IT Homelab

[Fishy]

Been toying again with shared storage then realised wtf am I doing.. it's more overhead everything works nice on local storage .. I'm an idiot..re flashed a mellanox sfp+ Nic which now works..so  nice fast backups and restores if/when I need them

[Fishy]

Highslide Image Viewer

thought id do a nice homer dashboard for some of my stuff.. worked out quite well i think

[Fishy]

Considering building an OPNsense firewall and moving away from my existing pfsense community edition

[Fishy]

I thought opnsense would be easy as it's a fork of pfsense.. similar in many ways but very different in others.. built a test box with what I thought was a basic replica of my pfsense.. wan got an ip but I couldn't ping out from a pc to say Google....  On chatting with ChatGPT it seems pfsense auto creates rules which opnsense doesn't.. particularly on natting which I never even thought to look at.. I suspect the problem lies there as all my inter vlan routing was working fine

[Fishy]

Immich upgrade to v3

[Fishy]

right after weeks of tinkering with an opnsense build its now gone live... it was the vpn bits that needed sorting and a couple of how to vids  got it working for both wireguard and openvpn..... looks good and working fine.. speed is great .. would like to get it onto my g3 sff pc which had pfsense on it.. opnsense is on a g2 sff which is a bit bigger in  size and slightly less spec  ... so will let it run for  a bit then maybe swap the disks over

[Fishy]

Couldn't get intel Amt Remote Desktop working on the g3.. it was a cutdown version of it so stuck with the g2 for opnsense where I can get console access via AMT.. had a spare g2 so swapped processors with the g3 so it's now a slightly higher spec...also gave it an update along with my core Aruba switch.. working with ChatGPT to get my lab documented.. it wanted to do an enterprise ready 150 page doc.. I said I just want a nice picture

[Fishy]

so was looking at a password manager and came across vaultwarden for docker... chatgpt suggested i use a reverse proxy (nginx) which id never used.... so have been immersed with that the last few days... now got it working and can now set domain names instead of ip add:port numbers.. move a few others things into the reverse proxy such as homer speedtest uptimekuma and dockhand..

[pxr5]

so was looking at a password manager and came across vaultwarden for docker... chatgpt suggested i use a reverse proxy (nginx) which id never used.... so have been immersed with that the last few days... now got it working and can now set domain names instead of ip add:port numbers.. move a few others things into the reverse proxy such as homer speedtest uptimekuma and dockhand..

I know you've got nginx working for a reverse proxy now, but believe me, Caddy v2 is so, so much simpler to use. It really is just a case of install and a simple one-liner to get it working. I looked at nginx, gulped, then moved over to Caddy.

[Fishy]

I saw caddy.. is it cli to config.. ???it was more the certificate carry on that caused me grief.. ChatGPT helped with that

[pxr5]

Caddy handles everything for you, it's like magic. Nothing extra with Certs and the like, Caddy handles all that. You just need a domain name, I get 4 free from Dynu so I use a very simple caddy file with the 4 instructions for each. Like this and then just start Caddy:

Code Select Expand

domain.1.org {
    reverse_proxy 192.168.1.xx:xxxx
}

 domain.2.org  {
    reverse_proxy 192.168.1.xx:xxxx
}

 domain.3.org  {
    reverse_proxy 192.168.1.xx:xxxx
}

 domain.3.org  {
    reverse_proxy 192.168.1.xx:xxxx
}

[pxr5]

https://www.xda-developers.com/caddy-reverse-proxy-integrates-with-opnsense/

[Fishy]

https://www.xda-developers.com/caddy-reverse-proxy-integrates-with-opnsense/

didnt know that but i like the idea of it being separate tbh... i might try caddy in a docker along side nginx and see how it goes...

[Fishy]

So got caddy working.. only thin* that didn't was uptime kuma on my phone.. worked fine in browser but it just wouldn't connect.. could connect via ip: port number but not via uptime.home name... works fine in NPM

[Fishy]

Been knee deep in grafana and Prometheus