Vince

Vince

Installing CrowdSec on OPNsense (Day 27)

CrowdSec is a security tool that detects and blocks malicious IPs using a collaborative approach to share threat intelligence across users. I initially planned to run CrowdSec just on Traefik, but having it at the firewall level provides more protection for all devices on the network. Installation CrowdSec has a

Secure Secret Management with SOPS, Age, and Bitwarden (Day 26)

Using SOPS with Age encryption for secret management, Bitwarden Secrets Manager for key storage, and integrating it all with Terragrunt for secure infrastructure as code.

ZFS RAIDZ VDEV Extension (Day 25)

Got a new drive to add to my storage pool and TrueNAS Scale now supports RAIDZ VDEV extension. Which is a relatively new feature, introduced in TrueNAS 24.10 (Electric Eel). Steps: 1. Navigate to the storage pool 2. Select "Manage Devices" 3. Choose the VDEV you want

Sharing Services Across Tailnets (Day 24)

Using Tailscale's Kubernetes operator to share specific services across tailnets without inviting users directly to the network, while maintaining DNS.

Navidrome on TrueNAS Scale (Day 23)

Got an old music collection sitting around? try Navidrome

K3s upgrade to 1.31.5 (Day 22)

K3s upgrades are surprisingly simple - just rerun your initial install command and you're done

Traefik Timeouts and Immich (Day 21)

I have been setting up Immich, i.e destroying and recreating it until I got my photo organization and volumes just right. The next step was to do a mass import after testing, the CLI tool makes mass imports pretty straightforward, but I kept having an issue with certain files

Bufferbloat (Day 20)

While browsing and editing large RAW photos over SMB, I noticed some high kind of latency and got asking if this could be reduced. Some research later i found something called bufferbloat. What's Bufferbloat? I found this analogy of bufferbloat from Waveform.com that's worth sharing

Machine and Container updates (Day 19)

Today was all about updates. What started as just routine maintenance turned into a reminder of why we keep backups (and backups of backups). The Update Plan * Update Proxmox nodes * Update VMs * Update OPNsense to version 25 Things Go Sideways After the updates and reboots, OPNsense decided to forget about

Homepage Dashboard (Day 18)

Spent today setting up Homepage to organize access to all the URLs I currently have. Current dashboard Basic Configuration The base setup is defined in the settings.yaml file and looks like this: title: <Your title name> theme: dark color: slate background: image: <image> blur: sm