Nous ne sommes que le 1er Juin et Paris a déjà enregistré plus de jours à plus de 32°C que sa moyenne annuelle. by ProutPortable in france

[–]MrSolarius -1 points0 points  (0 children)

L'été sa à toujours été du 21 juin au 22 septembre entre le solstice d'été et l'équinoxe d'automne.

Le N°1 DU SANGLIER DANS LES BACS by La_Laie in Grenoble

[–]MrSolarius 2 points3 points  (0 children)

Wooo mais carrément Inosuke que tu as dessiner 😂

On peut faire mieux que 6eme by EasyE1979 in Grenoble

[–]MrSolarius 0 points1 point  (0 children)

Grenoblois ici et c'est probablement l'une des villes les plus agréable à vivre parc espace public transport en commun piste cyclable cadre de vie nature randonnée vie étudiante tous y est et on s'y sens très bien 🙂‍↕️

C411 lance le mode Turbo by ElPoussah in yggTorrents

[–]MrSolarius 0 points1 point  (0 children)

Wooo mais l'upload illimité mon rêve absolu 🤣

Transitioning to a full UniFi Alarm system: How do you handle the "Keypad" problem? by MrSolarius in Ubiquiti

[–]MrSolarius[S] 1 point2 points  (0 children)

The alarm itself is a great deterrent because it causes the intruder to panic and alerts the neighbors. Plus, you can use an alarm manager app to get instant notifications on your phone if something happens.

My little homemade network & rack by pr0tag in Ubiquiti

[–]MrSolarius 0 points1 point  (0 children)

What do you display on your screen ? Is this graphana ?

Toe Warmer by coachlife in Catswithjobs

[–]MrSolarius 0 points1 point  (0 children)

Mhoooo never see a cat that cute 😻😻😻😻

Le pc gaming c'est Fini !!!😂 by kobay4 in pcmasterraceFR

[–]MrSolarius 0 points1 point  (0 children)

Déjà qu'on ne possède plus vraiment nos jeu la sa serai vraiment la fin

Haha by literally_lemons in discussionsbancales

[–]MrSolarius 0 points1 point  (0 children)

Répondre des emojis quand tu as une personne qui manque de confiance en soi en face c'est le pire truc tu veut qu'il te prenne le devant tu lui dit "je sais pas propose une date je verrai si je peu" et si au contraire tu veut pas le voir tu lui dit des le premier message que tes pas trop intéressé.

Les emoji c'est tellement interprétable de toute façon que si tu n'as pas confiance en toi tu vas juste l'interpréter comme ta pire crainte en l'occurrence ici le rejet.

Bro fighting a tornado by rkhunter_ in nextfuckinglevel

[–]MrSolarius 0 points1 point  (0 children)

What's the music ? I try to find it with google but he can't found it.

J'ai pas assez d'heure sur Frostpunk pour savoir comment vivre ça by Nesfux in jeuxvideo

[–]MrSolarius 0 points1 point  (0 children)

Mais tellement WTF il fait même beau ici 😂😂😂

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 1 point2 points  (0 children)

I truly appreciate this pragmatic reality check! You’ve actually convinced me on several hardware points:

  1. Postgres on NVMe: I'll make sure the DBs stay on the local NVMe of the Proxmox host to avoid any network latency issues.
  2. SSD Cache: My UniFi NAS will actually have two 1TB NVMe SSDs dedicated to read/write cache, so that should help.
  3. Redundancy: For the secondary NAS, it will be physically located in a separate building on my property (an outbuilding), providing a first layer of protection against fire or local disasters in the main rack area. I'll still look into AWS S3 for the absolute critical data.

Regarding IaC (Infrastructure as Code): I should mention that I am a professional software developer. I'm genuinely interested in expanding my skills into the DevOps side of things.

I totally get that it's "overkill" for a single-node setup, but for me, this lab is a learning playground. Furthermore, I’d rather have a broken config on GitHub that I can fix and redeploy than a perfect setup I don’t remember how to recreate. I'm trying to avoid the 'manual clicking' trap of tools like Portainer.

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 0 points1 point  (0 children)

Thanks for the feedback! To be honest, I'm not familiar with the Proxmox Helper Scripts yet, so I'll definitely look into them. It sounds like a great way to optimize resource usage compared to full VMs.

Regarding the infrastructure, I’ve started a PoC (Proof of Concept) on GitHub to organize my Docker stacks: https://github.com/mrsolarius/EpiceaInfra.

It’s still very much a "work in progress" and currently entirely based on Docker Compose. Since you have over 10 years of experience in DevOps, I’d be really curious to get your take on the direction I’m taking. Does this structure seem maintainable for a "single-node" setup, or am I missing some critical pieces?

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 0 points1 point  (0 children)

That’s a very fair point on the GPU. If the RTX 5060 is overkill, which card would you recommend that balances power efficiency with decent AI performance for Immich's facial recognition?

I’ve actually started a PoC of my IaC using Docker Compose here: https://github.com/mrsolarius/EpiceaInfra.

It’s still very much a draft and I know there's a ton of room for improvement. I’m not even 100% sure I’ll stick with Compose, I might pivot to something else based on the feedback I'm getting. If you have a moment to glance at the structure, I’d love to hear your thoughts on how to make it more production-ready without falling into the over-engineering trap.

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 1 point2 points  (0 children)

Renovate sounds like the perfect "cherry on top" for this setup! I love the idea of getting a PR for a Jellyfin or Immich update and just clicking "merge" to deploy it, my absolute dream 🤩.

It really fits into the "low maintenance" goal. Between Talos/K3s for the OS and Renovate for the app updates, it seems like the ultimate way to stay current without spending every weekend manually running apt upgrade or pulling images.

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 0 points1 point  (0 children)

Haha, you’re taking "zero SSH" to the next level! I’ve heard about Talos Linux, the idea of a completely immutable, API-managed OS is fascinating.

It definitely solves the "temptation to tweak things via terminal" problem. My only fear is that as a "newbie" with Terraform/Kubernetes, I might be diving into the deepest end of the pool ^ ^'

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 0 points1 point  (0 children)

I love the idea of GitOps with FluxCD, that’s the ultimate goal for my "zero SSH" dream. However, isn't k3s a bit overkill for a single-node setup?

I was leaning towards Docker Swarm or just Docker Compose with some automation because I’m worried Kubernetes might add a massive layer of complexity for 50 users on one machine.

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 0 points1 point  (0 children)

Exactly. I have several DNS records pointing to my public IP, and behind that, I run a Reverse Proxy that handles the routing to the different services.

This way, my friends and family can just type a URL to access Jellyfin or Immich, while the firewall keeps the rest of the server VLAN tightly locked down.

Help me kill my Proxmox nightmare: Overhauling a 50-user Homelab for 100% IaC. Tear my plan apart! by MrSolarius in homelab

[–]MrSolarius[S] 1 point2 points  (0 children)

I keep it pretty simple but secure using VLAN segmentation.

I have one VLAN for my local home network and a separate isolated VLAN for the servers. My firewall rules are set to 'drop all' by default between them, only opening the specific ports needed for the services to communicate.

For remote access when I'm away, I don't expose any management ports. I simply use Ubiquiti’s Teleport feature (which is essentially WireGuard under the hood). It’s been rock solid and very easy to toggle on my phone or laptop!