💾 Archived View for gmi.runtimeterror.dev › homelab captured on 2024-06-20 at 11:51:25. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2024-06-16)

➡️ Next capture (2024-08-18)

🚧 View Differences

-=-=-=-=-=-=-

💻 [runtimeterror $]

2024-05-26 ~ 2024-06-14

/homelab

• I enjoy tinkering with small technology projects, and I learn a ton from these experiments. I also self-host a number of apps/services from my home as well as various cloud environments. This page describes some of my technical playground.*

Everything is connected to my Tailscale [1] tailnet, with a GitOps-managed ACL to allow access as needed. This lets me access and manage systems without really caring if they're local or remote. Tailscale is magic [2].

[1] Tailscale

[2] Tailscale is magic

On Premise

• *Proxmox VE 8 Cluster**

• 1x Intel NUC 9 Extreme (NUC9i9QNX) [3]

- 9th Gen Intel® Core™ i9-9980HK (8 cores @ 2.40GHz)

- 64GB RAM

- 1x 512GB NVMe system drive

- 2x 1TB NVMe drives (ZFS)

• 2x HP Elite Mini 800 G9 [4]

- 12th Gen Intel® Core™ i7-12700 (8 cores @ 2.10GHz, 4 cores @ 1.60GHz)

- 96GB RAM

- 1x 512GB NVMe system drive

- 1x 2TB NVMe drive (ZFS)

Unifi USW Flex XG 10GbE Switch

[3] Intel NUC 9 Extreme (NUC9i9QNX)

[4] HP Elite Mini 800 G9

The Proxmox cluster hosts a number of VMs and LXC containers:

• `doc`: Ubuntu 22.04 Docker host for various on-prem container workloads, served via Tailscale Serve [5] / Cloudflare Tunnel [6]:

- Calibre Web [7] for managing my ebooks

- Crowdsec [8] log processor

- Cyberchef [9], the Cyber Swiss Army Knife

- Hashicorp Vault [10] for secrets management

- Miniflux [11] feed reader

- RIPE Atlas Probe [12] for measuring internet connectivity

Tailscale Golink](https://github.com/tailscale/golink), a private shortlink service ([post

• `files`: Ubuntu 20.04 file server. Serves (selected) files semi-publicly through Tailscale Funnel [13]

• `hassos`: Home Assistant OS [14], manages all my "smart home" stuff (post [15])

• `immich`: Ubuntu 22.04 Immich [16] server

• `ipam`: Ubuntu 20.04 phpIPAM [17] server (post [18])

• `salt`: Ubuntu 20.04 Salt [19] Master server for configuration management

• `unifi`: UniFi Network Application. Manages the Unifi switch.

[5] Tailscale Serve

[6] Cloudflare Tunnel

[7] Calibre Web

[8] Crowdsec

[9] Cyberchef

[10] Hashicorp Vault

[11] Miniflux

[12] RIPE Atlas Probe

[13] Tailscale Funnel

[14] Home Assistant OS

[15] post

[16] Immich

[17] phpIPAM

[18] post

[19] Salt

• *Hashicorp Nomad Cluster (WIP)**

• 3x Zima Blade 7700 [20]

- Intel® Celeron® N3450 (4 cores @ 1.10GHz)

- 16GB RAM

- 1x 32GB eMMC

- 1x 1TB SATA SSD

TP-Link TL-SG108E 1GbE Switch

[20] Zima Blade 7700

This triad of cute little single-board computers will *eventually* be a combination Nomad + Consul + Vault cluster, fully managed with Salt.

• *PiAware [21] ADS-B/MLAT Receiver**

• Raspberry Pi 2 Model B

• 2x RTL-SDR Blog V3 R860 RTL2832U 1PPM TCXO SMA Dongle [22]

SIGNALPLUS 1090MHz 12dBi 1.1m ADS-B Antenna

[21] PiAware

[22] RTL-SDR Blog V3 R860 RTL2832U 1PPM TCXO SMA Dongle

I like to know what's flying overhead, and I'm also feeding flight data to flightaware.com [23] and adsb.fi [24].

[23] flightaware.com

[24] adsb.fi

Cloud

• *Oracle Cloud Infrastructure [25]**

• `git`: Ubuntu 22.04 Forgejo [26] server for git.bowdre.net [27]

• `smp2`: Ubuntu 22.04 SimpleX [28] server

[25] Oracle Cloud Infrastructure

[26] Forgejo

[27] git.bowdre.net

[28] SimpleX

• *Google Cloud Platform [29]**

• `smp`: Ubuntu 22.04 SimpleX [31] #30 server

• `smp1`: Ubuntu 22.04 SimpleX [31] #30 server

[29] Google Cloud Platform

[30] SimpleX

[31] SimpleX

• *Vultr [32]**

• `volly`: Ubuntu 22.04 Docker host for various workloads, served either through Caddy [33] or Cloudflare Tunnel [34]:

Agate](https://github.com/mbrubeck/agate) Gemini server ([post

- Crowdsec [35] security engine

Kineto](https://github.com/beelux/kineto) Gemini-to-HTTP proxy ([post

Linkding](https://github.com/sissbruecker/linkding) bookmark manager serving [links.bowdre.net

ntfy](https://ntfy.sh/) notification service ([post

SearXNG](https://docs.searxng.org/) self-hosted metasearch engine serving grep.vpota.to [36] ([post

for monitoring internal services (via Tailscale Uptime Kuma

- vault-unseal [37] to auto-unseal my on-prem Vault instance

[32] Vultr

[33] Caddy

[34] Cloudflare Tunnel

[35] Crowdsec

[36] grep.vpota.to

[37] vault-unseal

---

📧 Reply by email

---

Home

This page on the big web