Question about network setup and homeserver reddit / selfhosted ---------------------------------------------------------------------- Bluhb_ · 2023-10-05 08:19 Hello, So to start, I am hosting a few things myself now on a rpi4. Those things are mainly; pihole, html website, gitea, and in docker; HA, NodeRed, vaultwarden, nextcloud and Mealie(may forget some here but you get the point). This all runs sorta great, but I want to upgrade because I would like to add camera's to homeassistant and I am thinking about replacing my router with PFSense.(and maybe about a remote desktop if the new server is powerull enough). So now I am looking for something new, but I have a budget of around 200/250 euro. What I was thinking I could do is buy this [minipc](https://www.amazon.nl/MINIS-FORUM-N100-processor- desktopcomputer-xTF-kaartsleuf/dp/B0CHW9TKTP/ref=asc_df_B0CHW9TKTP/?ta g=nlshogostdde- 21&linkCode=df0&hvadid=664459344181&hvpos=&hvnetw=g&hvrand=54922019821 3876067&hvpone=&hvptwo=&hvqmt=&hvdev=c&hvdvcmdl=&hvlocint=&hvlocphy=10 10623&hvtargid=pla-2206485163409&gclid=Cj0KCQjwmvSoBhDOARIsAK6aV7gs4- tJt8H92Jf-PqKloQUs4bnNpyFfPudrSRxnytcCpQmKiBzIQtsaAlh_EALw_wcB&th=1) and run proxmox on that. Then virtualize PFSense and use one of the eth ports as WAN and the other as LAN. Then, also on proxmox, I could virtualize HA and a debian/ubuntu server install for docker. Only thing I am doubting is if I can get these extra VM's behind PFSense then. And if this is a safe setup? I read some tutorials that it is, in fact, an solution to do it this way. But I am mostly looking for people with experience in doing it this way, or just general a lot of experience/knowledge, to tell me if this is a good solution for(let's be honest) a novice in selfhosting My idea about the setup would be the following: ​ https://preview.redd.it/roct88gsecsb1.png?width=686&format=png&auto=we bp&s=782522392a765787997308b0673a3721c749b490 I am not really sure if it's clear but the idea is that the minipc will also be my router through pfsense. And that the Ubuntu Server and HomeAssistant act like they are in my network, the same as the AccessPoint. Next step would be tho have IOT stuff on a vlan without internet and have homeassistant be on a vlan with internet but let it talk to the other vlan(without giving it internet). Would this be a viable option to pursue? ---------------------------------------------------------------------- selfh-sted · 2023-10-05 12:07 I may differ from others here, but I wouldn't recommend running your firewall (pfSense) on Proxmox with other services. Your firewall is probably the most important piece of hardware in your homelab as it manages your direct access to the internet and also performs many security-related tasks. Putting it behind Proxmox adds another potential point of failure - if Proxmox goes down while you're tinkering with another VM, so will pfSense. I know this isn't ideal given your budget constraints, but I'd recommend dedicating hardware to your router and then running Proxmox on another machine that runs less essential services. If you decide against it, there are a ton of users who run pfSense on Proxmox - just make sure you understand the risks before doing so. On an unrelated note, I'd also recommend considering OPNsense vs pfSense as you do your research. ---------------------------------------------------------------------- Bluhb_ · 2023-10-05 13:25 Yeah I see the point of not putting anything else on the PF/OPNsense box indeed. If it wasn't for budget restraints that would be my plan. Maybe a stupid idea but would it be possible/useful to keep my isp router in front of this setup(so that pfsense would be behind a router already) just for the sake of having the possibility to use vlans? And would this setup make it any extra safe? I mean like WAN -> isp Router -> minipc with proxmox running pfsense -> local network Or would that setup be asking for problems? Ofcourse I could also just upgrade the server and run proxmox on that and ignore/forget PFsense for now. And when the time is there upgrade my router seperately to an PFsense box.