diff --git a/! Tasks - planned action.md b/! Tasks - planned action.md index bac0b47..33527c5 100644 --- a/! Tasks - planned action.md +++ b/! Tasks - planned action.md @@ -46,7 +46,8 @@ OpenMediaVault - настройка сервиса HomeLab. Я только со Улучшения: 1. Перенести Gitea на OMV  -2. **Backup**. Настроить резервное копирование через PBS (на внешний диск или NAS?) +- [ ] +1. **Backup**. Настроить резервное копирование через PBS (на внешний диск или NAS?) 1. [ ] Backup - Telegram 2. [x] OMV - Backup на внешний диск 3. [x] NAS - отключить бэкапы с внешнего HDD @@ -54,18 +55,21 @@ OpenMediaVault - настройка сервиса HomeLab. Я только со 2. [x] Backup - синхронизация важных папок (Gitea, HomeAssistant) 3. [x] Backup - Garbage Collection. Настроить автоматическую очистку диска 4. [x] Backup - Prune. Настроить автоматическое удаление старых копий -3. **Security**. Безопасность +2. **Security**. Безопасность 1. [ ] Заменить прямой проброс портов на WireGuard 2. [ ] ИЛИ использовать LXC NginxProxyManager как реверс-прокси с SSL и ограничением доступа по IP через авторизацию 1. [ ] Разобраться с SSL сертификатом - 3. [ ] Обратный прокси Traefik в LXC контейнер как systemd unit (LXC позволяет изолировать трафик от ОС) - 4. [ ] Сегментация сети VLAN + 3. [ ] SSL сертификат для Proxmox + - [ ] Нужна регистрация на хостинге (каком) + - [ ] Нужен Nginx ? + 4. [ ] Обратный прокси Traefik в LXC контейнер как systemd unit (LXC позволяет изолировать трафик от ОС) + 5. [ ] Сегментация сети VLAN 1. [ ] VLAN10 - сервера, NUC, NAS 2. [ ] VLAN20 - IoT устройства 3. [ ] VLAN30 - Гостевая (обычная сеть) 4. [ ] firewall - настройка межсетевого экрана - 5. [ ] Fail2ban - установка (нужна ли) -4. **Services** + 6. [ ] Fail2ban - установка (нужна ли) +3. **Services** 1. [ ] Внедрение мониторинга 1. [ ] Netdata -  метрики в реальном времени и оповещения в Telegram. Или разверните **Prometheus + Grafana** (но это ресурсоемко). 2. [ ] Zabbix - cсистема мониторинга? diff --git a/().md b/().md deleted file mode 100644 index e69de29..0000000 diff --git a/.obsidian/plugins/obsidian-icon-folder/data.json b/.obsidian/plugins/obsidian-icon-folder/data.json index 33dd6ad..973d364 100644 --- a/.obsidian/plugins/obsidian-icon-folder/data.json +++ b/.obsidian/plugins/obsidian-icon-folder/data.json @@ -33,6 +33,5 @@ "useInternalPlugins": false }, "HomeLab/Proxmox/Gitea.md": "LiGitlab", - "HomeLab/Proxmox/HAOS.md": "LiHome", "! Tasks - planned action.md": "LiListTodo" } \ No newline at end of file diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json index f251b17..2e8ed8e 100644 --- a/.obsidian/workspace.json +++ b/.obsidian/workspace.json @@ -13,26 +13,12 @@ "state": { "type": "markdown", "state": { - "file": "HomeLab/PVE - LXC - Description.md", + "file": "OMV - Guides/omv-backups-guide.md", "mode": "source", "source": false }, "icon": "lucide-file", - "title": "PVE - LXC - Description" - } - }, - { - "id": "96473a6740f43284", - "type": "leaf", - "state": { - "type": "markdown", - "state": { - "file": "().md", - "mode": "source", - "source": false - }, - "icon": "lucide-file", - "title": "()" + "title": "omv-backups-guide" } } ] @@ -47,12 +33,12 @@ "state": { "type": "markdown", "state": { - "file": "HomeLab/PVE - Services - description.md", + "file": "! Tasks - planned action.md", "mode": "source", "source": false }, "icon": "lucide-file", - "title": "PVE - Services - description" + "title": "! Tasks - planned action" } } ] @@ -114,8 +100,7 @@ } ], "direction": "horizontal", - "width": 287.5, - "collapsed": true + "width": 287.5 }, "right": { "id": "e15b551b89442450", @@ -225,16 +210,25 @@ }, "active": "bfbd778442b4387f", "lastOpenFiles": [ - "HomeLab/PVE - Services - description.md", - "HomeLab/PVE - LXC - Description.md", - "().md", - "OMV - Guides/omv-backups-guide.md", - "! Tasks - planned action.md", - "HomeLab/Proxmox/PBS Proxmox Backup Server.md", - "OMV - Guides/omv-qbittorrent-guide.md", + "HomeLab/wireshark.md", + "HomeLab/ssh config.md", + "HomeLab/Valtwarden.md", + "HomeLab/OMV - Guide-NFS-Share (PVE-PBS).md", + "HomeLab/Docker - qBittorent.md", + "HomeLab/Docker - General.md", "HomeLab/Proxmox/Proxmox - settings.md", + "HomeLab/Proxmox/LXC - PBS Proxmox Backup Server.md", + "HomeLab/LXC - HomePage.md", + "HomeLab/PVE - General - Description.md", + "HomeLab/PVE - Description.md", + "HomeLab/LXC - Nginx Proxy Manager.md", + "HomeLab/VE - HAOS - HomeAssistant.md", + "HomeLab/Proxmox/Gitea.md", + "().md", + "! Tasks - planned action.md", + "OMV - Guides/omv-backups-guide.md", + "OMV - Guides/omv-qbittorrent-guide.md", "HomeLab/Proxmox/PVE Proxmox - Installation.md", - "HomeLab/guide-nfs-omv-pve-pbs.md", "OMV - Guides", "README.md", "SBC - Hardware/Pasted image 20260901214038.png", @@ -245,16 +239,7 @@ "SBC - Hardware/ssd1306-rpi5-guide.md", "Hermes/hermes-desktop-connect-guide.md", "Hermes/Hermes Agent - Настройка.md", - "Hermes/guide-hermes-lxc-server-desktop.md", - "VPN/amnezia-vpn-keenetic-kn1011.md", - "VPN/Amnezia for Keenetic.md", - "HomeLab/Valtwarden.md", - "HomeLab/wireshark.md", - "VPN/VPN (WireGuard & 3x-UI VLESS Reality).md", - "SBC - Hardware/Raspberry PI5 + 3.2 SPI TFT (ILI9341).md", - "Git/Git.md", "SBC - Hardware", - "HomeLab/Proxmox/HAOS.md", "Hermes/oled_cpu_mon.py", "Hermes", "HomeLab/Files/Pasted image 20260427212721.png", diff --git a/HomeLab/HomePage.md b/HomeLab/LXC - HomePage.md similarity index 95% rename from HomeLab/HomePage.md rename to HomeLab/LXC - HomePage.md index cde3ca3..2a39390 100644 --- a/HomeLab/HomePage.md +++ b/HomeLab/LXC - HomePage.md @@ -1,3 +1,7 @@ +#homepage + +### IP: 192 + Описание на Habr: Настройки находятся в `/opt/homepage/config/` diff --git a/HomeLab/Nginx Proxy Manager.md b/HomeLab/LXC - Nginx Proxy Manager.md similarity index 100% rename from HomeLab/Nginx Proxy Manager.md rename to HomeLab/LXC - Nginx Proxy Manager.md diff --git a/HomeLab/guide-nfs-omv-pve-pbs.md b/HomeLab/OMV - Guide-NFS-Share (PVE-PBS).md similarity index 100% rename from HomeLab/guide-nfs-omv-pve-pbs.md rename to HomeLab/OMV - Guide-NFS-Share (PVE-PBS).md diff --git a/HomeLab/PVE - Description.md b/HomeLab/PVE - Description.md new file mode 100644 index 0000000..a775440 --- /dev/null +++ b/HomeLab/PVE - Description.md @@ -0,0 +1,30 @@ +#homelab #proxmox #Gitea #homeassistant #haos #adguard #wireguard #debian #lxc #pve #omv #jellyfin #nas #portaineer #pbs #homepage #qbittorrent + +## HomeServer: +**Home Network IP:** 192.168.1.XXX +**External IP:** 89.109.8.114 + +## HomeLab Table +1. Keenetic - http://192.168.1.1/ +2. NUC - Proxmox VE - [192.168.1.116:8006](https://192.168.1.116:8006/) + 1. VM (Vitrual Macheens) + 1. ==100 - HomeAssistant OS== - http://192.168.1.43:8123/ + 2. LXC (Linux Containeers) + 1. ==101 - Gitea== - http://192.168.1.111:3000/ + 2. ==102 - AdGuard== - http://192.168.1.148/ + 3. ==103 - Debian== Embeddev + 1. ==*Hermes Agent*== - http://192.168.1.44:9119/ + 2. 3x-ui Xray Vless Reality - https://192.168.1.44:5324/SY9zL3JA9b8qPhnE7r/ + 4. ==104 - Homepage== http://192.168.1.92:3000/ + 5. ==105 - Docker == + 1. Portaineer - https://192.168.1.147:9443/ + 2. Homelable - http://192.168.1.147:3000/ + 3. Drawio - http://192.168.1.147:8080/ + 4. AmneziaWG - no ui + 6. ==106 - Nginxproxymanager== - http://192.168.1.101:81/ + 7. ==107 - Jellyfin== - http://192.168.1.76:8096/ + 8. ==108 - Proxmox Backup Server== - https://192.168.1.91:8007/ + 9. ==103 - Debian== Embeddev +3. NAS - OpenMediaVault - http://192.168.1.73/ + 1. Qbittorrent - http://192.168.1.73:8080/ + 2. Immich diff --git a/HomeLab/PVE - Services - description.md b/HomeLab/PVE - General - Description.md similarity index 98% rename from HomeLab/PVE - Services - description.md rename to HomeLab/PVE - General - Description.md index 1d705e2..804e0af 100644 --- a/HomeLab/PVE - Services - description.md +++ b/HomeLab/PVE - General - Description.md @@ -69,12 +69,6 @@ Keeneetic: `emb` `3haMJf9ZdNpCktq` | **OpenMediaVault** |
✔️
| | | | 192.168.1.73 | admin/embeddevio | OmV@R4_hOm3 | | | | | | | | | | root | digitex1990 | | | -**Планы:** -- [ ] SSL сертификат для Proxmox - - [ ] Нужна регистрация на хостинге (каком) - - [ ] Нужен Nginx ? -[192.168.1.76:8096](http://192.168.1.76:8096) - ### Proxmox Application & Services | Service | Location | Connect | Description | usr/psw | Repositories | diff --git a/HomeLab/PVE - LXC - Description.md b/HomeLab/PVE - LXC - Description.md deleted file mode 100644 index b134553..0000000 --- a/HomeLab/PVE - LXC - Description.md +++ /dev/null @@ -1,110 +0,0 @@ -#homelab #proxmox #Gitea #homeassistant #haos #adguard #wireguard - - -## HomeLab Table -1. Keenetic - http://192.168.1.1/ -2. NUC - Proxmox VE - [192.168.1.116:8006](https://192.168.1.116:8006/) - 1. VM (Vitrual Macheens) - 1. ==100 - HomeAssistant OS== - http://192.168.1.43:8123/ - 2. LXC (Linux Containeers) - 1. ==101 - Gitea== - http://192.168.1.111:3000/ - 2. ==102 - AdGuard== - http://192.168.1.148/ - 3. ==103 - Debian == - 1. 3x-ui Xray Vless Reality - 2. ==*Hermes Agent*== - http://192.168.1.44:9119/ - 4. 104 - Homepage - 5. 105 - Docker - 1. Portaineer - https://192.168.1.147:9443/ - 2. Drawio - - 3. AmneziaWG - 4. - 6. 106 - Nginxproxymanager - 7. 107 - Jellyfin - http://192.168.1.76:8096/ - 8. 108 - Proxmox Backup Server - - IP: 192.168.1.91: - - Port: 8007 -2. Keenetic -3. NAS - OpenMediaVault - 1. Immich - 2. Qbittorrent - - - -## Network route table -**Home Network IP:** 192.168.1.XXX -**External IP:** 89.109.8.114 - -### NAS - OpenMediaVault -IP: 192.168.1.73 -Характеристики: -Установленные сервисы -Share Folders: -1. Каталог `Media` по NFS смонтирован в `/mnt/pve/OMV-Media` в PVE - 1. В LXC контейнере (107) Jellyfin через mp1: `/mnt/pve/OMV-Media` проброшен в `mnt/share` -2. Каталог `pbs-storage` по NFS смонтирован в `/mnt/pve/pbs-storage` в PVE - 1. Через mp:1 проброшен в LXC контейнере (108) PBS и примонтирован `/mnt/backup-omv` - - - -Тест работы AdGuard: https://adblock-tester.com/ -Keeneetic: `emb` `3haMJf9ZdNpCktq` - -## HomeLab system map table - -| Home Service | State | SSH | Port Internal | Port External |
IP or DNS
|
user
|
psw
| Include
Services |
Proxmox
VE Script

| -| ------------------------- | ------------------------------------------ | ------------ | ------------- | ------------- | ------------------------------------------------ | --------------------- | -------------------- | -------------------- | --------------------------------------------------------------------------------------------------------------------------- | -| **Keenetic** |
✔️
| | | | http://mrtrand.keenetic.pro | admin | 1eU$_RhMp8 | | | -| **Proxmox UI** |
✔️
| | 8006 | 8002 | 192.168.1.116 | root | Px@R4_hOm3 | | | -| **Proxmox SSH** |
✔️
| key
only | 58220 | 2202 | 192.168.1.116 | | | | | -| **Proxmox Backup Server** | | | 8007 | | https://192.168.1.91:8007/ | root | Px@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/proxmox-backup-server.sh)"` | -| **Home Assistant** |
✔️
| | 8123 | 8003 | 192.168.1.43
http://ha.mrtrand.keenetic.pro | embeddevio | Sm@R4_hOm3
| | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/vm/haos-vm.sh)"` | -| **Debian** |
✔️
| key
only | | | 192.168.1.44 | | | 3x-UI | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/debian.sh)"` | -| **Gitea** |
✔️
| | 3000 | 8004 | 192.168.1.111
http://git.mrtrand.keenetic.pro | | | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/gitea.sh)"` | -| **AdGuard Home** |
✔️ требуется донастройка?
| | 3000 | | 192.168.1.148 | embeddevio | Ad@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/adguard.sh)"` | -| **Docker
Portainer** |
✔️
| | 9443 | | 192.168.1.147 | admin | Dokr@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/docker.sh)"` | -| **Homepage** | | | 3000 | | 192.168.1.92:3000 | | | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/homepage.sh)"` | -| **Jellyfin** |
✔️
| | 8096 | 55240 | [192.168.1.76:8096](http://192.168.1.76:8096) | embeddevio | JiF@R4_hOm3 | | `var_os='ubuntu' bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/jellyfin.sh)"` | -| Alpine Nextcloude |
❌
| | | | | | | | | -| Nginx Proxy Manager |
+-
| | | | 192.168.1.101:81 | embeddevio | NgX@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/nginxproxymanager.sh)"` | -| **OpenMediaVault** |
✔️
| | | | 192.168.1.73 | admin/embeddevio | OmV@R4_hOm3 | | | -| | | | | | | root | digitex1990 | | | - -**Планы:** -- [ ] SSL сертификат для Proxmox - - [ ] Нужна регистрация на хостинге (каком) - - [ ] Нужен Nginx ? -[192.168.1.76:8096](http://192.168.1.76:8096) - -### Proxmox Application & Services - -| Service | Location | Connect | Description | usr/psw | Repositories | -| ---------------- | ---------- | --------------------------- | ----------------------------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------ | -| Homelable | Docker LXC | https://192.168.1.147:9443/ | Визуализация сетевой инфраструктуры | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/homelable.sh)"` | -| Drawio | Docker LXC | http://192.168.1.147:8080/ | | | | -| Poratiner | Docker | http://192.168.1.147:3000/ | | | | -| 3x-UI + VLESS | Debian LXC | | | | | -| Hermes Dashboard | Debian LXC | http://192.168.1.44:9119/ | Hermes Agent | embeddevio
HmA@R4_hOm3 | | -| | | | | | | - -### 3x-UI Panel -Username: `1lK1HHY131` -Password: `yguXrSEJxk` -Port: `5324` -WebBasePath: `SY9zL3JA9b8qPhnE7r` -Access URL: https://89.109.8.114:8007/SY9zL3JA9b8qPhnE7r -IP homenet: `192.168.1.44:5324` - -### RT Internet configuration -Username: `KPMAa7Lz` -Password: `PF2Rgt` -Protocol (type): `PPPoE` -IPv4 Settings: -1. Configuration: Auto DHCP -2. Ignnore DNSv4 from ISP -IPv6 Settings: -3. Configuration: disable -ISP Requirements: -4. MAC - by default -5. MTU size: 1500 - -JiF@Tati@n9 \ No newline at end of file diff --git a/HomeLab/Proxmox/PBS Proxmox Backup Server.md b/HomeLab/Proxmox/LXC - PBS Proxmox Backup Server.md similarity index 100% rename from HomeLab/Proxmox/PBS Proxmox Backup Server.md rename to HomeLab/Proxmox/LXC - PBS Proxmox Backup Server.md diff --git a/HomeLab/Proxmox/HAOS.md b/HomeLab/VE - HAOS - HomeAssistant.md similarity index 100% rename from HomeLab/Proxmox/HAOS.md rename to HomeLab/VE - HAOS - HomeAssistant.md