And underrated.
Intel nuc
I have 3 vlans and have 1 blocker for each...was too lazy to configure rules per ip adress.
Hi! I'm Michael and this is my first lemmyverse post!
An old Lenovo thinkstation with 128Gb RAM, 512Gb SSD (x2), 4Tb SATA (x2) and 2Tb SATA for ISOs and backups. Running proxmox with VMs (Windows Server 2022, Home Assistant, Win 11 RDP jumpstation, OPNSense firewall, unifi controller and a Linux general purpose server). I have a dedicated server also running proxmox with a webserver, monitoring server (openitcockpit), meshcentral server.
Raspberry pi 4 as a backup and motioneye server in my garage.
A couple of other raspberry pi 4s doing things... Including 2 at my caravan running HA, Plex and general stuff.
I have a relatively small setup, because of space and cooling constraints, but in that setup:
Everything I self host runs through Proxmox, either as a LXC container or as a RHEL 9 virtual machine. I also have a RasPi running Pi-Hole for ad blocking.
Lots of Proxmox users here! That's good to see. I'm also running Proxmox after using ESXI in my lab for a few years. Too expensive.
Around 40TB of storage space, of which I’m using roughly 1%. I’m not even a datahoarder, I’m just a storage space hoarder.
Save some for the rest of us, eh?
Sounds like a pretty solid setup!
Raspberry Pi 4 running home assistant
Intel NUC running frigate and a minecraft server
Custom built PC (i3-10100, 16gb ram, GTX1070 for transcoding. 24tb array with two parity disk, 2x 3tb ssd's in array for docker, os, etc) with quite a lot of storage running Unraid, which is my media server, backup server, and now my lemmy server.
Network is a mikrotik Hex S router and a netgear gigabit switch, with 1gb fiber internet. 2 Ubiquity AP's for wifi in the house.
How do you secure your lemmy instance on your home network? I'm interested in doing it but I'm unsure if a reverse proxy would be good enough security. My other public facing services run behind traefik and authelia, but I figure you wouldn't want lemmy behind any auth for ease of use.
Mostly I am depending on reverse proxy yes.
Otherwise there's not critical data on the box that could cause a problem for me if the server was owned and everything exfiltrated. Worst case if I had to completely wipe the box it would be annoying but not worse then that.
I have a pretty modest setup. This is just what’s in or on my cabinet rack.
Plan is to set up something like open stack but right now it’s just running unmanaged (orchestrated?) docker containers. I recently learned about ansible so may just automate the docker containers instead of figuring out open stack.
You fit a 3070 in a 5-bay NAS?? That's impressive! I haven't done much with ML, but it is a very interesting field of work. I've seen people do some pretty crazy things with it!
Ansible is nice, but have you heard of Terraform? Or, if you prefer programming/scripting as opposed to HCL/YAML, there is also Pulumi with lets you use terraform via a few different programming languages. (Ansible is nice though, I used to use it all the time in my lab, and it just works)
Box I built around a AMD Ryzen 7 3800X, running Ubuntu 22.04 and a handful of qemu VMs (owncloud, pihole, checkmk, etc..) A hand-me-down qnap I keep threatening to put truenas on but haven't yet. A couple libre computer (pi alternative) boards. A couple tp-link managed switches.
On my to-do list are to deploy an old Dell mini as an OpnSense box to replace my router.
If you haven't guessed from the above, I use Slackware Linux 😜
My main machine is an Optiplex 7070 micro (i5 8th gen, 16gb ram, 500gb SSD + 4TB hdd). I also have a pi 3 + 4tb hdd for backups and a pi 4 for wireguard. I have a few other SFF computers, but I don't have a use for them at the moment.
For services, I host many of the popular ones (nextcloud, portainer, paperless, etc.), but here's 3 I haven't seen mentioned a lot:
Noice, I've been meaning to setup something like paperless! Calckey looks like a good solution/alternative to Mastodon with an interesting user interface.
I haven't heard of the other two, but I'll definately check out kitchenowl, could use some more meal planning!
Intel NUC with a hard drive for local stuff (*arrs, jellyfin), but nowadays because I plan to go back to full-time motorhoming I fire up stuff on DO, hetzner, AWS, GCS, etc as required. At the moment just a Lemmy and general purpose instance, but I do pop up the odd gameserver I've dockerized on one of these services while playing with friends
Awesome! Yeah, my instances are currently running on DO, but it's pretty expensive hosting in the cloud when you have a lab at home. My internet here isn't very good though, that's the main thing stopping me from moving them on-prem.
Joe's datacenter & hetzner server auctions are good deals if you've got bad internet and want to run your own multiple smaller VMs! Depending on latency in the case of hetzner.
But yeah, hosting at home is always great. I did it for years, but electricity prices began creeping up and I got tired of the maintenance
I've got a small kubernetes cluster set up using Talos with 3 controlplane / 3 workers in VMs on the proxmox nodes. The vultr node is also running Talos and attached to the same cluster. Their KubeSpan feature is pretty neat, automatic full mesh wireguard between all cluster nodes.
Traffic inside the cluster flows seamlessly between all nodes, and I can even use it as sort of a proxy server using Cilium's Egress Gateway function.
Meanwhile my Pi4 is running k3s, to host a few services needed to operate the main cluster, such as the Harbor registry operating as a cache and a zigbee2mqtt instance because I have a raspbee2 for a zigbee adapter.
The main reason I'm using K3S even on the single node Pi is because I very much like using flux to manage the deployments on the servers.
Network wise, I've got a USG-3P, one of the newer compact 16 port POE switch. And a pair of UAP-AC-LITE for APs.
Maybe one day I'll get around to switching the USG for something a little more capable. And maybe capable of doing IPS/IDS on my 500M/100M internet connection. But no idea what kind of specs I'd need for that.
Would also like a NAS but... eh.. Maybe I'll just see if i can add more storage to the proxmox nodes and expand the ceph cluster or something.
This sounds a lot like my old cluster config (I stepped away from the lab for a few months and forgot how it works, so started over lmao), but basically it would spin up a talos cluster on proxmox using terraform, and then bootstrap FluxCD and the rest of the software would be setup using that. It was a pretty slick system.
And seriously, Talos Linux is really, really, nice. If I ever manage to mess up a kubernetes node (which has happened a few times when I was messing around), I just wipe it, reboot it from the ISO, and reprovision it with the machine configuration.
draw.io is one, I've started using LucidChart (personally) and https://d2lang.com at work for process diagrams.
Raspberry pi 1: pivpn, pihole Raspberry pi 3: home assistant Raspberry pi 4: some leftover docker containers.. move in progress Mini pc (1tb ssd, 20gb ram): arr stack, plex, audiobookshelf, vaultwarden, mealie, photoprism, and some more Synology NAS: 23tb
Documentation is only in my head so far...
I used to run 2 hp proliant servers. One Proxmox and one truenas. Now it's just one old AMD PC running Ubuntu server with some dockers. My electric bill is thanking me. About to move it all to an Intel NUC and downsize even further.
On the big server, what do you use the assortment of SSDs for? I get specifically having a good chunk of solid state storage, but im wondering if you're like me and just acquired them over time, or if there's a specific purpose in mind.
Currently running a docker environment from a laptop with the following:
Firefly III - For budgeting
Seafile - For file sync. Was using OneDrive, but since it's not supported by Linux went with Seafile. Works great!
Keycloak - SSO
Cloudflare Tunnel - For connection to my services from outside without needing to forward ports, and to enforce SSO for platforms that don't support it.
PHP Apache - Hosting a few small websites
Also hoping to get a server style UPS soon, which reminds me, I have to go check if there's a homelabsales community here :)
Nice setup, regarding protectli with pfsense, how much throughput do you get with intrusion detection set to on... Was wondering about protectli products and their performance. I can only make use of 1/4 of the bandwidth with my current thin client
I'm getting about ~800-900 Mbps down and ~15 up (a bit more than what I pay for). I did notice that when I saturate the sownly speeds, my CPU will max out and I'll start getting latency spikes to the point where the traffic stops on the network.
After looking into it and adding a buffer bloat rule/ limiter, I'm not having any issues. I guess that's the price of running IDS on 7 VLAN interfaces, but it's getting by. When I go 10Gbe I will definitely pick something a little more capable, but it's great for 1 Gbe
Thanks, I am paying for 1gbs up and down and wondering which Hardware would be good. Which protectli product do you have? I see some heavy price differences
I've been using this one without issues for years. https://a.co/d/iTasHwu
In case you’re interested - pfsense has a plug-in that works just like pihole called pfblockerng it uses the exact same format as pihole lists too. I was already running DNS on my pfsense to this made more sense than spinning up a separate machine.
I’ve just built my first NAS. I went very overkill for my needs, so bought 5x8TB drives, 32GB of RAM, a Ryzen 5600G, and 1TB of NVMe SSD storage to compliment my HDD space. I’ve installed TrueNAS and have plugged the HDDs into a RAID-Z2 config, yielding about 20TB of usable space, with the 1TB SSD being a separate pool for anything that can benefit from faster IO, which have generally been applications / VMs. Currently using it as a network drive for all my data, and am using BorgBackup to ensure everything’s backed up. At some point I’d like to get a remote BorgBackup repository going, but I’ve not gotten around to it yet.
I’m also using it to host a VM for my web dev projects I can access via RDP and Tailscale, and have started installing PhotoPrism for my photos, SyncThing for my dev projects (so I can continue coding across my PC and laptop seamlessly), and eventually I’d like to get Plex / Jellyfin going, though I already have a setup going via WhatBox.
Awesome, that's a good chunk of storage!
Speaking of mass SSD storage, if you play a lot of Steam games, have you looked at setting up an iSCSI target on the SSD to hold your games? I did that for a while, but when I re-aranged my rack a while ago I lost 10gb to my desktop (needed the card elsewhere). Was a pretty performant setup though, all things considered.
Can’t say I have. Have you got any resources I could look into to get started?
Intel NUC i5 8XXXX running promox. I run home assistant, frigate & plex. Data storage is via the NAS DS 918+ but I do run some of their packages on that too & a couple more on the router / network.
Home assistant is particularly useful for running a bunch of add ons that I’d otherwise need to run as separate services in proxmox like adguard
I have a Raspberry Pi B running Pihole, a Raspberry Pi 4 8GB running a bunch of services for personal/family use (wiki, nextcloud, paperlessngx, etc), and then a VPS that was running a bookwyrm instance and now is also running Lemmy :)
I've got an aging Dell Optiplex microsff running OPNSense as a router on a stick, handling the house LAN. Then a HP Prodesk mini that runs containers on top of Rocky 9.
Free oracle ampere instance running Synapse and Onlyoffice DS for my Nextcloud instance, and Adguard Home (DoT&DoH) to block ads on the go. Not really homelab stuff, but relates closely... Probably going to set up a Lemmy instance on that one too, seems worth it if ARM is not an issue.
Going to try making a RPi 4B 8GiB + FreeBSD + 2 HDD ZFS mirror "NAS", though it's main usage is going to be local backups, mostly just sitting idle. Finding a powered 2-disk USB3-SATA disk housing that stops the disks properly (not with emergency head retract) has been surprisingly difficult. If anyone has suggestions for one, I'd be grateful. Probably going to have to write scripts to issue hdparm commands automatically when necessary.
thanks for using Leebra!
go to feed...
save