runtimeterror/content/homelab.md

title	date	aliases	description	featured	toc	timeless
/homelab	2024-05-26T21:30:51Z	playground	I enjoy tinkering with small technology projects, and I learn a ton from these experiments. I also self-host a number of apps/services from my home as well as various cloud environments. This page describes some of my playground.	false	true	true

Connectivity

Everything is connected to my Tailscale tailnet, with a GitOps-managed ACL to allow access as needed. This lets me access and manage systems without really caring if they're local or remote. Tailscale is magic.

On Premise

Proxmox VE 8 Cluster

• 1x Intel NUC 9 Extreme (NUC9i9QNX)
  • 9th Gen Intel® Core™ i9-9980HK (8 cores @ 2.40GHz)
  • 64GB RAM
  • 1x 512GB NVMe system drive
  • 2x 1TB NVMe drives (ZFS)
• 2x HP Elite Mini 800 G9
  • 12th Gen Intel® Core™ i7-12700 (8 cores @ 2.10GHz, 4 cores @ 1.60GHz)
  • 96GB RAM
  • 1x 512GB NVMe system drive
  • 1x 2TB NVMe drive (ZFS)
• Unifi USW Flex XG 10GbE Switch

The Proxmox cluster hosts a number of VMs and LXC containers:

• doc: Ubuntu 22.04 Docker host for various on-prem container workloads, served via Tailscale Serve / Cloudflare Tunnel:
  • Calibre Web for managing my ebooks
  • Crowdsec log processor
  • Cyberchef, the Cyber Swiss Army Knife
  • Hashicorp Vault for secrets management
  • Miniflux feed reader
  • Tailscale Golink, a private shortlink service (post)
• files: Ubuntu 20.04 file server. Serves (selected) files semi-publicly through Tailscale Funnel
• hassos: Home Assistant OS, manages all my "smart home" stuff (post)
• immich: Ubuntu 22.04 Immich server
• ipam: Ubuntu 20.04 phpIPAM server (post)
• salt: Ubuntu 20.04 Salt Master server for configuration management
• unifi: UniFi Network Application. Manages the Unifi switch.

Hashicorp Nomad Cluster (WIP)

• 3x Zima Blade 7700
  • Intel® Celeron® N3450 (4 cores @ 1.10GHz)
  • 16GB RAM
  • 1x 32GB eMMC
  • 1x 1TB SATA SSD
• TP-Link TL-SG108E 1GbE Switch

This triad of cute little single-board computers will eventually be a combination Nomad + Consul + Vault cluster, fully managed with Salt.

Also here's some more about it.

PiAware ADS-B/MLAT Receiver

• Raspberry Pi 2 Model B
• 2x RTL-SDR Blog V3 R860 RTL2832U 1PPM TCXO SMA Dongle
• SIGNALPLUS 1090MHz 12dBi 1.1m ADS-B Antenna

I like to know what's flying overhead, and I'm also feeding flight data to flightaware.com and adsb.fi.

Cloud

Oracle Cloud Infrastructure

• git: Ubuntu 22.04 Forgejo server for git.bowdre.net
• smp2: Ubuntu 22.04 SimpleX server

Google Cloud Platform

• smp: Ubuntu 22.04 SimpleX server
• smp1: Ubuntu 22.04 SimpleX server

Vultr

• volly: Ubuntu 22.04 Docker host for various workloads, served either through Caddy or Cloudflare Tunnel:
  • Agate Gemini server (post)
  • Crowdsec security engine
  • Kineto Gemini-to-HTTP proxy (post)
  • Linkding bookmark manager serving links.bowdre.net
  • ntfy notification service (post)
  • SearXNG self-hosted metasearch engine serving grep.vpota.to (post)
  • Uptime Kuma for monitoring internal services (via Tailscale)
  • vault-unseal to auto-unseal my on-prem Vault instance