vault backup: 2026-10-14 20:24:34
This commit is contained in:
@@ -46,7 +46,8 @@ OpenMediaVault - настройка сервиса HomeLab. Я только со
|
||||
|
||||
Улучшения:
|
||||
1. Перенести Gitea на OMV
|
||||
2. **Backup**. Настроить резервное копирование через PBS (на внешний диск или NAS?)
|
||||
- [ ]
|
||||
1. **Backup**. Настроить резервное копирование через PBS (на внешний диск или NAS?)
|
||||
1. [ ] Backup - Telegram
|
||||
2. [x] OMV - Backup на внешний диск
|
||||
3. [x] NAS - отключить бэкапы с внешнего HDD
|
||||
@@ -54,18 +55,21 @@ OpenMediaVault - настройка сервиса HomeLab. Я только со
|
||||
2. [x] Backup - синхронизация важных папок (Gitea, HomeAssistant)
|
||||
3. [x] Backup - Garbage Collection. Настроить автоматическую очистку диска
|
||||
4. [x] Backup - Prune. Настроить автоматическое удаление старых копий
|
||||
3. **Security**. Безопасность
|
||||
2. **Security**. Безопасность
|
||||
1. [ ] Заменить прямой проброс портов на WireGuard
|
||||
2. [ ] ИЛИ использовать LXC NginxProxyManager как реверс-прокси с SSL и ограничением доступа по IP через авторизацию
|
||||
1. [ ] Разобраться с SSL сертификатом
|
||||
3. [ ] Обратный прокси Traefik в LXC контейнер как systemd unit (LXC позволяет изолировать трафик от ОС)
|
||||
4. [ ] Сегментация сети VLAN
|
||||
3. [ ] SSL сертификат для Proxmox
|
||||
- [ ] Нужна регистрация на хостинге (каком)
|
||||
- [ ] Нужен Nginx ?
|
||||
4. [ ] Обратный прокси Traefik в LXC контейнер как systemd unit (LXC позволяет изолировать трафик от ОС)
|
||||
5. [ ] Сегментация сети VLAN
|
||||
1. [ ] VLAN10 - сервера, NUC, NAS
|
||||
2. [ ] VLAN20 - IoT устройства
|
||||
3. [ ] VLAN30 - Гостевая (обычная сеть)
|
||||
4. [ ] firewall - настройка межсетевого экрана
|
||||
5. [ ] Fail2ban - установка (нужна ли)
|
||||
4. **Services**
|
||||
6. [ ] Fail2ban - установка (нужна ли)
|
||||
3. **Services**
|
||||
1. [ ] Внедрение мониторинга
|
||||
1. [ ] Netdata - метрики в реальном времени и оповещения в Telegram. Или разверните **Prometheus + Grafana** (но это ресурсоемко).
|
||||
2. [ ] Zabbix - cсистема мониторинга?
|
||||
|
||||
@@ -33,6 +33,5 @@
|
||||
"useInternalPlugins": false
|
||||
},
|
||||
"HomeLab/Proxmox/Gitea.md": "LiGitlab",
|
||||
"HomeLab/Proxmox/HAOS.md": "LiHome",
|
||||
"! Tasks - planned action.md": "LiListTodo"
|
||||
}
|
||||
Vendored
+22
-37
@@ -13,26 +13,12 @@
|
||||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "HomeLab/PVE - LXC - Description.md",
|
||||
"file": "OMV - Guides/omv-backups-guide.md",
|
||||
"mode": "source",
|
||||
"source": false
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "PVE - LXC - Description"
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "96473a6740f43284",
|
||||
"type": "leaf",
|
||||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "().md",
|
||||
"mode": "source",
|
||||
"source": false
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "()"
|
||||
"title": "omv-backups-guide"
|
||||
}
|
||||
}
|
||||
]
|
||||
@@ -47,12 +33,12 @@
|
||||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "HomeLab/PVE - Services - description.md",
|
||||
"file": "! Tasks - planned action.md",
|
||||
"mode": "source",
|
||||
"source": false
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "PVE - Services - description"
|
||||
"title": "! Tasks - planned action"
|
||||
}
|
||||
}
|
||||
]
|
||||
@@ -114,8 +100,7 @@
|
||||
}
|
||||
],
|
||||
"direction": "horizontal",
|
||||
"width": 287.5,
|
||||
"collapsed": true
|
||||
"width": 287.5
|
||||
},
|
||||
"right": {
|
||||
"id": "e15b551b89442450",
|
||||
@@ -225,16 +210,25 @@
|
||||
},
|
||||
"active": "bfbd778442b4387f",
|
||||
"lastOpenFiles": [
|
||||
"HomeLab/PVE - Services - description.md",
|
||||
"HomeLab/PVE - LXC - Description.md",
|
||||
"().md",
|
||||
"OMV - Guides/omv-backups-guide.md",
|
||||
"! Tasks - planned action.md",
|
||||
"HomeLab/Proxmox/PBS Proxmox Backup Server.md",
|
||||
"OMV - Guides/omv-qbittorrent-guide.md",
|
||||
"HomeLab/wireshark.md",
|
||||
"HomeLab/ssh config.md",
|
||||
"HomeLab/Valtwarden.md",
|
||||
"HomeLab/OMV - Guide-NFS-Share (PVE-PBS).md",
|
||||
"HomeLab/Docker - qBittorent.md",
|
||||
"HomeLab/Docker - General.md",
|
||||
"HomeLab/Proxmox/Proxmox - settings.md",
|
||||
"HomeLab/Proxmox/LXC - PBS Proxmox Backup Server.md",
|
||||
"HomeLab/LXC - HomePage.md",
|
||||
"HomeLab/PVE - General - Description.md",
|
||||
"HomeLab/PVE - Description.md",
|
||||
"HomeLab/LXC - Nginx Proxy Manager.md",
|
||||
"HomeLab/VE - HAOS - HomeAssistant.md",
|
||||
"HomeLab/Proxmox/Gitea.md",
|
||||
"().md",
|
||||
"! Tasks - planned action.md",
|
||||
"OMV - Guides/omv-backups-guide.md",
|
||||
"OMV - Guides/omv-qbittorrent-guide.md",
|
||||
"HomeLab/Proxmox/PVE Proxmox - Installation.md",
|
||||
"HomeLab/guide-nfs-omv-pve-pbs.md",
|
||||
"OMV - Guides",
|
||||
"README.md",
|
||||
"SBC - Hardware/Pasted image 20260901214038.png",
|
||||
@@ -245,16 +239,7 @@
|
||||
"SBC - Hardware/ssd1306-rpi5-guide.md",
|
||||
"Hermes/hermes-desktop-connect-guide.md",
|
||||
"Hermes/Hermes Agent - Настройка.md",
|
||||
"Hermes/guide-hermes-lxc-server-desktop.md",
|
||||
"VPN/amnezia-vpn-keenetic-kn1011.md",
|
||||
"VPN/Amnezia for Keenetic.md",
|
||||
"HomeLab/Valtwarden.md",
|
||||
"HomeLab/wireshark.md",
|
||||
"VPN/VPN (WireGuard & 3x-UI VLESS Reality).md",
|
||||
"SBC - Hardware/Raspberry PI5 + 3.2 SPI TFT (ILI9341).md",
|
||||
"Git/Git.md",
|
||||
"SBC - Hardware",
|
||||
"HomeLab/Proxmox/HAOS.md",
|
||||
"Hermes/oled_cpu_mon.py",
|
||||
"Hermes",
|
||||
"HomeLab/Files/Pasted image 20260427212721.png",
|
||||
|
||||
@@ -1,3 +1,7 @@
|
||||
#homepage
|
||||
|
||||
### IP: 192
|
||||
|
||||
Описание на Habr:
|
||||
|
||||
Настройки находятся в `/opt/homepage/config/`
|
||||
@@ -0,0 +1,30 @@
|
||||
#homelab #proxmox #Gitea #homeassistant #haos #adguard #wireguard #debian #lxc #pve #omv #jellyfin #nas #portaineer #pbs #homepage #qbittorrent
|
||||
|
||||
## HomeServer:
|
||||
**Home Network IP:** 192.168.1.XXX
|
||||
**External IP:** <font color="#ff0000">89.109.8.114</font>
|
||||
|
||||
## HomeLab Table
|
||||
1. Keenetic - http://192.168.1.1/
|
||||
2. NUC - Proxmox VE - [192.168.1.116:8006](https://192.168.1.116:8006/)
|
||||
1. VM (Vitrual Macheens)
|
||||
1. ==100 - HomeAssistant OS== - http://192.168.1.43:8123/
|
||||
2. LXC (Linux Containeers)
|
||||
1. ==101 - Gitea== - http://192.168.1.111:3000/
|
||||
2. ==102 - AdGuard== - http://192.168.1.148/
|
||||
3. ==103 - Debian== Embeddev
|
||||
1. ==*Hermes Agent*== - http://192.168.1.44:9119/
|
||||
2. 3x-ui Xray Vless Reality - https://192.168.1.44:5324/SY9zL3JA9b8qPhnE7r/
|
||||
4. ==104 - Homepage== http://192.168.1.92:3000/
|
||||
5. ==105 - Docker ==
|
||||
1. Portaineer - https://192.168.1.147:9443/
|
||||
2. Homelable - http://192.168.1.147:3000/
|
||||
3. Drawio - http://192.168.1.147:8080/
|
||||
4. AmneziaWG - no ui
|
||||
6. ==106 - Nginxproxymanager== - http://192.168.1.101:81/
|
||||
7. ==107 - Jellyfin== - http://192.168.1.76:8096/
|
||||
8. ==108 - Proxmox Backup Server== - https://192.168.1.91:8007/
|
||||
9. ==103 - Debian== Embeddev
|
||||
3. NAS - OpenMediaVault - http://192.168.1.73/
|
||||
1. Qbittorrent - http://192.168.1.73:8080/
|
||||
2. Immich
|
||||
@@ -69,12 +69,6 @@ Keeneetic: `emb` `3haMJf9ZdNpCktq`
|
||||
| **OpenMediaVault** | <center>✔️</center> | | | | 192.168.1.73 | admin/embeddevio | OmV@R4_hOm3 | | |
|
||||
| | | | | | | root | digitex1990 | | |
|
||||
|
||||
**Планы:**
|
||||
- [ ] SSL сертификат для Proxmox
|
||||
- [ ] Нужна регистрация на хостинге (каком)
|
||||
- [ ] Нужен Nginx ?
|
||||
[192.168.1.76:8096](http://192.168.1.76:8096)
|
||||
|
||||
### Proxmox Application & Services
|
||||
|
||||
| Service | Location | Connect | Description | usr/psw | Repositories |
|
||||
@@ -1,110 +0,0 @@
|
||||
#homelab #proxmox #Gitea #homeassistant #haos #adguard #wireguard
|
||||
|
||||
|
||||
## HomeLab Table
|
||||
1. Keenetic - http://192.168.1.1/
|
||||
2. NUC - Proxmox VE - [192.168.1.116:8006](https://192.168.1.116:8006/)
|
||||
1. VM (Vitrual Macheens)
|
||||
1. ==100 - HomeAssistant OS== - http://192.168.1.43:8123/
|
||||
2. LXC (Linux Containeers)
|
||||
1. ==101 - Gitea== - http://192.168.1.111:3000/
|
||||
2. ==102 - AdGuard== - http://192.168.1.148/
|
||||
3. ==103 - Debian ==
|
||||
1. 3x-ui Xray Vless Reality
|
||||
2. ==*Hermes Agent*== - http://192.168.1.44:9119/
|
||||
4. 104 - Homepage
|
||||
5. 105 - Docker
|
||||
1. Portaineer - https://192.168.1.147:9443/
|
||||
2. Drawio -
|
||||
3. AmneziaWG
|
||||
4.
|
||||
6. 106 - Nginxproxymanager
|
||||
7. 107 - Jellyfin - http://192.168.1.76:8096/
|
||||
8. 108 - Proxmox Backup Server
|
||||
- IP: 192.168.1.91:
|
||||
- Port: 8007
|
||||
2. Keenetic
|
||||
3. NAS - OpenMediaVault
|
||||
1. Immich
|
||||
2. Qbittorrent
|
||||
|
||||
|
||||
|
||||
## Network route table
|
||||
**Home Network IP:** 192.168.1.XXX
|
||||
**External IP:** <font color="#ff0000">89.109.8.114</font>
|
||||
|
||||
### NAS - OpenMediaVault
|
||||
IP: 192.168.1.73
|
||||
Характеристики:
|
||||
Установленные сервисы
|
||||
Share Folders:
|
||||
1. Каталог `Media` по NFS смонтирован в `/mnt/pve/OMV-Media` в PVE
|
||||
1. В LXC контейнере (107) Jellyfin через mp1: `/mnt/pve/OMV-Media` проброшен в `mnt/share`
|
||||
2. Каталог `pbs-storage` по NFS смонтирован в `/mnt/pve/pbs-storage` в PVE
|
||||
1. Через mp:1 проброшен в LXC контейнере (108) PBS и примонтирован `/mnt/backup-omv`
|
||||
|
||||
|
||||
|
||||
Тест работы AdGuard: https://adblock-tester.com/
|
||||
Keeneetic: `emb` `3haMJf9ZdNpCktq`
|
||||
|
||||
## HomeLab system map table
|
||||
|
||||
| Home Service | State | SSH | Port Internal | Port External | <center>IP or DNS</center> | <center>user</center> | <center>psw</center> | Include <br>Services | <center>Proxmox <br>VE Script</center><br> |
|
||||
| ------------------------- | ------------------------------------------ | ------------ | ------------- | ------------- | ------------------------------------------------ | --------------------- | -------------------- | -------------------- | --------------------------------------------------------------------------------------------------------------------------- |
|
||||
| **Keenetic** | <center>✔️</center> | | | | http://mrtrand.keenetic.pro | admin | 1eU$_RhMp8 | | |
|
||||
| **Proxmox UI** | <center>✔️</center> | | 8006 | 8002 | 192.168.1.116 | root | Px@R4_hOm3 | | |
|
||||
| **Proxmox SSH** | <center>✔️</center> | key <br>only | 58220 | 2202 | 192.168.1.116 | | | | |
|
||||
| **Proxmox Backup Server** | | | 8007 | | https://192.168.1.91:8007/ | root | Px@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/proxmox-backup-server.sh)"` |
|
||||
| **Home Assistant** | <center>✔️</center> | | 8123 | 8003 | 192.168.1.43<br>http://ha.mrtrand.keenetic.pro | embeddevio | Sm@R4_hOm3<br> | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/vm/haos-vm.sh)"` |
|
||||
| **Debian** | <center>✔️</center> | key <br>only | | | 192.168.1.44 | | | 3x-UI | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/debian.sh)"` |
|
||||
| **Gitea** | <center>✔️</center> | | 3000 | 8004 | 192.168.1.111<br>http://git.mrtrand.keenetic.pro | | | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/gitea.sh)"` |
|
||||
| **AdGuard Home** | <center>✔️ требуется донастройка?</center> | | 3000 | | 192.168.1.148 | embeddevio | Ad@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/adguard.sh)"` |
|
||||
| **Docker<br>Portainer** | <center>✔️</center> | | 9443 | | 192.168.1.147 | admin | Dokr@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/docker.sh)"` |
|
||||
| **Homepage** | | | 3000 | | 192.168.1.92:3000 | | | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/homepage.sh)"` |
|
||||
| **Jellyfin** | <center>✔️</center> | | 8096 | 55240 | [192.168.1.76:8096](http://192.168.1.76:8096) | embeddevio | JiF@R4_hOm3 | | `var_os='ubuntu' bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/jellyfin.sh)"` |
|
||||
| Alpine Nextcloude | <center>❌</center> | | | | | | | | |
|
||||
| Nginx Proxy Manager | <center>+-</center> | | | | 192.168.1.101:81 | embeddevio | NgX@R4_hOm3 | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/nginxproxymanager.sh)"` |
|
||||
| **OpenMediaVault** | <center>✔️</center> | | | | 192.168.1.73 | admin/embeddevio | OmV@R4_hOm3 | | |
|
||||
| | | | | | | root | digitex1990 | | |
|
||||
|
||||
**Планы:**
|
||||
- [ ] SSL сертификат для Proxmox
|
||||
- [ ] Нужна регистрация на хостинге (каком)
|
||||
- [ ] Нужен Nginx ?
|
||||
[192.168.1.76:8096](http://192.168.1.76:8096)
|
||||
|
||||
### Proxmox Application & Services
|
||||
|
||||
| Service | Location | Connect | Description | usr/psw | Repositories |
|
||||
| ---------------- | ---------- | --------------------------- | ----------------------------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------ |
|
||||
| Homelable | Docker LXC | https://192.168.1.147:9443/ | Визуализация сетевой инфраструктуры | | `bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/homelable.sh)"` |
|
||||
| Drawio | Docker LXC | http://192.168.1.147:8080/ | | | |
|
||||
| Poratiner | Docker | http://192.168.1.147:3000/ | | | |
|
||||
| 3x-UI + VLESS | Debian LXC | | | | |
|
||||
| Hermes Dashboard | Debian LXC | http://192.168.1.44:9119/ | Hermes Agent | embeddevio<br>HmA@R4_hOm3 | |
|
||||
| | | | | | |
|
||||
|
||||
### 3x-UI Panel
|
||||
Username: `1lK1HHY131`
|
||||
Password: `yguXrSEJxk`
|
||||
Port: `5324`
|
||||
WebBasePath: `SY9zL3JA9b8qPhnE7r`
|
||||
Access URL: https://89.109.8.114:8007/SY9zL3JA9b8qPhnE7r
|
||||
IP homenet: `192.168.1.44:5324`
|
||||
|
||||
### RT Internet configuration
|
||||
Username: `KPMAa7Lz`
|
||||
Password: `PF2Rgt`
|
||||
Protocol (type): `PPPoE`
|
||||
IPv4 Settings:
|
||||
1. Configuration: Auto DHCP
|
||||
2. Ignnore DNSv4 from ISP
|
||||
IPv6 Settings:
|
||||
3. Configuration: disable
|
||||
ISP Requirements:
|
||||
4. MAC - by default
|
||||
5. MTU size: 1500
|
||||
|
||||
JiF@Tati@n9
|
||||
Reference in New Issue
Block a user