Build
Do you want to rice the logon screen of Proxmox? The idea is to show clearly the login as IP and FQDN and also all the colors and positions of the patch cables - this is not in stead of tagging cables its on top. #color #login #proxmox #update
Security
Monitoring Servers and VM's before tweaking VM's is one of the most fundamental tasks. Running thousands of pods on a server it's better to follow their performance. With tiny clusters it's vital to know whats going on. For this post we setup #Zabbix and #Grafana
Build
We all have devices we do not use 24/7 or even daily. For these devises it's convenient to perform a WoL when they are needed. They may run services not frequently needed or they are started when demand grows. #wol #wake-om-lan
Build
I use Brew on my MacBook Pro but also on most of my Linux machines.
Proxmox
How to update your servers to the new version of Debian, Debian 12 - Bookworm. Proxmox VE and Proxmox Backup Server. #pve #pbs #7to8
Proxmox
How to install Proxmox VE and Proxmox Backup Server on the same server. This is for testing and home labs, not for production. #pve #pbs
Networking
Building on the part one: Domain Name Servers are used in corporations. Enterprise networks typically have many subnets in the rfc-1918 range like 10. or 172. range, divided by function, department, floor of building and/or division - there is many ways to skin a cat. #DNS
Update
Update to my blog on Proxmox Automation.One laborious task in managing servers is creating tons of VMs. This script do just that - from a set of questions it creates VMs and Templates. It can be setup to do many things creating them just by editing the script. #proxmox #template #script
Security
The only secure server is: the one that has never started and never had a network cable attached to it! A list of 16 things to start with. #security #server #ssh #2fa #keys #tokens #email
Security
A install gets 60-65 points not 100. The obvious is to update and upgrade software and install security hardening apps like firewalls, fail2ban, #ClamAV, #LMD. The first task is to make a plan that we call a IT Security Strategy. After a SSA you start fixing your #security #hardening.
Security
Prepare for a Security Audit or check your Server for Security Hardening. All Companies need to take a SA from tile to time by an outside Agency. Many corporations with ISO 9001/27001 certs has written protocols to follow visa-vi testing and setting up services. #security #hardening #audit # lynis
Networking
There is times we need to access our cluster but we are not at the site. The only safe way is to use a VPN of some sort, I use WireGuard and #Cloudflare #Tunnels. This is how to set up #WireGuard on #pfSense. #vpn #roadworrior