#UltimateHomeServer 

probably because when you're doing OS updates on a home lab system, you don't want to have to update a bunch of playbooks

Just use Nix.

I bring those two together by using all the modern tooling that fits my needs for my homelab. Proxomox - (bare metal + qemu + lxc) - OpnSense - K8S - (lots of k8s native tools, argoXXX, tekton, istio, cert-manager, ...) - any many apps that I want to serve in my private network and outside. I try to stay away from manual automation as much as possilble, so the least amount of "ansible" and scripts flying around. Anything that is prone to breakage generally goes into CI/CD automation. TBH the field is SOOOOO vague and broad, and there is so much you can do depending on your needs that it become extremely difficult to tell anyone where to start. Docker, docker-compose, etc. needs to go. People should not deploy with these tools as they don't have any kind of orchestration and are really not the best and safest runtime for containers out there. Docker did a lot to popularize linux containers, but now we have OCI and we need to handle those containers properly.

@@BikingWIthPanda if you have a playbook that is designed to update a debian system (basic apt update; apt upgrade;), how often would you have to update a playbook? I could see how it could be a bit annoying if you have to update an application and then that app has dependencies that need to be installed, thus breaking your playbook. Is that what you are referring to?

@@YvanDaSilva Just starting out, what would you recommend? I have a few older machines, laptops and desktops that have been retired, and assume zero *nix knowledge, where would I start? I want to run Home assistance, Plex, radarr, sonarr, ombi, Blue Iris, sabnzbd, and others as well as be able to spin up and down VM's to test programs and setups.

How much for the domain? Is it expensive per month and how does the traffic count up to the bill?

@@kitecattestecke2303 bro google is your friend. Also you renew your domain every year not monthly

I agree, ZeroTier is very handy especially for me who has barely any money to spend. Got to say however, Tailscale is faster for me and works better on mobile connections.

For discovery an organic community probably exists. The monetary temptation to help you "discover" what a label wants you to discover will ultimately poison that well if it hasn't already

mmmh yeah I love "discovering" what Spotify is paid to recommend

The Problem with Spotify is the "recommendations" work till a specific point. After that it recommends duplicates from the same interpret but different albums. Und some Genres it just doesnt recommend at all

@@Level1Techs I think this is the first time I'm disagreeing with (assuming) Wendell, but Spotify's discovery algorithm is totally indifferent. It'll give me stuff from independent artists just as often as it gives me music from major labels - all depends on what you feed it and how you use it. Spotify and Pandora are valuable platforms for music discovery, and (despite how much I hate how little artists are paid) is worth every cent of my $10/mo subscription.

@@CornThatLefty same. my discover weekly playlist, is about half independent artists, and half record labels, and 9/10 its stuff I like and vibe to. + Spotify pays for my Hulu. totally worth the $10 for me.

Laptop is silent, takes less power and easy to maintain as it offers keyboard/screen. Running a raid 24hours/7days is too expensive so your idea is truly a good concept :-9

I agree! I use RU-vid Music, which is backed by normal RU-vid. The links even work with RU-vid Downloaders

Mutual TLS is what you are referring to. Its not really a VPN, more of a 2-way trust relationship where your pedestrian web traffic is one-way - ie the server verifies the client just as much as the client verifies the server. The problem with mTLS for your average Joe the Network Janitor is that trying to get a client certificate on a mobile device and then issue it when you connect to something can be a massive, massive headache. In fact I think most any app that implements it would be doing the certificate checks in-app and not on the device... From laptops though? sure, no problem. There are guides out there.

@@Mr_Phuzzy_112 Yes it’s not as secure as a vpn but less spoofable I’d think ! Maybe on android you could have a proxy on your phone that injects the certificate, but yeah theses functions are not often used so they are badly supported by phones.

I did that in an earlier level1 video but using the package manager is frowned upon in truenas :-/

As someone who is using navidrone do you have any idea if supports music videos? Can't find any info about it.

@@h.b.5577 Sorry the Delay. No it doesnt

Does Navidrome also have podcast and playlist support to listen to it via programs like VLC or mplayer? Those are two features I honestly like about Airsonic. Other than that, Moin Moin.

That's immediately what I thought, why is he not using portainer? He surely must know about it and either doesn't like it or isn't compatible.

@@vgamesx1 I haven't looked into it but I would imagine that there might be some incompatibility with the TrueNAS GUI. You probably wouldn't be able to see any containers created by portainer in the TrueNAS GUI. I also know very little about the whole relationship between the TrueNAS, Kubernetes, and Docker layers. I've read that docker-compose isn't "supported" but exists on TrueNAS just because docker was the container choice for Kubernetes. I also have no idea if creating containers outside of the GUI creates any sort of bugs in system/UI TrueNAS has going. That being said, I do hope portainer works well on Scale because if it does, I would switch over from Core. I currently have a VM running with all of my containers but if I could just run them natively on TruesNAS I could eliminate a layer of virtualization.

yeah that's the point of containers. Portainer is just a different management interface for the same stuff

Have to agree. As of right now, container management is easier even in OpenMediaVault. At least you have full control over the underlying Debian installation.

@@b0ne91 I'm back 1 year later to report Unraid has implemented native ZFS and it is awesome :)

Honestly amazed they havn't just charged 14.99 for a SPORTS ULTIMATE package from Fox, NBC, CBS, and ABC/Disney/ESPN.

SlingTV has live sports but it’s dependent on the area you’re in. You may not have access to the main networks. And the cost is comparable to cable.

@@CornOnDeCobb You're amazed that cable companies don't want to make less money?

PlexAmp is great, but does require plexpass, anyone with a lifetime Plexpass probably can just ignore this video yea. Its been my go to for music for years, specially with FLAC

The other issue with plex is the poor playlist support.

@@onestopviewfiles The playlists aren’t horrible, but I have heard from others that more can be done. I like smart playlists.

@@JakeSDN yes, your right. Theres no proper playlist import, export

There's the iOS client Prism that doesn't require a Plex Pass.

Check out redhat/cockpit it's swanky. With portainer

@@Level1Techs That video made me decide to try it ;).

? What? So the software create a lot of temporary trash files?

@@kitecattestecke2303 Basically that's what docker does, but docker does these when run manually through 'docker run' command or when it is run by orchestrator such as kubernetes when the storage driver is set to anything more advanced than just the basic default on most linuxes overlay2 driver - in TrueNAS since ZFS is used for storage, ZFS driver is employed. It is more performant, stable and snappier, but there is no automated solution within the platform to auto-clear these docker leftovers for a few reasons... 1) docker filesystems (so snaps, clones and volumes) created by docker are left for app analysis purposes - as in you can always check back later why the containerised app behaved in some weird way cause logs and binaries are still there - think debug purposes, some of these are prunned if you run docker containers with the '--rm' on manual launches upon container stopping/finishing, but some leftovers are still left and need further docker prunes, 2) docker team sees this as a feature for debug/testing purposes and point that any maintenance needs to implemented in the OS/platform that uses docker - you know the 'with great power comes great responsibility' type of talk regarding the use of more powerful storage drivers such as ZFS or BTRFS, 3) docker can use overlay2 but that is less performant and you just trade current ZFS snaps/clones that are more storage efficient for overlay layers for per container mounts - same approach different solution, maybe less impacting other ZFS aspects since the bulk of the container-heavy storage logic would then be in the linux-default overlay2 driver, but it's not as great a solution either... plus TrueNAS team would have to add this into their own logic, 4) docker networks can be set and stored for containers, and like singular specific routes or firewall rules, you end up with droves of these for containers not running at the moment - these are left to accelerate networking setup on next container runs as rules are simply "copied" over, 5) docker build caches are kept to accelerate any further docker builds, otherwise if you built docker images from scratch it would take far longer... I managed to slighty rein in the issue by adding 'docker system prune --all --force --volumes' to a daily cron job, but this workaround is not a great solution - it hampers if not bricks the kubernetes' feature of multiversions of apps for rollbacking pods in an instant after it's run since older no-longer running components are pruned from docker side, however in my case I test new app versions at 16:00-24:00 when I can always rollback to earlier version before the prune runs at 03:00 in the night - that's a caveat and restriction I'm willing to live with for the moment since it allows me to drop snaps count from 47k to under 500, images count from over 2k to under 20 ;), network rules from over 6k to under 100 ;), and suddenly the reboots are taking 15 mins including BIOS/HW stages instead of hours, the interface and apps are snappier etc. plus i rarely have containers/pods stopped for longer periods of time, i either deploy them or destroy them once not needed ;) so the daily run to clean any stopped containers and leftovers seems to fit my bill. your mileage may of course vary...

Its the first Subsonic API Compatible Webplayer for me which works behind a reverse proxy. Had Problems with all the others, navidrome just works

@@manuelthallinger7297 i am not offended by it but it practically has zero features. that makes me wonder if people who use it for mp3 audio could easily use a vpn or just take their music with them anyways.

Not that much, bluetooth sucks juice faster, OpenVPN is way worse in that regard.

unless you want some features only airsonic has, yes navidrome is compatible with the subsonic API, meaning you can use any app wich supports ...sonic servers

@@user-hx7dc9uz6s it never worked right. For me. Navidrone was easy to set up and less hassle passing through a Nas share to the container. After every reboot airsonic just failed. The auto album art of air sonic was great but I can live without that for the sake of all my music is available without issues