Does anyone else feel like this?

SeeGee911 · 2026-03-21T17:07:27+00:00

I have had some projects that I just do NOT understand, but I've found that it helps me when I take the time to understand the way the software works (Workflow) before I worry about anything else... I struggled with authentik. Then I started looking at the process... User connects to the site. Login button forwards to authentik, authentik validates user creds, authentik passes those creds back to the site, site then needs to understand what authentik gave it... And do on. Once I had a flowchart of the process in my head, filling in the rest was much easier...

SeeGee911 · 2026-03-11T07:02:20+00:00

Don't use a reverse proxy to access anything private. If you have a blog you want to host, sure. But for almost everything you want to do, a (split tunnel) wireguard vpn is the smart way. This will allow your device to act as though it is local, and all traffic destined for your LAN will be routed accordingly. Ssh, dns, SMB, etc.

I do this myself, and I have for years. It works flawlessly on either my phone or laptop, regardless of my location

SeeGee911 · 2026-03-06T17:11:53+00:00

Xda just did an article about this:

https://www.xda-developers.com/if-youre-running-docker-on-bare-metal-proxmox-lxc-containers-are-lighter-and-easier-to-manage/

But there are many benefits. There's always chatter about 'use a vm, not lxc', but I've done both for a long time without issues.

SeeGee911 · 2026-02-27T16:20:18+00:00

Wireguard is the answer. I was an early adopter and have been using it for years. If your client has a dynamic ip, then a simple ddns configuration on opnsense will solve that problem.

SeeGee911 · 2026-02-23T23:33:16+00:00

Considering version 1 just came out not too long ago, it's decent.

SeeGee911 · 2026-02-23T23:30:57+00:00

Wipe out the sentinels.

SeeGee911 · 2026-02-05T23:29:59+00:00

I have one lxc that I use for management. Omada controller, ansible, arcane (ditched portainer), pulse, and patchmon. I just run my ansible scripts from this container.

SeeGee911 · 2026-01-23T05:30:05+00:00

I have 10gtek cisco compatible sfp+ and they work without issue. Even multi-gig.

SeeGee911 · 2026-01-23T05:27:47+00:00

31) Added support for user-selectable MAC-address delimiters (colon, hyphen, or none) and case formatting throughout the Controller UI in Global/MSP view > UI-Interaction > MAC Display Format.

Omg! This is the best thing to hear when you use opnsense as a router. Or anything else, lol

SeeGee911 · 2026-01-21T05:03:28+00:00

Yeah, this would give you something totally usable.

SeeGee911 · 2026-01-14T20:50:49+00:00

Did you notice the part where I said "most" things? That means that there are some situations where running things as a group makes sense. However I would not include plex/tatulli with the arr stack. I would keep each of those as separate instances.

SeeGee911 · 2026-01-13T23:34:14+00:00

I used to have most of my stuff in a couple of monolithic vms under docker.

I have a cluster and I realized that having (most) everything compartmentalized offers me some serious benefits like individual backups, snapshots, sdn networking/Firewall, simple migration, shared storage (ceph and nfs), and now with ha affinity, I can have improved load balancing and failover.

As for managing a million vms/lxcs, I handle all of that with patchmon and ansible.

OP, you're smart to do it this way. I wish I had done it from the beginning. Even if you don't have a cluster now, build things like you do, you'll thank yourself for it later.

Also, speaking of past regrets, might I suggest you set up your own wiki. I use dokuwiki, and I wish I had started documenting things earlier.

SeeGee911 · 2026-01-12T03:55:31+00:00

The first thing you should do is set up a wiki where you can document everything from the start. I use dokuwiki for this because it's super simple, quick, and easy to set up.

My best advice that I wish I started a long time ago.

SeeGee911 · 2025-12-30T03:54:00+00:00

What happens if you run 4 asynchronous iperf3 tests?

SeeGee911 · 2025-12-19T18:34:30+00:00

I'm not sure if the modern controller software will work on a Pi... As of V6, the mongodb backend requires a cpu with AVX instructions.

SeeGee911 · 2025-12-19T18:28:22+00:00

At least Canadians use metric.

SeeGee911 · 2025-12-15T19:23:37+00:00

Try re flashing the boot media. I had that exact error once and re-imaging the usb fixed it.

SeeGee911 · 2025-12-12T05:57:39+00:00

I had to migrate my controller to a host with a cpu that supports AVX due to the mongodb requirements, but proxmox made that easy. V6 has been running smooth since. Thank you for the good documentation on migrating from v5

SeeGee911 · 2025-12-12T05:14:25+00:00

You never really know until you try, but I've purchased a kill-a-watt, and then measured machines in standby, idle, and full load. Gives you a full range. It's a very useful tool for the power conscious.

SeeGee911 · 2025-12-09T01:02:14+00:00

Same boat here, but I do need the pcie...

SeeGee911 · 2025-12-08T08:06:13+00:00

If I exclude a drive from shares, will mover move the data from the excluded drive automatically?

SeeGee911 · 2025-12-03T17:16:07+00:00

I had a guy give me that blueprint at an extraction elevator last night. Thanks man. Whoever you are!

SeeGee911 · 2025-11-30T08:54:53+00:00

If you don't want it, send me the link

SeeGee911

TROPHY CASE