I've been around selfhosting most of my life and have seen a variety of different setups and reasons for selfhosting. For myself, I don't really self host as mant services for myself as I do infrastructure. I like to build out the things that are usually invisible to people. I host some stuff that's relatively visible, but most of my time is spent building an over engineered backbone for all the services I could theoretically host. For instance, full domain authentication and oversight with kerberized network storage, and both internal and public DNS. The actual services I host? Mail and vaultwarden, with a few (i.e. < 3) more to come. I absolutely do not need the level of infrastructure I need, but I honestly prefer that to the majority of possible things I could host. That's the fun stuff to me; the meat and potatoes. But I know some people do focus more on the actual useful services they can host, or on achieving specific things with their self hosting. What types of things do you host and why?

Hello! I am migrating some services from an old cloud instance to my homelab. The cloud instance was running NextCloud and as I don't really need the entirety of NextCloud, I'm moving to individual services. It's now time for me to move the most important thing from this NextCloud instance: my calendars and contacts. I'm looking for a good containerized service to run this. I've taken a look at both Baikal and Davis, but both seem to have issues running rootless. As I have Kerberos throughout my network and am storing the persistent volumes on an NFS share, I prefer to run all my containers under dedicated service accounts. This also means that I would like the DAV server to have LDAP or IMAP authentication. I am also using podman quadlets rather than docker compose, but I can figure out the translation on my own. Worst case scenario here is I just run Davis and talk to the dev about the issues I have (which will probably be done anyways), but I'd like to get something up and running sooner rather than later. Any solutions would be greatly helpful. If there isn't a good containerized solution, I'm also willing to make an LXC or VM but I'd prefer to stick to containers. Thank you!

So this is an interesting one I can't figure out myself. I have Proxmox on a PowerEdge R730 with 5 NICs (4 + management). The management interface is doing its own thing so don't worry about that. Currently I have all 4 other interfaces bonded and bridged to a single IP. This IP is for my internal network (192.168.1.0/24, VLAN 1). This has been working great. I have no issues with any containers on this network. One of those containers happens to be one of two FreeIPA replicas, the other living in the cloud. I have had no issues using DNS or anything else for FreeIPA from this internal network nor from my cloud network or VPN networks. Now, I finally have some stuff I want to toss in my DMZ network (192.168.5.0/24, VLAN 5) and so I'll just use my nice R730 to do so, right? Nope! I can get internet, I can even use the DNS server normally, but the second I go near my FreeIPA domains it all falls apart. For instance, I can get the records for example.local just fine, but the second i request ipa.example.local or ds.ipa.example.local, i get EDE 22: No Reachable Authority. This is despite the server that's being requested from being the authority for this zone. I can query the same internal DNS server from either the same internal network or a different network and it works handy dandy, but not from the R730 on another network. I can't even see the NS glue records on my public DNS root server. I'm honestly not sure why everything *except* these FreeIPA domains works. Yes, I have the firewall open for it and I have added a `trusted_networks` ACL to Bind and allowed queries, recursion, and query_cache for this ACL. The fact it only breaks on these FreeIPA subdomains makes me think it's a forwarding issue, but shouldn't it see the NS records and keep going? It can ping all the addresses that might come up from DNS, it's showing the same SOA when I query the root domain, it just refuses to work from my IPA domains. Can someone provide any insight on this please, I'm sick and tired of trying to debug it.

Hello! I have Proxmox VE running on a Dell R730 with an H730. Proxmox manages the disks in a ZFS RAID which is exactly how I want it. Because I intend for this server to have a NAS/file server, I want to set up a container or VM in proxmox that will provide network storage shares to domain-joined systems. Pretty much everything in my lab is joined to FreeIPA, so I'd like to use the IdM features with my file server. I have given TKL FileServer a shot but it really didn't seem up to snuff with what I wanted. I am not looking for a NAS solution that will require me to pass through the RAID controller and disks to Proxmox, as I want Proxmox managing the ZFS pool. I can set up an NFS/Samba server in a container, however in trying to do so I was running into issues (due to it being an unprivileged container) that I can probably figure out but I want to see if anyone has any recommendations first.

I recently purchased a Dell PowerEdge R730 at a killer price, and intend it to be the cornerstone of my home lab. I plan to use it as both a NAS and a container server so I can set up whatever I want with it. I'm a bit unsure of what a good setup here looks like, so I'm hoping for a bit of guidance. As my R730 has 16 drive bays, I intend for 10 of those to be high capacity HDDs for the NAS with the remaining spots for SSDs for the containers. The R730 will also have a PERC H730 RAID controller. I want a full featured NAS solution (although I am open to more lightweight solutions) so my go to thought is TrueNAS. My plan was to install Proxmox and run TrueNAS on top of it, but I am unsure if this is the best method. Does anyone have any insight on how well this works or if there's a cleaner solution? Addendum: Anyone have any recommendations for RAID setups? I currently have 4x900 GB 10k SAS Dell Enterprise drives but I intend to bump that up to 10x900 GB over time. I'd like to be able to add these without much hassle, but I'm unsure what to go with. It seems that ZFS can handle it well alone, but I don't want to have gotten the good raid controller for nothing so I'm wondering if using ZFS with the RAID controller in HBA mode will be more worth it than a dedicated RAID setup. And if I'm using a RAID setup, should I go RAID or unRAID? If I go RAID, is RAID 01, 10, or 60 a better option here? Based on my research, it sounds like I'll need a lot more drives for a proper RAID setup and it'll be less flexible, but I would like some second opinions.

Cross Posted from one of the Ubiquiti communities

I have an existing website that I use for all sorts of things. I was a bit more of a sucker when I bought the domain so I also bought a wildcard SSL cert for my domain instead of using LetsEncrypt. I use the `home` subdomain to link back to my home network where I'm in the process of setting up a FreeIPA domain. In order to make sure the SSSD works properly, I read that I need to LDAPS, and for that I'll need some certs. I know FreeIPA generates its own certs, but these are self signed. I'd like to have my certs actually be trusted as theres a reason this is on an actual domain. However when i try to add my certs with `sudo ipa-cacert-manage -t 'C,,' CERT_BUNDLE` I get an issue with one of the certs (I know which one) for using an insecure algorithm. And (expectedly) I can't add the other certs as this is part of the CA chain. So I read to try renewing with the `external-ca` option, and now I have a CSR from FreeIPA but I'm unsure if I can sign it with my SSL cert. Any guidance or help is vert much appreciated. I may have buggered my install in trying to figure this out, but I suppose we'll find out. Update: It looks like I wasn't doing anything wrong; the root CA cert is SHA1 signed which seems to be my issue. I'm setting up everything with lets encrypt going forward and won't be buying a cert again unless i genuinely have a reason to.