A channel dedicated to helping you homelab. I cater for the novice, and the experienced homelabber. Join me in seeing how far we can push this hobby.... Recommended Hardware: github.com/JamesTurland/JimsGarage/blob/main/Homelab-Buyer's-Guide/Q4-2023.md
For business enquiries contact me on X or Discord.
I know this is like a year later so hopefully you'll see this message, but what would your recommendation be if I only have 2 PC's (1 gaming/personal, 1 homelab) and I want to have all storage on the homelab. I had issues trying to make it work with proxmox for ubuntu (so basically just docker) and HA but it could've just been me messing up aswell.
@@Jims-Garage So do I need to create a new remote, edit the previous one, or what? Where am I supposed to enter my old encryption key? Sorry to bother and thanks
@@racingtheweb All of that is held in your config file. Simply copy the file and reuse it. Location varies depending on OS (but it's very quick to be up and running again).
You know.. HA, 25 gbit and all sorts of things, although cute and nice to play around with for me personally they are among the least interesting topics ever... I mean talking from a homelab perspective, nice to play around with but absolutely not needed in that seting. Ok firewall HA will be useful but all the ceph/HA... Just my personal $0.01. Would love to see a video on some of the 'promises' you made earlier like install truenas on that NAS you reviewed last time.
"so if we log into our host and navigate to our docker compose location". Can you explain every part of that? I have no idea how to log into our host, have no idea how or what my docker compose location is, and have no idea what a sedo docker compose -d means. also, what the hell is the point of the docker GUI if you are doing all of this with command prompt? Why even have a GUI ?
You want to install Docker on a machine or VM (that's the host, I have a video on it). Once you've done that copy over the docker compose file (this is the configuration file for all of the apps, the containers). You use the command sudo docker compose up -d to launch the containers. You can load the compose into Portainer and do it that way, but I prefer to explain to people exactly what it's doing. Plus, compose is faster as you don't need a gui.
It's possible do the same thind with an external disk drive and an unprivileged LXC? I try to do a Proxmox Backup Server in this scenario and backup on a USB external disk drive, I managed to install with no problems PBS, but failed multiple time the USB hard drive passthrough... If enyone has some useful hints it will be nice...
Hey, first of all thanks for your videos they are very inspiring (at least for me ☺). I have one question : I am running Truenas Scale (Bare metal) on Traefik and I wondering if i can get logged via Authentik ? If so how ?
It wont let me apply the Network Device to the VM. This is the error VM 301 qmp command 'netdev_add' failed - network script /var/lib/qemu-server/pve-bridge-hotplug failed with status 512 I have a linux bond using my 4 ethernet ports on the server for link aggrogation. Is that the problem
So, A matrix isn't secure, they can tell who's in what rooms and when they're posting B they can't close their rooms because of how that process works to CP is just rampant
Matrix is definitely secure if you configure it correctly, remember that privacy and security are very different things. You can also restrict access if you want but by default it's designed to be open and federated (AFAIK).
Thanks a lot. Really. It helped me to take decision, even if they are really mostly AGAINST LXCs, I find docker a lot easier and above all with dockerhub it comes with a wealth of ready made machines and applications I do not have to administer and maintain myself. It has a much wider user base and administration with portainer is no harder than with the proxmox gui. I prefer to have as few IP adresses as possible. Running machines out of the house which by now I do most of the time on cheap VPS for 1€/month, IPs cost money ports don't. ngxmanager is a nice and easy way to assign subdomains pointing to the same IP to different ports. No worry with adding routes and subnets. I see very little advantage of VMs over LXCs over docker. Security is not really an issue for most home users. Just open no ports, don't do banking and e-mail on your own server, use gmail instead, use wireguard ---sense whatever if you want to make it accessible from outside. I use proxmox because some applications like Homeassistant run in their full functionality only in VMs. But this was their choice not mine. I would never distribute my own software in either a VM or LXC but in a docker container. In LXC the L stands for legacy. If somebody is security paranoic he can always run docker inside a container or VM. Unfortunatly docker does not run well on the proxmox host directly because of iptables. But actually it does run even inside a LXC and VMs. The value for me with proxmox is the file system support, snapshots and backups. Don't use VMs unless I really have to, and LXCs only to host docker. I guess in the semiprofessional field there might be some use cases for LXC, but not really very many. I appreciate the advantages you pointed out, but most of the time they don't apply to my use cases. Great job, thanks a lot
Hello, I followed the steps and modified the docker-compose.yml to match my filesystem and everything initializes, but there are no data downloading/uploading on qbittorrent. On occassion DHT will connect me with a peer, but it cannot connect to any of the trackers on the torrent. I have a Pi-Hole in my network with OPNsense + Unbound as my router.
Hi Jim, thank you for this very nice and descriptive video. I have tried to follow your tutorial on my new Asustor, but was unsuccessful. I had to modify and combine some scripts and then run it through ChatGPT to get Immich running. The logs of Immich-Microservices and Immich-Server show some errors, so I'm not sure that hardware acceleration and transcoding are working correctly. Can you please suggest how to correct these faults?
@@Jims-Garage Thanks but no thanks, that app needs my phone number for some reason, I don't want to get robocalls from them. Do you have anything better set up, like Slack?
Nice video. The complication comes when you try to combine 1 and 3. Traefik will think you come from internet since the IP it sees is not a local one but cloudflare's proxy. At least the last time I tried.
Awesome tut and simple to follow. I followed all your step and I can add delete files from the host. I can also see the mount point on the lxc but if I try nano test.txt to edit a remote file. I see File is not writable. I don’t what permissions need to be fixed for this if host was able to add delete file. I did not add ro=1. So I should have full rw permissions.
Really love your tutorials, but does this mean the firewall is another PC? Also, can I just use my windows PC as the firewall? Or do I need to reformat it to another OS? My Current Setup Modem > Cisco Switch > Servers and Devices I only have 1 Server node with 2 NICs, can it act as the firewall as well? Do I need to reconfigure the setup to be Modem > Server(Firewall) > Cisco Switch > Devices I got all my devices for free from school because I wanted to learn, but am sort of a novice when it comes to configuring. Is the server still safe even tho it also acts as the firewall in this case? Thanks
@@TTV-VoidGG pretty much yes across the board there. I have a dedicated Proxmox machine that hosts all of my virtual machines. One of those virtual machines is the firewall. The firewall has 2 dedicated NICs (1 for wan and 1 for LAN), it has a 3rd for all the VMs to share). This setup is fine for a homelab and will mean all traffic goes through the firewall before hitting your network.
@@Jims-Garage so this means, even if I only have the Server with a VM running the firewall and 3 Nics, the solution is possible. How do I point for example kubernetes to pass through the firewall if they're in the same Node?
Hello Jim, thanks a lot for your tutorial, very clear ! But I have a small problem, I can see Websocket errors in the console when I'm logged in my vault, have you this problem too ? Is there any config to add to make traefik handle WS ? Thanks in advance !!
How are able to achieve High Availability on a two node cluster? I heard at min. 3 nodes are needed for voting to work properly. Are there some settings which can help in case ok two node setup?
You need 3 nodes for Proxmox VM high availability (albeit you can have 2 Proxmox nodes and corosync installed anywhere else). The HA on my firewall is isn't VM failover, the firewalls are connected to each other and the other one takes over if the master fails. My new MS-01 setup in recent videos is a proper Proxmox HA with traditional failover and 3 nodes.
thank you for this tutorial. It works. just want to let you know, it works also with handbrake docker container, just in the compose file add GROUP_ID=107 in the environment section. intel qsv is detected!
Running Proxmox and various Docker containers on an old/spare 2018 Apple Mac Mini. Rarely uses more than 100W. They can be bought on eBay or Facebook Marketplace for a few hundred dollars nowadays. Works surprisingly well, if you're not doing intense processing e.g. video transcoding.
I was hoping to get it running for ProtonVPN free tier. Logs say that Gluetun connected fine, containers are available locally but qbit doesn't download and containers don't see each other :(
For anyone who is wondering about the issue with an extremely small boot drive, once the img file is downloaded, head over to /var/lib/vz/template/iso and run this command to resize the bootdrive as per your needs. "qemu-img resize noble-server-cloudimg-amd64.img 20G" you can change it to 20G to 80G or any number as per your needs if you need a larger boot drive and not planning to use Longhorn or NFS with the template.
Hey mate. In your Authentik videos, I’ve noticed that your compose yaml files don't have the authentik secret key entries to pull from your .env file. Is that on purpose or an oversight/not required?
@@Jims-Garage makes sense. Thank you. I really appreciate the response. Last question. Do you have a preferred DDNS service? Like do you use DuckDNS, Cloudflare DDNS or something else?
Hello, Thank you for the video. Do you think you can make a guide for setting this up in the Ugreen NAS 480T? Are you still running Proxmox on it or should I just setup Docker on Ugreen OS and go from there?
Has anyone gotten this working without running JF in Docker? Or is there anyone who can point me to documentation for commands/configurations for JF for the "group add" and "devices" variables from the yaml for docker compose?