Tidy Up Homelab Containers

Tue, 22 Aug 2023 22:34:58 +0100

Background

There are bunch of services lying around on my homelab. Over time, the accumulated complexity, ops load, reliability risk, and security risks started to harm my mental health. I figured it’s probably the time to properly tidy up my homelab and have it actually managed. I figured my ideal setup shall be secure, reasonably reliable, at a low ops cost. More specifically, I would like to:

Have some services running
Have some declarative way to manage them
Have some isolation on what each services could access
Have automated updates

Very simple and innocent requirements, right? Surely the solution ought to be simple too, doesn’t it?

podman-compose 折腾记

Tue, 28 Dec 2021 21:27:06 +0000

背景

我有一个非常简单的需求：在一个容器里起一个 wireguard client，并将其直接接入上游网络（不要 NAT）。

不想看过程可以直接看总结。

折腾

在容器里起 wireguard

首先搜索 prior art，发现 https://hub.docker.com/r/linuxserver/wireguard。试了一下发现不好：

Podman on SEIAROTg's blog

Tidy Up Homelab Containers

Background

podman-compose 折腾记

背景

折腾

在容器里起 wireguard