What should / shouldn't I to with this homelab design? reddit / selfhosted ---------------------------------------------------------------------- deecoocoo · 2023-10-14 07:35 For the last month I've been learning and doing this on a 10 year old laptop as my home server, install everything there. Now I just got myself a better, used desktop so I figure I want to learn using Proxmox. Here's what I'm going to do with it. Please advice if I'm doing it right, wrong, or what to do to make it better. https://preview.redd.it/qo8nr0off4ub1.png?width=1167&format=png&auto=w ebp&s=fa0566c407bbef44889fb434bdeaac28d2e2cad9 Some notes: \- I put Jellyfin on an LXC because I've managed to passthrough my gpu to an LXC. \- I can't use Tailscale's subnet router because of ip conflict (office & home have the same subnet), so I install Tailscale on each VM & LXC. ​ Thanks! ---------------------------------------------------------------------- thekrautboy · 2023-10-14 07:58 > I can't use Tailscale's subnet router because of ip conflict (office & home have the same subnet) Then why not simply pick a different subnet? But if youre happy with having to install Tailscale on every node, okay. ---------------------------------------------------------------------- Plane_Resolution7133 · 2023-10-14 08:14 That’s the classic VPN problem. Pick different subnet(s) for your home network. ---------------------------------------------------------------------- deecoocoo · 2023-10-14 08:17 Just trying to avoid another ip conflict in the future. But, if I pick a different subnet, where would you recommend installing tailscale on? On its own LXC? Thanks ---------------------------------------------------------------------- thekrautboy · 2023-10-14 08:23 I run a single LXC just with Tailscale as subnet router in it, done. I can access my entire network through that from the outside, and i dont need to install TS anywhere else on the inside. ---------------------------------------------------------------------- deecoocoo · 2023-10-14 09:07 Thanks, I think I'll do that, changing my home subnet. ---------------------------------------------------------------------- HearthCore · 2023-10-14 11:10 In the end, to access the services that you attach through Nginx - only nginx needs those services reachable through its IPs - same es with a CloudflareD instance. As long as you do not advertise your offices IPs all Services, when set up, work correctly when used with your internal IPs. But it is indeed better to have clear separation. You can also set DNS to tailscale IP in your FQDN Nameserver to use hostnames in your infrastructure and have an internal DNS route answer local adresses for these services instead - then basically have your system setup for "Drag/Drop" of the hardware. ---------------------------------------------------------------------- PaulEngineer-89 · 2023-10-14 14:40 What is Proxmox doing for you? It’s one thing to run a totally foreign OS such as Windows or TrueNAS but in this case you have two kernels with multiple context switches. You have basically everything either in Linux but the host OS is BSD. On straight up immutable Linux such as Silverblue or NixOS you’d avoid compatibility problems. In fact you don’t even need to have the overhead of a graphical shell. Just run command line only which really suits NixOS but it’s harmless anyway if it’s logged out most of the time. With CUDA you can export the GPU into Docker if your containers have the drivers loaded and you configure your Docker-compose file. This allows you to share it if needed Kernel Wireguard (Tailscale) is much faster than user level, and this still keeps Jellyfin containerized if you prefer. With NixOS you basically configure it in a single file like Docker. No packages, rummaging around config files everywhere, fighting package compatibility. For Jellyfin for instance you just add services.jellyfin.enable=true. NVidia is more lines but easy too: https://nixos.wiki/wiki/Nvidia ---------------------------------------------------------------------- CeeMX · 2023-10-14 15:04 Most networks use 0, 1, 2, sometimes 8 in the third octet of 192.168.x.0. In Germany you might come across 178 quite often as it’s the default of Fritzboxes, that are quite common here. Just pick some other number and you are fine almost always. If you want to go even further, use the other private IP networks, 172.16.0.0/12 or 10.0.0.0/8 (of course don’t use the whole thing but subnet a /24 from it) ---------------------------------------------------------------------- indykoning · 2023-10-16 19:56 To be fair you might not need either nginx proxy manager or Cloudflare tunnels. When it comes down to it it does the same thing. Though I also run Traefik and Cloudflare tunnels at the same time. ---------------------------------------------------------------------- deecoocoo · 2023-10-17 01:11 I end up setting my home network to 10.10.88.x, and now I can use tailscale's subnet router. Still need to learn so much about networking :) ---------------------------------------------------------------------- deecoocoo · 2023-10-17 01:16 You're right, I just wanted to try things out and see if / how they work. I install npm so I can use wildcard. Knowing that I can set things to work makes me happy lol ---------------------------------------------------------------------- indykoning · 2023-10-17 11:08 Same here, and you get the added benefit of being able to add self hosted middlewares. Like Authentication or additional security services