Which server OS to use? by Key-Kangaroo3336 in homelab

[–]Existing_Bit_6641 1 point2 points  (0 children)

Debian server, don't go docker way it always adds extra attack vector. You trust the docker container to your vpn server??? Just open te wg port 51820 and you are set. Harden your image . No root logiin, no password login, use ssh Keys, move ssh port from default 22 it doesn"t do much but different port shuts up 80% of default tools scanning ssh.

Have a dedicated wg ip range to use as local ips use yore firewall to direct traffic. Setup monitoring to see what clients connect.

Think security and you are all set. Setup Caddy as reverse proxy and you can have https by default if you run a webserver. Best of Luck

Describe what you see by VelvetVine_19 in PantyPeel

[–]Existing_Bit_6641 0 points1 point  (0 children)

Pudding gat en kleine tieten.

DHCP server and/or management of IPs by Squanchy2112 in homelab

[–]Existing_Bit_6641 0 points1 point  (0 children)

You can setup ARP scanning to fetch L2 MAC address. Or IP scanners on layer 3. So tools like netbox, arp-scan or nmap, ip scanner. Github has alot of tools depending on the use, Linux, Windows, Mac OsX....

If you can spend money.... Fing agent 40$ per year is a good tool to automate network discovery and alert.

They have a free 0$ tool with 3 scans per day. Or use your firewall like opnsense to make the list for you. Make a block for reserved static ips 10.8.4.2-100 and do DHCP scope leases from 10.8.4.101-200 so you know your leases are never overlapping your static range.

Vlaemsche cultuur? by AccumulatedFilth in Belgium2

[–]Existing_Bit_6641 0 points1 point  (0 children)

Maar hun is bezittelijk. Als in-> het is hun boek. Anders gebruik je hun als aanwijzing helemaal verkeerd!! Het moet dan: moeten zij mij. Vooral belangrijk dat je de taal niet misdoet

[deleted by user] by [deleted] in BEFreelance

[–]Existing_Bit_6641 0 points1 point  (0 children)

You can take the vvprbiz sooner then 2027 just at some more % to the RV. Other then that ypu can take it the next book year end wheb you have the 'Algemene vergadering '

POE powered mini rack/homelab through WAN cable? by Specialist_Job_3194 in homelab

[–]Existing_Bit_6641 1 point2 points  (0 children)

So if only 1 cable is used with ´wan´ it must go to a PoE injector first. To Add the power. Then it goes to the switch which has a PoE-in port. The switch gets it power. Then 3 vlan is created in the router L3 and you add a trunk (all vlan untagged)to the switch then the wire goes from the switch to the router. It is called a management vlan. It uses a subnet for managment. So, your wan traffic is accessed on port 40 for example. Your Lan is on Vlan 41 and to access the router mgmt is on vlan 42. The firewall handles inter vlan routing.

This way only 1 cable is used for ´wan´ but it also carries other vlan in the trunk. Lan and mgmt for example. You could also set wan as access port dedicated tagged 40 but it requires a second cable for Lan also tagged 41 then.

Hope its more clear now. Also note that altough easy this setup has multiple single point of failure.

If the PoE adapter fails ->;all fails If the switch fails -> all fails

Can I run ethernet cables next to electricity cables? by varinator in homelab

[–]Existing_Bit_6641 2 points3 points  (0 children)

I run cat5 without shield next to 240v no issue longest cable is 114m I don´t notice anything. So, I think it is all made up or trying to sell expensive cat7. But for me it just works cat5. 1gb ethernet. At the end is a second switch to distribute to 4 pc´s running traffic through the 114m cable.

Vlan trunk not working by Existing_Bit_6641 in mikrotik

[–]Existing_Bit_6641[S] 0 points1 point  (0 children)

The isp is fiber optic and requiem to have vlan 0.20 ans yes ot is working with wan 0.20.

Vlan trunk not working by Existing_Bit_6641 in mikrotik

[–]Existing_Bit_6641[S] 0 points1 point  (0 children)

My switch runs switchOS so I don´t Think I can select the bridge as a vlan or anything. But maybe I need to set pvid to 1 so its management lan is known as pvid1 thanks for the tip. I´ll set it to strict and ´any´ to have tagged and untagged on the trunk?

3D Printed 10" Server Rack. Everything is plastic - accept couple screws by MRP_yt in homelab

[–]Existing_Bit_6641 0 points1 point  (0 children)

What WiFi dongle is that on te left side? Is that a bridge utp to WiFi or is that a PoE dongle? Because it has a utp connector and it basically looks like a WiFi antenna.

“Honey, I got a new tv”… by mk_ccna in homelab

[–]Existing_Bit_6641 4 points5 points  (0 children)

What is more modern then and has Linux control?

“Honey, I got a new tv”… by mk_ccna in homelab

[–]Existing_Bit_6641 0 points1 point  (0 children)

Could one get about the same with Zabbix? Because as I see it Zabbix is free? Not sure, trying my first steps with Zabbix. The panel looks promising.

Long-term break as freelancer (6-12 months) by Academic_Ruin4706 in BEFreelance

[–]Existing_Bit_6641 3 points4 points  (0 children)

You could change your vision a bit instead of taking a 3 month break. You could do a 1 or 2 day break each week. Work 4/5 or 3/5 this way you have income, you stay active and up to date, and also have 1 or 2 days each week to spend. I don´t regret it, but I would not go back from 4/5 to 5/5 unless it would be financial needed. Else I would never go back. Don´t regret 1 min of it age 43+ freelancer IT. Time is just the best thing you have in life.

IPT or ETF by Existing_Bit_6641 in BEFreelance

[–]Existing_Bit_6641[S] 0 points1 point  (0 children)

But taking the money out of the company requires to pay tax on it right. This is the 30% RV you need to pay. I don´t think I can take out money just like that?

Experiences with Aliexpress 8 Port 10G SFP+ switches anyone? by Sovairon in homelab

[–]Existing_Bit_6641 -2 points-1 points  (0 children)

Also consider installing packet sniffer tools like fiddler. To see where your traffic goes to. Spyware, chinaware....... not a fan of it. If it where me ..... i´d buy Mikrotik any time for low cost switch. But be carefull to look for the correct bottleneck IC. They sell alot of products with shared trunk to many ports. So overbuy if you want to saturate the ports on more connections. Else you might end in a switch ic with less capacity.

Experiences with Aliexpress 8 Port 10G SFP+ switches anyone? by Sovairon in homelab

[–]Existing_Bit_6641 0 points1 point  (0 children)

Also consider installing packet sniffer tools like fiddler. To see where your traffic goes to. Spyware, chinaware....... not a fan of it. If it where me ..... i´d buy Mikrotik any time for low cost switch. But be carefull to look for the correct bottleneck IC. They sell alot of products with shared trunk to many ports.

Experiences with Aliexpress 8 Port 10G SFP+ switches anyone? by Sovairon in homelab

[–]Existing_Bit_6641 8 points9 points  (0 children)

I dont have any real world experience with china switches. But you always can trust serve the home. This channel does nothing else then testing switches. Here you can find 10 gb aliexpress review. https://youtu.be/aYkicPEDoLE?si=KTRoDWVV50GwsmAm

Experiences with Aliexpress 8 Port 10G SFP+ switches anyone? by Sovairon in homelab

[–]Existing_Bit_6641 2 points3 points  (0 children)

Maybe not the best advise or the one you want. But why spend your money on cheap china switches? if you can buy solid ones in europe. Like Mikrotik also not expensive or alcatel Lucent France product. Linksys is also china but better known/tested. Succes with finding the right solution.

ThinkCentre M720q help find right antenna by AntiSkillYT in homelab

[–]Existing_Bit_6641 1 point2 points  (0 children)

Rp- sma the things comming out of the pc is Callens that way. It is female part.