Let’s do another round of this. What’s going on on your servers, any cool things? How’d the recent CVE flood tangent you and did it change how you see/do stuff?
You must log in or register to comment.
I recently set up my code forge (forgejo) in my home lab (yes a local only remote) and now got my first project in! I turned my OpenWRT backup in a IaC repo with now secrete rendering, a image builder pipeline, a deploy workflow guarded with my security key, nightly drift check etc
I hosted Donetick. It was awful. Everything is processed server-side, which makes it crazy slow. Data should be backed up locally on device. Shame because it seems an otherwise sophisticated software.
Sounds great, I’ll try it out.
I’ve just uninstalled Super Productivity because all the data was client side and server sync was problematic. I’m always going to use it on the home network. This sounds like what I wanted with time tracking and everything.
Same with removing Affine having recently removed that. Same client side data nonsense. I want everything processed on the server.
Other than this… I’ve been trying to keep up with updating everything with all the vulnerabilities with PHP, Debian Kernel vulnerability, etc.
Oh I also set up Homarr. I didn’t think I needed a dashboard. But this has been amazing.
I hope it works out well for you. I don’t have problem with server-side processing, I just wish it would be backed up locally so I didn’t have to stare at a spinning circle for 5 seconds just to mark a task as completed. Currently I use Tasks (tasks.org) and there’s a “completed” option right in the notification.
Procrastination. Want to move may lab off my pi onto my mini PC.
I have done the backup off the pi, just need to restore it but motivation doesn’t line up when the family is out of the house.
I bought some hardware last winter… still sitting in boxes. I do have adhd though
Part of it is I want to shuffle around some stuff, like switch my mobo out on my main pc and use its mobo in the new server
I have proxmox installed on the mini PC with a Debian VM ready to go, just the step of moving everything is the problem.
Ha, that’s my plan as well
Weekly update and restart of my servers. Also planning migration of my k3s cluster from Archlinux to NixOS.
My automatic weekly backup ran for the first time last night. Everything worked nicely.
I’m always super excited for this kind of stuff :D
I practiced restoring my offsite backup this week. Good experience.
Then I printed and laminated the instructions and stored in two locations.
Just curious. How long does lamination last? I assume light hurts paper.
I dunno. Longer than bare paper, I hope.
If it’s automated, why only run it weekly?
Some backup methods – like VM backups on a basic Proxmox VE – only support full backups, so they put a lot of stress on the system and take a lot of space. Even if the performance hit or service disruption during the backup is manageable, a homelabber has finite disk space for backups, so there’s a tradeoff between RPO (most recent backup) and retention (oldest backup). Keeping 2 weeks of backups is cheap for weekly, expensive daily.
Ideally, everything would be backed up incrementally at fairly short intervals (short RPO, long retention), and restorable very quickly (short RTO). Getting there is a journey and weekly automatic backups is a great step.
But maybe losing a week of data is fine in their case. There are parts of my lab that would even be fine with monthly backups…
(that’s correct, I just wanted to add that Proxmox Backup Server supports incremental backups)
After the recent plex player debacle I’m once again trying to come up with a way for me and my diaspora to share media using Jellyfin, but without relying on Tailscale. We have several media libraries, and some of the library hosters are not too tech savvy, so coming up with a solution to replace the ease-of-use of plex hasn’t been easy.
Hey, I did the same. It’s not as bad as it seems. Get yourself a domain name from cloudflare and use it. I got mine for $10 a year. Then just installed cloudflare on my Debian server and all that (I’m sure you know the rest) then made users on my admin jellyfin dashboard and started sending people their usernames and passwords. The only difference for them is now they would need to enter the server URL on the first page of whatever they use then username and password. Good thing these jellyfin clients have the page of entering the server URL in your face with their “connect to server” button. Let me know if you have any questions.
Careful with using CF Tunnels for streaming content. It’s against their ToS to use the free tier for streaming content, so they can technically turn it off whenever they want from my understanding.
From what I understand, if you turn off caching you aren’t violating their TOS. I’ve been doing this for about 2 years now and have yet to have anything happen. Multiple friends use my Jellyfin server daily.
Against whose TOS? Jellyfin’s? I’ve never heard of that. Do explain why please.
Edit: I re-read your comment a couple of times (English is my second language), then searched some stuff. I didn’t even know cloudflare did that. I’ve been using them for over 2 years with no issues. I guess I don’t stress their servers enough? lol. If they stop me, I’ll just move to another company. I won’t even bother asking them or anything.
Against cloudflares ToS
Thank you. I realized that after reading the comment a couple of times. Yeah, they can screw off. If they stop me, I’ll just move my stuff somewhere else.
What’s wrong with tailscale?
Feeling better every day having my stuff under my control and away from prying eyes of trackers and other unsavory stuff.
I recently got around to setting up OIDC for my internal apps using Pocket ID.
Sonarr v5 adds OIDC support, currently only in beta
Jellyfin SSO plugin
Nextcloud with the Nextcloud OIDC app
Mealie, Paperless, and Immich natively support OIDC
Calibre-Web I migrated to AutoCaliWeb, which supports generic OIDC
Sadly Navidrome doesn’t natively support OIDC and forward auth is a bit jank due to the subsonic API
How does the Jellyfin SSO plugin work for you? I’ve set it up with LDAP at the moment so that tv clients and such can still login normally
Seems to work fine. I can still use Quick Connect for apps that don’t support alternative auth.
This week, I’ve mainly been handling the fallout from the PHP vulnerability that occurred in late October. Following that incident, I made a few changes: I’ve opened only the necessary ports to the outside world, and the admin panel is now accessible only via VPN. I’ve created an inventory list for each server, clearly detailing which services are running and their versions, so that the next time a CVE is released, I’ll know immediately which servers are affected. In addition to running daily automatic backups, I periodically restore them to a clean machine to verify they work.
Remember: Always treat your servers as if they might be lost tomorrow, and make sure to have a thorough recovery plan in place.
I set up crowdsec on all my internet-facing services. Couldn’t seem to get the online dashboard connected but I could at least confirm that it can block requests.
I’m also struggling with a new Home Assistant automation to send a live notification to my phone when my washer and dryer are running. The notification action works when I run it manually, and the automation as a whole gets triggered when the machine is on, and Home Assistant says it activates the notification, but I get nothing on my phone during a real test. Gonna keep fiddling.
Crowdsec is on my to-do list as well. Should be easy to set up on OpnSense, just never pulled the trigger.
I have HA notifications set up for the same thing, but sometimes they simply won’t work. Have you set up all the energy settings? There’s a way to create a manual notification from HA, does that work?
The manual notification works, yep. And it’s using a vibration sensor, which looks to be working. I can see the Automation getting triggered, and the trace says it’s executing the notification step. The notif just never seems to arrive.
Edit: I tested again and it worked. Who knows what it could have been.
I can report crowdsec runs great via opnsense. I run this container to get fancy home hosted info https://github.com/TheDuffman85/crowdsec-web-ui
I got new rack gear. I don’t 3d print so I ordered metal face plates for my 10 inch rack. got them here https://www.rackmountplates.com/
I am not affiliated. just a happy customer that stumbled on a solution to a problem. Sharing in case others have similar needs
Looks pretty cool, quite pricey though compared to 3D printing. I’m glad my friend printed mine
Home Assistant got a larger STT recognition model thanks to openvino (on an Intel NUC). The intent was to get better recognition of music artists names.
It’s better, but not perfect. Instead I’m scraping the music directory for names and injecting them into a database that the automation can query.
Just completed my set of needed services by adding nextcloud to the list. Now life is good. Jellyfin: check. Navidrome: check. Pihole: check. Invidious: check. Nextcloud: check. What else? lol
You’ll find more stuff for problems you didn’t know you have. :D
Upgrading one of my powerhouse Dell R410 proxmox nodes to 128GB of smoking hot PC10500 DDR3 ECC Ram from 64.
Now it’s cutting edge.
Last week I had to update everything to make sure that it didn’t fall back on DST because the fucking idjits in my backwoods province decided that they needed to create a new time zone.
OMG patching all the vulns. I actually pulled my wordpress offline overnight for that one. Still waiting on the Ubuntu patch for that IPv4 kernel CVE.
That reminds me - It’s time to do No NAT November again. This CVE gives me an excuse. Last year, the Nintendo Switch Switch and Steam were the big standouts. I think the Switch 2 will actually work with it now.
Oh, and my workplace is shifting offices, so my offsite backup is not offsite. Must take care to not burn the place down. I just put new fans in my PoE switch and now I can hear a server fan is dying too. There’s a lot of maintenance work to all this.
