NAS editionprevious >>110097171READ THE (temp)WIKI! & help by contributing:https://igwiki.lyci.de/wiki/Home_server/hsg/ is about learning and expanding your horizons. Know all about NAS? Learn virtualization. Spun up some VMs? Learn about networking by standing up a OPNsense/PFsense box and configuring some VLANs. There's always more to learn and chances to grow. Think you’re god-tier already? Setup OpenStack and report back.>What software should I run?Install Gentoo. Or whatever flavor of *nix is best for the job or most comfy for you. Jellyfin/Emby/Plex to replace Netflix, Nextcloud to replace Googlel, Ampache/Navidrome to replace Spotify, the list goes on. Look at the awesome self-hosted list and ask.>Why should I have a home server?De-botnet your life. Learn something new. Serving applications to yourself, your family, and your frens feels good. Put your tech skills to good use for yourself and those close to you. Store their data with proper availability redundancy and backups and serve it back to them with a /comfy/ easy to use interface.>Links & resourcesCool stuff to host: https://github.com/awesome-selfhosted/awesome-selfhostedhttps://reddit.com/r/datahoarderhttps://www.reddit.com/r/homelab/wiki/indexhttps://wiki.debian.org/FreedomBox/FeaturesARM-based SBCs: https://docs.google.com/spreadsheets/d/1PGaVu0sPBEy5GgLM8N-CvHB2FESdlfBOdQKqLziJLhQLow-power x86 systems: https://docs.google.com/spreadsheets/d/1LHvT2fRp7I6Hf18LcSzsNnjp10VI-odvwZpQZKv_NCISFF cases https://docs.google.com/spreadsheets/d/1AddRvGWJ_f4B6UC7_IftDiVudVc8CJ8sxLUqlxVsCz4/Cheap disks: https://shucks.top/ https://diskprices.com/PCIE info: https://files.catbox.moe/id6o0n.pdf>i226-V NICs are bad for servers>For more SATA ports, use PCIe SAS HBAs in IT modeWiFi fixing: pastebin.com/raw/vXJ2PZxnCockpit is nice for remote administrationRemember:RAID protects you from DOWNTIMEBACKUPS protect you from DATA LOSS
Previous thread got slid fast, the heck.>>110131796Pulling the latest image provides php 8.5.12 so I guess I'm safe. Never been a fan of php though, so maybe OwnTracks either way... One day, lmao.
you guys use reverse proxies? which ones
>>110140069best .tech domain (?) I'm buying one
What a shit slop thread.
>>110140069How do I into https?Cloudflare's website design is awful and I don't know where to look to get the specific service to get https for NPM.
Maturing is using netbird instead of Tailscale
>>110142007>not rawdogging WireGuard like an absolute chadIt's not even hard.
>>110142007people just install wireguard wrappers that route your traffic through random bullshit as they send telemetry about everything you do?
>>110142671Yes
>>110142671It's all e2ee. Problem? Use headscale if you don't like it.
>>110142112A lot of people's ISPs use IP addr sharing, so you can't use pure wireguard.
What's there to self host besides your password manager? Everything else is better offline.
>>110140524I tried making an op like 4 times last night and it wouldn't let me. I'm sorry.
>tailscale>docker>colima >kubernetes >gitops + nix am I doing this right?
>>110144794Container registry?
>>110141346>cloudflarewhysearch for certbot documentation and read>>110143219yeah e2e encrypted between you and the company, then your other device and the company.
>>110144832GitHub, is this OK?
>>110144847It's fine. Saves a gitea install. Also, note that Kubernetes dropped native docker support for OCI, so something like Podman over colima will have more upfront setup with your docker files, but less headache later in getting your containers to run when it's time for kubernetes to deploy them.
>>110144884Cool I'm gonna install gitea too. Probably better for some of what I'm using Github for. >Also, note that Kubernetes dropped native docker support for OCI, so something like Podman over colima will have more upfront setup with your docker files, but less headache later in getting your containers to run when it's time for kubernetes to deploy them.Reading about this, it's confusing. They seemed to have dropped support for 'native' docker support (like 'dockershim'), but the shared image format, OCI, is still supported and fully compatible. So it's not really a problem then, right?
Docker should just be the standard instead of Docker + [Linux VM] + [Kubernetes thingymajig]. I know they have Docker Desktop + Docker Swarm, but they should've done a better job or something so that this was standard and deployment stacks could be simplified.
>>110144986Yeah. Just make sure whatever you pick targets OCI in it's output, and you'll be fine. It's a running trend. No more native docket, OCI. No more native flannel networking configs, CNI. No more native Nginx ingress controllers. Gateway API.
>>110145008You don't pull put kubernetes just because you want a docker replacement. At least, I hope no one is. That's a FUCKLOAD of overhead for a bunch of networking and scaling options you'll never use. Fuck man, even a boring ass terraform/ansible install over a hypervisor would be less of a headache than that.
>>110145044Well that seems like an agreeable trend from what I understand. Right?
>>110145102Depends if you believe in SOLID design principles or not.
>>110145090Well the comparison was between Docker *Swarm* vs Kubernetes.. right? Maybe 'terraform/ansible' is better for me though? I don't really know what those are. Claude recommend Nomad until hashing some things out further but imo it's basically useless for making good decisions here.My use case is having a network of ~4 nodes (Mac mini, macbook, linux NAS, linux VPS) and doing various jobs between them (some at regular scheduled intervals, eg during NYSE market hours and ran with a high priority, others that run for days at a time using any available compute, potentially batched/sharded.parallelized across devices).4 nodes is small so I can see why Kubernetes would seem like overkill but it's a standard API that LLMs know well so the 'complexity' cost goes down imo and it has good scheduling capabilities and whatnot. Definitely open to simplifying though, any recommendations?
>>110145143I haven't messed with Nomad but it looks really cool. I've never used it though, but the idea of a lighterweight orchestrator is appealing. If you're starting from scratch, that might make more sense. The thing with your 4 nodes is your looking at the classic 1 worker node / 1 storage node problem in k3s. Because one of nodes is optimized around file writes and the other around compute, you're goint to taint/nodeAffinity them so that everything that's not a db just ends up on the compute node, kind of defeating the purpose of kubernetes horizontal scaling across the cluster. If you really are planning to have two compute nodes with mini + laptop, that's alleviated somewhat. But then you won't have a prod/testing split either.If nomad or even docker swarm will let you scale up against available resources, I would pick those instead for KISS.
>>110144837Retard
>>110145237Why couldn't the NAS double as a second compute node? Or VPS? I was planning on using both for compute, the NAS just acting as a network-enabled external drive + copmute essentially. The NAS I'm going to get has an Oculink port for adding GPU too.>If nomad or even docker swarm will let you scale up against available resources, I would pick those instead for KISS.Yeah that was my intuition as well but it also seems like Kubernetes is so industry standard it's almost worth it even if it's 'overkill' (also probably looks better on a CV/resume). It's kind of 'buy it for life' in that regard. Having never used an orchestrator before though maybe I ought to before deciding. I just want to be able to do something like queue compute heavy jobs on the Mac while the NAS/VPS runs critical services during market hours, then once the market is closed, it will dynamically distribute the job queue back over the newly-available compute across the network. Things like that, without having to maintain the cognitive overhead involved with monitoring it manually.
>>110145330I don't think I've ever seen a kubernetes pod scheduler that had time based scoring (ironic given the name) like what you're describing, but maybe it's out there.
>>110145402OK, I think I'm gonna go with Nomad then, it runs natively on Mac too so Colima + Nomad would be a pretty nice clean minimal stack I think for me.
>>110145402Most of the time-based scheduling I was just handling with daemons before but didn't like how ad-hoc it seemed. Then from there I branched out and tried to do job queues and resource budgeting over my network and this is when I realized I was beginning to rebuild a lot of what Kubernetes/Nomad seem to provide. Shits confusing sometimes, I tend to not really understand what some devops tooling does until I'm trying to solve the same problem firsthand then it clicks when I read about it.
AAAAAAAAAA
>>110145471.......
>>110145330>I was planning on using both for compute, the NAS just acting as a network-enabled external drive + copmute essentially. The NAS I'm going to get has an Oculink port for adding GPU tooI don't know enough about NAS, but the issue I run into is things like real DB servers on replica sets have heavy ram requirements, plus you have to deal with shit like volume binding for permanent storage eating up resources too. So that's why you tend to taint them for compute pods.Everybody always says you don't need something heavy like Mongo or Postgres, but then I always inevitably need to pull shit out or query it when things are actually up and running for a while. What's the point of keeping data if you aren't going to pull shit out.
>>1101454713rd one of these I've seen today. Who fucking knows if they're legit
does minisforum do a black Friday / cyber Monday sale typically?
>>110140069Damn first time using Ansible, the LLM does everything and it's insane how can I vibe code infrastructure now
>>110140429caddy, opnsense has a plugin for it
>>110146538Now do open tofu + proxmox and start spinning up VMs.
>>110146878I don't have a machine for Proxmox (I have a shitty Raspberry Pi4 with Incus installed) but I will take a look at OpenTofu
>>110146986you can run it on your pi
>>110140429npmplus + crowdsec + anubis
Should I get into CrowdSec? Might be nice to have it on my VPS with Pangolin I guess.
>>110149462i heard it's quite heavythere are many things like that which sound cool to run on a small server until you realize they suck cpu and ram usage 24-7 limiting the other actual cool things you could runtest it on a vm first
How important is coreboot for a router?
>>110149462Better to update your blocklist at regular intervals than to have something like that running all the time
heh, just found this little buddy on top of a mixed trash pile in my condo complex waste room. first time I find something like this in trash. gonna see if it works. it's lenovo ideacentre 510.
>>110151522 (me)drives (some SSD and 1TB HDD) and RAM are still inside, sweet. I hope I can at least salvage these.
>>110151677nicesee if there's any pornography on the drive
>>110151677>>110151692point a local model at it and ask it to find all interesting information
>>110151692>>110151677 (me)I just hope it's not full of cp. I don't want to deal with this right now.k, trying to turn it on and boot it off a linux pendrive.
>>110151522I wish OEM cases used regular motherboard layouts, there as some that look asthetic AF but the specs are usually too shit to be worth daily driving for me
>>110151522That's a nice haul, fren. Even if it doesn't work you can gut it and use the body with another mobo
>>110151739>used regular motherboard layoutssome dont even use regular atx psu layouts especially hp workstation niggers
>>110151248How do I get into blacklists?
>>110152357Depends. What color is your skin?
>>110151737 (me)kinda weird machine. it seems to have belonged to some sir (the most indian name ever). basically all data is on Windows desktop. it contains only link to Cisco AnyConnect, Mikogo (apparently some other screen sharing software), a bunch of .rdp files and a folder with 680GB of .wfp files (Wondershare Filmora projects) which all seem to be fitness-themed. weird stuff, but nothing of interest really.
>>110152029psu would be easier to mod than trying to get back panel and pci slots to line up
Hello hello are there any good guides on how hosting email works. hoping 2 use a smtp relay service so i dont have to fuck with ip reputation. I'm also a noob so i dont know if anything i just said was correct.,,.
>>110141346> https for NPMWhat in God's name are you even asking? How to securely connect to the public NPM server? Install some "https" package? I would highly advise you ask a chat bot to help you set it up (don't give it your generated private key, just ask for commands). You need a signed certificate to represent your domain that is publicly trusted. Think of it as a chain of trust, starting at a root. Root signs 0-or-more intermediary signing authority certs, which signs your leaf certificate (your domain). Then the service you're talking to, given your leaf public key (and sometimes needing intermediary's public key sent as well), it will attempt to validate the same chain of trust up to one of its own known root certificates. If it can, voila, you've established an encrypted connection. Otherwise, try again. It's not hard, but noobies like yourself can really fuck things up as bad as those idiot Indians creating a private key with value "4". And this is only is there is client authentication. If it's just server and you're not the server, you're the one authenticating the server
>>110144794Why docker AND kubernetes? Kubernetes is just an orchestration tool built on top of Docker that manages the inter-connectivity and initialization of your docker images.
What is a good wireless access point?
>>110153188You're going to have to build/debug your docker files somewhere. Testing on the actual kubernetes server is a misery.
>>110153298Fair point. But it's not much more miserable. You can still tail logs and SSH onto containers with either
>>110153190Ubiquiti U7 Industrial
>>110153190SXTsq 5 ax
>>110153334I usually setup a Linux toolbox in a container anyway with all my build dependencies installed (tofu, ansible, linters, etc.) so I always have Podman/Docker Desktop installed locally anyway.
>minisforum MS-A2This a botnet?
>far away from my pc>host my shit using npm on cf>the php bullshit happens>can't update shit because I'm on the other side of the planet>been fine for a few days>check on my webzone this morning>down, cloudflare errorman...I hope I didn't get pwned
>>110155129https://tailscale.com/docs/features/tailscale-ssh
Can a PSU be rated "too high" for a system?I've heard of people having issues booting up server mobos and switching down to a lower rated PSU for the first boot, before switching to their real PSU
>>110151677Do first worlders really throw stuff like this out
Anyone fuck around with Hermes managing your servers? Would you trust qwen 3.8 27b? Thinking about trying it out for shits and giggles. Lock it down so it can't do anything destructive. Mostly just service health checking, log monitoring...
>>110155807Absolutely. Found a perfectly good business class HP laptop in the trash. One of those folding ones with a touch screen. All that was wrong with it was a dead nvme drive.Replaced it with a 1tb, upgraded the RAM to 32GB, bought a cheap replacement charger for a total of $200 (mid 2025 prices). It's clean as fuck, not a scratch on it.
>>110155678extreme edge case but possiblereally though you want get a properly sized one to maximize your efficiency. need to check the load chart for the PSU and make sure the idle power of you machine is within the peak efficiency range of the PSU
>>110155807i threw my gf out
>>110153190Unifi U7 XGS or E7
>https://tailworm.comtailscale bros not like this
>>110158339>not hosting your own wg serverthats what you get for using nsa memes
>>110158339I don't use Tailscale but>attacker needs a device that's already approved for the networkIt's a nothingburger
whats the difference between ssh and tailscale-ssh? did tailscale make their own vibecoded ssh wrapper? also wtf is an app connector? why dont they make it simple like "wireguard+relay" why do they enshittify and add these features
>>110158648you know, if you took the time to look at the tailscale website, you could learn the answer to all these questions and more all by yourself, anon. instead of performatively throwing your hands in the air and showing everyone how ignorant you are.
>>110158668sorry
>>110160124it's ok I forgive you anon
based
I've been telling myself I will start self hosting stuff but I run a 25 meter cable from the modem in my basement (no, I can't move it) to the PC on the 2nd floor of my house and the shit that's inbetween is basically offline. I don't know how to solve this.
>>110161421Powerline Ethernet your wan ?
>>110161441No I tried that shit in the past and it's barely functional.
>>110161421I don't understand. Buy a switch?
>>110158426>wg0>still no HTTP based api bridge for wg CLI>still no way to publish updated ip routes upon client connectionI guess the real answer is to write them myself, but fuck man, I do NOT like tolling my own security/IAM hacks
>>110155807You don't want to know how bad it is in corporate America. Windows 11 drops and that's too much for the fleet of "older" laptops who can't handle the difference with just a ram upgrade? Straight to e-waste. Dozens, sometimes hundreds of devices. I save what I can.
>>110153190hAP Ax2
>>110140069>cut my AWS costs from 300$ a month to about 2$ a month just by using my old homeserver for most of its backend functionssucks for the end user as they will have to endure couple of ms more for the job to finish (oh the horrors) but im living la vida loca
>>110163207Can't you host the same things on cloudflare workers on the free tier?
>>110163267its a heavy SaaS and all types of deployments would cost me exorbitant amounts of money, even serverlessnow I don't have any fucking redunandancy and the only backup is the the S3 buckets but meh, that works for now
>>110163289>heavy SaaSwhat does it do, can i have it
>>110163305buzz off copycat
>>110163289I see. You should still check out what cloudflare has going on, they have a calculator page that helsp you figure out pricing. I rant some calculations for a project a while back and on amazon it would have cost a lot but on cloudflare it still fit into their free tier
>>110163322thank anon, will take a look into itI already do use cloudflare for domain so I will take a look
>>110161421>(no, I can't move it)yes you can faggotabsolutely hate people who refuse to run proper ethernet because they are too scared to put a couple holes in their walls. absolutely incapable manlets. ask you wife's boyfriend to do it for you since your balls haven't dropped yet
>>110163497I don't live in an american plywood home.
Good local solution for GPS tracking my outdoor cats through their bush(50arces) Willing to do fancy shit like SDR and Lora
>>110163532>I have insufficient tools
>>110153078Try mailcowI have a manual setup with postfix + dovecot + rspamd on my local vm and vps tunnelOn the outbound side, you might need to use relay (mine is SQS, some other providers have generous free tier but with ads so chose it carefully)
>>110164810>but with adsads?
>>110164073GoPro on their backs and good knowledge of the landscape, average speed of a cat, and cartography.
>>110165801>wifiThat's gonna be a lot of outdoor APs and direct burial ethernet
>>110165768Advertisements. Some providers add the 'Send by' footer
>>110166252damn, what a judaic practicereminds me of a terminal emulator who was injecting its own update notes after you received your ssh banner
>>110167767https://www.stratrix.com/vault/hotmail-viral-signatureWho know what else they can do with your email? At least the email goes through their server and they can read it
>>110163207With your tunnel? Or make a deal with isp?
