IaC
A Quick article on Infrastructure as Code. Infrastructure as Code (IaC) is the process of managing and provisioning computer data center resources through machine-readable definition files.
Nalle
Since 1975, a HomeLab enthusiast. In IT 1970 →, 25y for Fortune 500 companies, rest as independent entrepreneur and senior consultant, IT and Management. Happily retired from IT 2011 and totally 2020.
Proxmox
The hidden lab – by VXLAN
Our Proxmox lab shall be hidden away from the wife and kids. How to use Software Defined Networking SDN, VXLAN, OPNsense and a VM to run our Lab hided away from the family. Create a personal space for testing stuff. Use Pi-hole as an alternative to other DNS.
Hardening Ubuntu
It's a harsh environment for any server out there. A fresh installation of the popular Ubuntu Server 22.04 gets a security rating of 63, far from 100. That is why the survival rate is low among home servers.
Install
Proxmox New - Install
How to Install and Configure the Proxmox Virtual Environment (PVE).
Build
Proxmox New Install – Firewall
Security is very important, especially for home labs, we don't have the 24/7 IT-Security Staff to handle things. Several large attacks have recently been utilizing stolen credentials from home users. Yes, home labs are low-hanging fruit for hackers and especially wannabees.
Install
Proxmox New Install – Network
How-to configure networking on a Proxmox host. Using VLAN for segregation, bonding for fault tolerance and some other advanced things.
Install
Proxmox New Install - SSH
As SSH is our mostly used tool, we need to make it safe.
Basics
Resizing the LVM
LVM is quite complicated and need much knowledge to administer. This is just a quick glimpse into that.
Install
Proxmox Install – Set up ACME
An SSL certificate displays important information for verifying the owner of a website and encrypting web traffic with SSL/TLS, including the public key, the issuer of the certificate, and the associated subdomains. HTTPS relies on certs.
Install
Admin users in Proxmox
We do not want to use root for everything, actually we can't allow it. We need admin groups and administration accounts. Furthermore, we need to segregate and use other users and groups with lesser privileges on our cluster and servers.
Install
Stop Brute Force Attacks
It's common practice to harden any server beyond the typical 60-70% state they are at end of installation. Fail2ban is one of the tools. As all a home lab is a prime target, we need to take extra steps to secure the servers we have, exposed and not exposed ones alike.
Remove a Node
Sometimes we need to remove nodes from our Proxmox cluster. It's easy, but doing it wrong it will be hard. Some servers get tiered or outdated, and we want to install a new one, or we need that machine in another cluster.