Install
Proxmox New Install - SSH
As SSH is our mostly used tool, we need to make it safe.
Proxmox
Stuff I use on Proxmox or have tested. My HomeLab is today full of Proxmox servers, clustered and standalone machines. I prefer used enterprise servers but I also have NUCs and self builds. I prefer HPE over Dell and TP-Link for Lever 2 and HPE for Level 3 switches.
Install
Proxmox Install – Set up ACME
An SSL certificate displays important information for verifying the owner of a website and encrypting web traffic with SSL/TLS, including the public key, the issuer of the certificate, and the associated subdomains. HTTPS relies on certs.
Install
Admin users in Proxmox
We do not want to use root for everything, actually we can't allow it. We need admin groups and administration accounts. Furthermore, we need to segregate and use other users and groups with lesser privileges on our cluster and servers.
Install
Stop Brute Force Attacks
It's common practice to harden any server beyond the typical 60-70% state they are at end of installation. Fail2ban is one of the tools. As all a home lab is a prime target, we need to take extra steps to secure the servers we have, exposed and not exposed ones alike.
Build
Proxmox No Subscription Nag
Who hates the Proxmox nagging screen? We all do. Working on corporate systems you do not see it, but at home it's there every time you need to log in to the GUI. This is how you get rid of the Proxmox No Subscription Notice screen. How to use SSH keys. Tested and works on Proxmox PVE 9 and PBS 4.
News
SSH Host Key Certificates - How to bypass SSH known_hosts bug(s)
Proxmox Issue SSH Host Key Certificates - How to bypass SSH known_hosts bug(s) As of PVE 8.1, there's still a bug where running `pvecm updatecerts` deletes all but the oldest (instead of newest) SSH keys from the shared cluster-wide known_hosts
Basics
Monitoring
Proxmox monitoring using #influxdb and #grafana running in a LXC container. Monitoring is a key part of the security and hardening process.
Basics
Proxmox Users Setup
To secure the Proxmox node or cluster we need to set some user things on the OS level (Debian) and some more then in Proxmox. Having servers in a Data Center also needs some more security measures to be in place. Servers are key targets for hackers, gain access to thousands accounts in one go.
Networking
Proxmox Firewalls and VLAN's
Proxmox Firewalls are there for a good reason. And they are on 3 levels, so take them seriously and put them on. Use a VLAN for the Management Interface. Practical section with examples.
Build
Proxmox User Management
Yes, you need more than root. Security says busing root everyware isn't safe and that segregating of duty is a good way to hardening security.
Basics
PXE Install an OS
How to install an OS to any machine. Using a proxyDNS and its in-built TFTP as in Part 2. #pxe #pixieboot
Basics
PXE boot from Local Disk
A practical example of booting your Servers or VM's by PXE in a Proxmox clusters. The OS will be on the Local Disk or will be loaded into memory. The boot device is then PXE Server, DNSMASQ #pxe #pixiboot #proxydns