Hello All! I'm finally getting back to this, many more months later than I planned. Had to do stuff for the house and hardware problems with the TrueNAS box that was supposed to be temporary. I also could not for the life of me find a proper cpu platform to utilize this 128GB of ECC DDR4 I had from a few years ago before I decided the two R730 SFF chassis I have laying around just would not do what I wanted. This is a sort of continuation of my last post. https://www.reddit.com/r/selfhosted/comments/1tixfkq/suggestions_for_nonvpn_external_access_for/
That's solved now. I have a W-2150B CPU with a Gigabyte MW41-HP0 motherboard utilizing all 8 16GB sticks of RAM. Currently the setup is two mirrored SATA DOMs running TrueNAS with (currently) 3x 26TB refurb drives in ZFS1 and a mirrored set of 1TB SATA SSD for Docker, LXE and VMs (currently the only VM I plan for is Home Assistant).
Decided against trying to do the jank of running TrueNAS as a VM inside of Proxmox and giving it all the SATA controllers though I keep second guessing myself I think it's just not worth it for the number of VMs I don't plan to run, I care more about the data.
For external access I'm planning to use the current Oracle Cloud Pay As You Go instance I'm hosting my FoundryVTT on using their Always Free ARM resources (which has apparently been reduced to 2 ARM cores and 12GB RAM but still overkill) as a VPS for a Pangolin endpoint using my Cloudflare domain. Still not sure if I'm going to implement fail2ban and geoblock by themselves or add Crowdsec too. Still trying to figure out how to configure protection for the Docker ports on the other end of the tunnel.
My current thinking for services is to use TrueNAS with Dockhand for the docker apps I need for FoundryVTT, Jellyfin, Audiobookshelf, Nextcloud, Calibre, Palworld with Authentik/Authellia for authentication, and a password manager still not sure which option I'm going for on those last two fronts for passwords I like keypass but no hostable version. It's either that or do the TechnoTim style custom app route though that has the annoyance of having to have the service running to update (which may or may not be a moot point since I have enough RAM to just keep things running)
Suggestions?
[link] [留言]