With cv4pve-autosnap, snapshots of VMs and CTs in Proxmox can be automated. Since restoring my VMs from backups can take several hours depending on their size, I wanted a solution for a potentially faster restore in case I broke something while playing around.
The application can be run remotely or locally on the Proxmox host. A user or, since PVE 6.2, an API token can be used to run the snapshots.
Tailscale makes it easy to connect devices securely, but its default settings are designed for convenience rather than strict security. Without a few adjustments, every device in your Tailnet can talk to every other one which in my case I don’t wanted. So I looked into how to raise my security in using Tailscale for accessing my homelab and now share my findings and results.
Because Tailscale relies on an external identity provider—such as Apple, Microsoft, or Google—it’s essential to secure that account properly.
My requirements for a new server were quite simple. The computing power should be roughly equivalent to my current server (Minisforum HM90), but with faster hard drive storage. Since only two 2.5“ hard drives can be installed in the HM90 and ZFS eats up SSD space relatively quickly, I needed another solution with 3.5” hard drives. I recently purchased a server rack and still have space available, I put together a 2U Proxmox build.
Automated backups for MikroTik devices can be accomplished by running a scheduled script. The following script can be run in the scheduler in order to automate the backups to an SFTP share. It was tested on a MiroTik hEX RB750Gr3 with RouterOS 7.20.1. Just make sure to adjust the first five variables to your needs. This script is based on another script I found on the forum – here. I adjusted the date settings in the filename since these weren’t working for me.
I recently purchased two Sophos SG 125 V2s with OPNsense. These have several physical (Layer 3) interfaces, which I would like to combine into a bridge. This allows multiple interfaces to be treated like a switch (Layer 2) and assigned to the same network without having to configure each interface individually.
Sophos has a DMZ, a LAN, an HA, a WAN, and several normal Ethernet ports. I would like to set up the Ethernet ports together as a bridge.