Since 1975, a HomeLab enthusiast. In IT 1970 →, 25y for Fortune 500 companies, rest as independent entrepreneur and senior consultant, IT and Management. Happily retired from IT 2011 and totally 2020.
Networking
No open ports. Global access to your Proxmox and other nodes. Secure VPN communication using Tailscale. Tailscale makes WireGuard mesh networking easy. You can use Tailscale's cloud based Control Center or self-host one - Headscale.
Build
Adding users to the sudo/doas/wheel group is a straightforward way to grant root-like access, especially in a multi-user environment where multiple users need administrative privileges. Is it wise – no, is it needed – sometimes. See also the Fail2ban section.
Tools
If you set up an Ubuntu server with the default US keyboard, you might like to change to your local keyboard. This is a quick note on how to do it.
Docker
This post will show the use of the Docker Socket Proxy with Portainer. It allows controlled and secure automation while still maintaining security. It's a reverse proxy that allows you to control what Docker API endpoints can be accessed by Docker clients such as Portainer, DIUN and Watchtower.
Build
How do you make "Copy and Paste" work in your VM.
Docker
Container orchestration the easy way. Swarm mode is an advanced feature for container orchestration. Use Swarm mode if you intend to use Swarm as a production runtime environment. Docker Swarm mode is built into the Docker Engine. Docker Swarm mode is similar to K3s or even K8s, but it's lighter.
MyNewLab
Sometimes it's a better to have an easy-to-use system rather than one with everything. We need a secure VM and that's why we run Proton OS. Using the recommendations of the KSPP (Kernel Self-Protection Project), the Photon OS Linux Kernel is secure from the start.
My new favorite. A Modern Docker Management GUI with a clean, intuitive design. The GUI includes: real-time monitoring, container management, image management, network configuration, volume management and resource visualization and the list goes on ...
Build
One of the supporting pillars of virtualization is the use of Cloud-Init and Cloud Images. Setting up VMs is easy and fast. The process is easy to automate and adapt to CI/CD.
MyNewLab
SmokePing is a deluxe latency measurement tool. It can measure, store and display latency, latency distribution and packet loss. SmokePing uses the RRDtool to maintain a long term data-store. It draws informative graphs of the state of each network connection to express up-to-the-minute information.
MyNewLab
TrueCommand is a ZFS-aware solution, allowing you to set custom alerts on statistics like ARC usage or pool capacity, ensuring storage uptime and future planning. TrueCommand also identifies and pinpoints errors on drives or vdevs, saving valuable time when troubleshooting and resolving issues.
Networking
Running services on a PVE node is a perfect place to simulate networking. For the basic setup, we are to use SDN and OPNsense. Setting up a virtual or dedicated NIC as WAN and set up an SDN network for our VM/CT to use.