─── ❖ ── ✦ ── ❖ ───

Plans for my new homelab structure (server & software).

Target

My goal is to implement IaC & GitOps in order to create a reproducible setup.

• IaC & GitOps Control/Update the stack through a git repo
• FQDN Each service’ subdomain should be externally accessible through a reverse proxy

Inspirations

Reddit → https://github.com/onedr0p/home-ops https://luislogs.com/ https://www.lisenet.com/ https://thedatabaseme.de/ https://datastrophic.io/ https://homelab.blog/ https://fredrickb.com/ https://aviitala.com/posts/

Planned Setup

Sites/Locations:

• KV (main)
• KD (office → neodym & abcnas)
• KA (Karlsruhe → RasPi)
• CD (Cloud → ceres)

Server: - 3x PVE hosts (titan, vanadium, neodym) - titan → always-on, for critical services - vanadium → main place for worker nodes - neodym → off-site backup - 1x unraid NAS (datengrab) - 3x Synology NAS (ds918zoy, bernstein218, abcnas) - 1x VPS (ceres) - 2x RasPi

VMs & Services (not containerized): - ControlVM (run Ansible/Terraform/etc from here) - HomeAssistantOS VM (on titan) - TrueNAS Scale 24.10+ with 2TB SSD (2x, on vanadium & neodym) - → not planned anymore, use instead for CEPH or as additional LVM

Dockerized Services: - Media Services (should run on a specific server, for fast local file access) - Jellyfin (movies & series, @datengrab) - Stash (other movies, @datengrab) - Audiobookshelf (audiobooks, @ds918zoy) - Navidrome or similar service (music, @ds918zoy) - (multiple?) eBook/Comic/Manga server → Possible services: 1 - ebooks → Calibre & Calibre-web - Comics - Manga - PDF-Magazines - → Komga → use for everything except ebooks - or maybe Inkheart (poor performance for big libraries?) - DMS like Teedy, Papermerge or Docspell - exhex - Diskover (File Indexing → aggregate to central instance) - File manager - FileBrowser - - Monitoring - HDD-monitoring with scrutiny - monitor performance with Prometheus - monitor logs with Loki or ELK - maybe with Beszel? - Status page with cachet - Backup - Use Offen/docker-volume-backup to pCloud (?) - Homepage - homepage - dashy - other services - Tailscale - FactorioServerManager -

Inventory management with Tailscale

Software

GOAL: IaC → pull from private GitHub Repo (or public Repo + private secrets?)

Tools: - Ansible - Terraform (or OpenTofu) - K3S - standalone Docker on some hosts? - ArgoCD with Hashicorp Vault - Linux VMs under Proxmox (with NixOS?) - Longhorn

Planned Project Steps

Steps required to implement Homelab 2.0

• Stage 1: Proxmox

  • Automate Proxmox bare metal node setup with Terraform/OpenTofu (optional since I already have them set up)
    • Create a Debian VM template with Ansible
    • [ ]
  • Document ‘ControlVM’, from where commands are run
  • Customize Proxmox installation (e.g. Tailscale)
    • Tailscale
    • mount 2TB SSDs as additional storage (LVM or LVM-thin - or CEPH?) (vanadium & neodym)
  • Deploy VMs for K3S with Terraform/OpenTofu (or Ansible)

• Stage 2: K3S

  • (Idea) a K3S worker node as VM in unraid with mounted folders (& GPU?) for local actions
  • …

• Stage 3: external Services (outside of K3S cluster)

  • HomeAssistant (VM on PVE ‘titan’)
    • InfluxDB (on separate partition?)
    • (Idea) separate ‘hassio-helper’ VM as docker-host (InfluxDB, Unifi-Controller, AdGuardHome)
    • monitor power usage of homelab
    • monitor FritzBox
  • Synology NAS ‘ds918oy’
    • …
  • unraid NAS ‘datengrab’
    • Jellyfin
    • …
  • other devices & services
    • WebUI’s of PVE hosts
    • Nous A5T WebUI
    • Unifi Controller
    • AdGuardHome-VM

• iPhone

  • Sync Obsidioan-git with iPhone with iSh
  • …

• .

Resources

K8S and Tailscale

• https://tailscale.com/kb/1185/kubernetes

K3S and Tailscale

• https://devops.stackexchange.com/questions/19394/how-to-setup-a-k3s-cluster-on-netbird-or-tailscale
• https://www.reddit.com/r/k3s/comments/18x370t/cross_cloud_k3s_cluster/
  • https://itnext.io/how-to-deploy-a-single-kubernetes-cluster-across-multiple-clouds-using-k3s-and-wireguard-a5ae176a6e81
• https://angrydome.com/posts/k3s_tailscale/
• https://docs.k3s.io/networking/distributed-multicloud#integration-with-the-tailscale-vpn-provider-experimental
• https://blog.dsb.dev/posts/accessing-my-k3s-cluster-from-anywhere-with-tailscale/
• https://jamhed.net/tech/self-hosting/k3s/
• https://haseebmajid.dev/posts/2023-12-20-til-how-to-use-tailscale-to-connect-to-k3s-pi-cluster/

General K3S resources

• https://docs.k3s.io/architecture

Other notes

• https://github.com/tailscale/terraform-provider-tailscale

─── ❖ ── ✦ ── ❖ ───