DevOps / Homelab Feed

The company I work for scraps all their outdated systems so I figured I'd take some home and build a cluster. Just about everything on my desk excluding a

Hi all, first-time poster here 😅 I ordered a Topton mini pc and was wondering what software everyone uses and prefers. I will be coming from AsusWRT Merlin, so it's going to be a steep learning curve. Been thinking about OPNsense? I have two ISP connections, so I need dual WAN functionality and good IP policy routing. Want to run a VPN also and try to max out my 1.6GB fibre ISP. Was also thinking I might put Proxmox on and virtualise it all.

Hello, currently i have the following setup and It Is working so far, but i'm wondering if i can improve It with respect to security. Hardware: 1 Modem/router 1 server with proxmox (1 eth) Mainly 2 rules: First Modem/router redirects 80,443 to firewall lxc Firewall lxc redirects to nginx lxc Nginx redirects to servers that needs to be accessible from remote using access conteol lists Second Mo

I've been pretty satisfied with my homepage for a while now. At this point, I'm mostly just rem

Hello all. This is more of an exploratory post. I'd like to ask you all if you could take a minute to share some specific aspects/answer some questions about your experiences in a topic I don't see mentioned often around here. Without further delay: - are you using OpenLDAP as directory service and main source of truth? - are you using the default schema, a fully custom schema or a mix? - are you also using active directory

App: https://ekso.app/ Docs: https://ekso.dev/ Summary: Second time round building a work management product -- usually end up helping folks migrate away from Jira, Zendesk, DevOps. Early days yet, but product is aimed at "power" deployments that need to handle ticketing and tasking in one place,

Hello Everybody, Here a little introduction of my actual homelab in my b

I am hoping to get help here as I have asked this question on r/HomeNetworking and r/opnsense with no luck. I will copy/paste what I asked there. I am running the Caddy add on, UnboundDNS, and OpenVPN on the same box as my OpenVPN firewall. They are all running as addons built within OPNSense. All of the routing works as normal without the VPN. I have no

Hi, I try to install Bracket (https://github.com/evroon/bracket) in order to make a Lan tournament. I have set up a postgresql server, import the git in var/lib and follow the guide to run it with systemd. I have installed dependencies, the background seems to be fonctionnal, but the front-end give me a 404 error, but for my logs, all runs perfecly... Thanks for your help. <!-

Follow-up to my last post about my Kuber

I use Caddy as a reverse proxy, with several apps/services behind it. Each app already has its own authentication, but I’d like to add an additional authentication layer at the Caddy level as a first line of defense. What’s the easiest/recommended way to do this with Caddy, especially for SPAs? submitted by /u/EntrepreneurWaste579 <a href="ht

So what are you spicey homelabbers doing regarding this RAM and storage state of emergency? I am really struggling with Storage and RAM right about now :( submitted by /u/deanfourie1 [link] <a href="https://www.reddit.com/r/homelab/comments/1vp1ioa/ram_

Been running Nextcloud AIO on a Proxmox VM for a few months now. It's thrown 502 loops twice, weeks apart, and the two times had nothing in common except the symptom. Writing up what actually broke each time in case it saves someone a few hours. Round one: - Collabora (richdocuments) couldn't create its own appdata directory and kept throwing exceptions - theming, a core app that can't be disabled, was hitting a PHP type error from a null va

I'm kind of irritated by tailscale/netbird's inability to play well with other VPNs. At the same time I'd like to expose home server services on the internet (e.g. via a vps) ​in a way that provides at least some protection from zero days. This is particularly pertinent coz many services hand roll their own authentication and many expose random ports. The default answer to that these days is run tailscale or some other VPN tunnel. Old style

For a while now, I’ve been working on an open-source, local-first tool called viofosync. It’s a self-hosted web app (single Docker container) designed to sit on your home server or NAS and automatically backup footage from Viofo dashcams over Wi-Fi without needing cloud services or mobile apps. Key features are: Automatic wi-fi sync: Queues and copies new clips when your camera joins your wifi. GPS triage and

Hardware - QNAP NAS TS-439 with 4x 2TB HDD - MacBook Pro with Intel Core i9-9880 and 16GB RAM natively runni

checked fail2ban on my little 2gb box last night and the counter was at 113k failed SSH logins since i stood it up a few months back. all automated junk from random IPs, none of it got in. i'll be honest, when i first brought it online i left password auth on for about a day because keys felt like too much hassle. woke up to ~3k attempts already. that was the kick in the pants. since then i killed password login entirely (keys only), moved SSH off

Shamelessly took /u/<a href="https://www.reddit.com/user/Time

Do you create a sample application to test the proper auth, access and everything the runner needs? And a related sub question. How do you validate gitops changes before they are merged? Regarding FluxCD or ArgoCD. submitted by /u/Mysterious_Prune415 [link

My blog is now an int

I'm researching a small CI diagnosis agent, but I'm first trying to understand how experienced engineers actually debug these failures. Suppose an integration test fails in CI and the logs don't immediately reveal the root cause. What do you normally investigate first? For example: CI logs/stack trace database availability dependent/third-party service availability recent code changes comparis

Here is my self-hosted setup; below is a list of the hardware and apps I use

Right now the team is just ssh-ing into all of the devices and it's a huge time sink. "I'm not devops so dont crucify me" submitted by /u/GongtingLover [link] <a href="https://www.reddit.com/r/devops/comments/1v

Hi r/selfhosted — I'm Yann, the developer behind HomeTube. HomeTube has been around for a while now and recently passed 300,000 pulls, so I wanted to share what has changed under the hood and in the workflow. HomeTube is still the same focused idea: paste a YouTube/video URL and get the media you want clean

Disclosure: I'm the creator of NetAudit. Hey folks, I've been using various network scanning tools (nmap, ping, etc.) but wanted something more structured, vendor-aware, and easily automatable. So I wrote NetAudit – a Python CLI toolkit for network auditing and diagnostics. **Key features from a DevOps perspective:** - All commands produce structured output (JSON/CSV) and use stdout for results, stderr for logs – pe

<img alt="RustDesk now supports unattended remote access on Wayland, including the login screen and multi-monitor setups" src="https://external-preview.redd.it/YzGrAAdy6P3CkGUJKAChhkybXa-owyjeMpkbCu6Nw5Y.jpeg?width=640&crop=smart&auto=webp&s=1cf4e504830778b6e8631c6df0a0a288732a365b" title="RustDesk now supports unattended remote access on Wayland, includ

This is not about Trivy, Syft, or Grype or others. They are good tools. This is about people who wire one scan into CI, get a green check, and claim their dependency security is covered. You scanned once. Your build passes today. Tomorrow a new CVE gets published for a dependency already in main. Unless something rescans it, nothing happens. CI stays green. Production keeps running. Nobody knows. And if you only scan the production im

Building a course around real production incidents instead of the usual “here’s what a pod is” stuff. Currently have 19 scenarios, things like a stateful service losing its volume binding on redeploy, a network policy silently breaking service-to-service calls, memory limits causing kills that only show up under real load. What’s missing? Drop the ops problem that stumped you the most, if it’s one you never fully cracked, or took way longer than i

For a small team with a few services, an enterprise checklist can become ceremony without reducing the main risks. My minimum gate would cover a tested rollback, backups with a restore exercise, health and readiness checks, bounded timeouts and retries, an alert owner, log correlation, secret ownership, and a short incident runbook. I would add load testing or multi-region recovery only when the service’s traffic and recovery target justify them. Which it

Hello all,been working as IT admin, but mostly working around Azure devops. I been enjoying it, this my first job and doing anything related to devops. Studied CS,majored in networking, hate anything with heavy code development. Rn,the flow at my company is, the devs use 1 branch only, no PR (yes ik). They would push it to our on prem central repo, and from there i will take over. I will do some modification on some files so it can be built in the new age

Hi guys! I'm a backend engineer with 6+ yoe, trying to transition into a DevOps role. I know that having a strong Linux foundation is super important for being a good DevOps engineer, and apparently “Linux troubleshooting” is mandatory in most job postings. But to me, “Linux troubleshooting” sounds so broad, so I’m not really sure how to improve this skill. Is this something you can learn without working with Linux (professionally) on a daily basis

I’m working through a design where each underlying system remains authoritative for its own resources, rather than putting another source of truth above everything. The wider runtime only decides whether an operation has enough dependency state, readiness and verification to keep moving. The case I’m trying to pressure-test is partial execution. Say an operation spans several systems, three parts succeed and one fails. Each individual

I’m new to DevOps and looking for some good free or paid resources to learn Jenkins from the ground up. I have around 6 years of experience as a Java developer and have used Jenkins at work, but mostly from a user/developer perspective. I’ve triggered jobs and worked with existing pipelines, but I’ve never actually built a pipeline myself or understood what’s happening behind the scenes. I’d like to learn Jenkins pro

<img alt="Looking for feedback on first attempt at setting up hosting and CI/CD for a fullstack .NET and React app with PostgreSQL database, hosted on Github using Github Actions." src="https://external-preview.redd.it/stR05Oc-HVPn7lbIl1kiFjVmUxLOUKcmA7EqvqUZJsQ.png?width=140&height=70&auto=webp&s=c612115826f9b3f8be99cec52431215be3dbb145" title="Looking for f

Hello all. The circumstance I have working with is the following: * I have an Apache2 PHP server that gets bundled as a Docker image in a CI process to ECR * I have an infra repository with a docker-compose.yml that bundles the PHP Docker image to an Nginx image, alongside Nginx config like attaching TLS certs When the CICD process deploys a release, it deploys a new EC2 with a given user data script to prop up the server. If I only had a Doc

I have ADHD and I wasn’t taking my medicine like I should have been, so why I started learning containers out of the blue may have something to do with that. However, I started back on my meds and I am still learning and highly interested in building and managing containers. I have only been doing this for two weeks so I’m still very new to it. I still have to look up Git commands and still run into a lot of simplistic issues that I am fixing through troubleshoo

https://github.com/vesaaa/vsterm Capability VsTerm WindTerm Termius FinalShell MobaXterm SecureCRT Xshell Tabby Implementation language <td align="l

Au

I run eucloudcost.com (EU cloud price comparison, open source data). I also track what providers actually ship each month — blogs, changelogs, RSS, ~30 providers. Latest edition, May 21 – Aug 6: https://www.eucloudcost.com/blog/eu-cloud-news-may-aug-2026/ Highlights: Januscape (CVE-2026-53359) was a KVM escape at the <strong

Sydney DevOps folks, If you're working with DevOps, Kubernetes, SRE, platform engineering, or AI infrastructure, CNCF Cloud Native Sydney is hosting a meetup on August 19 around two open source projects. The session will cover: kagent — a Kubernetes-native framework for building, deploying, and managing AI agents, including areas such as MCP integration, observability, security, and agent workflows. GitHub: <a href="h

Continuous integration and continuous delivery (CI/CD) have dramatically changed how we ship software. But once code reaches production, the operational work is still surprisingly manual. Engineers continually monitor systems, investigate unexpected behavior, and decide which issues require action. And that is where the next opportunity for AI-driven automation lies.For example, in today's CI/CD workflows, someone refreshes the pipeline page to see whether the queue has moved. S

This article has been revised since it was first published, to correct several significant technical inaccuracies in the original text. Kubernetes has long been the default platform for distributed workloads, and writing your own controller for it is now a matter of a few hours. The common path — Golang, using kubebuilder on top of controller-runtime — gives you a project scaffold, types, and a reconciler. For typ

Knowing what you're spending on observability is useful. Knowing which team, service, or project is driving that spend is what actually lets you act on that information. Cost attribution is a core part of how Grafana Cloud approaches cost management and optimization. It gives your organization a clear, structured way to allocate observability spend across teams, projects, and services, turning a singl

SIG-Etcd announces the availability of the first beta release of etcd v3.7.0. This new version of the popular distributed database and key Kubernetes component includes the long-requested RangeStream feature, as well as a refactoring and cleanup of multiple legacy components and interfaces. v3.7 will deliver improved security, better operational reliability, and an improved experience for working with large resultsets.</

AI/ML and batch workloads introduce unique scheduling challenges that go beyond simple Pod-by-Pod scheduling. In Kubernetes v1.35, we introduced the first tranche of workload-aware scheduling improvements, featuring the foundational Workload API alongside basic gang scheduling support built on a Pod-based framework, and an opportunistic batching feature to efficiently process identical Pods. Kubernetes v1.36 introduces a significant architectural evolution by

Docker VMM is now available in public beta for Mac and Windows. Learn what this means for performance, stability, and governance and how to try it yourself.

Agent Baseline is a blueprint for AI adoption that defines six security outcomes for putting enterprise agents to work without giving them unchecked authority. Consider this scenario: a customer-support agent receives a ticket with an attachment. Hidden inside the attachment is an instruction: query the customer database and send the results to an external address....

This article is a mirror of the original announcement Today, SIG etcd is releasing etcd v3.7.0, the latest minor release of the popular distributed key-value store and core Kubernetes component. v3.7 ships the long-requested RangeStream feature, delivers several other performance improvements, removes the last remnants of the legacy v2store, and comple

As Kubernetes clusters grow to tens of thousands of nodes, controllers that watch high-cardinality resources like Pods face a scaling wall. Every replica of a horizontally scaled controller receives the full stream of events from the API server, paying the CPU, memory, and network cost to deserialize everything, only to discard the objects it is not responsible for. Scaling out the controller does not reduce per-replica cost; it multiplies it. Kubernetes v1.36 introduces server

You’re about to click "Merge" on a PR, but you feel more anxious about it than you used to. Why? You did everything properly, by today’s standards: You used Claude to create a plan, giving it context from a GitHub issue and some Slack threads. You iterated on it a few times; Claude says it has the full picture. It feels ready, so you get Claude Code to implement the plan. You run a review agent against the diff and get some of those comments addressed. You start reading th

Learn how AI coding agents can expose credentials in supply chain attacks and how Docker Sandboxes keep secrets out of an agent's reach.

The Kubernetes project relies on transparency to empower cluster administrators and security researchers. One important way we do that is by publishing CVE records into the Common Vulnerabilities and Exposures database. As part of our ongoing effort to mature the official Kubernetes CVE Feed, we have identified some discrepancies. CVE records for a few older, unfixed issues incorrectly include a <e

Kubernetes ships with built-in awareness of CPU and memory, but most real-world scaling decisions depend on signals that live entirely outside that narrow window: how many messages are waiting in a queue, how long the last batch job took, how many active WebSocket connections a pod is holding. When the built-in metrics are not enough, a metrics exporter bridges that gap. This post walks through writing one from scratch, packaging it as a container, and wiring it into a cluster

Since its original implementation in the Linux kernel in 2018, Pressure Stall Information (PSI) has provided users with the high-fidelity signals needed to identify resource saturation before it becomes an outage. Unlike traditional utilization metrics, PSI tells the story of tasks stalled and time lost, all in nicely-packaged percentages of time across the CPU, memory, and I/O. With the recent release of Kubernetes v1.36, users across the ecosystem have a stable, reliable int

In the first half of 2026, Cloudflare detected a 519% surge in hyper-volumetric DDos attacks across its network. These attacks were driven heavily by DNS and CLDAP reflection vectors. This report breaks down how major geopolitical conflicts reshaped the global cyber threat landscape.

YAML has been the standard way to write Kubernetes manifests for years. Every example, tutorial, and configuration file you come across is written in it. The problem isn't that YAML is a bad format. It's that YAML gives you a lot of choices, and not all of them are equally good for writing Kubernetes manifests. Some features make files harder to read, some are easy to misuse and others can lead to surprising behavior. The interesting part is that Kubernetes doesn't actually need most o

77% of organizations experienced a software supply chain incident in the past year. Explore Omdia's latest research on top risks, security gaps, and why developers are your first line of defense.

Observing fast-growing agentic workloads is no small feat, especially if you try to build your own monitoring stack or rely solely on tools built for a time before LLMs.At Grafana Labs, we know this all too well. Grafana Assistant went from an internal hackathon project to generally available in a little over si

Headlamp is an open-source, extensible Kubernetes SIG UI project designed to let you explore, manage, and debug cluster resources directly from a browser. Cluster API (CAPI) is a Kubernetes sub-project that brings declarative, Kubernetes-style APIs to cluster lifecycle management. It lets platform teams provision, upgrade, and manage the lifecycle of Kubernetes clusters using standard Kubernetes objects s

Volcano is a cloud native batch scheduler for Kubernetes, built for high-performance computing, AI/ML, and other batch workloads. Headlamp is an extensible Kubernetes web UI. With its plugin system, Headlamp can surface APIs and workflows beyond the built-in Kubernetes resources. The Volcano plugin brings core Volcano resources into Headlamp so you can inspect workload state, queue behavior, and gang scheduling detai

Headlamp is an open-source, extensible Kubernetes SIG UI project designed to let you explore, manage, and debug cluster resources. Knative brings serverless workloads to Kubernetes, handling traffic routing, autoscaling, and revision management so teams can deploy and iterate without fighting infrastructure. But operating Knative workloads day-to-day can be difficult, there's still a lot of jumping between the <code

If your network restricts inbound or outbound traffic, you likely maintain an allowlist of Grafana Cloud IP addresses so your systems and Grafana Cloud can talk to each other. Today we're introducing a new allowlists design: a single, structured API that replaces the collection of per-product lists we've published until now.If you don't use IP allowlisting—or you con

As AI agents accelerate software development and spin up applications at scale, visibility into what's happening behind the scenes, including query performance and database health, has never been more important. Gaining that level of insight requires observability that can keep pace. Supabase and Grafana Labs have partnered to launch a new integration available directly in Supabase, bringing production-grade observability to Supabase projects

The .spec.externalIPs field for Service was an early attempt to provide cloud-load-balancer-like functionality for non-cloud clusters. Unfortunately, the API assumes that every user in the cluster is fully trusted, and in any situation where that is not the case, it enables various security exploits, as described in CVE-2020-8554. Since

With the Linux 7.2 kernel expected to be released on Sunday, 16 August, here is a look at some of the most interesting new features and changes to find with this next kernel version to be used by Ubuntu 26.10 and other upcoming Linux distribution releases...

Cloudflare's Certificate Transparency Monitoring is now generally available. The biggest change: we no longer email you about certificates Cloudflare issued for your domain, so when an alert lands in your inbox, it's worth a look.

While the Apple M4 SoCs aren't yet supported by the mainline Linux kernel and the Apple M3 series hardware isn't yet ready for end-users, there are some early elements of the Apple M4 support beginning to come together by open-source developers working on the Apple Silicon support. Sent out to the Linux kernel mailing list were patches for enabling NVMe solid state drive support with the M4...

While Microsoft continues working on Azure Linux 4.0 as its overhauled Linux distribution built atop Fedora, Azure Linux 3.0 remains the current stable production series. Released overnight was Azure Linux 3.0.20260809 and it comes with more than 233 security patches for recent CVEs in the AI era...

Intel XPU Manager 2.1 is now available as the latest version of this open-source tool for Linux and Windows systems for the monitoring and management of Arc Pro graphics cards. The Intel XPU Manager helps in keeping an eye on device utilization and other metrics via the xpu-smi command and other components...

Dynamic Resource Allocation (DRA) has fundamentally changed how platform administrators handle hardware accelerators and specialized resources in Kubernetes. In the v1.36 release, DRA continues to mature, bringing a wave of feature graduations, critical usability improvements, and new capabilities that extend the flexibility of DRA to native resources like memory and CPU, and support for ResourceClaims in PodGroups. Driver availability continues to expand. Beyond specialized compute ac

The next version of MCP has a rewritten, stateless core that just works on Workers. We cover upgrades to the protocol, the new feature lifecycle and SDK migration path, and hear from early adopters already running it in production.

Article URL: https://github.com/jitpass/jit Comments URL: https://news.ycombinator.com/item?id=49317546 Points: 10 # Comments: 3

Article URL: https://forkast.news/the-model-context-protocol-reaches-a-security-inflection-point/ Comments URL: https://news.ycombinator.com/item?id=49316815 Points: 11 # Comments: 1

Article URL: https://github.com/yebiguo/ProofRun Comments URL: https://news.ycombinator.com/item?id=49316605 Points: 5 # Comments: 0

Article URL: https://waku.sh Comments URL: https://news.ycombinator.com/item?id=49315709 Points: 7 # Comments: 2

Article URL: https://github.com/PhillipChaffee/big-pickle-swe-atlas Comments URL: https://news.ycombinator.com/item?id=49315563 Points: 4 # Comments: 0

Article URL: https://michael.stapelberg.ch/posts/2026-08-09-zsh-history-truncation-bug/ Comments URL: https://news.ycombinator.com/item?id=49314579 Points: 8 # Comments: 0

Article URL: https://github.com/wmww/tawc Comments URL: https://news.ycombinator.com/item?id=49313068 Points: 8 # Comments: 0

Article URL: https://github.com/schapman1974/briskdb Comments URL: https://news.ycombinator.com/item?id=49312707 Points: 3 # Comments: 1

Article URL: http://www.stephen-cresswell.com/2026/08/15/Yadda-3.0.0-BDD-in-the-Age-of-AI-Agents.html Comments URL: https://news.ycombinator.com/item?id=49310495 Points: 45 # Comments: 20

It's Monday afternoon and that feature you've been working on is mostly done. There's just one item still sitting untouched at the bottom of the ticket: "Add monitoring."You know you should. You also know the sprint ends tomorrow, nobody on the team is an observability expert, and figuring out what to measure—let alone how to write the PromQL for it—feels like a project all on its own. So it gets the same treatment it always does: "We'll add it when it breaks."The trouble is, th

You've optimized your Largest Contentful Paint. Your Time to First Byte is under 200ms. Your Lighthouse scores are

In our ongoing SIG Spotlight series, we shine a light on the groups that keep the Kubernetes project moving forward. This time, we catch up with SIG Storage, the group responsible for persistent data, volume management, and the interfaces that connect Kubernetes workloads to the storage systems beneath them. We spoke with Xing Yang, Co-Chair of SIG S

Kubernetes has quietly become the default platform for AI and machine learning. Whether you run notebook servers for data scientists, schedule distributed training jobs, tune hyperparameters, or orchestrate multi-step ML pipelines, those workloads increasingly land on a Kubernetes cluster. Kubeflow is one of the most popular ways to assemble that stack, and it does so the Kubernetes-native way: every capability is exposed as a Custom Resource Definition

1. Before you start: know what is changingKubernetes Dashboard and Headlamp both show what is running in a cluster, but they work differently. When Headlamp runs on the desktop, it uses your existing kubeconfig to connect to one or more clusters and can be extended with plugins. When Headlamp runs inside a cluster, it uses a

Learn how Docker Sandbox kits turn empty sandboxes into productive development environments with repeatable tooling, credentials, and configuration.

The Kubernetes SIG Network community is thrilled to share the release of Gateway API v1.6.0, which was released on June 30th of this year! Gateway API has become the standard for modern, role-oriented, and expressive service networking in Kubernetes. In previous releases, Gateway API established a production-grade foundation for HTTP and TLS l

For many people, Kubernetes Dashboard was their first window into Kubernetes. It offered a simple visual way to see what was running in a cluster, inspect resources, and build confidence without relying on the command line. For years, it helped developers, students, and operators make sense of Kubernetes, and it served as an important onramp into the ecosystem. The Kubernetes Dashboard project has now been archived. We deeply respect the work the team did and the role Dashboard played

Eliminate Stored Credentials in Your CI/CD Pipelines TL;DR: Docker now supports OpenID Connect (OIDC) for GitHub Actions. Your workflows can authenticate with short-lived, per-run tokens instead of stored PATs or OATs. No secrets to rotate, no credentials to leak. GitHub OIDC connections are available to organizations with Docker Team, Docker Business, or Docker Hardened Images...

As we get closer to the release date for Kubernetes v1.37, the project develops and matures, features may be deprecated, removed, or replaced with better ones for the project's overall health. This blog outlines some of the planned changes for the Kubernetes v1.37 release that the release team feels you should be aware of for the continued maintenance of your Kubernetes environment and keeping up to date with the latest changes. The information below reflects the current status of the v1.37 r

This article was originally published with the wrong date. It was later republished, dated the 15th of May 2026. Kubernetes v1.36 introduces a new alpha counter metric route_controller_route_sync_total to the Cloud Controller Manager (CCM) route controller implementation at k8s.io/cloud-provider. This metric increments each time routes are synced with the cloud provider. <h2 id="a-b-testin

Back in Kubernetes 1.28, we introduced the Mixed Version Proxy (MVP) as an Alpha feature (under the feature gate UnknownVersionInteroperabilityProxy) in a previous blog post. The goal was simple but critical: make cluster upgrades safer by ensuring that requests for resources not yet known to an older API server are correctly routed to a newer peer API server, inste

On the FMS 2026 show floor, we saw a massive 160-bay NVMe storage server (Supermicro ASG-4116S-NU160R) that can deliver crazy storage density The post 160-bay NVMe SSD 4U Server Shown at FMS 2026 Supermicro ASG-4116S-NU160R appeared first on ServeTheHome.

Cloudflare Gateway identifies MCP requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic, enforce Portal-only access for approved servers, and block direct connections on managed network paths.

Introducing Cloudflare Access for Workers. Attach an Access policy directly to a Worker and it applies everywhere that Worker runs — routes, custom domains, workers.dev, and previews — automatically.

Build ESP32 firmware with reproducible Docker environments and use Docker Sandboxes for isolated AI-assisted development and hardware testing.

Ahead of the Linux 7.2 kernel release expected on Sunday, a new release of the exFAT file-system user-space programs was released overnight...

Volume group snapshots were introduced as an Alpha feature with the Kubernetes v1.27 release, moved to Beta in v1.32, and to a second Beta in v1.34. We are excited to announce that in the Kubernetes v1.36

Cloudflare is unifying AI Gateway and Workers AI into a single control plane, giving developers observability, billing, and dynamic routing across both managed GPUs and external providers. Learn how unified bindings and model-first routing simplify building resilient AI applications.

We are launching updated community programs, including Cloudflare Ambassadors and Community Engineers, backed by $1M in open-source funding. Learn how we are supporting maintainers and scaling our developer community.

Just want to shout out to you all and thank your for the spirt of this sub, th

I recently wanted to finish the side o

Salut tout le monde ! ​Voici une présentation détaillée de mon homelab, en particulier ​- Le matériel, ​- Les

Zimablade running zimos with 6 tb drive (need to add one with raid) with a 500 gb ssd for applications. Just made a little rack for it <

Home lad running open5gs and opensip-ce Private 4G LTE network band B40 Disk SHR NAS currently one drive enabled to start. Two mini pc one Debian the other Ub

Hey peeps. I've just jumped on the nomelab bandwagon and I'm getting ready to set up my cluster. I've got acemagician miniPC(i7) an old Asus k55vd(i5) an old tower and various other bits total installed storage is 1.5Tb HDD 500Gb ssd, It's A big question but where do I start? I'm not a noob when it comes to computers, I can use command line(hate it) install distros and software, troubleshoot and that stuff. I just don't know where to start, I'd lik

I’ve successfully degoogled and de-Appled myself and I now am fully self host Immich, Vaultwarden, Jellyfin and pihole and cancelled a lot of my subscriptions. It feels great but I worry what would happen to all my data/passwords/configurations if I were to die and my family can’t access anything. If I give them access, they would probably be confused, and if I wrote the passwords down (written, email), it would defeat the whole cloud security purp

This is my first dip into the homelab pool, and trying to put together a 10 inch rack. I de

Mac mini for most of the work. One mini for Romm because I w

I was missing a few drive caddies for an older T

A question for the pros. I got these 2 SSDs from a server, where they were in use until recently. Now I've removed them and

Had a bunch of Raspberry Pis and other random hardware la

12U open frame in a converted walk-in

I was really having hard time where to store all these in our small apartment, esp

Finally I will be an Owner of a NAS soon with a Ryzen 7 5825U and 16GB RAM. My current server is a ThinkCentre with a i7 t model which is weaker than the NAS ryzen which makes me think about my hardware setup. I run proxmox on my ThinkCentre and given the power of my Nas, I am torn between running a second proxmox host running truenas as vm including: - tinkering with passthrough - nearing a 3 node setup where I could test HA - the abi

Hi! I'm a newbie to homelab and have spent the last few months researching and trying to wrap my head around this new adventure/project I'm going to take on.

Got my first 3D printer and printed a few panels and fan mounts

I'm currently running a lab that consists of an HP ProDesk G3 (i5-6500, 24GB RAM) running ProxMox and hosting TrueNAS (2x4GB WD Reds in a mirrored ZFS pool) as well as a handful of other VMs (Jellyfin primarily). My other computer is a Lenovo IdeaCentre (i5-6400, 8GB RAM) running OPNSense and nothing else. I actually had to do a clean install on this last night as the original 16GB Optane drive I was booting from seemingly filled up and OPNSense refused t

So I run a proxmox server with various VMs and Containers and was using termius as a way to manage the ssh keys across devices. It is however not free and as my trial has expired I'd rather host the keys myself, is there something similar feature wise I can use to keep my keys and different IP's in sync across multiple devices? It would also be great if it had something similar to sending batch commands so I don't need to type apt update 20 times<

Hello everyone, So today is the day i wanna Show you my homelab. The reason is, I finally finished by unraid maschine used as server. I’ll add some A

Computer CPU : intel core i3 540 (Gen 1) RAM : 4GB ddr3 Storage : SSD 128gb , HDD 160GB , HDD 4TB GPU : Nvidia GeForce G

​ I run a small two-node Proxmox homelab focused on media, home automation, self-hosted services, backups, and a pe

submitted by /u/disco-jack [link] [comments]

3090 24GB VRAM. 64GB RAM DDR4, i7. I built it mainly from older equipment I had. Update: </p

Quick background. I've got a small homelab running on a Dell Optiplex 5050 with 20gb ddr4 of RAM. Nothing crazy, just a handful of docker containers, no VMs, no Proxmox cluster. Basic stuff. I was thinking of running local LLMs to help with lightweight tasks and as a general everyday AI to replace Chat GPT for quick questions, pairing it with a online research tool. So, after researching a bit, I found the Nvidia Tesla P4 8GB on eBay for around 100€ and I