Security
Security measures to make Servers more secure. This second part is about users. Segregation of duties is key to enhancing security. We do it by segregating tasks a user is allowed to do. A newly installed server's security is 60-70%, meaning there is a lot to do.
Build
Without DNS nothing works. On any corporate network you will find several DNS server, several NTP servers and a lot of Firewalls. – Shouldn't the lab also have multiples of the core services, just in case.
Build
#Proxmox #IOMMU To pass PCI modules to VM's in Proxmox. #Darkmode for Proxmox is nice for your eyes. I use it to save my eyes.
Proxmox
Q - Can I run Docker Containers on Proxmox? A - Yes and no. Running #docker in #proxmox is a good way of controlling the total setup. There is 2 ways to do this, use a CT or a VM. I will try to explain the main points
Proxmox
#Proxmox #IOMMU To pass PCI modules to VM's in Proxmox. #Darkmode for Proxmox is nice for your eyes. I use it to save my eyes.
Docker
It is a self-hosted monitoring tool like an "Uptime Robot". A dashboard app to show the state of your apps and sites with an easy and informative Dashboard – Uptime Kuma #uptime-kuma #dashboard Kuma (クマ/熊) means bear 🐻 in Japanese.
Basics
You usually need to add external data to your VM's or #Proxmox It's best practices to keep VM's small and use external storage for data. iSCSI or NFS. Even SMB can be used. #SMB #CIFS #iSCSI #NFS
Docker
Documentation of networks and process integration is key to run a #homelab. #diagrams.net/#draw.io is an open source technology stack for building diagramming applications, and the world’s most widely used browser-based end-user diagramming software.
Build
I love music and have a large collection of albums. Navidrome and iSub is may way of listen to them. A Docker container is an easy way to set it up. I have it on the same VM as my Reverse PM but I do not forward it to the web. #navidrome #isub
Build
We need stuff from our NAS and/or other storage devices to run our services. We can mount #nfs #smb #cifs by #fstab #sshfs #mount.
Basics
A management interface to try - a Portainer replacement - selfhostedpro/yacht It's made to enhance your experience and add features missing from Portainer. #yacht
Build
It's time to updete Proxox and the LXC's. A kernel update and many services and tools needs updating. New releases from#Turnkey, #Ubuntu and soon #Fedora - update the #LXC list.