SNMP monitoring with grafana and prometheus can be done with the official snmp_exporter from prometheus.
Since I didn’t found any direct forward documentation, blog or any source of documentation in an ELI5 style how this will work, this is my try to document my findings and understanding on how this stuff works. To be honest I still don’t understand all stuff inside the generator configuration file but here is what I found out.

With cv4pve-autosnap, snapshots of VMs and CTs in Proxmox can be automated. Since restoring my VMs from backups can take several hours depending on their size, I wanted a solution for a potentially faster restore in case I broke something while playing around.

The application can be run remotely or locally on the Proxmox host. A user or, since PVE 6.2, an API token can be used to run the snapshots.

Tailscale makes it easy to connect devices securely, but its default settings are designed for convenience rather than strict security. Without a few adjustments, every device in your Tailnet can talk to every other one which in my case I don’t wanted. So I looked into how to raise my security in using Tailscale for accessing my homelab and now share my findings and results.

General Security Advice

Because Tailscale relies on an external identity provider—such as Apple, Microsoft, or Google—it’s essential to secure that account properly.

My requirements for a new server were quite simple. The computing power should be roughly equivalent to my current server (Minisforum HM90), but with faster hard drive storage. Since only two 2.5“ hard drives can be installed in the HM90 and ZFS eats up SSD space relatively quickly, I needed another solution with 3.5” hard drives. I recently purchased a server rack and still have space available, I put together a 2U Proxmox build.

I recently purchased two Sophos SG 125 V2s with OPNsense. These have several physical (Layer 3) interfaces, which I would like to combine into a bridge. This allows multiple interfaces to be treated like a switch (Layer 2) and assigned to the same network without having to configure each interface individually.

Sophos has a DMZ, a LAN, an HA, a WAN, and several normal Ethernet ports. I would like to set up the Ethernet ports together as a bridge.