To deploy a self-hosted dashboard in Docker, you primarily use Docker Compose with a docker-compose.yml file to manage the application and its dependencies (like a database). The general steps involve installing Docker, creating a configuration file, and running a single command to start the services. Prerequisites A server or local machine with Docker Engine and Docker Compose installed. SSH access to your server (if…
Provisioning Proxmox VMs with Terraform involves using a specific Terraform provider (commonly the Telmate or BPG provider) to interact with the Proxmox API. The process typically requires a pre-configured VM template on the Proxmox server and an API token for secure authentication. Prerequisites : Proxmox VE Server: A running Proxmox instance with administrative access. Terraform Installed: Install Terraform on your local machine. Proxmox…
Automating Ubuntu server hardening with Ansible ensures consistency, scalability, and repeatability of security best practices, such as managing users, configuring firewalls, and securing SSH. This infrastructure-as-code approach helps in achieving compliance with standards like CIS benchmarks. Key Hardening Measures and Ansible Implementation Ansible uses an agentless architecture, connecting to managed nodes via SSH to push out modules and execute…
Master the CLI with these essential scripts for checking VM status and disk health. qm list | grep running
Proxmox Hardening Guide The Proxmox Hardening Guide project provides structured, actionable recommendations to secure Proxmox Virtual Environment (PVE 9.x & 8.x) and Proxmox Backup Server (PBS 4.x & 3.x). These guides are designed for system administrators and security engineers who need step-by-step hardening instructions, compliance alignment with the CIS Debian Benchmark, and best practices for enterprise and homelab deployments. They extend…
Never lose a configuration again. Automating off-site backups for your system solutions.
Cloudflare Tunnels on Proxmox (LXC) This guide allows you to expose your home lab services (like Home Assistant, Plex, or Dashboards) to the internet securely without opening ports on your router. Prerequisites A Proxmox Server. A domain name managed by Cloudflare (e.g., yourdomain.com). Cloudflare Zero Trust account (Free tier is fine). Step 1: Create the…
Building the smallest footprint possible for your internal microservices.
ZFS is a high-performance combined file system and logical volume manager. It is widely used in Proxmox and enterprise storage environments due to its data integrity protection, support for high storage capacities, and efficient snapshots/replication. Prerequisites Steps on the ZFS Server (e.g., TrueNAS, Ubuntu) Steps in Proxmox VE (GUI)
In this lab, we explore custom image creation for open-source system solutions.