Stuff I use on Proxmox or have tested. My HomeLab is today full of Proxmox servers, clustered and standalone machines. I prefer used enterprise servers but I also have NUCs and self builds. I prefer HPE over Dell and TP-Link for Lever 2 and HPE for Level 3 switches.
Proxmox
Our Proxmox lab shall be hidden away from the wife and kids. How to use Software Defined Networking SDN, VXLAN, OPNsense and a VM to run our Lab hided away from the family. Create a personal space for testing stuff. Use Pi-hole as an alternative to other DNS.
Install
How to Install and Configure the Proxmox Virtual Environment (PVE).
Install
As SSH is our mostly used tool, we need to make it safe.
Install
An SSL certificate displays important information for verifying the owner of a website and encrypting web traffic with SSL/TLS, including the public key, the issuer of the certificate, and the associated subdomains. HTTPS relies on certs.
Install
We do not want to use root for everything, actually we can't allow it. We need admin groups and administration accounts. Furthermore, we need to segregate and use other users and groups with lesser privileges on our cluster and servers.
Install
It's common practice to harden any server beyond the typical 60-70% state they are at end of installation. Fail2ban is one of the tools. As all a home lab is a prime target, we need to take extra steps to secure the servers we have, exposed and not exposed ones alike.
Build
Who hates the Proxmox nagging screen? We all do. Working on corporate systems you do not see it, but at home it's there every time you need to log in to the GUI. This is how you get rid of the Proxmox No Subscription Notice screen. How to use SSH keys.
News
Proxmox Issue SSH Host Key Certificates - How to bypass SSH known_hosts bug(s) As of PVE 8.1, there's still a bug where running `pvecm updatecerts` deletes all but the oldest (instead of newest) SSH keys from the shared cluster-wide known_hosts
Basics
Proxmox monitoring using #influxdb and #grafana running in a LXC container. Monitoring is a key part of the security and hardening process.
Basics
To secure the Proxmox node or cluster we need to set some user things on the OS level (Debian) and some more then in Proxmox. Having servers in a Data Center also needs some more security measures to be in place. Servers are key targets for hackers, gain access to thousands accounts in one go.
Networking
Proxmox Firewalls are there for a good reason. And they are on 3 levels, so take them seriously and put them on. Use a VLAN for the Management Interface. Practical section with examples.
Build
Yes, you need more than root. Security says busing root everyware isn't safe and that segregating of duty is a good way to hardening security.