ipfire is a good alternative to opensense because its simpler to use imo.

oh i meant shrapnel from a drone explosions

i wondered the same but figured that shooting a net while flying high speeds is more difficult than just peppering an area with shrapnel.

proxmox backup server

i guess that this is the recommended solution. i try pbs out and see how i can improve from there. thanks for your input!

thx for that write up. seems i didnt understand you correctly the first time (english is not my native language). i already used all pci-slots with sata extensions and a nic. its just a mini atx board with a n100 cpu, so my options are limited. i could mirror the disk to a sata ssd though.

i need to look into duplicati. never heard of it before. i guess best thing noe is to install pbs and look from there. my goal would be to have one copy of my data on site and one in another place.

so two pbs would be overkill?

My Mainboard only supports a single nvme-drive. thats why i store the os and the data of my vm/lxc on it. everything else are good old hdd. is it possible to restore this drive, if i install pbs as a lxc on this very drive?

sorry, i tried to read through some guids already and the more i read the more im confused /(

while the machines are physicaly next to esch other i also runy whole home automation over zwave. the reason i have 2 machines currently is that the media server used to run truenas and i virtualized everything there. since truenas deprecated its public build repository i wanted to replace it with open media vault, but since i dont really used shares i figured that proxmox would be better suited. so i set up a machine where i host all the services until i figure out how i want to run my media-server.

i still need to find a way to setup a simple sambashare via a web gui and a good backup solution.

How does it work if my ssd dies, where proxmox boot and the lvm for the containers is located on? Would i have to reinstall proxmox + pbs again and then id be able to restore the disk again? or do i habe to install pbs on another drive altogether and then id be able to restore my boot drive + lvm?

the machines are located next to each other and i run 2 currently because 1 was originally a truenas server and the other one a proxmox-server with my services. Since truenas stopped publishing its open source code to github i reinstalled it with proxmox. im also just started setting everything up and i wanted to have my services running while i figure out how i want to run my media server. originally i tried open media vault instead of truenas, but since i virtualize stuff like jellyfin anyways i thought that running that directly in proxmox is easier.

if that n100 cpu can run everything i need on the media server, i want to move the containers over. otherwise the two n100 machines stay.

they should call it the arsenal bird. (ace combat 7 reference)

i bought a intel n100 board with used 4gb of ram and an used ssd. then i bought 1 nic with poe for the wan (5g antenna with integrated modem) and second nic for a dmz.

also i tried opnsense but switched to ipfire, because it offers all i need in a much simpler package.

cost was arround 300€. tbh i would just buy a simple mini pc with enough nics, but couldnt find one with poe to a good price.

i dont have that much knowledge about security, but would it be reasonable to expose a single raspberry in a dmz behind a firewall as a headscale vps?

i mean it would be hard for an attacker to get past the physical firewall into the main network, right?

on the other hand they wouldnt need to get past the firewall if they take over the headscale server… edit: but that would also happen, if a vps hosted somewhere else, got infected, right?

i bought a asrock n100 board and put 2 additional nics on it. then i configured ipfire with the red, green and orange mode. (red = wan, green = lan and orange = dmz) that way i can self host a vps inside the dmz and run the lan network without a vlan. i dont know if thats the best way to do it, but there are so much new things to learn i still dont know anything about and want to keep it as simple as possible.

you could start with a simple thin client with multiple nic‘s and get a similar price then my n100 with 4gb ram but i wanted the ability to swap some parts if needed and thin clients are rather limited in that aspect. edit: also i needed a nic with poe for my wan and thats hard to find in a regular thin client. i didnt search that hard though.

im in the same boat as you. tried opnsense for a week, but the webui is really not that friendly for a total beginner like me. im running ipfire right now, which offers less options but thats a + while im still learning the basics.