Skip to content

Welcome

Latest posts: Is TPLink safe? How I took down, and brought back Prod

Contact me, leave a comment below or

Offer me a job: email me please! Contract or otherwise.

Check out my recent activities

Running WebServices:

The deployment files for many of these things are available in the gitlab. Not all of them.

Base Infra

  • Gitlab # This page runs on gitlab pages
  • n8n # Connect API's with a nice graph UI
  • Proxmox # Virtualization
  • Omni # Omni Web Panel for management of Talos k8s clusters
  • My VM Dashboard # Has issues sometimes with flakey dns or flakey ipv6 lan setup. something's funky. (I've discontinued my dashboard application as I'm migrating all my infrastructure over to k8s.)

Middlewares

  • Authentik # Used to protect services, authenticate and configure quota for Nextcloud.

Security

  • Vaultwarden # Store passwords, share passwords with team
  • Wazuh # Monitors all running vm's, docker containers, with suricata
  • SearXNG # Search the internet with privacy and multiple search engines all at once.

Business

  • Zammad Helpdesk #
  • Nextcloud # AIO , Talk, Filesharing, openoffice server integration
  • openmaint # Asset Managemenent, integrated with bimserver, geoserver, alfresco
  • odoo # CRM
  • Invoice Ninja # Invoicing, connects to payment providers to create payment gateways powered by outside provider.
  • moodle # Online school software, integrates with payment providers

Communications

  • bbb # Voice and Video comms (I now use Nextcloud Talk instead)
  • easy-wg # Easy Wireguard service, easily remote in with an ipv4 address
  • iredmail # Webmail based on postfix and iirc dovecot with a few sweet web panels.

Social

  • pixelfed # Self hosted instagram alternative.

Ai

Things migrated or launched to/in K8S

  • Vikunja - Straight forward basic task and project management with lists and boards (EG: Kanban, Gantt, and Table)
  • SearXNG - Search many search engines at once with privacy and fewer ads
  • Headscale - VPN - Self hosted Tailscale control server
  • Odoo - CMS (One for my own use for side gigs and one for my brothers actual real world company that's not very appreciated I guess)
  • Omada - control software for wifi
  • Teamspeak3 Server - waiting for teamspeak 4 but it doesn't seem like they really want to release it.
  • Paymenter - test instance to see if it fits
  • Palworld - Video game server
  • gitea - removed because I'm running gitlab already and kept having issues with my initial setup of postgres with it before I started using postgres-operator

k8s - Other things

  • Velero (And the associated open source UI) - Backups
  • Traefik - ingress
  • Spegel - localish shared image repository to reduce need to download from external sources
  • redis-operator - launch redis and clustered redis easily with k8 CD's
  • postgres-operator - launch postgres db's and clustered easily with k8 CD's
  • metallb - works with the cisco switch to add virtual ip's that point to the ingress so it's easy to route internet and internal traffic and it get to an ingress
  • cert-manager - manages SSL certificates with cloudflare DNS tokens and letsencrypt
  • Prometheus - metrics server ¿and alerting?
  • Grafana - displays graphs and the like for the metrics server(s)

k8s- Hybrid - requires external components

  • cephfs and cephrbd - allows usage of networked cephfs storage to be the storage provider for pods and works with velero for backups. provided by proxmox. Allows s3 buckets on a local scale as well.
  • conduit - Maybe in the future, i started trying to get this going then switched to Synapse for reasons.
  • Jitsi-Meet - Videochat rooms, meetings, et al - replaced by livekit
  • Synapse - provides Matrix
  • Matrix-MAS - Matrix authentication server backed by Keycloak
  • Element-Web - Web based Matrix client
  • livekit - Matrix oriented voice and video chat rooms

Non Webservices

Gaming

  • Sunshine - Running on VM with Kubuntu 22.04 with Steam using nvidia gpu (2x of these). Great performance remote gaming and accessing a desktop.
  • 7 days to die darkness falls server
  • 7 days to die vanilla server
  • palworld server

Communications

  • postfix email egress server on linode

Network Infra

  • 2x Bind DNS Servers
  • Microsoft Active Directory (on Server 2019)
  • unbound dns server

AI

  • discord LLM based text and image generation bot + agents

More Info

Most of these services run on a lightly customized alpine build that enables cloud-init so the proxmox-vm project can have it run the initialization scripts

Forgetting things

I know there's services I'm forgetting, I could look at proxmox and go over more but I don't really want to detail everything here.

Comments with isso

Spam is a good food, but not great to read online. You can feedback below. I need you also to look at some ads to maybe possibly help offset the cost of this shit. Here's some shoes or some shit you like: (leave a comment)

openmaint