What's up, selfhosters? It's selfhosting Sunday!
from tofu@lemmy.nocturnal.garden to selfhosted@lemmy.world on 16 Mar 05:14
https://lemmy.nocturnal.garden/post/10381

I know for many of us every day is selfhosting day, but I liked the alliteration. Or do you have fixed dates for maintenance and tinkering?

Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.

This post is proudly sent from my very own Lemmy instance that runs at my homeserver since about ten days. So far, it’s been a very nice endeavor.

#selfhosted

threaded - newest

metaStatic@kbin.earth on 16 Mar 05:18 next collapse

what's maintenance? is that when an auto-update breaks everything and you spend an entire weeknight looking up tutorials because you forgot what you did to get this mess working in the first place?

DogEarBookmark@reddthat.com on 16 Mar 05:27 next collapse

I do love how little maintenance is needed until you have to re-learn everything you forgot

tofu@lemmy.nocturnal.garden on 16 Mar 05:29 next collapse

Yes

daddycool@lemmy.world on 16 Mar 06:44 next collapse

I know you’re half joking. But nevertheless, I’m not missing this opportunity to share a little selfhosting wisdom.

Never use auto update. Always schedule to do it manually.

Virtualize as many services as possible and take a snapshot or backup before updating.

And last, documentation, documentation, documentation!

Happy selfhosting sunday.

tofu@lemmy.nocturnal.garden on 16 Mar 07:39 collapse

I think auto update is perfectly fine, just check out what kind of versioning the devs are using and pin the part of the version that will introduce breaking changes.

daddycool@lemmy.world on 16 Mar 08:18 collapse

I just like it when things break on scheduled maintenance and I have time to fix it or the possibility to roll back with minimal data loss, instead of an auto update forcing me spend a week night fixing it or running a broken system till I have the time.

tofu@lemmy.nocturnal.garden on 16 Mar 08:37 collapse

You can have the best of both worlds - scheduled auto updates on a time that usually works for you.

With growing complexity, there are so many components to update, it’s too easy to miss some in my experience. I don’t have everything automated yet (in fact, most updates aren’t) but I definitely strive towards it.

daddycool@lemmy.world on 16 Mar 09:14 collapse

In my experience, the more complex a system is, the more auto updates can mess things up and make troubleshooting a nightmare. I’m not saying auto updates can’t be a good solution in some cases, but in general I think it’s a liability. Maybe I’m just at the point where I want my setup to work without the risk of it breaking unexpectedly and having to tinker with it when I’m not in the mood. :)

iggy@lemmy.world on 17 Mar 00:54 collapse

There’s a fine line between “auto-updates are bad” and “welp, the horribly outdated and security hole riddled CI tool or CMS is how they got in”. I tend to lean toward using something like renovate to queue up the updates and then approve them all at once. I’ve been seriously considering building out a staging and prod env for my homelab. I’m just not sure how to test stuff in staging to the point that I’d feel comfortable auto promoting to prod.

x00z@lemmy.world on 16 Mar 10:11 next collapse

No you just continue updating until it’s fixed again.

IronKrill@lemmy.ca on 16 Mar 18:23 collapse

I’ve had this happen twice in two weeks since installing Watchtower and have since scheduled it to only run on Friday evening…

Appoxo@lemmy.dbzer0.com on 16 Mar 23:03 collapse

Nothing greater than crashing your weekend evening just trying to watch a movie on a broken jellyfin server :'D

BroBot9000@lemmy.world on 16 Mar 05:20 next collapse

Heya! I’m looking to get into self hosting. Any recommendations on good beginner tutorials or resources?

bigDottee@geekroom.tech on 16 Mar 05:29 next collapse

Find something that interests you, and look at the docs of how to get started. It literally is the easiest way to learn and get involved in self hosting

afk_strats@lemmy.world on 16 Mar 05:38 collapse

Here’s a list of self-host/foss/Linux YouTubers. Check them out. I’ve learned SO much from them:

  • Veronica Explains
  • Network Chuck
  • Jim’s Garage
  • Andrea Borman
  • Awesome Open Source
  • Techno Tim

I can add links to each but searching should find them easily

meldrik@lemmy.wtf on 16 Mar 07:30 next collapse

Veronica Explains is on PeerTube! peertube.wtf/a/…/video-channels

peregus@lemmy.world on 16 Mar 08:42 next collapse

Wow, thanks! I couldn’t find Andrea Bowman, it shows me some video about criminal cases! 😆

afk_strats@lemmy.world on 16 Mar 16:40 collapse

It would have helped if I got her name right Andrea BoRman

YouTube channel

peregus@lemmy.world on 16 Mar 21:20 collapse

😆 Thanks!

bigDottee@geekroom.tech on 16 Mar 15:16 collapse

To add:

  • Jeff Geerling
  • Raid Owl
  • Hardware Haven
  • Apalrd Adventures
  • BeardedTinker
  • Craft Computing

I follow these and some other I can’t think of the name right now, but some great resources!

tofu@lemmy.nocturnal.garden on 16 Mar 05:34 next collapse

Don’t have a good guide, but in addition on the thing you plan to selfhost yourself you need to decide where it’s supposed to run. In a rented VM from a hoster? There are several ones where you can get a decent VM for a few bucks each month.

Nowadays, Docker (or containers in general) are very popular, as an alternative to directly installing services on the vm. They make many things easier, but it’s another thing to learn about when you’re just starting - fortunately, there’s plenty of guides etc!

ragebutt@lemmy.dbzer0.com on 16 Mar 06:20 next collapse

Pick something you want to self host first. Do you want a media library? Then look into Jellyfin guides, or komga, or whatever. Do you want a centralized blocking dns server for all your devices? Look into adguard/pihole/etc. do you want to fuck around with llms? That’s a whole thing but you totally can and look into guides on doing it

Just as advice you’ll find people that become borderline evangelical on what you use. It doesn’t really matter. Debian vs unraid vs truenas, ecc ram or not, etc. I mean it does, somewhat, and you should read about it, but don’t get hung up on small details. For home use basically anything is fine. Get an old ewaste pc from 2012 and run whatever os you want (just not windows though)

daddycool@lemmy.world on 16 Mar 07:55 next collapse

You can start by using any old PC you have laying around and install Proxmox on it. Proxmox is a free hypervisor that allows you to make virtual machines and containers which makes it easy to setup and administrate servers/services. This will give you a good foundation to start playing around and give you an idea of your resource requirements.

krash@lemmy.ml on 16 Mar 16:01 next collapse

Welcome to the deep rabbit hole :-) how much do you know about how computers work? In general, you’re going to need to understand some basic networking and general Linux administration, but if you already have a grasp on that then I’d say you just need to start small (simple service, aim to have a resilience goal with backups and restoration) and other metrics that motivates you. Perhaps you want to learn something new with every service you host? You decide, this is your hobby :-)

habitualcynic@lemmy.world on 16 Mar 23:48 collapse

Fellow noob here, lots of great suggestions already. I agree with the “find a specific idea and start there” so you can be vested in what you need to learn.

I suggest starting with an old raspberry pi or other old hardware that may not get the job done, but fiddle with it toward your goal until you prove you can do it. It’s so rewarding!

Once that’s done, move on to getting whatever hardware you need to execute the vision well. Mechanics don’t start learning by working on a Ferrari!

bigDottee@geekroom.tech on 16 Mar 05:30 next collapse

Just found Redirecterr and set that up, but that’s just for me since no one else seems to use Overseerr.

Purchased a new to me EOL enterprise switch that will enable me to expand my network while replacing existing hardware that is limited. It also enables me to move to 10G networking woot!

Skunk@jlai.lu on 16 Mar 05:39 next collapse

Maintenance day is when I log into my server once every 3 month because I forgot it (as everything is working fine).

But I just discovered OpenSuse microOS, while looking at the docs for my laptop Thumbleweed, and now I want to try it with no real reasons. Maybe it is just an excuse to buy a new Raspberry pi.

sugar_in_your_tea@sh.itjust.works on 17 Mar 01:46 collapse

I’m looking at moving my NAS to it.

I currently use openSUSE Leap, so to prep for the switch, I’m moving everything to podman.

I’ve never had a system update go bad on Leap, but I am being impacted by old system packages but don’t want to jump to Tumbleweed. I’m hoping this will give me a more up to date base and force me to put things into containers properly.

credics@sh.itjust.works on 16 Mar 06:01 next collapse

I want to host a personal dashboard with weather forecast and upcoming appointments. I couldn’t find anything that fits my needs so now I‘m building my own.

tofu@lemmy.nocturnal.garden on 16 Mar 06:06 next collapse

Cool! Home Assistant has it and I can imagine Nextcloud as well but those are overkill just for that.

bluGill@fedia.io on 16 Mar 11:27 collapse

I use magic mirror for that. I tried homeeassistant but I'm alleric to a million PIs and they make installing any other way hard. (Rant about vm versions not supporting extentions)

dfense@lemmy.world on 16 Mar 06:51 next collapse

Currently trying to step up my game bv setting up kubernetes. Cluster is running, but I am really struggling getting the combination domain name, let’s encrypt and traefik, but without a cloud load balancer, to work. I feel like I went through most tutorials available, but it seems each one is missing a crucial part. Gonna invest some more hours today…

Cpo@lemm.ee on 16 Mar 14:03 next collapse

Without supported loadbalancer Kubernetes is no fun / not doable in my opinion.

For Hetzner for example, there are some recipes to be found to use an LB and also volumes.

I’ve stepped back to docker compose with a traefik proxy which takes labels from the containers to decide where to route what.

Highly recommended!

cymor@midwest.social on 16 Mar 18:22 collapse

Check out MetalLB for a local Loadbalancer

cron@feddit.org on 16 Mar 07:03 next collapse

I’ve started to setup Authentik this weekend. My goal is to learn more about SSO and have one account for most of my selfhosted services.

tofu@lemmy.nocturnal.garden on 16 Mar 07:37 collapse

Did that as well a while ago and generally it’s working pretty good, some services had the possibility to migrate existing accounts to authentik even. But even though it’s been pretty reliable so far I’m hesitant to migrate my more critical services behind another runtime dependency.

Evotech@lemmy.world on 16 Mar 07:38 next collapse

I run everything off my gaming rig, so maintenance is kinda already a part of it.

I just don’t really look forward to the day I need to reinstall :p

FatsoJackson@lemmy.ml on 16 Mar 07:49 next collapse

hosting everything as usual sir

Inf_V@kbin.earth on 16 Mar 08:03 next collapse

a Plex server.

Marvelicious@fedia.io on 16 Mar 09:19 next collapse

I've been hosting Emby forever (and the requisite software to acquire content 😉).

Recently I added Nextcloud to facilitate cutting several Google products out of my life. Combined with a few FOSS apps, it's currently doing the job of Drive (storage) and Keep (notes), and I'm planning to move my contacts and calendar this week.

gdog05@lemmy.world on 16 Mar 20:00 collapse

I’m doing that as well (mostly done except some tinkering and optimizations). It’s my third time setting up nextcloud, but this time it’s for real.

Wrongdoer4094@lemmy.world on 16 Mar 10:05 next collapse

I have had success with a monthly reminder in my google calendar. Sometimes I skip it, but I have been updating and keeping everything nice and tidy much more frequent than I used to!

tofu@lemmy.nocturnal.garden on 16 Mar 11:04 collapse

Google calendar? In the selfhosting community? Bold statement😄

taiidan@slrpnk.net on 16 Mar 11:27 collapse

Let’s get Radicale!

dingdongitsabear@lemmy.ml on 16 Mar 10:13 next collapse

switched my server from i7-870 (my ex-workstation) to Pentium G6405 (got it free). switch went without a hitch, debian with a ton of docker services (jellyfin, servarr, pihole, radicale, etc.), 8 GB RAM only. although it’s a quadcore to dualcore switch, no performance issues. I know there are better options out there, but I don’t spend money unless I really have to.

MangoPenguin@lemmy.blahaj.zone on 16 Mar 12:11 collapse

That G6405 is actually about 25% faster overall and 50% faster per thread, so performance should be better now. Not to mention much faster RAM and IO.

Core count doesn’t mean much when the CPUs are 12 years apart!

dingdongitsabear@lemmy.ml on 16 Mar 12:26 next collapse

sure, that was the point - skip 10 gens and have zero issues, same software runs as-a before (signor roberto voice).

dan@upvote.au on 16 Mar 13:24 collapse

Not to mention all the extra instruction sets the newer CPU supports. The i7-870 is old enough that it doesn’t even support AES-NI, so encryption/decryption is significantly slower compared to even the lowest-end modern Intel or AMD x86 CPU.

Evkob@lemmy.ca on 16 Mar 10:18 next collapse

I got a new job, and the group chat is on WhatsApp, so I’m looking into running a Synapse server with a bridge to it. I really don’t want to have to use Meta’s apps on my phone.

From what I’ve read so far, it seems like it’s going to be the most convoluted install process I’ll have encountered in my self-hosting journey. I’m excited to tackle it, but also a bit overwhelmed. Which is why I’ve been putting it off :P

taiidan@slrpnk.net on 16 Mar 11:26 next collapse

Holy crap, you’re me. Except I plan on using slidge-whatsapp.

gonzo-rand19@moist.catsweat.com on 16 Mar 14:50 next collapse

Try conduwuit instead of Synapse if you get stuck. For me, it was really simple to install and the dev is really nice.

RagingHungryPanda@lemm.ee on 16 Mar 15:48 collapse

It was a huge pita to get it running, but I have it.

One thing about the WA bridge is that element won’t let me give display names or look up the contact number, so the people in chatting with don’t have names, just “their number (WA)”

bluGill@fedia.io on 16 Mar 11:30 next collapse

Spring break so nothing this weekend. I need to figure out backups and then common passwords/logins for my family.

madeofpendletonwool@lemmy.world on 16 Mar 12:20 next collapse

Pinepods 0.7.4 is out! So as the Dev I’m going through new issues and knocking them out. Smart playlists, oidc logins and notifications on release are all a thing now on the self hosted podcast platform! We’re nearing a v1 release with features on par with some of the big time podcast apps.

tofu@lemmy.nocturnal.garden on 16 Mar 14:24 collapse

Hell yeah! Still got Pinepods on my to-host list.

myrmidex@slrpnk.net on 16 Mar 12:22 next collapse

Added extra disks to TrueNAS, got Seafile up and running in a Proxmox VM. Now I’m about to start fiddling with SAS to 4x Sata to get the front drive bays working. Keepin’ busy!

BruisedMoose@piefed.social on 16 Mar 13:34 next collapse

After just about a month of hosting some things on a Raspberry Pi 4, I think it's about time to work on repurposing this mini PC that hasn't been doing much the last few years and keep growing my services.

To that end, can anyone point me to a good, thorough guide to getting going with Sonarr? I installed it, but then realized I needed to add a client and Prowlarr and I feel like I just started in the middle.

lemmyingly@lemm.ee on 16 Mar 15:05 collapse

Search for trash guides and servarr. Both have websites that are detailed in how to set up all of the arrs apps in what ever fashion you want. I think both have Discord servers too.

habitualcynic@lemmy.world on 16 Mar 23:40 collapse

I agree, these helped me a ton. I’m still a noob but message me if you can’t find links with what u/lemmyingly said

dishpanman@lemmy.ca on 16 Mar 14:03 next collapse

I started hosting audiobookshelf since Jellyfin was pretty clunky for audiobooks.

AllHailTheSheep@sh.itjust.works on 16 Mar 15:22 collapse

how is your experience with it? I’m considering setting up audiobook shelf as well.

cymor@midwest.social on 16 Mar 18:31 next collapse

It’s worked really well for me.

johntash@eviltoast.org on 16 Mar 19:49 next collapse

It’s been great for me so far.

dishpanman@lemmy.ca on 18 Mar 17:20 collapse

It’s been pretty good after I got it working. Configuring Nginx reverse proxy took a bit to figure out since I had to forward the port internal to the docker network. But after that it was easy to configure everything.

Mubelotix@jlai.lu on 16 Mar 14:03 next collapse

Had the intention of making a hidden TOR website version for all my websites but I’m sick

tofu@lemmy.nocturnal.garden on 16 Mar 14:25 collapse

Oh, sounds pretty cool, I have never looked into that.

tux7350@lemmy.world on 16 Mar 14:40 next collapse

I’m working on my first kubernetes cluster. I’m trying to set the systems up with NixOS. I can get a kublet and a control plane running. But I’m getting permission errors when trying to use kubectl rootless on the system running the control plane. I think I figured out which file i need to change, now I just want to record that change in my configuration.nix.

refreeze@lemmy.world on 16 Mar 14:52 next collapse

I’m curious how this goes for you. I run all my machines on NixOS except my k8s cluster which is Talos for now. I have been thinking of switching to Nix for that too.

tux7350@lemmy.world on 16 Mar 17:48 collapse

I followed along the nixos wiki for kubernetes and creating the “master” kublet is super easy when you set easyCerts = true. Problem is, it spits out files to /var/lib/kubernetes/secrets/ that is owned by root. Specifically, the cluster-admin.pem file. If I want to push commands to the cluster using kubectl I have to elevate to a root shell. I could just chmod or chown the file but that seems like a security risk.

Now I’m not familiar with k8s at all. This is my first go through, so I could be doing something wrong or missing a step. I saw something about the role based security but I haven’t jumped down that rabbit hole yet. Any tips for running kubectl without root?

L_Acacia@lemmy.ml on 16 Mar 15:18 collapse

nixos doesn’t play well with rootless containers in my experience

tux7350@lemmy.world on 16 Mar 17:49 collapse

Ah sorry to hear that. Did you find something better that works for you? I’m open to suggestions :D

johntash@eviltoast.org on 16 Mar 19:50 next collapse

Not who you asked but I moved to Talos Linux for k8s

L_Acacia@lemmy.ml on 23 Mar 13:35 collapse

OciContainers just added rootless mode for podman. I was planning on playing a bit more with it but I’m quite busy and haven’t fount the time recently. For the time being I run everything as rootfull since I don’t expose stuff directly through the internet.

I might repond here if I don’t forget once I’ve experimented a bit more.

refreeze@lemmy.world on 16 Mar 14:45 next collapse

I just set up wanderer and workout-tracker. Along with installing gadgetbridge on my phone, I now have a completely self hosted fitness/workout stack with routes, equipment tracking, heatmaps, general health metrics like HRV, heart rate, etc through my Garmin watch, without having Garmin Connect installed. Awesome!

tofu@lemmy.nocturnal.garden on 16 Mar 15:38 next collapse

That sounds so cool! Not using any tracking/nav devices other than my phone but currently my routes just stay local without having any kind of management for them.

bluegandalf@lemmy.ml on 16 Mar 23:09 next collapse

Wait, is that possible? I thought gadgetbridge didn’t work with Garmin! Nedd to check this out. Thanks for the inspiration!

warmaster@lemmy.world on 17 Mar 03:49 collapse

Holy shit! I didn’t know about GadgetBridge. Is there a way to connect it to Home Assistant?

gonzo-rand19@moist.catsweat.com on 16 Mar 14:49 next collapse

I got a Matrix server set up with conduwuit but the problem is that none of my friends are on there so I don't use it. The one friend I made the damn thing for so we could chat just started going through a bunch of personal stuff so now it won't be used for a while. FML.

tofu@lemmy.nocturnal.garden on 16 Mar 15:35 collapse

Cool to have it ready anyways! Does it federate? You can use all sorts of dev-support groups etc.

assaultpotato@sh.itjust.works on 16 Mar 14:54 next collapse

I need to migrate off Docker Desktop for Windows and Storage Spaces but I fear the process will be difficult due to my data volume and the stupidity of Windows. I should never have gone Windows, but I wanted to use Steam Big Picture off the media PC and didn’t want to deal with getting that functional on Linux.

But Docker Desktop for Windows keeps crashing WSL and bricking the network devices randomly, and also continuously grows memory consumption until the machine reboots. Piece of shit.

ikidd@lemmy.world on 16 Mar 15:18 next collapse

Windows Docker is so bad, I don’t even know why it’s a thing.

Some good planning might make the migration less painful. I would recommend a ZFS or other COW storage solution under the docker host so you can do snapshot backups and not have to worry about quiesing databases, etc.

assaultpotato@sh.itjust.works on 16 Mar 16:00 collapse

Yea I’m gonna do zfs or something when I get set up properly again. I’ve got 2 16TB HDDs and Storage Spaces won’t let me pull a drive out :v

I think I’m gonna have to make a new Storage Space and slowly grow that one and shrink the other as I basically shift the extra storage budget between the two until the data is on just one of my drives without redundancy, and then I’ll pull that drive, dual boot Ubuntu or something, format, get everything prepared, and then mount, copy, start services, and then go back and kill the old storage spaces and then never run Windows for anything meaningful again.

ikidd@lemmy.world on 16 Mar 19:57 collapse

Check the returns policy, but if you could buy a large external drive at something like BestBuy, do your copy then return it, that might be a lot safer than what you’re talking about. Just a thought.

L_Acacia@lemmy.ml on 16 Mar 15:21 next collapse

Try Podman Desktop if you want a GUI to manage your container , and docker desktop is the source of the the crashes. You can run docker images / container / kube through it as well as podman one.

domi@lemmy.secnd.me on 17 Mar 00:08 collapse

Piece of shit.

Docker on Windows is was what ended up pushing me to Linux on my workstation. What an absolute pain in the ass.

4grams@awful.systems on 16 Mar 15:45 next collapse

I’m building services out for my family as things enshittify. Moved the family over to an immich instance, run a family blog on Wordpress (working on rolling my own since it’s over complicated and with all the Wordpress shenanigans…), plex (lifetime account, works for now). I have a number of self-built projects as well, a “momboard” like system that is integrated with my Wordpress blog for access and control, a pi based backup server that lives at my friends house and nails a VPN connection to my router and I’m playing with Meshtastic as an offline communication system for my kids scout troop when we’re camping without cell signal. Lots of home automation with home assistant as well.

I host it all on Debian servers, raspberry pi’s and esp32 devices (Meshtastic and home automation). I used to run kubernoodles but it was more complicated than needed and for my use case, docker, ansible and bash scripts manage it all just fine.

eodur@lemmy.world on 16 Mar 23:03 collapse

How’s your experience with meshtastic been? I’ve just started experimenting with it. There are very few nodes in my area, so my potential use cases seem limited.

4grams@awful.systems on 16 Mar 23:12 collapse

Very limited so far. I don’t have much near me but there has been enough sproradic connectivity that I pick up the occasional chatter in the default channel and have about 145 nodes it’s aware of.

Mostly been my son and I playing around. He wants to get his neighborhood friends involved :).

sugar_in_your_tea@sh.itjust.works on 16 Mar 15:53 next collapse

Been messing around w/ podman, and after hours of slamming my head against the wall, I decided Seafile isn’t worth it. :) It launches a bunch of stuff inside one container, and I just couldn’t figure out how to get that to work w/ quadlet (worked fine w/ podman kube play though).

I got forgejo set up and now I’m looking into setting up runners so I can finally migrate off hosted gitlab onto my own forgejo instance.

Some other things I’m planning on doing this week:

  • migrate existing services to podman quadlet from docker compose - will make each existing service into a pod and play w/ pod networking
  • set up technitium - tested it locally and it worked well, so just need to move it and configure it; hope to use it as the primary DNS for my house
  • set up owncloud ocis - there’s a new POSIX FS option, which was my main hangup when I last looked into a nextcloud alternative (I only need storage + collabora)
  • probably some kind of dashboard, because the number of services I host is getting a bit long

If I get time, I want to install openSUSE MicroOS onto my NAS and start migrating everything to it (from openSUSE Leap). I really like the idea of an immutable base OS, and my NAS is already 90% containers (pretty much just Samba left). I need to fix some permission issues anyway (keep having to chown my videos so samba and jellyfin can work together), and this should make things a bit more obvious.

I’ll probably also start a blog about my self-hosting journey, because the info around podman is kinda sparse, especially when it comes to quadlet.

Edit: got OCIS working, but it was a bit of a pain. Starting that blog really sounds like a good idea…

non_burglar@lemmy.world on 16 Mar 17:57 next collapse

Migrating from proxmox to incus, continued.

  • got a manually-built wireguard instance rolling and tested, it’s now "production"
  • setting up and testing backups now
  • going to export some NFS and iscsi to host video files to test playback over the network from jellyfin
  • building ansible playbooks to rebuild instances
  • looking into ansible to add system monitoring, should be easy enough

Lots of fun, actually!

tofu@lemmy.nocturnal.garden on 16 Mar 19:11 collapse

What’s your motivation for the switch? Second time in a short while I’ve heard about people migrating to incus.

non_burglar@lemmy.world on 16 Mar 19:50 collapse

I’ve moved to all containers and I’m gradually automating everything. The metaphor for orchestration and provisioning is much clearer in incus than it was in lxd, and makes way more sense than proxmox.

Proxmox is fine, I’ve used it for going on 8 years now, I’m still using it, in fact. But it’s geared toward a “safe” view of abstraction that makes lxc containers seem like virtual machines, and they absolutely aren’t, they are much, much more flexible and powerful than vms.

There are also really annoying deficiencies in proxmox that I’ve taken for granted for a long time as well:

  • horrible builtin resource usage metrics. And I’m happy to run my influxdb/grafana stack to monitor, but users should be able to access those metrics locally and natively, especially if they’re going to be exported by the default metrics export anyway.
  • weird hangovers from early proxmox versions on io delay. Proxmox is still making users go chase down iostat rabbit holes to figure out why io_wait and “io delay” are not the same metric, and why the root cause is almost always disk, yet proxmox shows the io_wait stat as if it could be "anything"
  • integration of pass through devices is a solved problem, even for lxc, yet the bulk of questions for noobs is about just that. Pass through is solved for so many platforms, why proxmox just doesn’t have that as a GUI option for lxc is baffling.
  • no install choices for zfs on root on single disk (why???)
  • etc

Ultimately, I have more flexibility with a vanilla bookworm install with incus.

tofu@lemmy.nocturnal.garden on 16 Mar 22:37 collapse

Thanks a lot for your response! I too was a bit misguided by the way Proxmox presents LXCs but I’m mostly on VMs and haven’t explored LXCs further so far.

non_burglar@lemmy.world on 17 Mar 00:59 collapse

No worries. And don’t misunderstand: I think proxmox is great, I’ve simply moved on to a different way of doing thing.

harsh3466@lemmy.ml on 16 Mar 18:13 next collapse

I’m integrating my Mac mini (running Asahi Linux) into my server setup. It’s slow going as I also have to move some data around so I can repurpose some hard drives.

ItTakesTwo@feddit.org on 16 Mar 18:25 next collapse

Fumbling around with k3s to get my toes into deploying a Kubernetes cluster from scratch for the first time ever. No real long term usage planned, just some testing to gather experience.

SirMaple__@lemmy.world on 16 Mar 20:09 next collapse

My current project is email. Setting up Mailcow and moving my domains over to VMs on a OVH KS-3 server right here in Canada. I’m sick of depending on cloud email providers and want more control of my data. Also getting Addy.io setup to move my aliases over from SimpleLogin. End game is to dump Proton and go all selfhosted for email and Mullvad for VPN. For Mullvad I found that you can buy a 6 or 12 month gift card vouncher on Amazon and it works out to being less than paying Mullvad directly per month.

vfsh@lemmy.blahaj.zone on 16 Mar 20:29 next collapse

I spent two hours last night beating myself over the head with RAM sticks. Got an ewasted server that had the alarm misconfigured, figured I’d upgrade it and put in a valid configuration since it was just off my size. Slapped in some matching size sticks and it wouldn’t boot. It took my embarrassingly long to realize that the speeds werent the same and that the server really cared about the speeds being the same, more than it cared about sizes being the same incidentally.

I work in IT that should have been the first fuckin thing I checked smh

almost1337@lemm.ee on 16 Mar 22:07 collapse

I remember when I worked in a data center and there was a custom server order that needed something like 64 sticks per server, and procurement didn’t bother to make sure that we had sets that were the same speed, timing, or brand. Thankfully I caught it before we wasted a ton of time troubleshooting.

ItJustDonn@slrpnk.net on 16 Mar 20:50 next collapse

Total noob to Docker (desktop for windows) and I’m just trying to figure out how (and where) to add a config to my Navidrome image or change lines on the image itself, to point it to my music library and create admin login credentials (ಥ﹏ಥ) If I can accomplish that then I eventually want to try Immich or NextCloud afterward.

I want to switch to Linux but I’m not sure where to start! I want to

  • play current-gen games (graphically speaking) on steam, as well as
  • lots of retro games with Launchbox/RetroArch
  • do 3D modeling in blender, and
  • produce music in a free DAW.

I don’t know if any of those factors impose restrictions due to software/hardware differences (or if that even makes a difference), but I want to move over everything I can into a linux environment

sugar_in_your_tea@sh.itjust.works on 16 Mar 22:22 next collapse

All of those should be fine, the main caveats w/ Linux are:

  • anti-cheat games generally don’t work - there are exceptions, and this is a limitation by the developer, not Linux
  • Windows-only software can be iffy - e.g. photoshop and whatnot
  • using an NTFS drive on Linux can have surprises - don’t mount your game lib on Linux, just redownload

Blender works perfectly fine, gaming on Steam and Heroic works well, emulators work well, and while I don’t know anything about Linux music production, I know there are software options available.

Anyway, I recommend buying a separate disk and trying Linux out. That way you don’t touch your current Windows install while messing w/ stuff.

ItJustDonn@slrpnk.net on 17 Mar 06:55 collapse

Good to know, thank you for the tips!

Estebiu@lemmy.dbzer0.com on 17 Mar 10:26 collapse

If you’re messing with docker, I suggest you use WSL and ‘normal’ Docker, as Docker for Windows it’s confusing (at least for me). Ah, and try using docker compose instead of docker, it makes everything so much clearer.

ItJustDonn@slrpnk.net on 19 Mar 07:25 collapse

try using docker compose instead of docker, it makes everything so much clearer

It’s absurd how right you are — I just figured that out and everything suddenly works perfectly

Estebiu@lemmy.dbzer0.com on 19 Mar 07:58 collapse

:D

quelsh@programming.dev on 16 Mar 21:21 next collapse

I migrated my whole native service infrastructure to Docker services this weekend. I prepared for it the previous weeks; basically looking up information about details I wasn’t sure about. The services were mailing, file cloud, and traccar with modoboa, ownCloud respectively. I moved to mailcow and Nextcloud and replaced my feedly account with NextCloud News as a bonus. So far pretty happy with it, had a couple set-backs but also learned a lot in the process. This was the first time for me doing something productive with Docker

Appoxo@lemmy.dbzer0.com on 16 Mar 22:02 next collapse

For the first time I configured ssh with pubkey auth.
Auth between windows (agent) and alpine (host) to use as a helper/backup proxy in veeam (helper is used to mount file level restore assistant)
Took me 3 hours to find out that
Windows didnt know the private key
Pubkey auth wasnt active
Fucked up pubkey auth
Alpine isnt supported by Veeam so it didnt work
Needed to install a small debian VM.

:|
At least I did my first pubkey auth setup.

rumba@lemmy.zip on 16 Mar 23:40 collapse

It gets better.

Smokeydope@lemmy.world on 16 Mar 22:43 next collapse

I just spent a good few hours optimizing my LLM rig. Disabling the graphical interface to squeeze 150mb of vram from xorg, setting programs cpu niceness to highest priority, tweaking settings to find memory limits.

I was able to increase the token speed by half a second while doubling context size. I don’t have the budget for any big vram upgrade so I’m trying to make the most of what ive got.

I have two desktop computers. One has better ram+CPU+overclocking but worse GPU. The other has better GPU but worse ram, CPU, no overclocking. I’m contemplating whether its worth swapping GPUs to really make the most of available hardware. Its bee years since I took apart a PC and I’m scared of doing somthing wrong and damaging everything. I dunno if its worth the time, effort, and risk for the squeeze.

Otherwise I’m loving my self hosting llm hobby. Ive been very into l learning computers and ML for the past year. Crazy advancements, exciting stuff.

bananoidandroid@feddit.nu on 16 Mar 22:44 next collapse

I’ve set up a reverse proxy to try out hosting a few APIs but i’m curious about best practice and haven’t found any good way to do it. Anyway, i have them running dotnet 9 on debian, and hosting them on http ports and then reverse proxying to apache that serves them externally with certbot on 443 to some real hostnames. I would really want to host them on https internally as well, but is there a neat way to “cert” them without an internal CA-service? My experience with self-signed certs are mostly that they always force me to trust the server cert in my connection strings, which is also unsafe so i just don’t bother. Is it worth working on and which is the best approach here?

rumba@lemmy.zip on 16 Mar 23:47 collapse

Non SSL behind your ingress proxy is acceptable professionally in most circumstances, assuming your network is properly segmented it’s not really a big deal.

Self-signing and adding the CA is a bit of a pain in the ass and adds another unnecessary layer for failure in a home network.

If it really grinds your gears you could issue yourself a real wild card cert from lets encrypt then at DNS names with that wild card on your local DNS server with internal IPs, but to auto renew it you’re going to have to do some pretty decent DNS work.

To be honest I’ve scrapped most of my reverse proxies for a nice tailscale network. Less moving parts, encrypted end-to-end.

bananoidandroid@feddit.nu on 17 Mar 00:11 collapse

Thanks! I initially considered going the wildcard route until i saw the workload involved for my host! There does seem to exist autorenewal programs for the largest hosts out there but i’m trying to support my local businesses so it’s unfortunately out of of my scope at the moment, but i’ll checkout your suggestion and see what tailscale has to offer!

eodur@lemmy.world on 16 Mar 23:13 next collapse

I recently setup Music Assistant and have been trying to make it work in my VLANs with my esp32 devices. It has been slow going. Nothing has the level of logging required to easily debug the issues I’ve encountered but I’m slowly working through it all.

habitualcynic@lemmy.world on 16 Mar 23:27 next collapse

I’m patiently (cf impatiently) awaiting the arrival of an Aoostar WTR Pro and components to build my first NAS and full Arr stack for Linux ISO’s.

I completed a proof of concept and learning a month ago on a Pi 5, and I can’t wait to get my hands dirty with something more real!

I’ll take any advice anyone throws my way :D and thanks to this community for the learning and inspiration since I joined Lemmy!

rumba@lemmy.zip on 16 Mar 23:52 next collapse

What should I do next?

  1. Set up peertube in a proxmox, difficulty: My hosting provider doesn’t allow 443 or 80, I have cloudflare working for other things but I think this invades their TOS

  2. Set up immich in a proxmox. Difficulty: I need regular backups off site and it’s going to be pretty large.My wife is a professional photographer.

  3. Set up my Coral TPU with frigate replacing my aging win10 blue iris.

samsi@lemmy.world on 17 Mar 07:11 collapse

I am also struggling with off-site backups. Mainly because I don’t have a cheap and regular way of doing it.

Estebiu@lemmy.dbzer0.com on 17 Mar 10:21 collapse

You could have a friend to them for you, and viceversa.

samsi@lemmy.world on 17 Mar 10:39 collapse

That would be the idea, but then my friend would need to have a server running at his place. And there is still the problem of how to transfer the data securely over the network to my friend, without poking (too many) holes in the firewall

domi@lemmy.secnd.me on 17 Mar 00:15 next collapse

I finally got IPv6 working in Docker Swarm…by moving from Docker Swarm to regular Docker.

Traefik now properly gets IPv6 addresses and forwards them to the backend.

AustralianSimon@lemmy.world on 17 Mar 04:05 collapse

What’s the big benefit of moving to IPv6 for a LAN? Just wondering if there is any other benefits over addresses? My unifi kit can convert us to IPv6 but I’m hesitant without knowing what devices it will break.

domi@lemmy.secnd.me on 17 Mar 08:43 collapse

Copying from an older comment of mine:

IPv6 is pretty much identical to IPv4 in terms of functionality.

The biggest difference is that there is no more need for NAT with IPv6 because of the sheer amount of IPv6 addresses available. Every device in an IPv6 network gets their own public IP.

For example: I get 1 public IPv4 address from my ISP but 4,722,366,482,869,645,213,696 IPv6 addresses. That’s a number I can’t even pronounce and it’s just for me.

There are a few advantages that this brings:

  • Any client in the network can get a fresh IP every day to reduce tracking
  • It is pretty much impossible to run a full network scan on this amount of IP addresses
  • Every device can expose their own service on their own IP (For example: You can run multiple web servers on the same port without a reverse proxy or multiple people can host their own game server on the same port)

There are some more smaller changes that improve performance compared to IPv4, but it’s minimal.

My unifi kit can convert us to IPv6 but I’m hesitant without knowing what devices it will break.

You don’t usually “convert” to IPv6 but run in dual stack, with both IPv4 and IPv6 working simultaneously. Make sure your ISP supports IPv6 first, there is little use to only run IPv6 internally.

AustralianSimon@lemmy.world on 18 Mar 11:04 collapse

Very helpful thanks for digging out up for me.

evulhotdog@lemmy.world on 17 Mar 01:59 next collapse

I use Mend Renovate to keep up with the latest and greatest container images in my private repo.

AustralianSimon@lemmy.world on 17 Mar 04:05 next collapse

Finally setup Synology surveillance station and got my local cameras all hooked in with motion events. Very swish.

Attempted and failed to set up some sort of fail2ban between my Cloudflared container and my website I host at home.

cmc@lemmy.cmc.pub on 17 Mar 04:31 next collapse

I also finally set up Lemmy on my home lab, as well as moving Authelia from Docker to bare metal.

Other than that, I’ve been struggling to find any other self-hosted apps that would actually be useful to me.

TheFANUM@lemmy.world on 17 Mar 06:00 next collapse

Finally upgrading my Plex server from Ubuntu 22.04 to 24.04! I’ve been putting it off out of habit, as I always wait for the *.1 releases but I’ve done several of these for clients and every single one went flawlessly. But I still waited it out.

Also thinking about switching my Ext4 mirrored softRAID to ZFS… Since Ubuntu has the only acceptable ZFS implementation outside of UNIX proper (Ubuntu’s is in-kernel, everyone else uses kernel modules, which i hate). But that’s going to be extra work I may not be in the mood for. But damn would compression and deduplication be nice! So still maybe

faethon@lemmy.world on 17 Mar 07:17 next collapse

That is one thing I still need to do, upgrade my Ubuntu server from 22.04 to 24.04. laat time I tried this I noticed many python packages were missing or failing. Reverted to the backup. Maybe now is the time to do the switch and iron out the crinks that may be left after.

Estebiu@lemmy.dbzer0.com on 17 Mar 10:18 collapse

Wait, you mean you host plex servers for clients? Or that you work with Ubuntu in general? And for the ZFS thing, it doesn’t really matter if it’s in-kernel or something else, at the end of the day, they all work the same. I’m using zfs on my arch machine for example, and everything works just fine (dkms). And zfs is super easy in general, you should definetly try it

Little8Lost@lemmy.world on 17 Mar 06:53 next collapse

Yesterday i managed to successfully host a simple html safely (its more of a network test)
The path is nginx->openwrt->router to internet Now i only need to:

  • backup
  • set up domain (managing via cloudflare)
  • set up certificates
  • properly documentbthe setup + some guides on stuff that i will repeat

and then i can throw everything i want on it :D

DarkSpectrum@lemmy.world on 18 Mar 04:05 next collapse

Looking to install Immich, BitDefender Password Manager and YouTube downloader on the NAS this week.

sugoidogo@discuss.online on 19 Mar 18:37 collapse

I wrote myself a new python script for a palworld server I run. Wanted to figure out a generic way to track active connections without running something in front of the daemon. That’s easy to do for TCP, but since UDP has no concept of an established connection, the regular tools wouldn’t work. Realized I could use conntrack to get the linux firewalls connection tracking data, which works outside of tcp/udp concepts and maintains its own active connection state based on timeouts, which is what I was gonna do anyways. Now I can issue SIGSTOP/SIGCONT to keep buildings from degrading on the server when nobody’s online to deal with it, along with saving the cpu resources of an empty game server. Rather niche project, but I figured I’d publish it anyways. github.com/sugoidogo/pausepal