This is quite important with Immich. They’re good at documenting their breaking changes, just gotta make sure you check the changelog before updating. Also best to avoid auto updating with Watchtower or similar to avoid surprises.

I’m not sure if they’re available with UK plugs, but I’ve got a pack of Thirdreality Zigbee plugs that monitor energy use and have a button on them to toggle power.

I’ve got them connected to Home Assistant. Two do a bit of climate control in a coldroom, the others are for occupancy lighting.

The asterism gives me big Splinter Cell vibes and I’m definitely OK with that.

Unfortunately there isn’t really an all-in-one guide. TechnoTim has info on the Pi-hole config side and wildcard certificates, but I think he uses it with traefik.

NPM is pretty straightforward. If you find a site isn’t working, try turning on Web Socket support.

I’d say just search for guides on each part individually:

1. Get all the services installed and up and running
2. Get SSL certificates from Cloudflare for your domain.
3. Set up NPM for the services you want to reverse proxy with your Cloudflare SSL certs (they wont work until the next step is done)
4. Set up pi-hole to be your local DNS (there’s also adblock lists to add) and configure it to send all service(.lan).mydomain.com to the ip of NPM.
5. Set up the Cloudflare tunnel.

I can try to help if you run into any issues.

I’m definitely not a network pro, but it sounds like you’re looking to do something similar to what I have.

I’ve got nginx proxy manager as my reverse proxy with pi-hole for local DNS. All traffic goes through the pi-hole and anything going to mydomain.com has DNS entries pointing to nginx. I’ve set nginx up so service.lan.mydomain.com is for anything local and just service.mydomain.com for anything external with wildcard SSL certs for both (*.domain doesn’t seem to cover *.lan.domain so add certs for both - probably because it’s a sub-subdomain).

The Cloudflare tunnel can then just get directed to service.mydomain.com instead of the IP of the service.

Sorry, four of the power to ethernet plugs. You put one near your router to essentially supply internet to your house’s electrical circuits, then distribute the others where you need them, such as office, living room if you want to connect a TV or console, etc.

I had a set of four for getting ethernet around the few places I rented. There was maybe the odd quality decrease when there was a lot of electrical load, but they worked great otherwise.

Oh man, I remember a Philips mp3 player I had for the longest time as a kid. You could hear the little clicks of the hard drive. Lost it on a hike, unfortunately.

I recently went this route after dabbling with other options. I had a wireguard VPN through my Unifi router, with rules to limit access to only the resources I wanted to share, but it can be a struggle for non savvy users, and even more so if they want to use Jellyfin on their TV. Tried Twingate too and would recommend if it fits your usecase, but Cloudflare Tunnels were more applicable to me.

This is mostly my reasoning too. I’ve got a bit more juice than a NUC, but I prefer the way resources are managed with an LXC for the certain apps that I run. I still have VMs for other things, like HAOS and a BlueIris NVR. It’s only a local homelab with no external users so avoiding additional complexity is often in my best interest.

Why would one prefer a VM over an LXC for Docker?

I might have found the issue, see updates above. I have a separate Docker LXC that was behaving normally too, so was good to cross-check with that.

Docker is installed on a Debian container with Proxmox as the hypervisor. I believe as far as Docker knows, it’s just running on normal Debian. The Debian LXC has its own local ip.

I’ll take a look at those resources though, thanks.

Many local libraries provide access to this incredible resource too. Check yours to see.

It’s not OP’s website. Looks like there’s a contact form on the site though.

I use Docker LXCs. Really just a Debian LXC with Docker and then Portainer as a UI. I have separate LXCs for common services. Arrs on one LXC, Nextcloud, Immich and SearXNG on another, Invidious on a third. I just separate them so I don’t need to kill all services if I need to restart or take down the LXC for whatever reason.

For ease of setup and use, I’ve found Twingate to be great for outside access to my network.

Not an expert, just something I did and learned from; does the hardware you’re running on have more than one ethernet port (enp#…)? Is it possible you’ve selected the wrong one?

Also I notice my VMs in proxmox have the bridge nomenclature of vmbr0 (not virb0). Perhaps something there?

Just throwing ideas out there, I’m pretty new at this.

I could see it being tedious if you had to manually enter long, random string passwords regularly. Though I suppose you could change them to something easier to type. Ctrl+shift+L (bitwarden extension autofill shortcut) is just so much more convenient.

Re: VPN and Wireguard, I was looking into doing the same on my unifi router, but came across Twingate (through a networkchuck video) and decided to try that instead, being a bit of a networking noob. It’s almost too easy…you can share individual resources or whole networks with user and device control over each. I think you get 5 users and 10 resources in the free plan. I’d recommend looking into it.

I had been pondering Nabucasa for external Home Assistant access but am very happy I found this. Now my wife can have remote access to HA and Plex and I can access the whole network remotely.