server

Personal hybrid cloud infrastructure


Also see the HomeLab History

Hardware

Firewalls

Went from a FortiGate 60D to a 100D & am currently using a FortiWifi 30E with a FortiAP 321C & 223E. These were all deprecated during my time at ITSDONE Group so I got to take them home.

Switch

Running a ZyXEL GS1900-24E, because it was the cheapest managed switch on amazon.

NAS

TerraMaster F4-210, as it was also cheap on amazon & I temporarily deactivated my main server due to it’s disproportionate power usage considering it’s tasks, no more TrueNAS :(

Raspberry

Only reason pi-hole is not running in a container is for the HyperPixel displaying PADD.

Server

The 4U case sitting at the bottom of the rack is my old gaming PC. The main server is a Dell Optiplex 7040 (i5-6500T, 32GB, 1TB NVMe) running Proxmox.

Diagram

Will make a proper one at some point in the future, here is one i made for my Bonsai diploma thesis. Big shoutouts to Oracle Cloud for their always free services.

Services

Will write up an actual list in the future, have an ansible playbook for now.

---
 
- name: Oracle-pre
  hosts: oracle
  serial: 10
  roles:
    - setup/basic-setup-oracle
 
- name: Main
  hosts: all
  serial: 10
  roles:
    - geerlingguy.docker
    - setup/basic-setup
 
    - cloudalchemy.node_exporter
    - monitoring/exporters/cadvisor
    - bonsai/bonsai-exporter
 
- name: Bitwarden
  hosts: kf-orc-amd-02
  roles:
    - services/bitwarden
 
- name: Media
  hosts: kf-opt-salmon-01
  roles:
    - services/media/plex
    - services/media/jellyfin
 
- name: Medfish
  hosts: kf-opt-tuna-01
  roles:
    - services/media/medfish
 
- name: Monitoring-Bonsai
  hosts: kf-orc-arm-02
  serial: 10
  roles:
    - bonsai/bonsai-stack
 
- name: Monitoring
  hosts: kf-orc-arm-02
  serial: 10
  roles:
    - monitoring/portainer
    - monitoring/exporters/fortigate-exporter
    - monitoring/grafana-stack
 
- name: Pocketbase
  hosts: kf-orc-arm-01
  roles:
    - role: services/pocketbase
      pocketbase_name: "sudoku"
 
- name: Web-remote
  hosts: kf-orc-arm-01
  serial: 10
  roles:
    - services/proxy/cloudflare-dns
    - services/proxy/certbot
    - services/proxy/fail2ban
    - services/proxy/nginx-remote
 
- name: Web-local
  hosts: kf-opt-salmon-01
  serial: 10
  roles:
    - services/proxy/cloudflare-dns
    - services/proxy/nginx-local
    - services/proxy/fail2ban
    - services/streaks-api

Rack