Security
Monitoring Servers and VM's before tweaking VM's is one of the most fundamental tasks. Running thousands of pods on a server it's better to follow their performance. With tiny clusters it's vital to know whats going on. For this post we setup #Zabbix and #Grafana
Build
We all have devices we do not use 24/7 or even daily. For these devises it's convenient to perform a WoL when they are needed. They may run services not frequently needed or they are started when demand grows. #wol #wake-om-lan
Build
I use Brew on my MacBook Pro but also on most of my Linux machines.
Proxmox
How to update your servers to the new version of Debian, Debian 12 - Bookworm. Proxmox VE and Proxmox Backup Server. #pve #pbs #7to8
Proxmox
How to install Proxmox VE and Proxmox Backup Server on the same server. This is for testing and home labs, not for production. #pve #pbs
Networking
Building on the part one: Domain Name Servers are used in corporations. Enterprise networks typically have many subnets in the rfc-1918 range like 10. or 172. range, divided by function, department, floor of building and/or division - there is many ways to skin a cat. #DNS
Update
Update to my blog on Proxmox Automation.One laborious task in managing servers is creating tons of VMs. This script do just that - from a set of questions it creates VMs and Templates. It can be setup to do many things creating them just by editing the script. #proxmox #template #script
Security
The only secure server is: the one that has never started and never had a network cable attached to it! A list of 16 things to start with. #security #server #ssh #2fa #keys #tokens #email
Security
A install gets 60-65 points not 100. The obvious is to update and upgrade software and install security hardening apps like firewalls, fail2ban, #ClamAV, #LMD. The first task is to make a plan that we call a IT Security Strategy. After a SSA you start fixing your #security #hardening.
Security
Prepare for a Security Audit or check your Server for Security Hardening. All Companies need to take a SA from tile to time by an outside Agency. Many corporations with ISO 9001/27001 certs has written protocols to follow visa-vi testing and setting up services. #security #hardening #audit # lynis
Networking
There is times we need to access our cluster but we are not at the site. The only safe way is to use a VPN of some sort, I use WireGuard and #Cloudflare #Tunnels. This is how to set up #WireGuard on #pfSense. #vpn #roadworrior
Networking
Monitoring servers and VM's is extremely important and highly productive. In real environments you constantly tweak and change setting for optimal performance and also you need to have a early warning system in place to be able to react on upcoming issues. #Zabbix #pfSense #Proxmox #Docker