Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

My Homelab Setup

bryananthonio.com

Post reply on HN
Print view View original

71–80 of 232 posts

Re: My Homelab Setup

#71

Post by avtar »

domh wrote: post #46
dewey wrote: post #28

Earlier quoted context omitted.

This is always annoying me with 1Password, before that I just always added subdomains but now I'm usually hosting everything behind Tailscale which makes this problem even worse as the differentiation is only the port.

You can use tailscale services to do this now: https://tailscale.com/docs/features/tailscale-services Then you can access stuff on your tailnet by going to http://service instead of http://ip:port It works well! Only thing missing now is TLS

This would be perfect with TLS. The docs don't make this clear...

> tailscale serve --service=svc:web-server --https=443 127.0.0.1:8080

> http://web-server..ts.net:443/ > |-- proxy http://127.0.0.1:8080

> When you use the tailscale serve command with the HTTPS protocol, Tailscale automatically provisions a TLS certificate for your unique tailnet DNS name.

So is the certificate not valid? The 'Limitations' section doesn't mention anything about TLS either:

https://tailscale.com/docs/features/tailscale-services#limit...

Re: My Homelab Setup

#72

Post by [deleted] »

sgt wrote: post #62
tclancy wrote: post #52

Earlier quoted context omitted.

Mother of God, why make this comment? It’s the poster’s setup and they are happy with it. What possible value could denigrating it do? The ol’ ball coach breakin’ em down to build em up shtick is gone and I don’t miss it.

Didn't mean it that way - and for that I apologize. I was just expecting a lot more since it was on the front page.

[deleted]

Re: My Homelab Setup

#73

Post by benlivengood »

I've started building a kubernetes cluster (Talos Linux) across town with wireguard between various houses. ZFS boxes for persistent volumes (democratic-csi) in each "zone" with cross-site snapshot replication and Gateway (Traefik) running at each site behind the ISP. CrunchyPGO allows separate StorageClasses to easily split the leader/followers up.

Re: My Homelab Setup

#74

Post by BitsAndObjects »

drnick1 wrote: post #57
BitsAndObjects wrote: post #39

Have a look at Headscale to avoid the cost of Tailscale for small home setups.

This, or simply expose a VPN (Wireguard) port on a public IP. I don't see why you need to involve any third parties in such a setup.

For a single machine, yeah Wireguard is fine. For my multi-user multi-machine many-service home lab, it’s quite helpful to have the extra small features that Headscale offers (and some it exposes in a more convenient way).

Edit: Tailscale has a fairly frank page on Wireguard vs Tailscale with suggestions on when to use which: https://tailscale.com/compare/wireguard

Re: My Homelab Setup

#75

Post by dwedge »

philsnow wrote: post #29
verdverm wrote: post #17

Earlier quoted context omitted.

far more capable is an exaggeration I use both, they are by and large substitutable. Nginx has a much larger knowledge base and ecosystem, the main reason I stick with it.

I agree with you that they're more or less equal. I don't like the idea of my reverse proxy dealing with letsencrypt for me, personally, but that's just a preference. One tricky thing about nginx though, from the "If is evil" nginx wiki [0]: > The if directive is part of the rewrite module which evaluates instructions imperatively. On the other hand, NGINX configuration in general is declarative. At some point due to…

I'm not sure why Apache is so unpopular, it can also function as a reverse proxy and doesn't have the weird configuration issues nginx has.

Some people take this way too far, for instance I've send places compiling (end of life) modsec support into nginx instead of using the webserver it was built for

Re: My Homelab Setup

#76

Post by tclancy »

sgt wrote: post #62
tclancy wrote: post #52

Earlier quoted context omitted.

Mother of God, why make this comment? It’s the poster’s setup and they are happy with it. What possible value could denigrating it do? The ol’ ball coach breakin’ em down to build em up shtick is gone and I don’t miss it.

Didn't mean it that way - and for that I apologize. I was just expecting a lot more since it was on the front page.

No worries Sarge and thanks for keeping the kids alive out there.

Re: My Homelab Setup

#77

Post by pajamasam »

drnick1 wrote: post #54
pajamasam wrote: post #41

Earlier quoted context omitted.

Impressive that all that can run on one machine. Mind sharing the specs?

Not impressive at all. I run just about as many services, plus several game servers, on a Ryzen 5, and most of the time CPU usage is in the low single digits. Most stuff is idle most of the time. Something like a Home Assistant instance used by a single household is basically costless to run in terms of CPU.

Not costless in terms of RAM though, surely?

Re: My Homelab Setup

#78

Post by gehsty »

I’m using a refurbed m4 Mac mini, connected to a unifi nas pro 8, super fun and straightforward. Feels like I only have to do the tinkering I want to do.

Re: My Homelab Setup

#79

Post by photon_collider »

linsomniac wrote: post #9

>Because all of my services share the same IP address, my password manager has trouble distinguishing which login to use for each one. In Bitwarden they allow you to configure the matching algorithm, and switching from the default to "starts with" is what I do when I find that it is matching the wrong entries. So for this case just make sure that the URL for the service includes the port number and switch all items t…

Ah nice! Didn’t know that. I’ll try that out next time.

Re: My Homelab Setup

#80

Post by decryption »

pajamasam wrote: post #70
c-hendricks wrote: post #65

Earlier quoted context omitted.

I run similar (gitea, scrypted+ffmpeg instead of frigate, plex instead of jellyfin) plus some Minecraft servers, *arr stack, notes, dns, and my VM for development. It's an i7-4790k from 12 years ago, it barely breaks a sweat most hours of the day. It's not really that impressive, or (not to be a jerk) you've overestimated how expensive these services are to run.

Fair enough. How much RAM though?

16GB would be plenty. I've got like a dozen services running on an 8GB i7-4970 and it's only using 5GB of RAM right now.
Post reply on HN