Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

My Homelab Setup

bryananthonio.com

Post reply on HN
Print view View original

101–110 of 232 posts

Re: My Homelab Setup

#101

Post by TacticalCoder »

pajamasam wrote: post #41
acidburnNSA wrote: post #14

I have something like this, in the same case. I have beefier specs b/c I use it as a daily workstation in addition to running all my stuff. * nginx with letsencrypt wildcard so I have lots of subdomains * No tailscale, just pure wireguard between a few family houses and for remote access * Jellyfin for movies and TV, serving to my Samsung TV via the Tizen jellyfin app * Mopidy holding my music collection, serving to…

Impressive that all that can run on one machine. Mind sharing the specs?

> Impressive that all that can run on one machine. Mind sharing the specs?

Not GP but I have lots of fun running VMs and lots of containers on an old HP Z440 workstation from 2014 or so. This thing has 64 GB of ECC RAM and costs next to nothing (a bit more now with RAM that went up). Thing is: it doesn't need to be on 24/7. I only power it up when I first need it during the day. 14 cores Xeon for lots of fun.

Only thing I haven't moved to it yet is Plex, which still runs on a very old HP Elitedesk NUC. Dunno if Plex (and/or Jellyfin) would work fine on an old Xeon: but I'll be trying soon.

Before that I had my VMs and containers on a core i7-6700K from 2015 IIRC. But at some point I just wanted ECC RAM so I bought a used Xeon workstation.

As someone commented: most services simply do not need that beefy of a machine. Especially not when you're strangled by a 1 Gbit/s Internet connection to the outside world anyway.

For compilation and overall raw power, my daily workstation is a more powerful machine. But for a homelab: old hardware is totally fine (especially if it's not on 24/7 and I really don't need access to my stuff when I sleep).

Re: My Homelab Setup

#102

Post by ivanjermakov »

I never understood using a NAS OS and hosting non-NAS services there, it feels upside down. I would rather have a general purpose server OS with running NAS services. Same applies to Proxmox.

Re: My Homelab Setup

#103

Post by denkmoon »

ivanjermakov wrote: post #102

I never understood using a NAS OS and hosting non-NAS services there, it feels upside down. I would rather have a general purpose server OS with running NAS services. Same applies to Proxmox.

Proxmox is just Debian with a qemu and lxc webui. You can do anything with it

Re: My Homelab Setup

#104

Post by buybackoff »

TrueNAS works perfectly as a VM eg on Proxmox with passing through a SATA controller from the motherboard. It may not work always with bad IOMMU groups, but I have this on an old Xeon Precision Tower 3420 and not so old Asus Z690 motherboard. NVMe passthrough should be straightforward as well. No need for LSIs or cheap PCI-to-SATA cards if the number of existing physical slots is enough. And as far as TrueNAS is concerned, it's baremetal disk access. Even the latest TrueNAS is not in the same league as Proxmox for managing VMs/containers, not even close.

Re: My Homelab Setup

#105

Post by QGQBGdeZREunxLe »

brownindian wrote: post #89
linsomniac wrote: post #9

>Because all of my services share the same IP address, my password manager has trouble distinguishing which login to use for each one. In Bitwarden they allow you to configure the matching algorithm, and switching from the default to "starts with" is what I do when I find that it is matching the wrong entries. So for this case just make sure that the URL for the service includes the port number and switch all items t…

Could also use Cloudflare tunnels. That way: 1. your 1password gets a different entry each time for . . 2. you get https for free 3. Remote access without Tailscale. 4. Put Cloudflare Access in front of the tunnel, now you have a proper auth via Google or Github.

Tunnels go through Cloudflare infrastructure so are subject to bandwidth limits (100MB upload). Streaming Plex over a tunnel is against their ToS.

Re: My Homelab Setup

#106

Post by lukevp »

brownindian wrote: post #89
linsomniac wrote: post #9

>Because all of my services share the same IP address, my password manager has trouble distinguishing which login to use for each one. In Bitwarden they allow you to configure the matching algorithm, and switching from the default to "starts with" is what I do when I find that it is matching the wrong entries. So for this case just make sure that the URL for the service includes the port number and switch all items t…

Could also use Cloudflare tunnels. That way: 1. your 1password gets a different entry each time for . . 2. you get https for free 3. Remote access without Tailscale. 4. Put Cloudflare Access in front of the tunnel, now you have a proper auth via Google or Github.

You can also use cloudflare to create a dns record for each local service (pointed to the local IP) and just mark it as not proxied, then use Wireguard or Tailscale on your router to get VPN access to your whole network. If you set up a reverse proxy like nginx proxy manager, you can easily issue a wildcard cert using DNS validation from your NAS using ACME (LetsEncrypt). This is what I do, and I set my phone to use Wireguard with automatic VPN activation when off my home WiFi network. Then you’re not limited by CF Tunnel’s rules like the upload limits or not being able to use Plex.

Re: My Homelab Setup

#107

Post by miloschwartz »

dewey wrote: post #28
linsomniac wrote: post #9

>Because all of my services share the same IP address, my password manager has trouble distinguishing which login to use for each one. In Bitwarden they allow you to configure the matching algorithm, and switching from the default to "starts with" is what I do when I find that it is matching the wrong entries. So for this case just make sure that the URL for the service includes the port number and switch all items t…

This is always annoying me with 1Password, before that I just always added subdomains but now I'm usually hosting everything behind Tailscale which makes this problem even worse as the differentiation is only the port.

Pangolin handles this nicely. You can define alias addresses for internal resources and keep the fully private and off the public internet. Also based on WireGuard like Tailscale.

Re: My Homelab Setup

#108

Post by miloschwartz »

QGQBGdeZREunxLe wrote: post #105
brownindian wrote: post #89

Earlier quoted context omitted.

Could also use Cloudflare tunnels. That way: 1. your 1password gets a different entry each time for . . 2. you get https for free 3. Remote access without Tailscale. 4. Put Cloudflare Access in front of the tunnel, now you have a proper auth via Google or Github.

Tunnels go through Cloudflare infrastructure so are subject to bandwidth limits (100MB upload). Streaming Plex over a tunnel is against their ToS.

Pangolin is a good solution to this because you can optionally self-host it which means you aren't limited by Cloudflare's TOS / limits.

Re: My Homelab Setup

#110

Post by drnick1 »

pajamasam wrote: post #77
drnick1 wrote: post #54

Earlier quoted context omitted.

Not impressive at all. I run just about as many services, plus several game servers, on a Ryzen 5, and most of the time CPU usage is in the low single digits. Most stuff is idle most of the time. Something like a Home Assistant instance used by a single household is basically costless to run in terms of CPU.

Not costless in terms of RAM though, surely?

Web apps like Home Assistant are very light, things like game servers are heavier since they have to load maps etc.
Post reply on HN