Live data from Hacker News

My Homelab Setup

bryananthonio.com

41–50 of 232 posts

Re: My Homelab Setup

#41

I have something like this, in the same case. I have beefier specs b/c I use it as a daily workstation in addition to running all my stuff. * nginx with letsencrypt wildcard so I have lots of subdomains * No tailscale, just pure wireguard between a few family houses and for remote access * Jellyfin for movies and TV, serving to my Samsung TV via the Tizen jellyfin app * Mopidy holding my music collection, serving to…

Impressive that all that can run on one machine. Mind sharing the specs?

Re: My Homelab Setup

#43

Neat! > Right now, accessing my apps requires typing in the IP address of my machine (or Tailscale address) together with the app’s port number. You might try running Nginx as an application, and configure it as a reverse proxy to the other apps. In your router config you can setup foo.home and bar.home to point to the Nginx IP address. And then the Nginx config tells it to redirect foo.home to IP:8080 and bar.home t…

This worked for me to get subdomains and TLS certificates working on a similar setup: https://blog.mni.li/posts/internal-tls-with-caddy/

Re: My Homelab Setup

#44

The author uses Restic + Backblaze B2 storage. I was recently setting up backups for my homebase as well, and went with Restic + BorgBase [0]. Not affiliated, just wanted to share that I think they have a nice service with a straight-forward pricing model. They are the company behind excellent Pikapods [1], which may be interesting to the homelab crowd. [0] https://www.borgbase.com [1] https://www.pikapods.com

I also use backrest/restic on my NAS, but I went with a Hetzner StorageBox instead, a little cheaper for 1TB (I pay 5USD monthly including VAT, billed monthly too).

Re: My Homelab Setup

#45
post #5

This is extremely light - not a bad setup, but I mean.. it's like 1% of typical Homelabs.

I too was wondering what made this a homelab. I appreciate the setup, but from the word lab I was expecting at least an oscilloscope. That being said it has cool features I hadn't known about like the image storing system and at home LLM support.

Re: My Homelab Setup

#46
post #28

>Because all of my services share the same IP address, my password manager has trouble distinguishing which login to use for each one. In Bitwarden they allow you to configure the matching algorithm, and switching from the default to "starts with" is what I do when I find that it is matching the wrong entries. So for this case just make sure that the URL for the service includes the port number and switch all items t…

This is always annoying me with 1Password, before that I just always added subdomains but now I'm usually hosting everything behind Tailscale which makes this problem even worse as the differentiation is only the port.

You can use tailscale services to do this now:

https://tailscale.com/docs/features/tailscale-services

Then you can access stuff on your tailnet by going to http://service instead of http://ip:port

It works well! Only thing missing now is TLS

Re: My Homelab Setup

#47
post #32

Earlier quoted context omitted.

> splitting my roles back out again more The fiasco you can cause when you try fix, update, change etc makes this my favourite too. Household life is generally in some form of ‘relax’ mode in evening and at weekends. Having no internet or movies or whatever is poorly tolerated. I wish Apple was even slightly supportive of servers and Linux as the mini is such a wicked little box. I went to it to save power. Just chec…

> The fiasco you can cause when you try fix, update, change etc makes this my favourite too. I think some of the difference between "self-hosted" vs "homelab" is in the answer to the question of "What happens if this breaks end of the day Friday?" An answer of "oh merde of le fan, immediate evening/weekend plans are now hosed" is on the self-hosted end of the spectrum, whereas "eh, I'll poke at it on Sunday when it's…

> And having everything virtualized on a single box is a pretty easy and highly flexible way get going and experiment. Also if it's on a ZFS backing makes "reset/rollback world" quite straight forward with minimal understanding given you can just use the same snapshot mechanism for that as you do for all other data.

Docker-compose isn’t a backup, but from a fresh ubuntu server install, it’ll have me back in 20 mins. Backing up the entire VM isn’t too hard either.

I was n a really sweet spot and then ESXi became intolerable. Though in fairness their website was alway pure hell.

Re: My Homelab Setup

#48

I have something like this, in the same case. I have beefier specs b/c I use it as a daily workstation in addition to running all my stuff. * nginx with letsencrypt wildcard so I have lots of subdomains * No tailscale, just pure wireguard between a few family houses and for remote access * Jellyfin for movies and TV, serving to my Samsung TV via the Tizen jellyfin app * Mopidy holding my music collection, serving to…

Impressive that all that can run on one machine. Mind sharing the specs?

You could easily run all of that on a rpi…

Re: My Homelab Setup

#49
post #30
post #8

Earlier quoted context omitted.

Caddy's configuration is so simple and straightforward, I love it. For sure a more comfortable experience for simple setups

I like Caddy's integration with Cloudflare for handling SSL and when I originally saw the idea it was promoted as an easy way to have SSL for a homely but I don't use real domains for my internal apps and that is required with Cloudflare.

caddy has tailscale integration i think too, so your foo.bar.ts.net “just works”

Re: My Homelab Setup

#50
post #40
post #28

Earlier quoted context omitted.

This is always annoying me with 1Password, before that I just always added subdomains but now I'm usually hosting everything behind Tailscale which makes this problem even worse as the differentiation is only the port.

You can still have subdomains with Tailscale. Point them at the tailscale IP address and run a reverse proxy in front of your services

Good point, but for simplicity i'd still like 1Password to use the full hostname + port a the primary key and not the hostname.
Post reply on HN