Security
Secure your SUDO command
As SUDO is the key to your entire system, you should consider making it secure by require login by 2FA and your password. We are using the Google Authenticator PAM module for this.
Nalle
Since 1975, a HomeLab enthusiast. In IT 1970 →, 25y for Fortune 500 companies, rest as independent entrepreneur and senior consultant, IT and Management. Happily retired from IT 2011 and totally 2020.
Docker
CT or VM as your Docker host?
The VM clearly wins in terms of flexibility and security. The KVM VM is much better isolated from the host than the CT, can have full root rights, use features such as GPU pass-through and supports live migration.
Basics
Docker + Dockge on a Alpine VM
Make it small, use Alpine images. The smallest of them all is probably Alpine. I also included notes on Dockge and Portainer. For most of my VM apps Alpine is more than enough. It's small because it's lacking the bloat from GNU.
MyNewLab
Ansible - Update All Nodes
Use Ansible to ensure that your nodes, VMs, and containers (CTs) are always up-to-date. You can create multiple playbooks and execute them with a single command or through a script.
Build
A Docker based HA Pi-hole 6
This is a follow-up version of my post High Availability Pi-hole 6.
Build
High Availability Pi-hole 6
After a long time, a totally new under the hood, Pi-hole is here. This is an update to my old post, A redundant DNS - Pi-Stack. This HA DNS will use Pi-hole, Unbound, Nebula-sync and keepalived.
Build
Koozali SME Server
The Koozali SME Server is a server and gateway and an industrial-strength communications server that optionally allows all the computers on your network to share a single Internet connection. A FOSS server for small – medium-sized enterprises. Koozali SME Server 11 Alpha1 released on Feb 4th 2025.
Basics
My New Lab – ZFS
ZFS is the new normal and replaces the RAID card generation. Why - our disks are too big and the problems with bit rot had to be addressed. After the release of the code as open source in 2001 it quickly moved into MacOS, FreeBSD and Linux. This is a guid for Proxmox users. #zfs
MyNewLab
My New Lab
As we have moved, I need to downsize my lab drastically. I will create a series of posts how I create my new lab. Not only will I lower the number of servers but also use smaller machines, NUCs- and SFF-machines. As I need to do a lot of travelling, this will take a long time to get ready.
Yazi - Terminal File Manager
Yazi - ⚡️ Blazing Fast Terminal File Manager Yazi (means "duck") is a terminal file manager written in Rust, based on non-blocking async I/O. It aims to provide an efficient, user-friendly, and customizable file management experience.
Generate Passwords Locally
Generating passwords isn't complicated. You can do it using normal CLI commands. Today, we can't use an easy password like your mother's middle name or your first pets. They need to be long and complicated.
Build
Warnings and Welcome Banners
A personalized SSH banner is fun. But also most companies have them. It is easy to do the banner. So follow this quick guide and you have one.