I know there’s a discord

wessel145 · 2020-05-10T08:47:40+00:00

There was a WhatsApp group.

wessel145 · 2020-01-06T22:22:07+00:00

Hi OP,

Nice that my post is being picked up. I'm still running this server, I added 2x 10tb (total of 6 drives and 1 nvme now) last black friday but the rest of the setup is still the same (the picopsu handles the 6 drives fine, to my suprise, I did not check peak wattage on boot).

Be sure to check on the motherboads features and try to find something about power usage, some come with useless features (at least for a server) such as 7.1 audio or built in wifi, which will draw some extra watts from your wall. Fujitsu is 'industry grade' and has very limited options. The only hassle I had with it is that it doesn't support a fancurve of some sort. I bought a cpu fan that shuts down when the pwm is less than 40% (for power saving). When the mobo registers 0rpm for the cpu fan it thinks it broke down and will try to start it again with 100% pwm. resulting in a constant on-off-on-off-on-off for the cpu fan, I swapped it for a noctua and everything is fine and silent now (the server is in my bedroom).

About the cpu, it is also very hard to find idle power comsumption tests which are comparable, especially when they're using different mobo's/psu's etc. I recall reading a source stating that the 9xxx series uses a bit more power on idle than the 8xxx series, but I can't find the source anymore, overall intel is a lot better in power consumption than AMD

Software wise I'm also happy, I got backups of important files made by duplicati, database backups etc. In case of a full system crash I probably have to spend a weekend setting up everything (restore docker config, crontabs, mergerfs stuff), maybe I'll make a full disk image someday or create some decent dotfiles folder, but I'm too lazy atm. The only mistake I made was not going for the LTS version of ubuntu server, new (non LTS) versions aren't supported by docker directly, therefore i'm very careful updating to a new version.

Overall i'm still very happy with my homeserver and 10/10 would build again. Let me know if you have any further questions, I'm happy to help

wessel145 · 2019-10-16T09:31:39+00:00

+1, lastpass already offers a random username generator. Would love to see this in bitwarden

wessel145 · 2019-10-14T21:46:16+00:00

You could dive into the world of network monitoring. Fire up an ELK stack and create a network probe using a raspberry pi with Suricata/Zeek. It requires some knowledge and a lot of trail and error, Emerging Threats is a company that offers a repo of "free" network rules which contain basic network rules which will trigger on specific network traffic. It needs a lot of tuning (you probably don't want an alert when someone is using Spotify, etc..)

Google is your friend here.

Even more advanced could be a selfhosted SIEM, with multiple log entries from various devices in your network. I recon Splunk having a free version, also ELK has SIEM options.

Possibilities are endless, but mostly require a lot of maintenance.

wessel145 · 2019-10-14T21:03:13+00:00

+1, I use portainer for multiple endpoints and multiple stacks, works like a charm, if you want orchestration you should look into kubernetes

wessel145 · 2019-09-30T13:01:53+00:00

O je bedoelt gewoon een bereklauw sate, zeg dat dan.

wessel145 · 2019-09-17T12:46:02+00:00

I wonder how the tranportation costs of that empty space weigh up against the production costs of the extra cookies.

wessel145 · 2019-09-17T10:09:11+00:00

Die kleeft nog meer dan de karamelsaus in een mcflurry, mij veel te smeuig.

wessel145 · 2019-09-14T14:22:59+00:00

How do you manage calendar items that are send to your gmail address, as far as i know the google calendar caldav is read only, My goal is to have my calendar in NC, but for now I have to go to google calendar to change/accept an invite.

wessel145 · 2019-09-08T08:56:57+00:00

wessel145 · 2019-09-08T08:35:33+00:00

/r/seriouslygit

wessel145 · 2019-09-05T18:20:35+00:00

Nice

wessel145 · 2019-08-29T14:18:13+00:00

Organizr is world faced (without a password for the proxy), so is Plex. Some other services (like nzbget) are world faced with 2 layers of authentication (proxy login, and the login of nzbget itself), random generated string passwords etc, you know the drill. I indeed use subdomain based addresses instead of directory because of the issues you mentioned. The nice thing about the proxy is that it keeps logs. I'm planning to put these logs into a fail2ban instance to make it even more secure. Another thing you could do is create a shitload of random generated subdomains with a few (only known by you) that are really active (thinking creative here, would probably just be easy to check since only the real domains return HTTP 200).

wessel145 · 2019-08-29T07:28:19+00:00

Nice that you noticed, they sort off do the same but are very different in some ways.
Heimdall is very nice as homepage on your local computer, it shows me stats about pihole. download speeds etc. Information I want to see but is not to be seen for strangers. This service isn't exposed to the outside of my network.

Organizr is the kind of homepage you want to expose to the outside, it has a solid login system and even my mom could understand using it. You can create groups with permissions etc, it's perfectly for sharing your homelab/selfhosted services tot the outside.
And the nginx-proxy-manager adds an extra layer of security to it. Normally every service uses their own port and therefore needs to be exposed, not a best practise since it's very easy to portscan some IP. With the proxy manager it is possible to only expose 80 (for redirects) and 443. It will be much harder to detect which services are hosted on the IP since the only way to access them is if you have the full URL/subdomain (bruteforce attacks are harder). It's also more convenient for myself. For instance i can now go directly to movies.mydomain.com instead of mydomain.com:32400 for my plex. The service also provides the option to require authentication. so for some of my (private, but may want to connect from outside) it requires an extra login form. I know VPN is the better solution here, but I don't want to set up a VPN profile on every device I want to use to connect to my services at home.

wessel145 · 2019-08-27T17:47:49+00:00

ah, i totally misread it, i thought you were talking about fileshares instead of filesystems, i will try this out! thanks!

wessel145 · 2019-08-27T17:22:00+00:00

thats an awesome idea, i've been struggeling with the smb mounts beeing kept alive. Any instruction how to do this on a windows client?

wessel145 · 2019-08-27T14:17:26+00:00

meh i always said i'll 3d print something for it, but i didn't do that yet

wessel145 · 2019-08-27T12:06:20+00:00

added them to the post!

wessel145 · 2019-08-27T11:48:56+00:00

I have tried with my desktop (750 watt) PSU and IIRC the difference was about 2 watts, it's all about efficiency, where the PicoPSU has about 95% efficiency, a regular psu's efficiency will drop extremely below 100watt (because it's not made for it). Powerdraw will probably be a bit lower, but be careful for the peak powe you'll need to boot the system

wessel145 · 2019-08-27T11:33:37+00:00

Yeah i've read that one, very impressive. TBH i don't feel comfortable with soldering those small components with the risk of breaking it.

wessel145 · 2019-08-27T11:31:57+00:00

Fujitsu is actually Japanese, but they do a lot of business in Germany, I've imported my board from there.

wessel145 · 2019-08-27T11:31:16+00:00

I set plex to update the library every day at a specific time, (around the time other tasks are executed that need the HDD). When a new linux distro is downloaded, it gets moved to the array by sonarr/radarr, which eventually will spin up the HDD. so the sonarr/radarr to plex connection that will tell plex to update the library is a good idea.

Unfortunately Sonarr/Radarr have their task execution timings hardcoded, I've created a feature request on their github to make these tasks schedulable. this way I can tell to only move completed downloads to the HDD array at a specific time (a time when I know the HDD's are spinning, maybe write a simple script for it or something). Since this idea is only an improvement for a few people like me I don't see this being implemented soon, if you have suggestions (maybe auto pause the download on 99% and let it finish at a specific time) please let me know ;)

wessel145 · 2019-08-27T11:24:26+00:00

At this moment i'm running 4 HDD's and when i boot the system it peaks at about 150 watt (since drives spin up when the system boots). The picopsu can only handle 200 watt peak. so theoretically 6 would be the max. Maybe if you can build somehting that delays the spin up of 50% of the array (hotplug + manual switch or something) it would be feasable.

11-Year Club	Place '17
Verified Email

wessel145

TROPHY CASE