my homeserver mapped
from blinfabian@feddit.nl to selfhosted@lemmy.world on 01 May 13:40
https://feddit.nl/post/55713904

i love selfhosting :3

Proxmox:  Debian Container 1: Pihole blocking more than 2.6M domains  Debian Container 2: Docker containers: traefik, Joplin Server and Homarr. Traefik connects to Cloudflare and mijndomein  Debian Container 3: Docker container: Jellyfin containing three folders for media  TrueNAS CE VM: Two Drives configured with RAID and Nextcloud (+Memories)

#selfhosted

threaded - newest

renegadespork@lemmy.jelliefrontier.net on 01 May 14:09 next collapse

Nice stack! What’s the crab logo? I don’t recognize it.

Do you notice a massive increase in request latency (like 10x-50x) when using a CloudFlare tunnel vs connecting directly to your IP? I’ve experimented with it a few times, but it really negatively impacts QoS for me, especially with federated services (like Matrix) where there are lots of small requests.

blinfabian@feddit.nl on 01 May 14:12 next collapse

the crab is Homarr and no, i haven’t had any issues with cloudflare

renegadespork@lemmy.jelliefrontier.net on 01 May 15:07 next collapse

Thanks! I haven’t tried that dashboard yet, I might give it a spin.

Evotech@lemmy.world on 02 May 08:43 collapse

What do you use it for?

blinfabian@feddit.nl on 02 May 09:13 collapse

its a dashboard application, i just have my hosted apps there

Evotech@lemmy.world on 02 May 09:40 collapse

But like, does it help you with anything specific. Or is it just nice to look at

not_amm@lemmy.ml on 02 May 10:33 collapse

For me, it becomes very useful when you manage local and public services and the same time. I’m actually planning to return to use a dashboard because I added new services and devices to my stack, so now there are more IPs and domains I use for different tasks and I’m too lazy to remember/write all of them :)

irmadlad@lemmy.world on 01 May 14:19 collapse

Do you notice a massive increase in request latency (like 10x-50x) when using a CloudFlare tunnel

Have not noticed that at all. I don’t run any federated services tho. Might be the difference, I don’t know.

renegadespork@lemmy.jelliefrontier.net on 01 May 15:08 collapse

Yeah I’m thinking the request frequency was the issue rather than bandwidth.

timwa@lemmy.snowgoons.ro on 02 May 07:52 collapse

That seems unlikely; trust me, there are services running behind Cloudflare tunnels that are doing more requests per second than whatever you’re hosting does in a year.

The only times I’ve had performance problems with Cloudflare tunnels it’s been intermediate network kit that didn’t like IPv6 or didn’t like QUIC (or both). You can try disabling both in cloudflared to diagnose (at least, you used to be able to disable them/switch to HTTP/2+IPv4, it’s been a very long time since I’ve needed to so I’m just assuming it’s still an option.)

irmadlad@lemmy.world on 01 May 14:17 next collapse

i love selfhosting :3

Me2! Nice solid stack you got going there bro.

frongt@lemmy.zip on 01 May 14:53 next collapse

Why do you use two separate Debian VMs plus a truenas VM running nextcloud?

Natanox@discuss.tchncs.de on 01 May 19:32 collapse

Security is the first thing that comes to mind. Compartmentalization prevents or at least makes it considerably harder for compromised services to screw up all the others.

Another thing would be that it might be easier to manage backups and snapshots.

jimerson@lemmy.world on 01 May 20:57 collapse

From my understanding, it’s helpful that each VM will have its own IP so ports can be opened only on specific VMs, increasing overall security.

kureta@lemmy.ml on 02 May 10:10 collapse

Am I doing something wrong. All my services are grouped in docker compose files. Containers that have to communicate internally - a server and it’s db for example - are on their own private docker network. A reverse proxy has its ports 80 and 443 open and it is on an external docker network. Services that I need to access from the outside are on this network and they do not have any ports open. Except for the torrent client, which has a UDP port open.

JetpackJackson@feddit.org on 01 May 17:19 next collapse

Dutch user spotted

blinfabian@feddit.nl on 01 May 18:10 collapse

nee hoor jij liegenaar

JetpackJackson@feddit.org on 01 May 20:57 collapse

Lol

freddo@lemmy.zip on 01 May 18:28 next collapse

Is proxmox a viable option to be used on a NUC for example?

frongt@lemmy.zip on 01 May 18:57 collapse

Yes, I run it on mine, with an N100 processor. Make sure it’s a recent-ish one with the necessary virtualization extensions. www.proxmox.com/en/products/…/requirements

And obviously more storage and more RAM is better, especially if you plan to use zfs. Keep that in mind when selecting hardware.

freddo@lemmy.zip on 01 May 19:23 collapse

Thanks, I will look into the provided link.

xSikes@feddit.online on 01 May 19:34 next collapse

TruNAS is a VM? I thought it preferred bare metal? I would think it would be side by side with proxmox? (Still learning and planning my setup.

nagaram@startrek.website on 01 May 20:36 next collapse

I’ve got a virtualized set up to.

Its pretty unbothered being virtualized so long as the disks are passed through. In my set up, I have the SAS board passed through and its using that.

My reasoning is that I wanted a lot of disks space, but I couldn’t get that without just a big case in general, so I use the extra space to store GPUs for AI and encoding stuff

habitualTartare@lemmy.world on 01 May 21:57 collapse

Absolutely no problem with it being virtualized as long as you have a pci storage controller and pass that through to trueNAS. HBA cards can be found that do this without raid or anything so you can use zfs in trueNAS.

zr0@lemmy.dbzer0.com on 01 May 20:26 next collapse

You should look into container technology. No reason to have this many operating systems wasting resources

corsicanguppy@lemmy.ca on 01 May 21:21 collapse

Heh. Container mafia going “hush, don’t worry about iso27002, just one more pull, bro.”

HereIAm@lemmy.world on 02 May 08:02 next collapse

OP is still running 5 containers though? And why does a home server need to implement an IT security standard meant for large organisations? I hope you got an incident response policy written down, would be a shame to fail the next audit.

zr0@lemmy.dbzer0.com on 02 May 09:57 collapse

Tell me again why a properly managed container environment (if you wanna go bonkers use Jails on FreeBSD) offers more attack surface than multiple operating systems running the exact same software.

Just randomly mentioning ISO27x tells me exactly that you have absolutely no idea how those standards work.

mpramann@discuss.tchncs.de on 02 May 07:33 next collapse

What is your reason for running two separate Debian docker hosts with under 5 containers in total? That seems like quite the overhead? And why did you choose to install Nextcloud on your TrueNAS server?

RecallMadness@lemmy.nz on 02 May 10:36 collapse

Not OP. But i do the same.

I have multiple proxmox hosts, running multiple VMs, each running containers.

I do it so I can minimise disruption. Fixing a fault in immich doesn’t mean the house is without plex for a week.

Decronym@lemmy.decronym.xyz on 02 May 08:00 next collapse

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters
HTTP Hypertext Transfer Protocol, the Web
IP Internet Protocol
NUC Next Unit of Computing brand of Intel small computers
UDP User Datagram Protocol, for real-time communications

4 acronyms in this thread; the most compressed thread commented on today has 10 acronyms.

[Thread #270 for this comm, first seen 2nd May 2026, 08:00] [FAQ] [Full list] [Contact] [Source code]

amniote@lemmy.world on 02 May 09:25 next collapse

" Why won’t somebody think about the backups ? "

None of you come in my shop.

Cyber@feddit.uk on 02 May 10:34 collapse

Or the restores… 😉

madejackson@lemmy.world on 02 May 10:04 next collapse

Nice setup.

Though in terms of manageability it looks like a nightmare.

Cosmos Cloud You can thank me later ;) or azukaar for that matter.

And Cosmos OpenWrt for the ultimate all in one OS (my creation)

sixty@sh.itjust.works on 02 May 10:57 collapse

4 running nodes for 5 services? Seems exessive, no?

Coleslaw4145@lemmy.world on 02 May 11:02 collapse

What makes you think its 4 proxmox nodes?

To me it looks like 3 Debian VMs (2 of them running docker containers) and 1 TrueNAS VM running in a single Proxmox node.

Magnum@infosec.pub on 02 May 11:36 collapse

Running everything in a VM to run it in Docker is excessive as well. It is supposed to use bare metal containers.