wierd nitpick, pihole has a lot of writes for logs, and QVO drives don’t like writes, i’d swap that for an EVO or smtn else entirely, gorgeous otherwise
Quick FYI for folks looking for a learning opportunity - if anyone is looking at this as a professional learning experience, this would be far, far too confusing and has entirely too much info. If this were a complex banking system, for example, this would be broken down into 3 or 4 different diagrams, with a dedicated diagram for each of the key systems as well, and info like IP wouldn't be included. (Just had to re-do a bunch of diagrams for one of the largest banks in the world, because they had grown to be incredibly complex like this.)
For a homelab though, I love it. I especially like the very unusual color scheme because all the colors complement each other very well. OP, you have a good eye for color.
pretty cool, im sure its been said and probably you just done care, but why is ther hardware so separated, i mean why is like that single proxmox box that is doing just about nothing other than eating 400w idling with those dual xeons, instead of moving those functions into docker/q or vm on main desktop etc.
also maybe im blind but wheres your fw/routers at? I'd assum its your sc510 doing it but it only seems to have ovpn and unbound on it.
also curious, how and where do you actually cloud backup to? do you just backup the 30tb array or all 150t? this is just going to google? arent they pretty terrible for bandwidth throttling when trying to retrieve data back? did you ever test it?(not talking shit, just actually curiious if I could setup similar).
HOLY SHIT‼️ I wish I was that smart. I mean, I don’t even have a network switch or VM environment. That’s like a very time needed solution. I have a 16 yr old daughter, 5 yr old son and an almost 2 yr old daughter. I don’t think I could find time working remote and building that. How long have you been at it and how much do you think you spent in money minus your time?
I salute you sir‼️This old man (55) can’t hold a candle to your impressive setup. I’m jealous and would almost want to pay someone or have a friend help me get started. That’s my problem, I think too far in the weeds and ahead to just start.
It's only been a bit less than a month since the last diagram update, but I've done a lot of rearranging!
As per usual, diagram and shape libraries for those of you that want to check it out! Ansible playbooks are also on GitHub, though they still need to be updated to fit the new migration to Proxmox.
The new server layouts have been inspired by /u/rts-2cv's modified version of /u/gjperera's own template.
Also, there are a few easter eggs in the diagram now. Feel free to see if you can find em!
The obvious
Many of y'all have mentioned dark mode. Took me a while to get the colors to look good, and I'm still not sold on the colored server blocks for the VLANs, but I don't think they look awful. It's certainly harder getting things to look good for those backgrounds than it is in light mode.
Diagram updates
Hardware specs
I've wanted to showcase hardware specs for a while, and finally came up with a decent looking way to do it.
Services
Hopefully, this makes it a bit clearer as to what things that might not be standard I'm running in certain situations.
Core updates
OPNsense
Heard about the shenanigans Netgate has been pulling for a while now with pfSense, but the nail in the coffin was when someone couldn't reinstall Home/Lab due to an invalid license, and found out about the cancellation of that program via support ticket, because no official announcement was made at the time.
Anyway, I set up OPNsense from scratch, backed up pfSense config, and combed through it and manually recreated everything. Somehow total downtime was less than 2 hours.
Removed remote access VPN
The remote access VPN is no longer needed, and since I can access things via Tailscale, I removed the tunnel and made one less hole I have to poke in the firewall.
New™zirconium Optiplex server
I've recently inherited an Optiplex 7050 Micro that was given to me. Nothing too powerful, but I slapped 16GB of RAM in it, and it now serves its duty running Home Assistant.
In lieu of moving Home Assistant to the 3020, I've elected to install it here. This lets me tuck this in on a different UPS from the rack. While the HA dashboard will be down if the rack goes down, cause there won't be network access, Zigbee most importantly should still work. Which means that maintenance on the servers or the UPS in the rack won't disable my lights from working.
Zigbee stuff
On a related note, I migrated all of the lights I have from the Philips Hue bridge to Home Assistant on zirconium and now I can theoretically rip that out of the rack. Frees up a plug on the PDU, and it gets rid of the second Zigbee network, so in theory everything should work a little bit better.
But holy shit, compared to Hue stuff just working on their bridge and the app, I spent so much time getting lights working again. Still don't have a reliable way to cycle through scenes on the dimmers, but I have on/off and brightness working for now, so that's the thing that matters.
Network updates
DN42
So this whole thing is new to me, and I'm still in the process of getting things up, but I have an ASN with DN42 now, and have peered with someone, and can see routes. The curious thing I cannot figure out is that from OPNsense, I can ping my peer on the other side of the VPN, and I have routes advertised to me via BGP, so it should know where everything is, but I can't ping anything on the DN42 network.
If someone knows how I might fix this, that would be awesome!
VM updates
Debian development environment
I've had some weird issues with upgrading Python on Ubuntu, and migrated to Python 3.12 for one of my projects. As a result, I've added a Debian based VM on my computer that has Python installed where I can compile Python 3.12 things.
To Do List
Fix my Ansible playbooks, and properly write them to do more things. One of these days, I'll get around to it.
Hey I loved your diagram but can I ask you for guidance on how to use and setup proxmox because I'm having a tough time, also can I steal the FAQ? It was 10/10
I noticed it before but is there a specific use case / reason you're running some docker containers outside stacks? I noticed on nitrogen that pihole is not inside a stack, or plex & portainer. The same for oxygen where you're running unifi-controller, homarr and a few others outside compose files.
Perhaps an idea to add your stack name to the information, so it's clear why they're left out of the stack? As on nitrogen I'd call it a media stack but then would include Plex as well. Unless it's a download stack, what would explain why Plex is not part of it ;)
Another Q but perhaps already answered somewhere is what (and it's more a general question) people decide to run multiple VMs with multiple docker stacks per VM instead of having one machine and have all docker stacks on a single VM/system?
I noticed your Aqara Vibration Sensor in laundry room.
Had the same idea but I was a bit in doubt if it was the right solution for detecting when dryer and washer was running. How is it working out for you? (if that is your intention)
I'm super curious what data it emits, how frequent, if you can detect it etc
First of all, had to set the sensitivity to 1, which is the highest. Default is 11. Second, I only want it to trigger if we're changing states. That is, from on to off, not just opening and closing the door. So the solution is to create a binary sensor with delay_on and delay_off so that it only changes states when you go to the on or off state for that length of time.
My initial idea was 5 seconds on, 5 off, which eliminates the door opening and such. The only thing to be mindful of is that the default timeout is 60 (65?) seconds, so once it reads, it won't trip again until the timeout expires. Translates to if you turn the dryer on for 10 seconds and then off, you don't get the off state to trigger until 60 seconds after it turned on because the sensor doesn't poll that often.