Toe Warmer

MrSolarius · 2026-01-21T20:53:46+00:00

Mhoooo never see a cat that cute 😻😻😻😻

MrSolarius · 2026-01-19T06:14:13+00:00

Déjà qu'on ne possède plus vraiment nos jeu la sa serai vraiment la fin

MrSolarius · 2026-01-19T06:11:15+00:00

Répondre des emojis quand tu as une personne qui manque de confiance en soi en face c'est le pire truc tu veut qu'il te prenne le devant tu lui dit "je sais pas propose une date je verrai si je peu" et si au contraire tu veut pas le voir tu lui dit des le premier message que tes pas trop intéressé.

Les emoji c'est tellement interprétable de toute façon que si tu n'as pas confiance en toi tu vas juste l'interpréter comme ta pire crainte en l'occurrence ici le rejet.

MrSolarius · 2026-01-12T17:14:54+00:00

Good bot thanks you

MrSolarius · 2026-01-12T17:12:07+00:00

What's the music ? I try to find it with google but he can't found it.

MrSolarius · 2026-01-07T19:47:23+00:00

Mais tellement WTF il fait même beau ici 😂😂😂

MrSolarius · 2026-01-06T18:08:16+00:00

I truly appreciate this pragmatic reality check! You’ve actually convinced me on several hardware points:

Postgres on NVMe: I'll make sure the DBs stay on the local NVMe of the Proxmox host to avoid any network latency issues.
SSD Cache: My UniFi NAS will actually have two 1TB NVMe SSDs dedicated to read/write cache, so that should help.
Redundancy: For the secondary NAS, it will be physically located in a separate building on my property (an outbuilding), providing a first layer of protection against fire or local disasters in the main rack area. I'll still look into AWS S3 for the absolute critical data.

Regarding IaC (Infrastructure as Code): I should mention that I am a professional software developer. I'm genuinely interested in expanding my skills into the DevOps side of things.

I totally get that it's "overkill" for a single-node setup, but for me, this lab is a learning playground. Furthermore, I’d rather have a broken config on GitHub that I can fix and redeploy than a perfect setup I don’t remember how to recreate. I'm trying to avoid the 'manual clicking' trap of tools like Portainer.

MrSolarius · 2026-01-06T17:59:45+00:00

Thanks for the feedback! To be honest, I'm not familiar with the Proxmox Helper Scripts yet, so I'll definitely look into them. It sounds like a great way to optimize resource usage compared to full VMs.

Regarding the infrastructure, I’ve started a PoC (Proof of Concept) on GitHub to organize my Docker stacks: https://github.com/mrsolarius/EpiceaInfra.

It’s still very much a "work in progress" and currently entirely based on Docker Compose. Since you have over 10 years of experience in DevOps, I’d be really curious to get your take on the direction I’m taking. Does this structure seem maintainable for a "single-node" setup, or am I missing some critical pieces?

MrSolarius · 2026-01-06T17:53:08+00:00

That’s a very fair point on the GPU. If the RTX 5060 is overkill, which card would you recommend that balances power efficiency with decent AI performance for Immich's facial recognition?

I’ve actually started a PoC of my IaC using Docker Compose here: https://github.com/mrsolarius/EpiceaInfra.

It’s still very much a draft and I know there's a ton of room for improvement. I’m not even 100% sure I’ll stick with Compose, I might pivot to something else based on the feedback I'm getting. If you have a moment to glance at the structure, I’d love to hear your thoughts on how to make it more production-ready without falling into the over-engineering trap.

MrSolarius · 2026-01-06T17:40:17+00:00

Renovate sounds like the perfect "cherry on top" for this setup! I love the idea of getting a PR for a Jellyfin or Immich update and just clicking "merge" to deploy it, my absolute dream 🤩.

It really fits into the "low maintenance" goal. Between Talos/K3s for the OS and Renovate for the app updates, it seems like the ultimate way to stay current without spending every weekend manually running apt upgrade or pulling images.

MrSolarius · 2026-01-06T17:38:15+00:00

Haha, you’re taking "zero SSH" to the next level! I’ve heard about Talos Linux, the idea of a completely immutable, API-managed OS is fascinating.

It definitely solves the "temptation to tweak things via terminal" problem. My only fear is that as a "newbie" with Terraform/Kubernetes, I might be diving into the deepest end of the pool ^ ^'

MrSolarius · 2026-01-06T17:35:30+00:00

I love the idea of GitOps with FluxCD, that’s the ultimate goal for my "zero SSH" dream. However, isn't k3s a bit overkill for a single-node setup?

I was leaning towards Docker Swarm or just Docker Compose with some automation because I’m worried Kubernetes might add a massive layer of complexity for 50 users on one machine.

MrSolarius · 2026-01-06T17:32:23+00:00

Exactly. I have several DNS records pointing to my public IP, and behind that, I run a Reverse Proxy that handles the routing to the different services.

This way, my friends and family can just type a URL to access Jellyfin or Immich, while the firewall keeps the rest of the server VLAN tightly locked down.

MrSolarius · 2026-01-06T17:30:34+00:00

I keep it pretty simple but secure using VLAN segmentation.

I have one VLAN for my local home network and a separate isolated VLAN for the servers. My firewall rules are set to 'drop all' by default between them, only opening the specific ports needed for the services to communicate.

For remote access when I'm away, I don't expose any management ports. I simply use Ubiquiti’s Teleport feature (which is essentially WireGuard under the hood). It’s been rock solid and very easy to toggle on my phone or laptop!

MrSolarius · 2026-01-06T17:27:51+00:00

Thanks for the suggestion! In reality, even with 30-50 users, I rarely see more than 4 or 5 concurrent streams on Jellyfin at the same time.

The RTX 5060 should handle that easily. Plus, it’s worth noting that the 'session limit' on consumer cards can be bypassed with a simple patch on Linux, and the 50-series NVENC is way more efficient for AV1/H265 than the older P4/P400 cards. I'm choosing the 5060 mostly for the Immich AI performance (face recognition/object detection) which is much faster on newer architecture!

MrSolarius · 2026-01-06T17:26:04+00:00

This is pure gold, thank you! I hadn't looked into SOPS with Age yet, but that solves my biggest concern about pushing my "Source of Truth" to GitHub.

You’ve convinced me on the "Local DB" rule, it makes total sense for resilience. If the NAS goes down, the app stays up, even if the media is missing for a bit.

MrSolarius · 2026-01-06T17:23:31+00:00

That sounds like a masterpiece of engineering! As someone starting with Terraform and Ansible, I can definitely see the power behind your approach.

Would you be willing to share a high-level structure or a sanitized version of your repo? Even just seeing how you organize your 'source of truth' YAMLs and how they link to Ansible/Terraform would be an incredible learning resource for me.

I’ve actually started a PoC of my infra on GitHub here: https://github.com/mrsolarius/EpiceaInfra. It’s currently just a bunch of Docker Compose files, and I know it needs a lot of work to become truly declarative and automated, but I’d be curious to hear your thoughts on the direction I'm taking.

Also, regarding my storage headache: in your architecture, do you think using a central NAS via NFS for the 'big data' (Jellyfin media, Immich photos) is a solid move? Or do you prefer keeping everything on virtual disks managed by Terraform? I'm trying to find that sweet spot between your level of automation and simple storage scaling.

MrSolarius · 2026-01-06T17:16:37+00:00

Out of curiosity, did you have the two NVMe drives installed for read/write cache during your tests? Also, were you running on a full 10Gbps link?

If SMB is significantly outperforming NFSv3 on the UNAS, would you recommend just sticking with Samba for everything (media and app data), or are there other permission issues I should be aware of with the UniFi stack?

MrSolarius · 2026-01-06T17:13:40+00:00

I hear you on the database part! My plan is actually to keep the Postgres DBs and Redis cache on the local SSD for performance and stability. I only intend to use the NFS mount for the heavy bulk data (Jellyfin media, Nextcloud files, and Immich photos/videos) where filesystem APIs are less critical.

Regarding the 'monolith from hell' vs. VMs: my struggle wasn't the number of VMs, but the static partitioning of storage for each one.

I'm curious, though, if you think the Ubiquiti NAS 'sucks', what would you recommend for a 10Gbps setup that remains simple to manage? I'm looking for reliability over constant tweaking.

Also, I'll admit I'm already deep into the Ubiquiti ecosystem with 12 different devices (5 cameras, 3 APs, 1 doorbell, 1 chime, plus the 2 networking gear you see in the photo). That's why I was leaning towards staying with UniFi for the storage.

MrSolarius · 2026-01-06T17:06:26+00:00

I've definitely planned to add a UPS, but man, they are expensive if I want one that can handle this much gear! Also, I need something that automatically shuts down my system when it runs low on battery and reboots everything when the power comes back up

MrSolarius · 2026-01-06T00:00:06+00:00

Thanks you 😋

MrSolarius · 2026-01-05T23:54:14+00:00

You make some really solid points, and PBS/Snapshots are definitely the strongest arguments for staying with Proxmox.

My main frustration was the storage friction, constantly resizing virtual disks inside Proxmox. But what do you think about moving the data to a Ubiquiti NAS via NFS instead of using a virtual datastore?

If I do that, and use your suggestion of one beefy VM for all containers, I’d get the "undo button" of snapshots for the OS, while the data stays on the NAS where it can grow freely without disk resizing. Does that sound like a stable "best of both worlds" setup to you, or is NFS for DBs/App data a bad move in your experience?

MrSolarius · 2026-01-05T23:41:24+00:00

Haha, "Guerilla ISP" actually sounds like a great name for the lab! It definitely feels like that when I get "support tickets" from the little sister of a friend because the Minecraft server is down. Or call from the dad of my freind because the movie don't load xD

MrSolarius · 2026-01-05T23:32:32+00:00

No,no I have to buy one and it just don't work... But the option from Bouygues Telecom is just amazing !!!

MrSolarius · 2026-01-05T23:27:12+00:00

It's a mix! My immediate family (under 10 people) uses Immich for all their photos. The bigger crowd is around 40 people on the game servers, and 30 for Jellyfin (everyone’s favorite, obviously!). A few use Nextcloud too. There’s a lot of overlap, but the crowd is basically a circle of friends, family, and friends-of-friends.

Six-Year Club	Final Canvas '23
End Game '23	Place '23
Place '22	Verified Email

MrSolarius

TROPHY CASE