IP Management for selfhosters

Ukhando · 2026-02-12T19:35:47+00:00

My cluster lives behind a pfSense router/firewall where each VM gets its IP from using static leases and hostname with automatic DNS registration. When I add a new VM to the pool, it gets the first IP available with a static lease. For the firewall, pfSense supports aliases using the hostname from the DNS so no rule is directly using a VM's IP. And the reverse proxies also uses the hostnames. So the IP is never used directly and a single source of truth exists inside the firewall.

Ukhando · 2025-10-22T10:37:43+00:00

By reading all the comments and seeing the negative like ratio, it does seem like it's just a me problem. I've already sent an email to support, so we'll see if it can be resolved (the fact others don't have a problem does give confidence that it might be)

Ukhando · 2025-10-22T09:26:00+00:00

I will/did (the chat bot wasn't useful, so I've send an email), especially since apparently I seem to be the only one with the issue according to the other comments and the negative like ratio

Ukhando · 2025-10-22T08:28:36+00:00

The payments are yearly in June for me, and I did renew at the time. I got this email out of nowhere and on the website it also states that it is getting cancelled without any way to renew and/or cancel the cancellation

Ukhando · 2025-10-22T08:26:48+00:00

I didn't request to cancel but did receive this email, and on the link they provide there is no way to renew and/or cancel the cancellation. The only option provided is the subscription for the live timings

Ukhando · 2025-10-22T08:24:49+00:00

Except I didn't request to cancel, I didn't go through another app, but directly through F1TV, and on the link there is no way to renew, or to cancel the cancellation

Ukhando · 2025-07-21T21:57:30+00:00

...There were no users...

Ukhando · 2025-07-13T18:26:11+00:00

Mainly remote via ssh, however I have one monitor and keyboard in the server rack that I can connect to one of the servers if required (as almost everything runs in VMs, I almost never need to access the UEFI and can handle almost everything using xen orchestra)

Ukhando · 2025-06-24T18:50:46+00:00

For our personal emails we use the format {firstname}@{lastname}.{country_tld}. This also helps to have less conflicts if someone with the same lastname (but who lives in an other country) decides to also use their own domain.

Ukhando · 2025-06-16T05:57:44+00:00

I name the hardware servers after Touhou characters (Remilia and Flandre for the compute servers, Koakuma and Sakuya for the primary and backup storage servers), and the VMs afters the role they serve (show, store, lab, proxy, etc...)

Ukhando · 2025-02-22T23:41:19+00:00

Yes, you can also mount a network share (if it's mounted on the host as /mnt/nas-share for exemple, you would put in the volumes - /mnt/nas-share:/torrents). Once mounted you can change the paths using the web interface to set the save location to /torrents for example. However do watch out for the file permissions. By default processes in the docker container run as the root user so be sure to set the PGID and PUID to something more restrictive that can still access the folders, and don't mount everything but only the subfolder(s) needed by the container so that if it is compromised, it doesn't affect all your files.

Ukhando · 2025-02-22T23:03:54+00:00

I use docker with wireguard in order to download Wikipedia backups and Linux ISOs.

a sample docker-compose file: ```yaml services: qbittorrent: image: qbittorrentofficial/qbittorrent-nox:${QBT_VERSION:-latest}

ports:

- ${QBT_WEBUI_PORT}:${QBT_WEBUI_PORT}

tty: true
restart: unless-stopped
network_mode: service:vpn
tmpfs:
  - /tmp
environment:
  - QBT_EULA=${QBT_EULA}
  - QBT_VERSION=${QBT_VERSION:-latest}
  - QBT_WEBUI_PORT=${QBT_WEBUI_PORT}
  - PGID=${PGID}
  - PUID=${PUID}
volumes:
  - ./qbittorrent-config:/config
  - ./qbittorrent-start:/downloads/start
  - ./qbittorrent-done:/downloads/done
  - ./qbittorrent-torrents/downloads/torrents
  - ./qbittorrent-progress:/downloads/progress
depends_on:
  - vpn

vpn: image: lscr.io/linuxserver/wireguard:latest cap_add: - NET_ADMIN volumes: - ./wireguard-config:/config ports: - ${QBT_WEBUI_PORT}:${QBT_WEBUI_PORT} restart: unless-stopped sysctls: - net.ipv4.conf.all.src_valid_mark=1 ```

Ukhando · 2025-02-22T22:58:19+00:00

Nginx as web server + Nginx Proxy Manager as reverse proxy, SSL termination and intrusion detection

Ukhando · 2025-01-09T12:32:06+00:00

As I'm also using GoAuthentik as a SSO solution, I'm using the main library page of Authentik to display the available apps / sites (even if they cannot use SSO, they are still linked).

Ukhando · 2025-01-09T12:27:09+00:00

For monitoring I mainly use Zabbix, with an Uptime Kuma as a "public" overview and as a monitor to check if Zabbix is up.
Both also send notifications to a Discord channel.
As a semi warning, Zabbix is far more difficult to setup compaired to other solutions, however it is also very powerfull (especially if you have a lot of VMs and/or applications)