After coming close to running out of resources last week and having to re-purpose another device turning it into a 3rd Proxmox node, it got me thinking about how easily ZFS ARC cache and VM overhead sneak up on you.

So, I built a basic tool for rough guidance.

It calculates vCPU overcommit ratios and RAM allocation locally in your browser. Just pure client-side math so you don't accidentally OOM your hypervisor like I almost did. Inputs stay right in your browser and aren't saved anywhere.

Feedback or sanity checks on the math are welcome.

https://unknownuniverse.uk/tools/proxmox-calculator/

Omada platform was found to be vulnerable in several ways

I am trying to get rid of Cloudflare. The last piece of the challenge is an alternative to Cloudflare tunnel. I've found and installed Pangolin, but I am getting stuck in the "Site configuration" part. Maybe it's an issue with the Pangolin's recommendation (based on a secondary traefik) which is getting in the way of my "main" traefik deployment.

I might put some more effort to get this going, but if anyone is already using or has used it before and can share some experiences, I'd be curious to hear them.

Hi, I am looking for libre solutions to buy for my home surveillance system.

I know that there are open source NVRs, but are there open source WiFi cameras? Cabled cameras just transmit an electrical signal so I don’t care about them.

Someone gifted me a Tapo C-210 but I don’t like the fact that it transmits videos to TpLink’s servers. I just want my self-hosted solution.

Thank you.

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

1. FIDO2
2. HMAC-SHA1
3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

I have an old APC that works decently well. But Im going to be switching around some stuff around the house and want to get a new one. I have some plans for the old one, but im looking for a couple of things:

1. Able to communicate with my server (Linux Debian box) that pulls down max 60W. And the router which pulls down around 20W. So lets round up to about 100W just
2. I want it to NOT beep like crazy when the power goes out. I believe theres a setting somewhere that allows you to do that, but its been a while and my old APCs dont have that option.
3. Have about an hour or so battery life. I figure if the power goes out longer than that, then we just need to shut off the servers gracefully. I care more about the hardware than 100% uptime. We get hickups from PG&E from time to time and thats what im protecting mostly from.
4. Id like to have it under 200 if possible. I think thats doable?

Anyways what do you recommend?

Hi, I'm working on improving the security of my home server.
I want to use the Bitwarden app and the Chrome/Firefox extensions outside my LAN, but I don't need Web Vault at all. How do I block access to Web Vault from outside the LAN in the Caddyfile?

pass.my-domain {
    @block_webvault_outside {
        not remote_ip 192.168.1.0/24 10.8.0.0/24
        
        # What should be there?
        # path /admin* will lock only admin options
    }

    respond @block_webvault_outside 403
    reverse_proxy vaultwarden:80
}

I've got a shelf of discs, a MakeMKV box, and a Sonarr/Radarr setup. Getting the ripped files from one to the other has always been tedious. Especially multi-episode discs where you have to figure out which title maps to which episode before you can rename anything.

So I built Discarr: a local Node.js web UI (no npm deps) that handles that pipeline.

Scan a VIDEO_TS/BDMV/ISO directory, get a list of titles with duration and chapter info, map them to Sonarr episodes or Radarr movies, queue the HEVC encode (ffmpeg or HandBrake, local or SSH to a remote encode box), and have it notify Sonarr/Radarr when done.

System deps: Node.js 18+, ffmpeg + ffprobe. HandBrake optional.

Docker image (latest) includes ffmpeg and openssh-client. For HandBrake support use the :handbrake tag.

# Default (ffmpeg)
docker run -d -p 8603:8603 \
  -v ~/.config/media-postprocessor:/root/.config/media-postprocessor:ro \
  -v /path/to/media:/media \
  pyr0ball/discarr:latest

# HandBrake variant
docker run -d -p 8603:8603 \
  -v ~/.config/media-postprocessor:/root/.config/media-postprocessor:ro \
  -v /path/to/media:/media \
  pyr0ball/discarr:handbrake

Also optional: qBittorrent hook so disc rips downloaded as torrents auto-queue; Tdarr notify after encode.

Forgejo: https://git.opensourcesolarpunk.com/Circuit-Forge/discarr GitHub: https://github.com/pyr0ball/discarr

By dev @pyr0ball@reddthat.com

I'm looking for recommendations for a managed network switch that either comes with open source firmware or can have open source firmware flashed onto it.

I read that some old TP-Links let you do this but the modern ones don't. I also read some ZyXELs allow it, and I'm looking at the GS1900-8, but it doesn't say anywhere in the description about the firmware.

Does anyone have any ideas or knowledge to share? Do I need to buy an old one second-hand?

I'd prefer something with 8 ports, but 4 or 5 is probably enough, honestly. 8 would just be more future-proof if I decide to expand my setup.

PoE isn't a dealbreaker for me but I consider it a nice-to-have. And I don't need SFP (unless someone can explain why I might?). I do want something managed though, for setting up VLANs, QOS prioritization, NGFW, etc.

Thanks in advance!

cross-posted from: https://discuss.online/post/39753460

Yes, I know castopod does not render notes as Lemmy does.

• Listen to the full episode here
• Teaser Wiki Page for the episode. Listen here.

Shownotes

(00:00)

Previous episode on local networking and off-line tooling

(00:37)

Ameridroid Sponsor - Linuxprepper at checkout

(01:20)

Battlestations, and how they relate to Linux Prepper

(02:35)

Your input much appreciated on this long term exploration

(03:08)

Two Desktops from Thin Clients, Detailed Notes

(07:00)

Older Intel Graphics and X Window Manager Support vs Wayland

• LXQT
• Openbox
• Xfce
• Anti-X
• MX Linux
• Arch 32-bit

(07:52)

32-bit and Multi-Architecture Support, Wine, Proton

(12:00)

Love 2D Engine and Compiling Back 32-bit Support

(13:07)

Moonring, Free RPG Game inspired by Ultima

(13:21)

Balatro, Card Game

(13:27)

Arco - Turned-based, Meso-american Adventure Game

(14:03)

100 Tools You can Selfhost on Minimal Hardware

(14:57)

Pipewire, Wireplumber, QPWGraph, pw-jack

(18:30)

Aphex Twin Premium Episode Coming Soon

(19:22)

Memory Management from 16gb to 1gb RAM

(20:11)

Zram, adding efficient memory compression

(21:26)

12GB RAM total notes on setting up Zram, Swap, Swappiness

(22:39)

16GB RAM total notes on my other Intel NUC

(23:37)

EarlyOOM Daemon monitoring Zram and Swap

(26:14)

Swappiness, what triggering it does

(27:55)

Considerations for 8gb to 1gb of total RAM

(32:08)

DURP Challenger downgrading to Pi 3 as appliance

(33:02)

File Management with Core Utils through SSH

(33:31)

SCP for One-Way Transfers

(34:29)

Rsync - One-way Transfers with Comprehensive Control

(36:02)

Unison - Resilient Bi-directional Rsync for Two Locations

(38:09)

Scaling up without cloud services or servers

(39:34)

Syncthing - P2P Real-time Sync with client support

• Sushitrain - Open Source Client for iOS
• Syncthing-Fork for Android
• Syncthing Tray for KDE Plasma & Dolphin

(42:24)

Rclone - Rsync-like support for Cloud Providers: Dropbox, Google Drive, S3

(43:30)

Minimal Homelab Implications; Try The Tools and Win

(45:01)

Container Concerns vs Understanding Tooling

• Understanding how tools actually work when deploying

(45:42)

Trivia Winners from LFNW and Named Projects!

(46:13)

LinuxFest Northwest 2026 Wikipage with Youtube Links

(48:01)

SeaGL Call for Speakers Open Now!

Hey y'all, looking to land my first DevOps Engineering role soon, and figured I should use enterprise software as much as possible for some resume building and personal practice. For reference, I've set up a NAS server once before but haven't got too much experience outside of that. Basing this on some DevOps Engineers I've talked to IRL and some friends who hire engineers, but wanted extra community feedback.

Use case: parents are data hoarders, probably have at least 4tb saved composed of every type of media you can think of, so hopefully the whole family can use this when I'm done with it all. Otherwise, aiming to be able to claim experience with enterprise grade DevOps software.

Some of this is personal research, a lot of Reddit research, and some LLM comparisons used to choose between two software systems. Please let me know what you'd keep or change! I'm still kinda new to this :p

Hardware: (old gaming pc)

• Intel i5-9600K
• 32GB DDR4 RAM
• GTX 1070
• Gigabyte Z370XP SLI
• Seagate IronWolf 12TB 3.5" SATA

Hypervisor & OS:

• Proxmox VE (type-1 hypervisor)
• Ubuntu Server 24.04 LTS (VM operating system)
• cloud-init (VM provisioning automation)

Infrastructure as Code & Automation:

• Terraform (infrastructure provisioning)
• Proxmox Terraform Provider (VM automation)
• Ansible (configuration management)
• GitHub Actions (CI/CD pipelines)

Containerization & Orchestration:

• Docker (container runtime/builds)
• Kubernetes/k3s (container orchestration)
• Helm (Kubernetes package manager)
• ArgoCD (GitOps continuous deployment)

Networking & Ingress:

• Traefik (ingress controller/reverse proxy)
• MetalLB (bare-metal load balancer)
• cert-manager (TLS certificate automation)
• WireGuard (VPN software)
• Surfshark (VPN service)

Secrets & Security:

• HashiCorp Vault (secrets management)
• External Secrets Operator (Kubernetes secret syncing)
• SSH hardening (secure remote access)

Observability & Monitoring:

• Prometheus (metrics collection)
• Grafana (monitoring dashboards/visualization)
• Loki (centralized log aggregation)
• Promtail (log shipping agent)
• Alertmanager (alert routing/notifications)

Storage & Backups:

• ZFS (filesystem/storage management)
• NFS (network storage)
• Persistent Volumes/PVCs (Kubernetes storage)
• Restic (encrypted backups)
• Velero (Kubernetes backup/disaster recovery)

Container Registry & CI Infrastructure:

• GitHub Container Registry or Harbor (container registry)
• GitHub Runner (self-hosted CI runner)

AWS Emulation:

• LocalStack (AWS cloud emulation)
• Terraform AWS Provider (AWS IaC practice)
• MinIO (S3-compatible object storage)

Self-Hosted Applications:

• Prowlarr (indexer manager)
• Sonarr (TV show management automation)
• Radarr (movie management automation)
• LazyLibrarian (book management automation)
• Lidarr (music management automation)
• Homarr (application dashboard)
• Seerr/Overseerr (media request management)
• Jellyfin (media server)
• qBittorrent (torrent client)
• NZBGet (Usenet downloader)
• Immich (photo gallery & backup)
• Mealie (meal planner)
• Moonlight (low-latency remote gaming)
• Kavita (ebook/manga/audiobook reader)
• Funkwhale (music streaming)
• Grafana (monitoring dashboards)

cross-posted from: https://jlai.lu/post/37311198

(First blog post ever, would appreciate your input!)

Edit: Title was a lil clickbaity

Hi guys! I have a server on a rather reliable network, with 1Gbps connection upload verified by different connections over the same area. However, in some countries where the connection is very unreliable, the connection slowly dies, and stays dead halfway through the transfer. Is there any client which would be prepared to adapt or detect an unreliable connection, and retry/resume as soon as it happens without losing the transfer? I find filezilla sometimes tends to stall halfway through, and it stays...hung without doign much. And sometimes after restarting the connection, it just overwrites the file from the beginning without prompting. Is there a better system or client to transfer large files in a resumeable way over the internet?

Thanks!

Update to my Homelab, I've started 3D printing brackets, and I moved almost everything to Kubernettes

I still have a lot more I want to print, and some custom things I need to design, which I currently have no idea how to do, but keen to learn and figure that out.

This is what's in my k8s cluster right now:

This my dashboard:

Most of these are app running on my cluster.