• 1 Post
  • 262 Comments
Joined 5 months ago
cake
Cake day: August 25th, 2025

help-circle
  • My setup doesnt matter, I don’t use Unifi for my main home infra.

    You can use the Unifi device itself. Teleport is just a single click Wireguard service, with no need for port forwarding or additional configuration.

    Last I saw it, you can export the config from the browser for use with client devices, you can use that with wireguard tunnel and set it as always on.


  • I am, though I’m not using unifi.

    Teleport is just Wireguard with unifi stacked on top. You can just export the config and its literally a Wireguard connection. Unifi Teleport is just using their online services to replace a step.

    But teleport (which is Wireguard under the hood) is not meant for an always-on connection, its meant for ad-hoc connections.

    So if you want always on, export the config and run it as a Wireguard tunnel. Its exactly the same service, running on exactly the same device, without using wifiman and allowing for an always on VPN.





  • curbstickle@anarchist.nexustoLinux@lemmy.mlReplace Windows, Excel needed
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    edit-2
    5 days ago

    If its for work, its on a work machine.

    That said, I have a lot of efforts (personal projects with hardware I get given, or side work not related to my job) where I need specific software. For those, I have a VM tailored to that application that’s been trimmed down as much as possible.

    This let’s me rdp into them, do what I need to do, save to a designated location, and shut the VM down. Since its a VM I tend not to give it network access unless required, and I have USB drive I pass through to the VM.

    This makes sure everything works, I limit the access of MS with local only accounts and win 10 (among other specific versions like XP for a specific piece of hardware, server 2008 for an irritating piece of software I sometimes need, etc).

    All the VMs are on my proxmox cluster, easy to start/stop with a script.





  • No worries

    Like I said, I generally prefer lxc. LXC and docker aren’t too far off specifically in that both are container solutions, but the approach is a bit different. Docker is more focused on the application, while lxc is more about creating an isolated container of Linux that can run apps. If that makes sense.

    LXC is really lightweight, but the main reason I like it is the security approach. While docker is more about running as a low privileged user, the lxc approach is a completely unprivileged container - its isolating at the system level rather than the app level.

    The nice thing about a bare metal hypervisor like proxmox is that there isnt just one way to do things. I have a few tools that are docker containers that I run, mostly because they are packaged that way and I dont want to have to build them myself. So I have an lxc that runs docker. Mostly though, everything runs in an lxc, with few exceptions.

    For example, I have a windows VM just for some specific industry applications. I turn on the VM then open remote desktop software, and since I’m passing the dGPU to the VM, I get all the acceleration I need. Specifically, when I need it - when I’m done I shut that VM off. Other VMs with similar purposes (but different builds) also share that dGPU.

    Not Jellyfin though, that’s an lxc where I share access to my igpu - so the lxc gets all the acceleration, and I dont need to dedicate it to the task. Better yet, I actually have multiple JF instances (among a few other tools that use the iGPU) and they all get the same access while running simultaneously. Really, really handy.

    Then there are other things I like as a VM that are always on, like HomeAssistant. I have a USB dongle I need to pass through (I’ll skip the overly complex setup I have with USB switching), and that takes no effort in virt. And if something goes wrong, it just starts on another machine. Or if I want to redistribute for some manual load balancing, or make some hardware upgrades, whatever. Add in ceph and clustering is just easy peasy IMO.

    The main reason I use proxmox is its one interface for everything - access all forms of virt on the entire cluster from a single web interface. I get an extra layer of isolation for my docker containers, flexibility in deployment, and because its a cluster I can have a few machines go down and I’m still good to go. My only points of failure are the internet (but local still works fine) and power (but everything I “need” is on UPS anyway). Cluster is, in part, because I was sick of having things down because of an update and my wife being annoyed by it, once she got used to HA, media server, audiobook server, eBook server, music server (navidrome as well as JF, yes, excessive), so on.

    Feel free to ask on any specifics




  • What exactly is proxmox?

    Debian with a custom kernel, web interface, accompanying CLI tools in support of virtualization.

    For one, I won’t touch Ubuntu for a server. Hard recommend against in all scenarios. Snap is a nightmare, both in use and security, and I have zero trust or faith in canonical at this point (as mentioned, I’m opinionated).

    Debian itself is all I’ll use for a server, if I’m doing virt though I’d rather use proxmox to make management easier.


  • Business mini PCs with a decent amount of ram in them fit your use case well. And mine, which is why I have a bunch of them.

    The only time ive seen heat be an issue is when they are stacked - to be clear, airflow on those is usually front to back, the problem is the chimney effect. Heat rises. So stacking can be a problem, but I just stick some thick nylon washers between, its worked quite well sticking them on a shelf in my rack. I generally put them in stacks of two, with two side by side, for a total of four per shelf.

    You don’t need to do that right off though with just one.

    If you do get a used one, look for units with 16 or more ram, or bump it to 32gb/64gb (model dependant) yourself. There is usually an unused m2 slot, great for a host os to live if you’ve got a spare (prices suck right now to buy), and typically there is a 2.5" data ssd though sometimes its mechanical or one of those hybrids. Useful storage, but use m2 if you can.

    I prefer the Intel based units so I can use the igpu for general tasks, and if it has a dgpu (I have a few with a quadro in there) I use that for more dedicated transcoding tasks, or to pass through to a VM. For Jellyfin its using the igpu, no need to pass through if youre using an lxc for example.

    Make sure to clean it out when you get it, and check how the fan is working. I’d pull the case, go into the bios, and manually change the fan speed. Make sure its working correctly, or replace it (pretty cheap, the last replacement I bought was ~$15). Any thermal paste in there is probably dried out, so replacing it isnt a bad idea either.

    In terms of what to get, I’d lean towards 6th gen or newer intel cpu’s for most utility. One with a dgpu is handy obviously but not a requirement.

    Personally I am a Debian guy for anything server. So I put Debian on, no DE, set up how I want. Then I convert to proxmox. If youre not overly specific about your setup (like most people, and how I should probably be but I’m too opinionated), you can just install proxmox.

    Proxmox has no desktop environment. Its just a web GUI and the CLI, so once set up you can manage it entirely from another device. Mine connect to video switchers I have to spare, but you can just plug a monitor in temporarily if you need it.

    Proxmox community scripts will show lots of options - I dont recommend running scripts off the internet though, but it will show you a lot of easy options for services.

    Hope this helps!





  • I’d lean toward making something. What depends on what youre good at/interested in.

    For example, we’ve been making Christmas cards. Its just random designs on watercolor paper. Then you cut that paper out into shapes, and take some cardboard to go underneath, and glue it onto cardstock. This particular idea comes from Andrea Nelson, simple watercolor tags and cards.

    The results are great, and a personally written, handmade card… Well to me that beats out most cheap gifts because it has thought and intention behind it.

    You can also make ornaments (there are some great ones like a marbling paint bath for cheap wooden ornaments from craft stores, taking cheap ornaments and repainting them with more details, cheap craft ornaments and doing a chalky finish, felt and glitter, whatever) or whatever else. We do a lot of crafting and repurposing here, in case you couldn’t guess.

    Maybe you could bake some bread, make cookies, a pie, etc.

    You mentioned a plant - what about a cheap planter with some custom work on it?

    Maybe some dining room placemats if youre good at sewing?

    Mugs with the mixings for hot chocolate?

    Diy air freshener with some essential oils?

    It doesnt have to be a lot of money, complicated, etc to be a great gift. One year I printed up an old map of an area my parents lived in, and traced specific roads and important spots I knew about in twine on the map (with a decent bit of glue obviously, then mod podged the whole damn thing).

    So, what things are you into creating? How could that be related to a gift that shows your appreciation?