I thought of a weekly thread to post about what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you read.
So I decided to just try it. Maybe we find a format that works! It doesn’t have to be me, feel free to create this post on Sunday if it’s not up already.
No issues at the moment but need to update a few containers when I get the chance. I also need to set up contacts sync in radicale for the address book and integrate it with Thunderbird and davdroid.
In the near term I’ve been working on a plan to make sure my keepass db is accessible to my SO and family in the event of my demise. I recently lost a dear friend and had to gain access to his stuff for his family, luckily he didn’t have the linux partition encrypted so I got a recovery shell then remounted the disk and changed the password and could then also mount the windows partition once I logged in.
It made me think as all my stuff is encrypted and there is no way someone would guess it nor crack it so I’m writing documentation and leaving it with family members.
The documentation explains how to use keepass and who to contact for support. Im leaving the db with family members and the password with a select few people that dont have the db. My SO will have access to all the info too.
I’ll update the db periodically and give them a newer version but keep the same password
I encourage you all to consider this too.
I’ll just start! Personally, I’m tinkering with my local network to create a subnet for my homelab.
I want to set up Lemmy and Audiobookshelf next, but I want to tweak the infrastructure a bit before hosting more stuff.
Before the firewall thing, I set up authentik and am integrating it in more services. Migration was mostly straightforward so far in Bookstack and Paperless. Also the proxy authentication is pretty cool, finally being able to ditch basic auth in Prometheus was cool.
Majority of
openrc/hardened/selinuxbinhost setup is done, need to figure out the small things.Lemmy was also giving a bit of a headache, fiddled with limits some more.
I’m fairly certain there’s been an attempt to play with some opnsense config, but there was only time to install the updates. Or maybe this was last week 🤔
I’m currently reconsidering using a couple mikrotik for some layer 3 hardware offloading.
Not really homelab, but close.I have a project that gets integrated with another network for an event. I’m thinking of using 2x crs504 (cause I’m using mlag for servers, think vrrp or whatever for “public” (it’s all internal) ip) and seeing if I can get l3hw working as a router.
While I could sit on a subnet of the “host” network, having a gateway that traffic goes through allows me to test and prove everything for my system in my homelab, with just the final integration being a do-in-a-time-crunch problem.
I’m already using the crs504s for networking (I bought them ages ago, thinking 25gbps was going to be as easy as 10gbps. It’s all running at 10gbps), and this saves having to use something as a router, cuts down on rack space, all sorts of benefits. I think.
Anyone have any experience with mikrotik l3hw offloading?My actual homeland is just a NAS and some networking. It’s a small flat, it’s just me. Not complicated, no need to give me more headaches!
Currently still fixing alpine Linux lxc running docker that decided to stop being able to network after a PVR update.
I’ve managed to migrate my services to debian-based docker Lxc, but it bothers me that I can’t figure this out.
Best I have so far is that flushing the iptables in alpine lxc works temporarily.
I set up Affine and Kanboard to help with various projects. I got fed up of Notion, Trello, and/or a git repository full of documents.
I used to host kanboard for a while, maybe I should set it up again for my homelab
I just set up some geofencing on pfsense, found alot of traffic that I didn’t know was happening. That freaked me out.
Interesting, I think I should do the same for the services that are only used to people real close.
I kinda-sorta finalized my migration to a smaller setup with my mail+web server. I’ve been running a small MSP business for several years and as customers flee right and left mostly to microsoft (due to 365 setup pricing) it’s been in a decline for quite a while. So, I finally pulled the plug and shut down the business side of things and downscaled that to a single VPS with a handful of domains, email service and a few simple wodrpress sites.
Also I kinda-sorta moved all of my photo archive of 20+ years to immich and set up a backup scheme for it, which is now (only) 2-1-1. I also need more storage for that thing, but it needs to wait for few days until paycheck and after that migration I can finish importing all the photos I have laying around. That also requires some reconfiguration of my disk arrays, copying couple of terabytes from system to another and back again, but that’s relatively easy thing to do, but it takes “a while” to accomplish.
After that there’s a long list of things to do, but mostly I’ll spend my free time and money to improve the current setup as quickly as possible in the immediate future.
I replaced my tabbyml code assistant this week with ollama+continue.dev. But I’m having issues with speed. I think this is because I switched from code qwen 2.5B (ish) to Deepeek Coder 9B (ish) and I think I’m pushing the limits of my GPU. Maybe I’ll spend today sorting out which models I want to use and which computers I want to use them on so I dont run into this issue (I’ve got ollama on 2 computers with 3 GPUs shared between them, for a total of 24GB VRAM)
I set up Jellyfin, it was easy but I’m only allowing local network access
I like this thread :-)
I have just checked off a long standing item in my backlog: implementing OIDC on at least two apps. I’ve used a remote keycloak instance for authention for my household and so far so good. Now I’ll try to understand the configurations a little better before take on other items on my backlog.
2012 macbook pro in the cupboard as server. Put nixos on it and it flies now, only wish the Magsafe connection was a bit more stable.
Its got gigabit so should be good.
So, slightly tangential, but I have a failed home automation project this past week.
I have been using an unofficial integration for my mini-splits for a few years. The guy who wrote it likes to disappear for 6 months at a time and it seems like it may be abandoned. It finally stopped working after a home assistant update.
I had bought some ESP based replacement dongles about a year ago and decided to finally use them. Well, not all of the features worked, so I set about writing my own firmware.
That ended up working even less well. I wasted a lot of time and effort trying to get my firmware to work before giving up and just moving to the fork of the original Home Assistant integration for the official dongles.
I hate being beholden to third party stuff like this because I have robust automation setup for my mini-splits and updates can completely break them and be a massive pain to fix.
I’m not sad I tried and failed so much as I’m just sad it didn’t work. I may try again sometime in the future.
Updated my NAS recently and Immich’s database stopped working due to some PostgreSQL update that needs something changed manually, so I need to get my head around that.
Also trying to get a tablet to run as a 2nd satellite for HomeAssistant voice commands and no matter what I do, only the 1st one responds to wakeword… but I tend to give up after everyone’s gone to bed as I’m literally in a room on my own talking to myself…
PostgreSQL Updates AFAIK require manual Backup / Restore of the Database. But better look that up. I think the last one I did was:
- Stop the Application Containers (here the Immich ones, so only PostgreSQL runs)
- Backup the Database
- Stop the PostgreSQL Container
- Change to the new PostgreSQL Version
- Start the PostgreSQL Container
- Restore the Database
- Start the Application Containers
As I said, better look it up first, this is just how I remember the process (but not the backup / restore commands).






