ShredOS uses the nwipe is a program that will securely erase the entire contents of disks. It can wipe a single drive or multiple disks simultaneously. It can operate as both a command line tool without a GUI or with a ncurses GUI.
Beszel is a lightweight server monitoring platform that includes Proxmox and Docker statistics, historical data, and alert functions. It has a nice web interface, simple configuration, and is ready to use out of the box. It supports automatic backup, multi-user, OAuth authentication, and API access.
Using consumer grade SSD or NVMe may be a short time solution. This post is about what you can do to avoid early death of your system disk. I have always had stand-alone nodes alongside the cluster nodes. And I also have a mini PC with Proxmox for travelling purposes.
Installing Pi-hole as a Docker container is easy and do serve you well.
Proxmox Backup Server is flexible and can be installed on any device running Debian, a VM or a LXC. Here I show my TrueNAS VM setup, as my main production has moved to my new TrueNAS CE box. Having PBS on the NAS is making use of the large and fast SAS ZFS RAID 10 storage.
Proxmox Backup Server is flexible and can be installed on any device running Debian, a VM or a LXC. Here I show my TrueNAS LXC setup, as my main production has moved to my new TrueNAS CE box. Having PBS on the NAS is making use of the large and fast SAS ZFS RAID 10 storage.
Monitoring your drives. It's easy and quick to see the state of your drives in a GUI. There is a nice app called Scrutiny that will give you a Dashboard displaying disk health at a glance. Runs on TrueNAS, Unraid, Synology, pfSense, QNAP, RockStore and Windows. Implement on Docker or real rust.
I have been asked about my design, and therefore – this post. The heavy lifting is by Ghost CRM. I then added some code for the TOC (Table of Content), Share on Social Media buttons, Copy to the Clipboard and some language based highlight color for the code segments, logo, background color ...
As SUDO is the key to your entire system, you should consider making it secure by require login by 2FA and your password. We are using the Google Authenticator PAM module for this.
The VM clearly wins in terms of flexibility and security. The KVM VM is much better isolated from the host than the CT, can have full root rights, use features such as GPU pass-through and supports live migration.
Make it small, use Alpine images. The smallest of them all is probably Alpine. I also included notes on Dockge and Portainer. For most of my VM apps Alpine is more than enough. It's small because it's lacking the bloat from GNU.
Use Ansible to ensure that your nodes, VMs, and containers (CTs) are always up-to-date. You can create multiple playbooks and execute them with a single command or through a script.
Build
This is a follow-up version of my post High Availability Pi-hole 6.
Build
After a long time, a totally new under the hood, Pi-hole is here. This is an update to my old post, A redundant DNS - Pi-Stack. This HA DNS will use Pi-hole, Unbound, Nebula-sync and keepalived.
Build
The Koozali SME Server is a server and gateway and an industrial-strength communications server that optionally allows all the computers on your network to share a single Internet connection. A FOSS server for small – medium-sized enterprises. Koozali SME Server 11 Alpha1 released on Feb 4th 2025.
Basics
ZFS is the new normal and replaces the RAID card generation. Why - our disks are too big and the problems with bit rot had to be addressed. After the release of the code as open source in 2001 it quickly moved into MacOS, FreeBSD and Linux. This is a guid for Proxmox users. #zfs
MyNewLab
As we have moved, I need to downsize my lab drastically. I will create a series of posts how I create my new lab. Not only will I lower the number of servers but also use smaller machines, NUCs- and SFF-machines. As I need to do a lot of travelling, this will take a long time to get ready.
Yazi - ⚡️ Blazing Fast Terminal File Manager Yazi (means "duck") is a terminal file manager written in Rust, based on non-blocking async I/O. It aims to provide an efficient, user-friendly, and customizable file management experience.
Generating passwords isn't complicated. You can do it using normal CLI commands. Today, we can't use an easy password like your mother's middle name or your first pets. They need to be long and complicated.
Build
A personalized SSH banner is fun. But also most companies have them. It is easy to do the banner. So follow this quick guide and you have one.
Install
All servers should be protected against Brute Force Attacks. Fail2Ban may reduce the rate of incorrect authentication attempts, but it can't eliminate the risk presented by weak authentication.
Networking
VLAN in our home and home lab. How to segregate, allow traffic between VLAN. Networking is the base knowledge we need to run a home lab. This is about how not why, The way is for you to read about.
Talos
Running a Kubernetes cluster using Talos on Proxmox. Talos is small, efficient and has safety by design. Adding my new favorite to my cluster to replace my K8s and K3s clusters. I will still keep the K0s cluster I have.
PDM is a perfect dashboard for our Proxmox setup. Perfect for a home lab, but It's still in ALPHA, so do not rely on it for production.