abeorch reshared this.
Hello everyone,
I finally managed to get my hands on a Beelink EQ 14 to upgrade from the RPi running DietPi that I have been using for many years to host my services.
I have always was interested in using Proxmox and today is the day. Only problem is I am not sure where to start.
For example, do you guys spin up a VM for every service you intend to run? Do you set it up as ext4, btrfs, or zfs?
Do you attach external HDD/SSD to expand your storage (beyond the 2 PCIe slots in the Beelink in this example).
I’ve only started reading up on Proxmox just today so I am by no means knowledgeable on the topic
I hope to hear how you guys setup yours and how you use it in terms of hosting all your services (nextcloud, vaultwarden, cgit, pihole, unbound, etc…) and your ”Dos and Don’ts“
Thank you 😊
You have that new machine to play with. So do it.
Install it and play around. If you do nothing that should "last forever" in these first days, you can tear it down and do it again in different ways.
I have recently played in the same way with the proxmox unattended install feature, and it was a lot fun. One text file and a bootable image on a stick.
I've been doing it for a couple of years. I don't think I'll ever be done screwing around with it.
Embrace the flux :)
As with most things homelab related, there is no real "right" or "wrong" way, because its about learning and playing around with cool new stuff! If you want to learn about different file systems, architectures, and software, do some reading, spin up a test VM (or LXC, my preference), and go nuts!
That being said, my architecture is built up of general purpose LXCs (one for my Arr stack, one for my game servers, one for my web stuff, etc). Each LXC runs the related services in docker, which all connect to a central Portainer instance for management.
Some things are exceptions though, such as Open Media Vault and HomeAssistant, which seem to work better as standalone VMs.
The services I run are usually something that are useful for me, and that I want to keep off public clouds. Vaultwarden for passwords and passkeys, DoneTick for my todo-list, etc. If I have a gap in my digital toolkit, I always look for something that I can host myself to fill thay gap. But also a lot of stuff I want to learn about, such as the Grafana stack for observability at the moment.
Thank you.
I guess I have more reading to do on Portainer and LXC. Using an RPi with DietPi, I didn’t have the need to learn any of this. Now is a good time as ever.
But generally speaking, how is a Linux container different (or worse) than a VM?
like this
osaerisxero likes this.
An LXC is isolated, system-wise, by default (unprivileged) and has very low resource requirements.
- Storage also expands when needed, i.e. you can say it can have 40GB but it'll only use as much as needed and nothing bad will happen if your allocated storage is higher than your actual storage.. Until the total usage approaches 100%. So there's some flexibility. With a VM the storage is definite.
- Usually a Debian 12 container image takes up ~1.5GB.
- LXCs are perfectly good for most use cases. VMs, for me, only come in when necessary, when the desired program has more needs like root privileges, in which case a VM is much safer than giving an LXC access to the Proxmox system. Or when the program is a full OS, in the case of Home Assistant.
Separating each service ensures that if something breaks, there are zero collateral casualties.
Only reason I am thinking cgit is because I want a simple interface to show repos and commit history, not interested in doing pull requests, opening issues, etc…
I feel Forgejo would be “killing an ant with a sledgehammer” kinda situation for my needs.
Nonetheless, thank you for your suggestion.
Selfhosted reshared this.
I use one VM per service. WAN facing services, of which I only have a couple, are on a separate DMZ subnet and are firewalled off from the LAN.
It's probably little overkill for a self hosted setup but I have enough server resources, experience, and paranoia to support it.
Yeah, with something that size you're pretty much limited to containers.
Edit: Which is totally fine, OP. Self hosting is an opportunity to learn and your setup can be easily changed as your needs change over time.
In this situation it's not necessarily that it's the "right" or "wrong" device. The better question is, "does it meet your needs?" There are pros and cons to running each service in its own VM. One of the cons is the overhead consumed by the VM OS.
Sometimes that's a necessary sacrifice.
Some of the advantages of running a system like Proxmox are that it's easily scalable and you're not locked into specific hardware. If your current Beelink doesn't prove to be enough, you can just add another one to the cluster or add a different host and Proxmox doesn't care what it is.
TLDR: it's adequate until it's not. When it's not, it's an easy fix.
I have a couple of publicly accessible services (vaultwarden, git, and searxng). Do you place them on a separate subnet via proxmox or through the router?
My understanding in networking is fundamental enough to properly setup OpenWrt with an inbound and outbound VPN tunnels along with policy based routing, and that’s where my networking knowledge ends.
Selfhosted reshared this.
I travel internationally and some of the countries In been to have been blocking my wireguard tunnel back home preventing me from accessing my vault. I tried setting it up with shadowsocks and broke my entire setup so I ended up resetting it.
Any suggestions that is not tailscale?
Selfhosted reshared this.
I have a single container for docker that runs 95% of services, and a few other containers and VMs for things that aren't docker, or are windows/osx.
ext4 is the simple easy option, I tend to pick that on systems with lower amounts of RAM since ZFS does need some RAM for itself.
I do have an external USB HDD for backups to be stored on.
For inspiration, here's my list of services:
| Name | ID No. | Primary Use |
|---|---|---|
| heart | (Node) | ProxMox |
| guard | (CT) 202 | AdGuard Home |
| management | (CT) 203 | NginX Proxy Manager |
| smarthome | (VM) 804 | Home Assistant |
| HEIMDALLR | (CT) 205 | Samba/Nextcloud |
| authentication | (VM) 806 | BitWarden |
| (VM) 807 | Mailcow | |
| notes | (CT) 208 | CouchDB |
| messaging | (CT) 209 | Prosody |
| media | (CT) 211 | Emby |
| music | (CT) 212 | Navidrome |
| books | (CT) 213 | AudioBookShelf |
| security | (CT) 214 | AgentDVR |
| realms | (CT) 216 | Minecraft Server |
| blog | (CT) 217 | Ghost |
| ourtube | (CT) 218 | ytdl-sub YouTube Archive |
| cloud | (CT) 219 | NextCloud |
| remote | (CT) 221 | Rustdesk Server |
Here is the overhead for everything. CPU is an i3 6100 and RAM is 2133MHz:
Quick note about my setup, some things threw a permissions hissy fit when in separate containers, so Media actually has Emby, Sonarr, Radarr, Prowlarr and two instances of qBittorrent. A few of my containers do have supplementary programs.
Thank you, that’s actually quite informative. Gives me a good idea of what could go where in terms of my setup.
So far I recreated my RPi DietPi setup in a VM but for some reason Pi-Hole + Unbound combo is now fucking with my internet connectivity.
It is so weird, I assigned it a static lease for the old RPi IP address in OpenWrt and left all the rules in there intact and you would think it would be a “drop-in replacement” but it isn’t. Not sure if Proxmox has some weird firewall situation going on. Definitely need to fuck around more with it to better understand it.
To piggyback on the permissions hissy fit-
My aar stack, openmediavault, and transmission stack have different usernames mapped to the same uid and it is a pain in the ass. I "fixed it" by making a NAS group that catches them all, but by "fixed it" I really mean "got it working"
So be aware of what uid will own a file and maybe change it to a uid in the 1100+ range to make NFS easier in the future.
Yes! This.
I have one machine for network sharing storage and thus a user for login and r/w powers. The same storage is used by other machines to save the files, and so each autonomous user for CCTV and qBitTorrent needed to have the same UID as the Samba login, so each program had rw permissions.
And those containers had to be privileged iirc in order for each root (UID 0) to access the shared storage properly. I may be wrong though
Self-hosting be like ^^
I think I had issues similar to that. Perhaps the PiHole is running a conflicting DHCP server? I have my own set of weird issues.. Bad connectivity so I need a WiFi range extender, but it's not a true extender and has its own IP address, acting as a router sometimes and not forwarding DNS queries to the main router.. That, a lack of NAT loopback functionality, a lack of changeable DNS settings and the AdGuard Home apparently taking precedent in that side of the house, and I have a cocktail of connection issue bs lol. The main router can DNS perfectly fine, but if I'm connected to the extender I have to add DNS rewrites to AGH.. which works for most services..
The journey is largely about overcoming obstacles aha, and the reward for doing so.. Hope yours goes well!
Install Proxmox with ZFS
Next configure the non enterprise repo or buy a subscription
Is there any way to remove ZFS and Ceph, they cause errors and taint the kernel
itsfoss.com/linus-torvalds-zfs…
“Don’t use ZFS. It’s that simple. It was always more of a buzzword than anything else, I feel, and the licensing issues just make it a non-starter for me.Abhishek Prakash (It's FOSS)
LVM is not even close
ZFS is way more fault tolerant and scalable due to the underlying design. In continually does data integrity checks and will catch but flips.
ZFS also has Arc which allows your ram to act as a full on cache which improves performance.
You can do data scrubbing with PAR2 or filesystem level with btrfs on top of LVM (or even in a traditionnal partition)
I think you can ram cache with bcachefs or a ramdrive, and unless you're in a VM then your file system driver would already do file caching in ram ?
Don' use bcachefs as it isn't stable and was removed from the kernel. As for btrfs it is still in technology preview on Proxmox isn't considered production ready.
I would just use ZFS. Don't reinvent the wheel.
I moved to Proxmox a while back and it was a big upgrade for my setup.
I do not use VMs for most of my services. Instead, I run LXC containers. They are lighter and perfect for individual services. To set one up, you need to download a template for an operating system. You can do this right from the Proxmox web interface. Go to the storage that supports LXC templates and click the Download Templates button in the top right corner. Pick something like Debian or Ubuntu. Once the template is downloaded, you can create a new container using it.
The difference between VMs and LXC containers is important. A VM emulates an entire computer, including its own virtual hardware and kernel. This gives you full isolation and lets you run completely different operating systems such as Windows or BSD, but it comes with a heavier resource load. An LXC container just isolates a Linux environment while running on the host system’s kernel. This makes containers much faster and more efficient, but they can only run Linux. Each container can also have its own IP address and act like a separate machine on your network.
I tend to keep all my services in lxc containers, and I run one VM which I use for a jump box I can hop into if need be. It's a pain getting x11 working in a container, so the VM makes more sense.
Before you start creating containers, you will probably need to create a storage pool. I named mine AIDS because I am an edgelord, but you can use a sensible name like pool0 or data.
Make sure you check the Start at boot option for any container or VM you want to come online automatically after a reboot or power outage. If you forget this step, your services will stay offline until you manually start them.
Expanding your storage with an external SSD works well for smaller setups. Longer term, you may want to use a NAS with fast network access. That lets you store your drive images centrally and, if you ever run multiple Proxmox servers, configure hot standby so one server can take over if another fails.
I do not use hot standby myself. My approach is to keep files stored locally, then back them up to my NAS. The NAS in turn performs routine backups to an external drive. This gives me three copies of all my important files, which is a solid backup strategy.
abeorch reshared this.
@MyYeeHaa @abeorch I think the individual bars are probably correctly sized for that but it looks like someone changed the labels rather than reordering the bars...
A&E = prescription
District Nurse = GP Appt
GP Home Visit = District Nurse
Average Prescription/GP Appointment = GP Home/A&E Visit
You can tell it's older, though, because they're trying to reterm A&E to Emergency Department, to stop unnecessary attendances...
MyYeeHaa likes this.
reshared this
abeorch reshared this.
Wikipedia editors publish new guide to help readers detect entries written by AI
https://www.npr.org/2025/09/04/nx-s1-5519267/wikipedia-editors-publish-new-guide-to-help-readers-detect-entries-written-by-ai?utm_source=flipboard&utm_medium=activitypub
Posted into The Age of AI @the-age-of-ai-tech
reshared this
abeorch reshared this.
Hey all, just hoping to get some advice on any software out there that can help me keep on top of all the VMs i'm running on my Proxmox instances, and potentially my other machines I have too.
I'm looking for a way to help me stay on top of updates and things like when the machine was last online, last rebooted etc etc. There are commercial products for such a thing, and I don't necessarily want to install any sort of Agent on each of the machines (if I can avoid it).
I looked at something like Homarr, but not sure if that's what i'm really after.
What recommendations do all you have?
reshared this
abeorch reshared this.
Very few things out there don't require an agent. TacticalRMM is a decent self-hosted device management platform, but I don't really trust them after some controversy with an embedded Monero miner in the agent (has since been removed, but come on).
MeshCentral is what TRMM uses for its remoting and its pretty robust, but doesn't do patch management on its own. If most of your infrastructure is Linux, you can easily handle it yourself though.
TBH, manual management would be the easiest if your infrastructure is small enough.
Ansible doesn't need an agent besides python and can take care of most kinds of updates. You have to run/schedule it regularly though. It's pretty good for updating multiple hosts at once (assuming they mostly have the same OSes).
For uptime, CPU etc you mostly need agents but Proxmox also shows some of these in the UI.
AWX is basically Ansible as a service.
Wait. That sounds dumb. Hosted and centralized Ansible?
Idk. Brain not braining. Just saying, it's worth checking out.
They were talking about something similar on episode 38 of hybridcloudshow.com/ I think. I see that it is not out yet, I got it early because I pay for the subscription. When it comes out you could give it a listen
I didn't catch everything, but Ansible might be worth looking into
I run debian on everything, so I set up unattended-upgrades for security updates and basically forget about it. Docker updates are also automatic with Komodo, just make sure databases are pinned to a major version.
For monitoring my services I use Uptime Kuma, and get an alert if a service goes down so I can fix it.
Been pretty solid for years now. Things get rebooted every month or two when I do a Proxmox upgrade and reboot the host.
Podman inside Nixos inside LXC inside Proxmox
Auto updates configurable everywhere
Podman inside Nixos inside LXC inside Proxmox
y tho
If you're running Proxmox already,, just spin up a VM for Podman/Docker and set up unattended-upgrades. Boom, done. You don't need a whole lot of CPU or RAM for that, either.
As others have said, if your VMs are Linux, set up unattended_updates and forget about it.
If your VMs are windows, then Action1 is free up to 200 clients, it does need an agent installed, but that auto updates too.
Yep, I do that on Debian hosts, EL (RHEL/Rocky/etc.) have a similar feature.
However, you need to keep an eye for updates that require a reboot. I use my own Nagios agent that (among other things) sends me warnings when hosts require a reboot (both apt/dnf make this easy to check).
I wouldn't care about last online/reboots; I just do some basic monitoring to get an alert if a host is down. Spontaneous reboots would be a sign of an underlying issue.
I use Ultimate Updater connected to gotify to tell me which machines have updates with a noti every day. I can then run update and it will take snapshots and upgrade everything when needed.
It really only does linux systems and wont do docker, but there's watchtower (the one that's still alive) to do that.
Update your Proxmox VE. Contribute to BassT23/Proxmox development by creating an account on GitHub.GitHub
Update your Proxmox VE. Contribute to BassT23/Proxmox development by creating an account on GitHub.GitHub
If you're browsing a Mastodon server's website, have you ever noticed the ⧉ button on people's profiles?
This can be very useful, as it lets you copy the profile's web address in a single click. This makes it easy to:
- Paste it into the search box on your own server or app, so you can interact with it
- Share the profile with others on other platforms, it's a web address so anyone can view it
- View the profile in a new browser tab, the address will be the "original page"
abeorch reshared this.
That's really interesting, hadn't noticed that, you're absolutely right.
It doesn't show at all on iPhone 😦
Are you seeing the button at all? Is it a different symbol?
I see the button. Your version from the post is the one on Firefox. Chrome shows another icon.
I tried looking into the Mastodon source code, but it would take too long for me to understand it.
Thanks 🙏
What happens when you click the icon in Chrome? Does it just copy the link or does it do something else?
p.s. As @Stefan_S_from_H has pointed out, different web browsers seem to render this button differently. When I checked on iPhone's web browser the button wasn't there at all 😲
Could you let me know if this button looks different on your browser, or if the button is totally absent? It would be really useful info 🙏
(n.b. This is just in the *web* version of Mastodon, not the apps.)
Thanks! Does the share button just copy the web address, or does it do something else?
I'm assuming this is on Android?
Android, web browser (Duck Duck Go). I don't see the button.
But Firefox on the computer, I *do* see it.
Thanks! 🙏
This is going to get confusing if the button does different things on different platforms 😆
Chrome on Android: nothing on your profile
Fennec on Android: same
reshared this
abeorch reshared this.
!OpenWrt - I am looking for anyone who is using OpenWrt with Orange or Jazztel Spain who might be able to help me figure out why after changing my router I can't get an Ipv6 allocated to my connection. #openwrt #Jazztel #orange #ipv6 #spain - I'd really appreciate any boosts to followers in spain who might be able to help - Its driving me nuts!
Estoy buscando por alguien que usa Openwrt con Jaztell o Orange España que peude ayudarme porque despues del le cambio el router no le puede obtiner un numero IPv6. Estoy loco porque no pude entiender por que no se funciona. Me gustaria mucho si puede me recomiendes alguien con que hablar y hacer boosts para compatir con otra gente de españa.
like this
mysticpickle, rajdidaj and lambalicious like this.
don't like this
6nk06, mysticpickle, pratstercs and Twinklebreeze don't like this.
OpenWrt reshared this.
Does anyone know the new fedi-service #wanderer?
I can find and join users from a wanderer-server. But postings there are not found by friendica.
For example: wanderer.vajonet.org/trail/vie…
!Friendica Developers
reshared this
abeorch reshared this.
Disfruta de los vídeos y la música que te gustan, sube material original y comparte el contenido con tus amigos, tu familia y el resto del mundo en YouTube.youtube.com
abeorch reshared this.
After the suspension of the previous day, the fleet of 49 classic and vintage yachts was finally able to set sail on a short but intense course, starting and finishing in the natural harbor of the Menorcan capital.Sail-World.com (www.sail-world.com)
abeorch reshared this.
Live event happening today - Non-professional sailors embark on 40,000nm yacht race.Sail-World.com (www.sail-world.com)
abeorch reshared this.
The "verification" scammer is back (social.growyourown.services/@F…), and seems to be only using accounts on servers that allow instant sign-ups.
If you're running a public Fediverse server, it might be a good idea to switch your sign-ups to approval required?
⚠️ There is another "verification" scammer on the move, do not click on their link, it is a scam!Genuine Mastodon servers never demand verification like this.
If you see a scam post like this, click ⋯ on the scam post, then "Report", then report it and make sure you select the option to forward the report to the origin server.
abeorch reshared this.
Sneak preview of translations coming to Co-op Cloud's "abra" tool – including the sub-commands themselves! 🤘
You can follow along at translate.coopcloud.tech
–3wc
reshared this
abeorch, Autonomic Co-op and d1 reshared this.
HelplessSpiderDouble
in reply to Samuel Pepys • • •