That sounds like a great idea.
At the moment I am using Openmediavault as a VM within proxmox - I pass my HDDs through to this VM. Openmediavault let’s me do all the stuff I want to: Share folders via SSH, NFS and raid-management.
Do you know if I can do the same with proxmox directly? Do you maybe have a link where this way is described in detail?
Sorry to hear, I feel you:
I wanted to delete all .m3u-files in my music collection when I learned:
find ./ -name "*.m3u" -delete
-> this would have been the right way, all .m3u in the current folder would have been deleted.
find ./ -delete -name "*.m3u
" -> WRONG, this just deletes the current folder and everything in it.
Who would have known, that the position of -delete actually matters.
I bought a used Synology before knowing more about NAS alternatives. I hated every minute with it… Because it was a bit older, security updates could stop anytime. And using the proprietary OS felt even more unsave. Who knows what backdoors are build in there? I sold it after I found out that there is no way to install a custom OS or any alternative to the proprietary version.
Edit: found a picture of it:
I am a total beginner in this regard, but maybe maybe this could help you:
Check out PBR - policy-based-routing. On OpenWRT there is an app for this task, vpn-policy-routing (together with luci-app-vpn-policy-routing for a GUI inside LuCi). This app helped me to route all traffic coming from my PiVPN to the WAN interface, instead of my commercial NordVPN. Now at home all my traffic goes to NordVPN and when I am not at home I can easily VPN into my home network.
https://openwrt.org/docs/guide-user/network/routing/pbr
Other than that, the OpenWRT Forum is very helpful, don’t hesitate to ask your questions there.
That summarized my situation pretty good. Since a year now I switched everything to Linux, selfhosting seems to be a natural extension of that.
May I ask, since you have a very beginner-friendly way of writing:
I run a separate NAS with an SMB share.
Why did you choose SMB instead of NFS? I read here that NFS is very efficient and fast.
Docker good
Many people here have very convincing arguments for docker. While checking it out I saw that it uses partly proprietary licenses. Why are so many people so sure that docker won’t pull a ‘Unity-stunt’ and make their knowledge about docker obsolete?
LXC is more efficient, but it’s harder to run docker in.
I meant to install a Jellyfin LXC, if there is such a thing, without docker involved. Is that possible?
I understand that I can use a VM to run docker, but:
Wouldn’t make a LXC more sense than a VM with docker inside? And what are the advantages of running jellyfin in a container instead of a normal installation? The VM is already kind of a container, what benefits do I get from yet another container inside? I am curious to learn more!
If anyone stumbles accross this post, here is how I solved it for me:
PiVPN doesn’t need any special firewall-treatment in OpenWRT, just use port forwarding (Source zone: WAN, Destination: LAN, with the Port you chose, 51820 is the standard for wireguard)
A special problem I had: I used NordVPN on OpenWRT to tunnel all my traffic through there. When I connected the PiVPN, it didn’t work at first. I had to use something called PBR - Policy-Based-Routing to send all my traffic from the PiVPN to WAN. It was easy with the openWRT-app vpn-policy-routing plus luci-app-vpn-policy-routing
It’s great that it works for you! For me every recommendation of networkchuck that starts with ‘and its free! You just have to sign up for…’ is a pointer to search for ‘open source alternative for…’.
That is how I found out about a Raspberry Pi with pihole and piVPN installed on the same device, using this manual. Pihole blocks ads, with piVPN you can log into your home network using the wireguard protocol.
I thought it was easy to set up, but of course it depends heavily on the time you can and want to invest. So Twingate can be the right solution for you, but I am often impressed by the excelent free software solutions that are out there.
I just started to build something here! My setup so far: Raspberry Pi 4 running Home Assistant OS.
On the GPIO-Pins I have a Module sitting that goes with the name RPI-RF-MOD. Now the Home Assistant-Pi works as a CCU3 base station for all my homematic IP gadgets.
On Home assistant I use the add on Raspberrymatic to connect to different Gadgets (Power Plugs, Thermostats, Window-Sensors) which then again are introduced to home assistant with the help of HACS Homematic(IP) Local.
Now it’s working! I plan to automate my thermostats with the HACS Better Thermostat.
It was a lot of reading for a beginner like me. But with small steps and a lot of time everything is actually quite comfortable to reach. And most important: the devices can’t phone home, nothing is able to connect to the internet directly.
Thanks! I think I get too hung up on the VPN-part. If I had a setup where I open one Port to a Pi which is set up as a nginx reverse proxy that redirects the connection to my different services depending on the URL - homeassistant.myserver.com, backup.myserver.com,… - would that be considered a VPN?
Piwigo loocks great. How does it compare to Immich?