vault backup: 2026-10-14 20:24:34

This commit is contained in:
2026-10-14 20:24:34 +03:00
parent 14c01b0ded
commit 5252a17263
12 changed files with 66 additions and 160 deletions
+10 -6
View File
@@ -46,7 +46,8 @@ OpenMediaVault - настройка сервиса HomeLab. Я только со
Улучшения:
1. Перенести Gitea на OMV 
2. **Backup**. Настроить резервное копирование через PBS (на внешний диск или NAS?)
- [ ]
1. **Backup**. Настроить резервное копирование через PBS (на внешний диск или NAS?)
1. [ ] Backup - Telegram
2. [x] OMV - Backup на внешний диск
3. [x] NAS - отключить бэкапы с внешнего HDD
@@ -54,18 +55,21 @@ OpenMediaVault - настройка сервиса HomeLab. Я только со
2. [x] Backup - синхронизация важных папок (Gitea, HomeAssistant)
3. [x] Backup - Garbage Collection. Настроить автоматическую очистку диска
4. [x] Backup - Prune. Настроить автоматическое удаление старых копий
3. **Security**. Безопасность
2. **Security**. Безопасность
1. [ ] Заменить прямой проброс портов на WireGuard
2. [ ] ИЛИ использовать LXC NginxProxyManager как реверс-прокси с SSL и ограничением доступа по IP через авторизацию
1. [ ] Разобраться с SSL сертификатом
3. [ ] Обратный прокси Traefik в LXC контейнер как systemd unit (LXC позволяет изолировать трафик от ОС)
4. [ ] Сегментация сети VLAN
3. [ ] SSL сертификат для Proxmox
- [ ] Нужна регистрация на хостинге (каком)
- [ ] Нужен Nginx ?
4. [ ] Обратный прокси Traefik в LXC контейнер как systemd unit (LXC позволяет изолировать трафик от ОС)
5. [ ] Сегментация сети VLAN
1. [ ] VLAN10 - сервера, NUC, NAS
2. [ ] VLAN20 - IoT устройства
3. [ ] VLAN30 - Гостевая (обычная сеть)
4. [ ] firewall - настройка межсетевого экрана
5. [ ] Fail2ban - установка (нужна ли)
4. **Services**
6. [ ] Fail2ban - установка (нужна ли)
3. **Services**
1. [ ] Внедрение мониторинга
1. [ ] Netdata -  метрики в реальном времени и оповещения в Telegram. Или разверните **Prometheus + Grafana** (но это ресурсоемко).
2. [ ] Zabbix - cсистема мониторинга?
View File
-1
View File
@@ -33,6 +33,5 @@
"useInternalPlugins": false
},
"HomeLab/Proxmox/Gitea.md": "LiGitlab",
"HomeLab/Proxmox/HAOS.md": "LiHome",
"! Tasks - planned action.md": "LiListTodo"
}
+22 -37
View File
@@ -13,26 +13,12 @@
"state": {
"type": "markdown",
"state": {
"file": "HomeLab/PVE - LXC - Description.md",
"file": "OMV - Guides/omv-backups-guide.md",
"mode": "source",
"source": false
},
"icon": "lucide-file",
"title": "PVE - LXC - Description"
}
},
{
"id": "96473a6740f43284",
"type": "leaf",
"state": {
"type": "markdown",
"state": {
"file": "().md",
"mode": "source",
"source": false
},
"icon": "lucide-file",
"title": "()"
"title": "omv-backups-guide"
}
}
]
@@ -47,12 +33,12 @@
"state": {
"type": "markdown",
"state": {
"file": "HomeLab/PVE - Services - description.md",
"file": "! Tasks - planned action.md",
"mode": "source",
"source": false
},
"icon": "lucide-file",
"title": "PVE - Services - description"
"title": "! Tasks - planned action"
}
}
]
@@ -114,8 +100,7 @@
}
],
"direction": "horizontal",
"width": 287.5,
"collapsed": true
"width": 287.5
},
"right": {
"id": "e15b551b89442450",
@@ -225,16 +210,25 @@
},
"active": "bfbd778442b4387f",
"lastOpenFiles": [
"HomeLab/PVE - Services - description.md",
"HomeLab/PVE - LXC - Description.md",
"().md",
"OMV - Guides/omv-backups-guide.md",
"! Tasks - planned action.md",
"HomeLab/Proxmox/PBS Proxmox Backup Server.md",
"OMV - Guides/omv-qbittorrent-guide.md",
"HomeLab/wireshark.md",
"HomeLab/ssh config.md",
"HomeLab/Valtwarden.md",
"HomeLab/OMV - Guide-NFS-Share (PVE-PBS).md",
"HomeLab/Docker - qBittorent.md",
"HomeLab/Docker - General.md",
"HomeLab/Proxmox/Proxmox - settings.md",
"HomeLab/Proxmox/LXC - PBS Proxmox Backup Server.md",
"HomeLab/LXC - HomePage.md",
"HomeLab/PVE - General - Description.md",
"HomeLab/PVE - Description.md",
"HomeLab/LXC - Nginx Proxy Manager.md",
"HomeLab/VE - HAOS - HomeAssistant.md",
"HomeLab/Proxmox/Gitea.md",
"().md",
"! Tasks - planned action.md",
"OMV - Guides/omv-backups-guide.md",
"OMV - Guides/omv-qbittorrent-guide.md",
"HomeLab/Proxmox/PVE Proxmox - Installation.md",
"HomeLab/guide-nfs-omv-pve-pbs.md",
"OMV - Guides",
"README.md",
"SBC - Hardware/Pasted image 20260901214038.png",
@@ -245,16 +239,7 @@
"SBC - Hardware/ssd1306-rpi5-guide.md",
"Hermes/hermes-desktop-connect-guide.md",
"Hermes/Hermes Agent - Настройка.md",
"Hermes/guide-hermes-lxc-server-desktop.md",
"VPN/amnezia-vpn-keenetic-kn1011.md",
"VPN/Amnezia for Keenetic.md",
"HomeLab/Valtwarden.md",
"HomeLab/wireshark.md",
"VPN/VPN (WireGuard & 3x-UI VLESS Reality).md",
"SBC - Hardware/Raspberry PI5 + 3.2 SPI TFT (ILI9341).md",
"Git/Git.md",
"SBC - Hardware",
"HomeLab/Proxmox/HAOS.md",
"Hermes/oled_cpu_mon.py",
"Hermes",
"HomeLab/Files/Pasted image 20260427212721.png",
@@ -1,3 +1,7 @@
#homepage
### IP: 192
Описание на Habr:
Настройки находятся в `/opt/homepage/config/`
+30
View File
@@ -0,0 +1,30 @@
#homelab #proxmox #Gitea #homeassistant #haos #adguard #wireguard #debian #lxc #pve #omv #jellyfin #nas #portaineer #pbs #homepage #qbittorrent
## HomeServer:
**Home Network IP:** 192.168.1.XXX
**External IP:** <font color="#ff0000">89.109.8.114</font>
## HomeLab Table
1. Keenetic - http://192.168.1.1/
2. NUC - Proxmox VE - [192.168.1.116:8006](https://192.168.1.116:8006/)
1. VM (Vitrual Macheens)
1. ==100 - HomeAssistant OS== - http://192.168.1.43:8123/
2. LXC (Linux Containeers)
1. ==101 - Gitea== - http://192.168.1.111:3000/
2. ==102 - AdGuard== - http://192.168.1.148/
3. ==103 - Debian== Embeddev
1. ==*Hermes Agent*== - http://192.168.1.44:9119/
2. 3x-ui Xray Vless Reality - https://192.168.1.44:5324/SY9zL3JA9b8qPhnE7r/
4. ==104 - Homepage== http://192.168.1.92:3000/
5. ==105 - Docker ==
1. Portaineer - https://192.168.1.147:9443/
2. Homelable - http://192.168.1.147:3000/
3. Drawio - http://192.168.1.147:8080/
4. AmneziaWG - no ui
6. ==106 - Nginxproxymanager== - http://192.168.1.101:81/
7. ==107 - Jellyfin== - http://192.168.1.76:8096/
8. ==108 - Proxmox Backup Server== - https://192.168.1.91:8007/
9. ==103 - Debian== Embeddev
3. NAS - OpenMediaVault - http://192.168.1.73/
1. Qbittorrent - http://192.168.1.73:8080/
2. Immich
@@ -69,12 +69,6 @@ Keeneetic: `emb` `3haMJf9ZdNpCktq`
| **OpenMediaVault** | <center>✔️</center> | | | | 192.168.1.73 | admin/embeddevio | OmV@R4_hOm3 | | |
| | | | | | | root | digitex1990 | | |
**Планы:**
- [ ] SSL сертификат для Proxmox
- [ ] Нужна регистрация на хостинге (каком)
- [ ] Нужен Nginx ?
[192.168.1.76:8096](http://192.168.1.76:8096)
### Proxmox Application & Services
| Service | Location | Connect | Description | usr/psw | Repositories |
-110
View File
@@ -1,110 +0,0 @@
#homelab #proxmox #Gitea #homeassistant #haos #adguard #wireguard
## HomeLab Table
1. Keenetic - http://192.168.1.1/
2. NUC - Proxmox VE - [192.168.1.116:8006](https://192.168.1.116:8006/)
1. VM (Vitrual Macheens)
1. ==100 - HomeAssistant OS== - http://192.168.1.43:8123/
2. LXC (Linux Containeers)
1. ==101 - Gitea== - http://192.168.1.111:3000/
2. ==102 - AdGuard== - http://192.168.1.148/
3. ==103 - Debian ==
1. 3x-ui Xray Vless Reality
2. ==*Hermes Agent*== - http://192.168.1.44:9119/
4. 104 - Homepage
5. 105 - Docker
1. Portaineer - https://192.168.1.147:9443/
2. Drawio -
3. AmneziaWG
4.
6. 106 - Nginxproxymanager
7. 107 - Jellyfin - http://192.168.1.76:8096/
8. 108 - Proxmox Backup Server
- IP: 192.168.1.91:
- Port: 8007
2. Keenetic
3. NAS - OpenMediaVault
1. Immich
2. Qbittorrent
## Network route table
**Home Network IP:** 192.168.1.XXX
**External IP:** <font color="#ff0000">89.109.8.114</font>
### NAS - OpenMediaVault
IP: 192.168.1.73
Характеристики:
Установленные сервисы
Share Folders:
1. Каталог `Media` по NFS смонтирован в `/mnt/pve/OMV-Media` в PVE
1. В LXC контейнере (107) Jellyfin через mp1: `/mnt/pve/OMV-Media` проброшен в `mnt/share`
2. Каталог `pbs-storage` по NFS смонтирован в `/mnt/pve/pbs-storage` в PVE
1. Через mp:1 проброшен в LXC контейнере (108) PBS и примонтирован `/mnt/backup-omv`
Тест работы AdGuard: https://adblock-tester.com/
Keeneetic: `emb` `3haMJf9ZdNpCktq`
## HomeLab system map table
| Home Service | State | SSH | Port Internal | Port External | <center>IP or DNS</center> | <center>user</center> | <center>psw</center> | Include <br>Services | <center>Proxmox <br>VE Script</center><br> |
| ------------------------- | ------------------------------------------ | ------------ | ------------- | ------------- | ------------------------------------------------ | --------------------- | -------------------- | -------------------- | --------------------------------------------------------------------------------------------------------------------------- |
| **Keenetic** | <center>✔️</center> | | | | http://mrtrand.keenetic.pro | admin | 1eU$_RhMp8 | | |
| **Proxmox UI** | <center>✔️</center> | | 8006 | 8002 | 192.168.1.116 | root | Px@R4_hOm3 | | |
| **Proxmox SSH** | <center>✔️</center> | key <br>only | 58220 | 2202 | 192.168.1.116 | | | | |
| **Proxmox Backup Server** | | | 8007 | | https://192.168.1.91:8007/ | root | Px@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/proxmox-backup-server.sh)"` |
| **Home Assistant** | <center>✔️</center> | | 8123 | 8003 | 192.168.1.43<br>http://ha.mrtrand.keenetic.pro | embeddevio | Sm@R4_hOm3<br> | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/vm/haos-vm.sh)"` |
| **Debian** | <center>✔️</center> | key <br>only | | | 192.168.1.44 | | | 3x-UI | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/debian.sh)"` |
| **Gitea** | <center>✔️</center> | | 3000 | 8004 | 192.168.1.111<br>http://git.mrtrand.keenetic.pro | | | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/gitea.sh)"` |
| **AdGuard Home** | <center>✔️ требуется донастройка?</center> | | 3000 | | 192.168.1.148 | embeddevio | Ad@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/adguard.sh)"` |
| **Docker<br>Portainer** | <center>✔️</center> | | 9443 | | 192.168.1.147 | admin | Dokr@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/docker.sh)"` |
| **Homepage** | | | 3000 | | 192.168.1.92:3000 | | | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/homepage.sh)"` |
| **Jellyfin** | <center>✔️</center> | | 8096 | 55240 | [192.168.1.76:8096](http://192.168.1.76:8096) | embeddevio | JiF@R4_hOm3 | | `var_os='ubuntu' bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/jellyfin.sh)"` |
| Alpine Nextcloude | <center>❌</center> | | | | | | | | |
| Nginx Proxy Manager | <center>+-</center> | | | | 192.168.1.101:81 | embeddevio | NgX@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/nginxproxymanager.sh)"` |
| **OpenMediaVault** | <center>✔️</center> | | | | 192.168.1.73 | admin/embeddevio | OmV@R4_hOm3 | | |
| | | | | | | root | digitex1990 | | |
**Планы:**
- [ ] SSL сертификат для Proxmox
- [ ] Нужна регистрация на хостинге (каком)
- [ ] Нужен Nginx ?
[192.168.1.76:8096](http://192.168.1.76:8096)
### Proxmox Application & Services
| Service | Location | Connect | Description | usr/psw | Repositories |
| ---------------- | ---------- | --------------------------- | ----------------------------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------ |
| Homelable | Docker LXC | https://192.168.1.147:9443/ | Визуализация сетевой инфраструктуры | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/homelable.sh)"` |
| Drawio | Docker LXC | http://192.168.1.147:8080/ | | | |
| Poratiner | Docker | http://192.168.1.147:3000/ | | | |
| 3x-UI + VLESS | Debian LXC | | | | |
| Hermes Dashboard | Debian LXC | http://192.168.1.44:9119/ | Hermes Agent | embeddevio<br>HmA@R4_hOm3 | |
| | | | | | |
### 3x-UI Panel
Username: `1lK1HHY131`
Password: `yguXrSEJxk`
Port: `5324`
WebBasePath: `SY9zL3JA9b8qPhnE7r`
Access URL: https://89.109.8.114:8007/SY9zL3JA9b8qPhnE7r
IP homenet: `192.168.1.44:5324`
### RT Internet configuration
Username: `KPMAa7Lz`
Password: `PF2Rgt`
Protocol (type): `PPPoE`
IPv4 Settings:
1. Configuration: Auto DHCP
2. Ignnore DNSv4 from ISP
IPv6 Settings:
3. Configuration: disable
ISP Requirements:
4. MAC - by default
5. MTU size: 1500
JiF@Tati@n9