I think that’s perfectly fine as well! I’m on an unmanaged switch, so it’s not really an option for me. (And prefer to keep it that way since I’m always trying to minimize power consumption)

(that’s correct, I just wanted to add that Proxmox Backup Server supports incremental backups)

I’m also on authentik, because of the extensive list of tutorials. I’m also using Navidrome but couldn’t be bothered to set up SSO there since I’m mostly listening via clients

Looks pretty cool, quite pricey though compared to 3D printing. I’m glad my friend printed mine

Sweet! I also love that it has a whole screenshot section.

You’ll find more stuff for problems you didn’t know you have. :D

Yeah I get it. Wanted to get in the habit of blogging about my stuff a bit, but admittedly I’ve been criticizing articles for the same.

What are you building for your community? I think smaller communities is really the spot where this hobby can have a greater impact in enabling people to collaborate in different ways.

I think for that use case, Firewalls on the hosts make sense. VLAN is not a bad idea either, though you’d need a managed switch (hardware) for that.

Crowdsec is on my to-do list as well. Should be easy to set up on OpnSense, just never pulled the trigger.

I have HA notifications set up for the same thing, but sometimes they simply won’t work. Have you set up all the energy settings? There’s a way to create a manual notification from HA, does that work?

Don’t create another Omarchy please!

I have a similar thing but I’m using Ansible. That way, I don’t have to handle all the error checking etc myself.

F2B/FW: If it’s only available locally/via VPN, I think your threat model is your LAN. People in your wifi or rogue smart home stuff. I think a firewall makes more sense here, but if it’s just 1 machine, you should be fine with ufw or the like. If you have several VMs that are supposed to be separated, the solution would depend on the virtualization software.

Unattended upgrades are way better than none at all, both for system and docker. Of course it depends on how important it is that your services are “always” available and I get the NAS struggle though.

That sounds very cool! Did you have prior knowledge in that field or are you learning as you do it?

What kind of id tools? Like the bird sound thing?

Glad you like it! I tried to go for a 2-3 week cycle as I realized every week is a bit too often (less comments). I also tried to do it alternating with the community on slrpnk but they’re currently down. I often forget to do these anyways :D

Anyone can make these, of course. I always enjoy doing them and talking about stuff I enjoy.

Good luck! I’ve been watching auctions for some weeks on ebay when I needed 2x32GB SODIMM some months ago and eventually got a pair for 230€. Fucking expensive but cheaper than most other offers I found.

I love Komodo! Have you attached Renovate as well?

I’m always super excited for this kind of stuff :D

Mounting into the VM and then bindmount as the other commenter suggested is the most straightforward. The trickiest part will be Dataset ownership and permissions in TrueNAS so that the clients can read and write, but there’s tutorials for exactly that.

Yes, that’s the difference between a pure git server and what’s usually called a forge