operator

joined 1 year ago
[–] operator@kbin.social 1 points 11 months ago* (last edited 11 months ago)

Apologies accepted, seems like I missed something:)

[–] operator@kbin.social 1 points 11 months ago (2 children)

Thanks for the great sarcasm mate

[–] operator@kbin.social 2 points 11 months ago (4 children)

Using Pi's to run services in my homelab which I want to keep separate from my server (to have some sort of failover in case the server goes down). Status/Monitoring, VPN server and so on

[–] operator@kbin.social 2 points 1 year ago

That - good sir - is a very valid argument

[–] operator@kbin.social 2 points 1 year ago

Saved me about 15 mins thank you kind sir

[–] operator@kbin.social 2 points 1 year ago (3 children)

Looks smooth, I am running Homer (different to Homerr or others). Super easy to configure in yml and looks clean. No fancy features as weather however… or maybe haven’t found it ^^

I do think I’ll give Homarr another try after looking at yours

 

So I'm in the process of (re-) setting up my homelab and unsure about how to handle databases. Many images require a database, which the docker-compose usually provides inside the stack.

Now my question, shall I have 1 database container which is accessed by all containers? Or shall I have a separate container for each service?

For critical services, which shall have as few dependencies as possible I'm already using sqlite or a similar solution.

Also on a sidenote: I have two docker hosts, can I let the containers of 1 hypervisors use the same internal docker network?

TIA!

 

So I'm in the process of (re-) setting up my homelab and unsure about how to handle databases. Many images require a database, which the docker-compose usually provides inside the stack.

Now my question, shall I have 1 database container which is accessed by all containers? Or shall I have a separate container for each service?

For critical services, which shall have as few dependencies as possible I'm already using sqlite or a similar solution.

Also on a sidenote: I have two docker hosts, can I let the containers of 1 hypervisors use the same internal docker network?

TIA!

[–] operator@kbin.social 1 points 1 year ago* (last edited 1 year ago)

Unfortunately not at the moment, as all is kinda fiddled and setup manually, but I’m redoing my home lab in a couple of weeks. Send me a message and I’ll send you the docker image or script!

But basically I did the following:

  • enable ipv4 forwarding
  • configure and start VPN tunnel
  • set the default route to the tunnel
  • set the gw for reaching the remote vpn server to the local gw
  • sets routes for the local network to the local gw

If your vpn goes down, the default route shall still point to the remote gw, but as it isn’t there you also have a kill switch. Voila!

I am looking into gluetun but haven’t tried it yet.

Edit: this doesn’t protect you from someone snooping the traffic inside your local net, but protects it starting from the point where it leaves the local vpngw. The traffic is unencrypted between that and your client.

[–] operator@kbin.social 1 points 1 year ago

That’s becoming interesting once I’m setting up a slaves for failover & local proximity ^^ looking forward to deep diving into it

[–] operator@kbin.social 2 points 1 year ago (2 children)

Appreciate it!

[–] operator@kbin.social 2 points 1 year ago (5 children)

That be amazing! I am currently not using anything (took down my homelab a while back) and planning on completely starting over fresh now.

I am most likely going with unbound! So if you could, that be great!

[–] operator@kbin.social 2 points 1 year ago (1 children)

Thanks! That was really insightful. I guess I'll give it a try some day, for now everything runs in ipv4 and that runs well haha!

 

So everyone is talking about cloudflare tunnels and I decided to give it a shot.

However, I find the learning curve quite hard and would really appreciate a short introduction into how they work and how do I set them up…

In my current infrastructure I am running a reverse proxy with SSL and Authentik, but nothing is exposed outside. I access my network via a VPN but would like to try out and consider CF. Might be easier for the family.

How does authentication work? Is it really a secure way to expose internal services?

Thanks!

22
submitted 1 year ago* (last edited 1 year ago) by operator@kbin.social to c/linux@lemmy.ml
 

So I know my way around Linux pretty well. However I never really got the gist of the difference between Snap, Flatpak and Native packages.

What exactly sets them apart?

Why does everyone seem to hate snap?

I have been using all of them, simultaneously on the same system and never really noticed a difference in the way installation, updates etc are handled (syntax ofc).

I hear snap sandboxes? Is that the main reason? Thanks for your insights..

 

So I know my way around Linux pretty well. However I never really got the gist of the difference between Snap, Flatpak and Native packages.

What exactly sets them apart?

Why does everyone seem to hate snap?

I have been using all of them, simultaneously on the same system and never really noticed a difference in the way installation, updates etc are handled (syntax ofc).

I hear snap sandboxes? Is that the main reason? Thanks for your insights..

 

The reddit blackout is even more effectivte than expected! 5177/8829 (~60%) of subreddits are still dark [1] and the posts per minute are down to 1000 from 1400 [2].

This is huge. Subreddits were supposed to be back up yesterday. I personally missed Reddit the first day but now I am super comfortable here.

Glad to have found a new place to hang out!

Edit: Reddit has 100k subs, 60% out of those who officially signed up


[1] https://reddark.untone.uk/

[2] https://www-heise-de.translate.goog/news/Reddit-Blackout-dauert-an-30-Prozent-weniger-Aktivitaet-Werbebranche-wartet-ab-9189048.html?wt_mc=rss.red.ho.ho.rdf.beitrag.beitrag&_x_tr_sl=de&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=wapp

view more: next ›