Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)K

kumi

@ kumi @feddit.online

Posts
3
Comments
108
Joined
8 mo. ago

  • Silent Storage Solutions for Homelab?

    Jump

  • I repeat myself but check out Odroid H4+.

    4 SATA ports and if you split one m2 port you can also put 3 pcie3 nvme (you could split one port up to 4 but just one lane per drive is bit sad).

    Same idea as the rotating miniPCs on Ali except you actually have a shot at BIOS upgrades and not as dodgy supply chain.

    https://www.hardkernel.com/shop/odroid-h4-plus/

    If you put BIOS in power efficiency mode it can run fanless as long as the ambient temperature isn't balming.

    If it's really just for NAS this is still more than you really need. You could get away a lot cheaper and leaner with something like the ARM-based HC4.

    https://www.hardkernel.com/shop/odroid-hc4/

    Or check out Jeff Geerlings PiNAS shenanigans.

    The Beelink looks all right. Personally I prefer the flexibility of non-soldered RAM but I guess it's mainly a question of how much of an out-of-box experience you are looking for.

    Seeed Studio reServer is also nice, though that's on the beefier and pricier side.

    https://www.seeedstudio.com/reServer-Compact-Edge-Server-powered-by-11th-Gen-Intelr-Coretm-i3-1115G4-p-5087.html

  • Homelab hardware choices

    Jump

  • Odroid H4+ (Intel N97 4c; comparable to the CPU of that Protectli) and H4 Ultra (Intel N300 8c) also worth considering. Versatile units from a small established Korean maker.

    https://www.hardkernel.com/shop/odroid-h4-plus/

    https://www.hardkernel.com/shop/odroid-h4-plus/

    https://www.hardkernel.com/shop/h3-h2-net-card-2/

    If you plan on virtualizing or running a bunch of containers on it I think it's worth looking at the higher-core models and more RAM. If it's just for OPNSense, such 4c with 8G should be plenty.

    Also, if you can afford, I strongly suggest getting two of whatever you go for and not doing anything important with the secondary. It really sucks if you have some unexpected issue (hardware failures and OS regressions can happen to anything) and don't have anything on hand to replace your main router with. Since you'll be labbing it can also be very freeing to have a testing/dev/staging/playground/debugging device with the same hardware and messing around won't take down your production network. IMO this is higher priority than higher specs if you have to do tradeoffs.

  • Upgrading storage to usb drives

    Jump

  • USB enclosures tend to be less reliable compared to SATA in general but I think that is just FUD. It's not like that's particularly bad for software RAID compared to running with the enclosure without any RAID.

    The main argument for not doing that is I believe mechanical: Having more moving parts mean things might, well, move, unseating cables and leading to janky connections and possibly resulting failure.

    You will kill your USB controller, and/or the IO boards in the enclosures

    wat.jpeg

    Source: 10+ years of ZFS and mdadm RAID on USB-SATA adapters of varying dodginess in harsh environments. Of course errors happen (99% it's either a jiggly cable, buggy firmware/driver, or your normal drive failure) but nothing close to what you speak of.

    Your hardware is not going to become damaged from doing software RAID over USB.

    That aside, the whole project of buying new 4TB HDDs for a laptop today just seems misguided. I know times are tight but JFC why not get either SSDs or bigger drives instead, or if nothing else at least a proper enclosure.

  • Upgrading storage to usb drives

    Jump

  • If you consider ZFS and don't mind having the machine offline for a day or two you could fill it up with real (backups!) or a bunch of representative fake data and run some tests/benchmarks before you fully commit. It depends a lot on how the data is structured and what you're running on it and it's possible it will run fine.

  • MySQL users be warned: git commits in mysql-server significantly declined 2025

    Jump

  • On nginx, most of the upstream work on new features is in Nginx Plus, not benefitting free nginx. Several nginx devs have been disagreeing with the way this has been done and the way the project is being managed and left to work on forks. People who agree with the OP sentiment should look into freenginx and angie.

    https://www.phoronix.com/news/Nginx-Forked-To-Freenginx

    https://mailman.nginx.org/pipermail/nginx-devel/2024-February/K5IC6VYO2PB7N4HRP2FUQIBIBCGP4WAU.html

    https://en.angie.software/angie/docs/

    http://freenginx.org/

  • DNS kicking my ass (Technitium and opnsense)

    Jump

  • The OP is about hosting forwarding or recursive DNS for lookups, not authoritatative DNS hosting (which would be yet at least one separate server).

    I count two servers (one clusterable for HA). How is that a lot for a small LAN?

    More would also be normal for serving one domain internally and publicly. Each of these can be separate:

    • Internal authoriative for internal domain
    • Internal resolvers for internal machines
    • Internal source-of-truth for serving your zone publicly (may or may not be an actual DNS server)
    • Public-facing authoritative for your zone serving the above
    • Secondary for the above
    • Recursing resolver of external domains for internal use

    Some people then add another forwarding resolver like dnsmasq on each server.

  • DNS kicking my ass (Technitium and opnsense)

    Jump

  • It seems the DHCP is handing out the fire wall’s ip for DNS server, 100.100.100.1 is that the expected behavior since DNSmasq should be forwarding to TDNS 100.100.100.333. Why not just hand out the TDNS address?

    You could and that should work but then it's not called forwarding anymore. It does forwarding because that's what you configured. Both approaches are valid.

    I have an opnsense firewall with DNSmasq performing DHCP and DNS forwarding to the Technitium server

  • Upgrading storage to usb drives

    Jump

  • I suspect this machine might be memory constrained and if so zfs might push it to its limits if it's already close.

    If it has <8G and doesn't already have decent headroom I'd think twice about ZFS depending on how its going to be used

  • Upgrading storage to usb drives

    Jump

  • I worry I could be risking data corruption or something swapping to this setup

    I really hope this is just a turn of speech and you're not actually planning to put swap on those HDDs

  • nvidia devices not appearing on boot (proxmox)

    Jump

  • Nope but I guess a workaround would be to make a oneshot workaround-nvidia-gpu.service systemd unit file that runs the command and have the lxc autostart depend on it?

    Might be something about PCI resets that running the command triggers 🤷‍♀️

  • Budgie 11 Desktop Environment Will Be Ported to Qt 6, Development Kicks Off

    Jump

  • BunDGiE LiNuxXx 🤪

  • Debian 13.3 “Trixie” Released

    Jump

  • There are some bug fixes that are relevant for installs and base images. For example, security update in GPG is probably not a big deal for you but might be for someone building and pushing things from these.Kernel, firmware and microcode updates might only affect a small minority of users depending on hardware.

  • Stop using MySQL in 2026, it is not true open source

    Jump

  • Operating and securing Postgres is a steeper learning curve. MariaDB is more forgiving for best-effort shoestring setups without compensating scalability for it.

    As a dev I'm agnostic, as an owner and computer scientiest I prefer Postgres, as a sysadmin or *Ops I will put my hand up for MariaDB any day if I'll be on call or maintain deployments.

  • Cheapest way to back up a lot of data?

    Jump

  • You can replicate across more than one provider and do automated regular monitoring that backups are still accessible.

    If one goes down you hopefully have time to figure out a replacment before the other(s) do.

    Probably not worth it for a bunch of xvid dvdrips or historical archives of full system-level backups but for critical data it's sensible.

  • How are people discovering random subdomains on my server?

    Jump

  • What you can do is segregate networks.

    If the browser runs in, say, a VM with only access to the intranet and no internet access at all, this risk is greatly reduced.

  • LVM question

    Jump

  • LVM itself does not provide redundancy, that’s RAID.

    I think this is potentially a bit confusing.

    LVM does provide RAID functionality and can be used to set up and manage redundant volumes.

    See --type and --mirror under man 8 lvcreate.

  • How are people discovering random subdomains on my server?

    Jump

  • My next suspicion from what you've shared so far apart from what others suggested would be something out of the http server loop.

    Have you used some free public DNS server and inadvertently queried it with the name from a container or something? Developer tooling building some app with analytics not disabled? Any locally connected AI agents having access to it?

  • How are people discovering random subdomains on my server?

    Jump

  • You say you have a wildcard cert but just to make sure: I don't suppose you've used ACME for Letsencrypt or some other publicly trusted CA to issue a cert including the affected name? If so it will be public in Certificate Transparency Logs.

    If not I'd do it again and closely log and monitor every packet leaving the box.

  • Budgie 10.10 Released as the Desktop’s First Wayland-Based Version

    Jump

  • I adored Budgie precisely because it was still on X11 🥲

    Anyway, for a relatively simple and clean holistic GNOME-that's-not-GNOME, it's a very polished desktop. Worth checking out for your F&F.