick Gen7	$45	5 Z-Wave locks (requires Z-Wave for security)
ReSpeaker USB Mic Array	$65	4-mic far-field array for voice pickup in kitchen/living room
ESP32 boards (x6)	$48	Custom MQTT sensors: mailbox, plant moisture, garage
Raspberry Pi 5 (8GB)	$80	Hot standby for core automations
UPS (CyberPower 850VA)	$90	45 min battery backup for Mac Mini + network

~$957 one-time | $0/month

2. Voice Control (100% Local)

Voice processing pipeline — no audio ever leaves the house:

Voice Flow (avg 800ms end-to-end):

User: "Hey OpenClaw, turn off the porch light"
  │
  ▼ [ReSpeaker Mic Array → USB Audio]
  │
  ▼ [Whisper base.en — local transcription: ~200ms]
  │  Transcript: "turn off the porch light"
  │
  ▼ [OpenClaw LLM — intent parsing: ~350ms]
  │  Intent: ha.turn_off
  │  Entity: light.front_porch
  │
  ▼ [Home Assistant REST API: ~50ms]
  │  POST /api/services/light/turn_off
  │  {"entity_id": "light.front_porch"}
  │
  ▼ [Zigbee command → device: ~200ms]
  │
  ✅ Light off. Total: ~800ms

3. AI-Powered Automations

Unlike rule-based automations, OpenClaw makes contextual decisions using sensor data + time + occupancy patterns:

# Sample OpenClaw automation log (real output)

[2026-03-15 14:23] DECISION: AC → eco mode
  Reasoning: Outdoor 32°C, indoor 24°C, nobody home 
  (no motion in any room for 45 min, phone GPS = office)
  Action: climate.set_hvac_mode(eco) → ✅ Success

[2026-03-15 02:14] ALERT: Anomaly detected
  Reasoning: Motion sensor (hallway) triggered, 
  all doors locked, all phones home (sleep mode)
  Action: camera.snapshot(front_door) → sent to phone
  Note: Cat jumped on hall table. False alarm logged.

[2026-03-15 18:30] DECISION: Welcome sequence
  Reasoning: Front door opened, sunset was 17:45,
  family phone detected on WiFi
  Action: lights.living_room(warm, 60%), 
          thermostat(22°C),
          speaker("welcome home")

4. Failover & Reliability

The system has three layers of resilience:

Failover Hierarchy:

Layer 1: OpenClaw + LLM (Mac Mini)
  └─ AI automations, voice control, anomaly detection
  └─ If down → Layer 2 takes over in <5 seconds

Layer 2: Home Assistant (Mac Mini Docker)
  └─ Rule-based automations continue independently
  └─ Zigbee/Z-Wave direct control still works
  └─ If Mac Mini dies → Layer 3

Layer 3: Raspberry Pi 5 (Hot Standby)
  └─ Runs mosquitto + basic MQTT automations
  └─ Core: lights, locks, thermostat only
  └─ Starts automatically via systemd heartbeat
  └─ No AI, no voice — just basic function

Layer 4: Physical (always works)
  └─ All smart switches have physical buttons
  └─ Z-Wave locks have keypads
  └─ Thermostat has manual controls

Living Without The Cloud — 8 Months Later

Here's the honest comparison after 8 months of fully air-gapped operation:

Metric	Cloud Setup	Air-Gapped	Winner
Monthly cost	$37/mo subscriptions	$8/mo electricity	🏠 Air-Gapped
Outages in 8 months	4 (total 14h)	0	🏠 Air-Gapped
Voice response time	1.2-3.5 seconds	0.6-0.9 seconds	🏠 Air-Gapped
Privacy	Audio → cloud servers	All local, zero upload	🏠 Air-Gapped
Setup complexity	Plug and play	2 weekends	☁️ Cloud
Device compatibility	800+ devices	Zigbee/Z-Wave/MQTT	☁️ Cloud

"My neighbor's Alexa went down last week. He came over and asked if mine was working. I said 'mine doesn't need the internet.' His face was priceless." — u/AirGapMaxwell

Cost Comparison (1-Year)

	Cloud Smart Home	Air-Gapped
Hardware	$200 (Echo devices)	$957 (Mac Mini + RPi + dongles)
Year 1 subscriptions	$444 ($37/mo)	$0
Year 2+ ongoing	$444/year	$96/year (electricity)
3-year total	$1,532	$1,149
Privacy	❌ All audio to cloud	✅ 100% local

Break-even at month 26. After that, savings of $348/year + total privacy. No vendor lock-in — if OpenClaw disappears tomorrow, Home Assistant continues working.

Security & Privacy

Zero internet dependency — kill the WAN cable and everything still works

No audio recordings leave the house (Whisper runs 100% locally)

Z-Wave locks use AES-128 encryption for all commands

IoT devices on isolated VLAN (no access to main network or internet)

Zigbee network uses per-device link keys (not global network key)

UPS provides 45 min battery backup — longer than most power outages

⚠️ Physical security: if someone gains physical access to the Mac Mini, they can control all devices. Keep it in a locked network closet. Enable disk encryption (FileVault).

Frequently Asked Questions

Q1. Does voice control work as well as Alexa?

For device control — yes, and faster (800ms vs 1.2-3.5s). For general knowledge questions, no — it's a home controller, not a search engine. But I added a 'fallback to web' mode for when I explicitly say 'search for...'.

Q2. What about firmware updates?

Zigbee OTA updates are handled by zigbee2mqtt within Home Assistant. For OpenClaw/Ollama updates, I temporarily connect to WiFi, pull updates, then disconnect. Once a month, takes 10 minutes.

Q3. Can my family use it?

Wife approval took 2 weeks. Key insight: keep ALL physical controls working. Smart switches still have buttons. The voice control is a bonus, not a requirement. My kids love saying 'goodnight' to trigger the bedtime scene.

Q4. What about remote access?

I use Tailscale (peer-to-peer VPN) for remote access when traveling. No port forwarding, no cloud relay. I can check cameras and control devices from my phone anywhere.

Q5. What's the weakest link?

The Mac Mini's SSD. If it dies, I lose the AI layer until I replace it (~1 day). But Layer 2 (Home Assistant on RPi) and physical controls continue working. I do weekly Time Machine backups to a NAS.

Lessons Learned

Physical controls are non-negotiable

Every 'smart' switch must have a physical button. If the AI goes down, the house must still be manually controllable. This is the #1 rule.

Start with lights, expand slowly

Don't migrate everything at once. I started with 5 lights, got them reliable, then added sensors, then locks, then voice. Each phase took 2-3 days.

VLAN isolation is essential

IoT devices are notoriously insecure. Put them on a separate VLAN with no internet access and no access to your main network. The only bridge is the Mac Mini.

The UPS is not optional

Power flickers kill automations mid-execution. A $90 UPS prevents corrupted databases, stuck relays, and scary 'all lights flash' events at 3AM.

Zero Cloud, Zero Subscription: My Complete Air-Gapped Smart Home