Basics
pfSense 2.9.0 on Proxmox
Installing pfSense 2.9.0 on Proxmox. An update for 2026. Including how to setup the GEMU Guest Agent. And Unbound 1.26.0 security issue fix for older installs.
Basics
Basic stuff and where to start Building.
DNS
Private Domain with Technitium
To use friendly names instead of IPs. Set up a Private Domain with Technitium. We set up a Domain Name Server ns1 and configure it to handle our domain, example.com or mylab.lan. Options for later: DHCP, a cluster with at least ns1 and ns2 for redundancy, and add ad-blocking if that's needed.
Build
SUDO – Superuser do
Adding users to the sudo/doas/wheel group is a straightforward way to grant root-like access, especially in a multi-user environment where multiple users need administrative privileges. Is it wise – no, is it needed – sometimes. See also the Fail2ban section.
Docker
Secure Docker and Portainer
This post will show the use of the Docker Socket Proxy with Portainer. It allows controlled and secure automation while still maintaining security. It's a reverse proxy that allows you to control what Docker API endpoints can be accessed by Docker clients such as Portainer, DIUN and Watchtower.
Build
Proxmox Copy & Paste
How do you make "Copy and Paste" work in your VM.
Docker
Docker Swarm Mode
Container orchestration the easy way. Swarm mode is an advanced feature for container orchestration. Use Swarm mode if you intend to use Swarm as a production runtime environment. Docker Swarm mode is built into the Docker Engine. Docker Swarm mode is similar to K3s or even K8s, but it's lighter.
MyNewLab
Photon OS
Sometimes it's a better to have an easy-to-use system rather than one with everything. We need a secure VM and that's why we run Proton OS. Using the recommendations of the KSPP (Kernel Self-Protection Project), the Photon OS Linux Kernel is secure from the start.
Build
Cloud Images & Cloud-init
One of the supporting pillars of virtualization is the use of Cloud-Init and Cloud Images. Setting up VMs is easy and fast. The process is easy to automate and adapt to CI/CD.
Docker
Docker+Dockge, Ubuntu 24.04
This post is about installing Docker on Ubuntu 22.04 LTS. We also utilize the Dockge instead of Portainer. Dockge has some unique features and is well suited for use in a home lab. Portainer can do more, but Dockge is fine for now
Backup
PVE Backup to a USB device
Some installations do not need or can afford a PBS. But as backups are the essential security you have for keeping your work safe from you and others, you may like this solution.
Basics
Server Monitoring with Beszel
Beszel is a lightweight server monitoring platform that includes Proxmox and Docker statistics, historical data, and alert functions. It has a nice web interface, simple configuration, and is ready to use out of the box. It supports automatic backup, multi-user, OAuth authentication, and API access.
Proxmox
Minimize wear and tear on system SSD
Using consumer grade SSD or NVMe may be a short time solution. This post is about what you can do to avoid early death of your system disk. I have always had stand-alone nodes alongside the cluster nodes. And I also have a mini PC with Proxmox for travelling purposes.